This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/A2t6t_f1HcKnqaCQz7YngfbH5xU.roa File: A2t6t_f1HcKnqaCQz7YngfbH5xU.roa (raw, json) Hash identifier: dDw+fpWNnSc94BKWLzJYEDQkBrriDoUZSMYPbyJWdUk= Subject key identifier: 03:6B:7A:B7:F7:F5:1D:C2:A7:A9:A0:90:CF:B6:27:81:F6:C7:E7:15 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37EC6A52D3A950ABDF4E5027E6A81E Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/A2t6t_f1HcKnqaCQz7YngfbH5xU.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204203 IP address blocks: 178.239.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ec:6a:52:d3:a9:50:ab:df:4e:50:27:e6:a8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=036b7ab7f7f51dc2a7a9a090cfb62781f6c7e715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:29:1d:3e:17:47:ac:fc:92:11:8a:10:17: c3:6a:ca:1e:aa:23:0b:38:39:59:11:0f:2d:a2:b8: 8e:00:dc:09:74:f0:29:07:b0:bd:fa:84:b1:19:8f: 93:cc:57:3f:3f:b8:f6:c5:3c:2f:aa:76:70:99:ee: 59:dc:ef:f2:e7:69:cd:3c:52:ed:cb:73:f4:b8:4a: fc:b6:78:61:cb:ce:80:ef:ae:c0:1e:d7:05:6d:52: b9:f1:9e:94:58:a6:16:63:02:57:f3:c5:ab:4e:5b: 3d:e5:75:de:6e:10:94:4f:ef:67:a2:be:52:b9:70: 5a:00:5f:33:92:28:73:4b:31:5e:2a:b0:41:46:08: 4e:39:c2:a7:cb:bc:ef:5a:b6:8d:81:4f:84:1a:b0: e3:e2:5f:8a:73:5a:4a:db:c6:43:71:49:e1:ab:85: ca:c7:8e:f7:f3:b1:ca:65:f5:e8:0e:ac:97:ab:e1: e7:98:50:f0:dc:db:97:50:e4:06:c6:22:ef:55:cb: 3a:a3:61:68:d0:85:e3:99:7c:7b:de:f5:50:7f:a8: 30:ca:23:71:38:91:bf:3e:58:c0:53:33:11:0e:7d: ed:10:50:2e:3c:e0:b0:f6:2c:4a:e9:45:67:d8:85: 25:ce:2b:74:7b:6e:b8:11:de:28:9b:eb:d1:f8:38: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:7A:B7:F7:F5:1D:C2:A7:A9:A0:90:CF:B6:27:81:F6:C7:E7:15 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/A2t6t_f1HcKnqaCQz7YngfbH5xU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.148.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d2:44:f7:53:4d:0c:0d:c3:25:64:95:a7:33:a3:22:38:40: 09:f9:24:94:62:8e:5a:06:46:55:d6:1b:f2:1e:81:57:35:5a: ad:19:48:8d:c6:4a:ab:a9:eb:b5:9f:fd:08:f5:e7:5a:e1:f6: 35:45:29:c9:2f:66:9d:6f:8f:84:8e:ef:ad:06:7a:3a:78:8c: 55:e7:99:57:85:35:d7:90:7b:34:4c:9b:55:34:bd:7b:06:5c: 36:f5:f2:47:98:78:d3:54:3b:73:1b:d7:0d:0c:30:66:e6:9f: 2c:02:7f:f8:74:bb:72:a5:af:04:53:90:c7:e0:ca:77:0e:50: c4:c8:ef:3c:e3:28:af:bd:c5:b5:b3:91:a7:60:a1:13:5b:eb: 2c:bc:c3:a4:cc:ee:b7:6e:89:6f:72:ba:a1:7e:c5:f2:b7:19: 84:26:54:cc:75:31:a5:28:ec:67:34:81:75:bd:ec:45:ee:dd: 8b:aa:40:60:15:78:ed:d1:78:53:37:26:08:69:ac:13:6c:a4: fe:13:1f:0f:25:41:16:c2:3d:ac:44:b9:8c:2b:a6:89:36:7e: bd:e2:41:34:d9:c3:77:a9:83:00:98:e2:ac:32:3d:5f:1d:4e: 5a:2e:23:c9:c8:30:76:96:af:e7:de:69:98:35:0e:0b:36:1a: 7a:cb:4b:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+xqUtOpUKvfTlAn5qgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzZiN2FiN2Y3ZjUxZGMyYTdhOWEwOTBjZmI2Mjc4MWY2YzdlNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BQpHT4XR6z8khGKEBfDasoeqiML ODlZEQ8toriOANwJdPApB7C9+oSxGY+TzFc/P7j2xTwvqnZwme5Z3O/y52nNPFLt y3P0uEr8tnhhy86A767AHtcFbVK58Z6UWKYWYwJX88WrTls95XXebhCUT+9nor5S uXBaAF8zkihzSzFeKrBBRghOOcKny7zvWraNgU+EGrDj4l+Kc1pK28ZDcUnhq4XK x47387HKZfXoDqyXq+HnmFDw3NuXUOQGxiLvVcs6o2Fo0IXjmXx73vVQf6gwyiNx OJG/PljAUzMRDn3tEFAuPOCw9ixK6UVn2IUlzit0e264Ed4om+vR+DiUAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANrerf39R3Cp6mgkM+2J4H2x+cVMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvQTJ0NnRfZjFIY0tucWFDUXo3WW5nZmJINXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+UMA0G CSqGSIb3DQEBCwUAA4IBAQBz0kT3U00MDcMlZJWnM6MiOEAJ+SSUYo5aBkZV1hvy HoFXNVqtGUiNxkqrqeu1n/0I9eda4fY1RSnJL2adb4+Eju+tBno6eIxV55lXhTXX kHs0TJtVNL17Blw29fJHmHjTVDtzG9cNDDBm5p8sAn/4dLtypa8EU5DH4Mp3DlDE yO884yivvcW1s5GnYKETW+ssvMOkzO63bolvcrqhfsXytxmEJlTMdTGlKOxnNIF1 vexF7t2LqkBgFXjt0XhTNyYIaawTbKT+Ex8PJUEWwj2sRLmMK6aJNn694kE02cN3 qYMAmOKsMj1fHU5aLiPJyDB2lq/n3mmYNQ4LNhp6y0u4 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:16 2026 by rpki-client