This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa File: RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa (raw, json) Hash identifier: LRdALHDMlvzEn3Mzy4S60miqNChz9RLJWshvg3Evc1c= Subject key identifier: 44:21:8E:F0:EA:B9:C8:4B:CD:D4:86:77:5F:6F:38:77:3C:D4:41:E5 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E856C840A950D9A11FD21B9BD3AA Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204447 IP address blocks: 178.235.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e8:56:c8:40:a9:50:d9:a1:1f:d2:1b:9b:d3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44218ef0eab9c84bcdd486775f6f38773cd441e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ad:33:bb:80:b2:d3:2b:a5:c7:30:ed:d8:13: fa:1a:94:0c:6e:59:50:a5:27:32:dc:b6:e1:05:55: c9:2f:d4:8d:29:e1:dd:04:c3:83:69:2a:b2:8c:cf: 0b:53:d2:a7:48:3c:ec:5a:02:4b:eb:54:25:59:a2: 93:71:bc:10:e7:4b:7a:68:34:5e:61:48:82:14:4e: 2b:47:a6:f9:aa:2b:1f:99:67:ef:22:a6:65:24:dd: ea:ec:e6:e0:0a:61:3c:b2:89:b9:c4:45:44:4d:f9: 66:1c:f8:e9:6f:9e:cc:f5:92:90:34:49:ac:5d:98: 5f:8e:f3:db:ab:52:fc:2a:26:72:96:92:a9:6d:99: 19:a4:8d:22:49:72:bf:64:dc:c9:b1:2f:28:ca:ff: 29:7d:52:e1:19:a5:c5:53:02:ee:d5:2c:5d:9a:ce: 79:c9:c1:18:94:e3:2c:4a:ee:71:8d:27:d6:53:ee: 57:47:4e:62:ef:6a:e9:e5:a6:a9:37:78:c3:86:7b: e7:57:de:2b:98:79:1a:06:bf:0c:52:37:b9:03:ed: 2a:8b:8b:21:fd:aa:d2:3f:38:ba:0a:1d:4b:4e:bf: 38:2c:52:7d:6e:e2:e9:7e:9d:fe:dc:2a:66:56:74: 8d:41:22:c9:a5:44:e0:5a:36:02:6f:9d:6d:15:3f: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:21:8E:F0:EA:B9:C8:4B:CD:D4:86:77:5F:6F:38:77:3C:D4:41:E5 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/RCGO8Oq5yEvN1IZ3X284dzzUQeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.235.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:e5:5d:57:e5:c9:97:c3:cc:3d:ec:59:c4:0f:37:25:00:41: 29:ae:1b:72:e5:d7:3e:cd:e4:37:78:d6:31:41:72:46:fb:36: 9b:02:e6:26:47:20:2a:72:4f:d2:e8:a0:5a:11:dd:31:59:7f: c9:4e:4b:b4:d2:53:1e:78:1d:f2:0d:bb:43:6e:13:cb:91:35: 80:36:13:ac:d8:08:ad:ed:26:36:eb:93:65:f3:30:3b:7e:f8: 22:ed:cc:a0:03:0b:f8:a8:ef:06:d2:21:58:2f:a1:0b:74:7b: 94:93:2d:83:93:02:a8:3c:89:e9:9c:e3:fb:fa:b3:ae:aa:a4: 2e:c8:d5:82:56:52:cb:db:6d:8b:6e:58:f5:29:4c:08:f6:05: 19:3a:37:26:65:f2:ad:e9:5b:f6:d1:04:4a:6f:80:b1:20:2c: 64:5d:7a:2c:2c:97:2b:39:93:30:2f:d7:7b:24:c7:42:d8:70: ae:c1:15:70:e7:97:af:19:b6:a3:4d:e8:49:36:16:3c:06:5e: e5:fe:c7:a6:e4:10:0f:a4:0f:28:76:92:be:62:bd:52:95:52: 38:d8:b4:b0:9e:25:50:2f:2b:fc:7f:dd:bd:55:ff:b2:42:ba: 0d:5c:3d:96:df:97:a5:d6:90:67:a8:56:bb:82:4a:99:ab:e6: d2:0c:78:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+hWyECpUNmhH9Ibm9OqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDIxOGVmMGVhYjljODRiY2RkNDg2Nzc1ZjZmMzg3NzNjZDQ0MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q0zu4Cy0yulxzDt2BP6GpQMbllQ pScy3LbhBVXJL9SNKeHdBMODaSqyjM8LU9KnSDzsWgJL61QlWaKTcbwQ50t6aDRe YUiCFE4rR6b5qisfmWfvIqZlJN3q7ObgCmE8som5xEVETflmHPjpb57M9ZKQNEms XZhfjvPbq1L8KiZylpKpbZkZpI0iSXK/ZNzJsS8oyv8pfVLhGaXFUwLu1Sxdms55 ycEYlOMsSu5xjSfWU+5XR05i72rp5aapN3jDhnvnV94rmHkaBr8MUje5A+0qi4sh /arSPzi6Ch1LTr84LFJ9buLpfp3+3CpmVnSNQSLJpUTgWjYCb51tFT9JFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQhjvDquchLzdSGd19vOHc81EHlMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvUkNHTzhPcTV5RXZOMUlaM1gyODRkenpVUWVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuvyMA0G CSqGSIb3DQEBCwUAA4IBAQCP5V1X5cmXw8w97FnEDzclAEEprhty5dc+zeQ3eNYx QXJG+zabAuYmRyAqck/S6KBaEd0xWX/JTku00lMeeB3yDbtDbhPLkTWANhOs2Ait 7SY265Nl8zA7fvgi7cygAwv4qO8G0iFYL6ELdHuUky2DkwKoPInpnOP7+rOuqqQu yNWCVlLL222Lblj1KUwI9gUZOjcmZfKt6Vv20QRKb4CxICxkXXosLJcrOZMwL9d7 JMdC2HCuwRVw55evGbajTehJNhY8Bl7l/sem5BAPpA8odpK+Yr1SlVI42LSwniVQ Lyv8f929Vf+yQroNXD2W35el1pBnqFa7gkqZq+bSDHiU -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:45 2026 by rpki-client