This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/baD6BNxvBtAZt2bomqpQxEMkpqQ.roa File: baD6BNxvBtAZt2bomqpQxEMkpqQ.roa (raw, json) Hash identifier: FsrOSFA/yaAmgb8veo0ogll2yJD1vN0y0H3JklgTWeg= Subject key identifier: 6D:A0:FA:04:DC:6F:06:D0:19:B7:66:E8:9A:AA:50:C4:43:24:A6:A4 Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76B012111953A2EFD5D947A8AA369 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/baD6BNxvBtAZt2bomqpQxEMkpqQ.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213893 IP address blocks: 178.236.243.0/24 maxlen: 24 194.59.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:01:21:11:95:3a:2e:fd:5d:94:7a:8a:a3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6da0fa04dc6f06d019b766e89aaa50c44324a6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:09:e0:72:fd:7e:80:a8:7b:89:2b:13:36: a4:09:22:bc:94:3c:d6:59:fa:86:8c:4c:93:ad:2a: e0:24:c4:9b:f9:58:4f:11:3d:87:4b:c6:95:bb:3c: f6:2a:a0:8a:f7:8c:53:27:13:d9:de:b3:49:4d:9e: fa:06:6b:a9:a0:02:ba:c2:00:6b:01:09:a4:af:40: 6d:1c:a0:e9:bc:fc:df:b1:e2:1c:26:09:0d:3b:33: db:f8:46:a2:cd:8a:b0:01:74:af:a7:2b:cf:37:5e: 93:b2:e8:6e:a2:8b:5a:c4:ab:2e:0f:3d:43:48:b7: d1:61:81:20:47:bc:ac:8c:48:00:71:d0:fe:6c:c4: 7f:c5:0c:be:3a:d3:aa:2b:69:de:65:44:86:dc:61: 5f:2f:cb:e4:56:a5:e4:6f:08:c8:22:2c:32:8a:95: 56:7f:48:99:f8:64:03:ac:38:98:f9:6d:ea:ac:9e: f1:fe:57:1e:ac:34:b5:89:c2:62:d1:90:c3:fd:fa: 75:ee:de:d2:7c:8f:11:15:bd:d6:ed:e5:5c:e0:d1: 5b:54:06:43:8c:44:95:b7:a7:96:98:a7:dc:5a:8b: 0d:b4:0d:77:ad:e2:e8:14:22:6a:07:69:65:40:0d: f6:83:2d:39:fc:16:f0:65:6a:a5:aa:aa:8f:47:57: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A0:FA:04:DC:6F:06:D0:19:B7:66:E8:9A:AA:50:C4:43:24:A6:A4 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/baD6BNxvBtAZt2bomqpQxEMkpqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.243.0/24 194.59.186.0/24 Signature Algorithm: sha256WithRSAEncryption 01:3d:b5:6f:ad:5d:76:85:1f:17:92:64:3b:89:9a:fb:8a:d4: 5b:0e:dd:43:f2:84:22:08:db:74:49:6e:97:f6:45:7e:17:a3: d7:d2:5d:ec:fa:9b:90:9f:3a:b2:75:6a:27:52:97:e6:61:cf: 5b:41:4f:98:ac:11:af:b7:1f:ae:9a:7a:f3:f2:96:62:96:57: 61:55:2d:67:aa:dd:75:df:ce:cb:54:58:34:2b:c2:4e:4b:25: 47:94:eb:bd:6f:bd:bd:c0:c5:82:a7:00:2a:10:55:6c:30:80: 3b:76:8d:1d:dc:dc:90:e7:a4:c9:71:11:5d:1e:61:11:9c:16: 84:e8:78:a9:10:ec:ed:4b:a4:b8:1a:30:c3:e7:8d:d3:8f:5c: a2:d2:c3:50:ae:a3:2a:4f:85:ed:6e:ea:54:ce:ad:35:2c:f0: 89:9e:16:26:17:21:01:44:56:ee:de:9f:8f:5b:c1:34:73:27: 10:13:86:4b:be:22:4c:04:4e:ea:60:ee:77:0a:13:e4:c1:8e: 05:d4:35:be:94:1a:63:c4:34:1e:58:62:b7:4b:ff:45:42:62: 44:cc:1e:eb:de:27:12:3a:d0:95:71:8f:29:b8:1f:8e:eb:8f: 53:2e:ad:78:49:35:d9:c2:8d:83:5e:36:24:81:d2:0d:91:17: 00:7a:9e:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2sBIRGVOi79XZR6iqNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGEwZmEwNGRjNmYwNmQwMTliNzY2ZTg5YWFhNTBjNDQzMjRhNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd0J4HL9foCoe4krEzakCSK8lDzW WfqGjEyTrSrgJMSb+VhPET2HS8aVuzz2KqCK94xTJxPZ3rNJTZ76BmupoAK6wgBr AQmkr0BtHKDpvPzfseIcJgkNOzPb+EaizYqwAXSvpyvPN16TsuhuootaxKsuDz1D SLfRYYEgR7ysjEgAcdD+bMR/xQy+OtOqK2neZUSG3GFfL8vkVqXkbwjIIiwyipVW f0iZ+GQDrDiY+W3qrJ7x/lcerDS1icJi0ZDD/fp17t7SfI8RFb3W7eVc4NFbVAZD jESVt6eWmKfcWosNtA13reLoFCJqB2llQA32gy05/BbwZWqlqqqPR1fRIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG2g+gTcbwbQGbdm6JqqUMRDJKakMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvYmFENkJOeHZCdEFadDJib21xcFF4RU1rcHFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzzAwQA wju6MA0GCSqGSIb3DQEBCwUAA4IBAQABPbVvrV12hR8XkmQ7iZr7itRbDt1D8oQi CNt0SW6X9kV+F6PX0l3s+puQnzqydWonUpfmYc9bQU+YrBGvtx+umnrz8pZilldh VS1nqt11387LVFg0K8JOSyVHlOu9b729wMWCpwAqEFVsMIA7do0d3NyQ56TJcRFd HmERnBaE6HipEOztS6S4GjDD543Tj1yi0sNQrqMqT4XtbupUzq01LPCJnhYmFyEB RFbu3p+PW8E0cycQE4ZLviJMBE7qYO53ChPkwY4F1DW+lBpjxDQeWGK3S/9FQmJE zB7r3icSOtCVcY8puB+O649TLq14STXZwo2DXjYkgdINkRcAep5B -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:15 2026 by rpki-client