This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa File: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (raw, json) Hash identifier: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw= Subject key identifier: 0E:DD:CC:26:ED:2E:3E:E1:F7:AA:AD:17:19:6E:E5:A8:AB:0A:22:76 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F8430666D32012E13C82922031C1355 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa Signing time: Fri 02 Jan 2026 16:22:08 +0000 ROA not before: Fri 02 Jan 2026 16:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 178.250.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:30:66:6d:32:01:2e:13:c8:29:22:03:1c:13:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eddcc26ed2e3ee1f7aaad17196ee5a8ab0a2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:ee:b9:95:df:86:92:61:cc:45:ec:44:98: 37:d1:f9:e3:45:68:01:36:d7:2c:f7:ac:d4:de:bb: ce:ac:8b:a9:f5:77:55:7f:8b:f0:50:b6:aa:5d:bb: 93:35:0c:fa:cd:b2:13:51:3b:a0:ea:c3:a6:7f:eb: 3f:19:e2:7f:ea:59:ef:b9:6b:f6:6a:fd:ae:3b:e0: 1a:c2:32:f3:b0:29:e0:15:86:44:e3:3a:31:d4:7a: 29:62:90:26:4a:0d:f4:64:4b:17:3b:ab:a1:00:7d: 82:57:2f:73:56:30:28:12:83:e3:55:70:58:70:a2: b6:dd:c8:a6:8a:27:95:7e:93:e6:44:f5:78:b6:3a: 4d:23:79:c0:7e:3a:06:36:d3:5b:4f:61:b3:4c:97: 7b:08:c3:99:0a:57:9f:39:d5:75:12:44:16:77:b4: 11:55:78:f0:74:41:3b:45:1a:19:66:4d:49:30:c5: e7:d7:c6:31:9c:40:86:10:23:04:83:9b:ae:69:86: 09:42:d1:e2:e7:2a:b7:a7:f3:f2:c1:67:f7:ec:19: d8:f5:46:d9:2f:2c:e9:75:aa:10:d0:91:ae:40:81: 72:9d:fc:91:24:21:6b:60:61:60:a0:dd:f7:6f:ad: 6a:8e:8a:e8:c5:7b:25:04:c7:ac:04:f0:44:dc:20: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DD:CC:26:ED:2E:3E:E1:F7:AA:AD:17:19:6E:E5:A8:AB:0A:22:76 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:08:d3:70:56:d4:3f:bb:29:a8:a7:ca:38:d4:62:af:11:17: 66:1f:1d:f7:98:f4:a9:89:b8:a6:e7:d8:f3:68:fb:47:9f:0f: be:47:2a:76:4e:ce:6e:38:59:e2:ee:49:10:c7:51:ee:c7:ba: fa:1b:2a:e1:7d:05:25:55:f4:fd:c8:f2:a5:34:0e:ab:3d:69: 51:a2:1d:88:34:48:0c:15:61:a6:6c:54:3b:1c:33:25:0a:07: 8c:63:f4:32:ff:53:9f:e7:d2:7e:31:ff:df:6a:b0:43:fe:9f: d1:21:5e:bd:38:2a:2e:e9:87:fb:84:0a:ae:bf:34:4b:44:d1: d8:7d:17:4a:bd:31:08:05:e8:0b:ef:d3:b7:bb:0d:97:14:c7: c9:07:07:10:a7:5d:af:e8:c8:85:1f:42:9f:a4:cf:57:fa:82: 57:83:f2:1d:a1:c0:25:2a:82:d1:7a:47:dc:67:f2:d3:02:f8: 36:49:88:53:a0:38:e1:37:a6:d8:14:f0:8e:11:f8:a9:2d:bb: 8e:5a:f8:9d:10:cd:33:98:34:9b:f8:ef:e1:f5:4d:93:f4:66: 55:68:ac:35:92:08:73:fc:0a:f2:53:b5:06:aa:f9:c8:b9:67: de:18:1e:c5:3d:83:e8:02:ac:59:9b:78:f2:d5:60:12:84:dd: 2a:c7:b0:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDBmbTIBLhPIKSIDHBNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWRkY2MyNmVkMmUzZWUxZjdhYWFkMTcxOTZlZTVhOGFiMGEyMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjuuZXfhpJhzEXsRJg30fnjRWgB Ntcs96zU3rvOrIup9XdVf4vwULaqXbuTNQz6zbITUTug6sOmf+s/GeJ/6lnvuWv2 av2uO+AawjLzsCngFYZE4zox1HopYpAmSg30ZEsXO6uhAH2CVy9zVjAoEoPjVXBY cKK23cimiieVfpPmRPV4tjpNI3nAfjoGNtNbT2GzTJd7CMOZClefOdV1EkQWd7QR VXjwdEE7RRoZZk1JMMXn18YxnECGECMEg5uuaYYJQtHi5yq3p/PywWf37BnY9UbZ LyzpdaoQ0JGuQIFynfyRJCFrYGFgoN33b61qjoroxXslBMesBPBE3CDP1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7dzCbtLj7h96qtFxlu5airCiJ2MB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvRHQzTUp1MHVQdUgzcXEwWEdXN2xxS3NLSW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvq7MA0G CSqGSIb3DQEBCwUAA4IBAQB8CNNwVtQ/uymop8o41GKvERdmHx33mPSpibim59jz aPtHnw++Ryp2Ts5uOFni7kkQx1Hux7r6GyrhfQUlVfT9yPKlNA6rPWlRoh2INEgM FWGmbFQ7HDMlCgeMY/Qy/1Of59J+Mf/farBD/p/RIV69OCou6Yf7hAquvzRLRNHY fRdKvTEIBegL79O3uw2XFMfJBwcQp12v6MiFH0KfpM9X+oJXg/IdocAlKoLRekfc Z/LTAvg2SYhToDjhN6bYFPCOEfipLbuOWvidEM0zmDSb+O/h9U2T9GZVaKw1kghz /AryU7UGqvnIuWfeGB7FPYPoAqxZm3jy1WAShN0qx7Ax -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:01 2026 by rpki-client