This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/iS8uMVcfTxV4oFRPmDdhbpSZpws.roa File: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (raw, json) Hash identifier: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU= Subject key identifier: 89:2F:2E:31:57:1F:4F:15:78:A0:54:4F:98:37:61:6E:94:99:A7:0B Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Certificate serial: 019B77596F1F7E7D305EB7F5014278702173 Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/iS8uMVcfTxV4oFRPmDdhbpSZpws.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48964 IP address blocks: 178.216.224.0/21 maxlen: 21 178.216.224.0/23 maxlen: 23 178.216.226.0/23 maxlen: 23 178.216.228.0/23 maxlen: 23 178.216.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6f:1f:7e:7d:30:5e:b7:f5:01:42:78:70:21:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=892f2e31571f4f1578a0544f9837616e9499a70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:0a:3c:14:e6:47:0c:d1:7b:4b:70:05:9b: 65:20:35:c6:5b:1e:71:1b:2d:33:f0:b9:eb:be:c3: 27:7e:15:da:5e:9f:e2:5b:53:9e:1c:3c:a5:af:2b: e1:e9:12:ac:71:3e:aa:ff:39:d0:26:21:17:ee:e8: 46:5a:f3:73:5d:b6:1a:d2:3e:7f:97:cf:b0:e8:c4: 2e:f2:9c:9f:9d:33:9b:83:27:20:a1:e8:13:c3:19: 39:d0:3d:45:ba:cc:88:ed:8b:81:db:71:e1:0d:fe: 41:5d:80:59:b1:b4:2b:70:d7:a5:fa:71:16:52:7d: 59:82:81:1d:6b:e6:56:9f:05:1e:1f:41:3f:60:90: db:35:14:0e:81:c9:53:88:98:b9:6c:26:94:7b:34: fb:64:90:fb:97:4a:63:ce:3c:fc:c2:1d:0a:9b:59: cf:9d:fa:e6:62:02:a3:71:2c:37:5b:5c:e9:d6:c2: c6:85:64:3e:ee:f0:6d:86:c3:30:ca:8e:75:cb:45: 85:3d:9a:f7:a2:a5:80:3a:5f:ad:55:c7:35:7f:d2: ab:2c:9d:8b:9e:09:1a:84:76:fd:5c:18:a3:7a:93: 72:94:1a:a4:c9:26:7a:b5:40:ad:87:cf:48:dc:7f: fe:24:1e:c4:15:8c:73:12:32:d6:46:53:b6:27:1b: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:2E:31:57:1F:4F:15:78:A0:54:4F:98:37:61:6E:94:99:A7:0B X509v3 Authority Key Identifier: keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/iS8uMVcfTxV4oFRPmDdhbpSZpws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.224.0/21 Signature Algorithm: sha256WithRSAEncryption 31:9c:9d:06:78:12:ef:a0:b6:e1:6d:96:d6:05:63:e8:8f:2c: 0b:bc:43:37:0e:9a:0a:d8:70:aa:89:65:8f:00:b4:40:66:1c: 43:f8:9d:9e:d9:3a:56:6b:5a:99:49:f2:84:91:12:14:5d:af: 1a:13:d3:28:3b:a8:6c:e0:96:5e:ef:84:ea:7d:87:cf:a7:76: 76:b8:dc:37:d4:78:2c:da:b2:9c:12:f0:a0:9b:af:7f:ac:fa: 8d:71:ca:85:2f:1d:9f:49:2d:a1:eb:16:cc:31:ee:1e:c1:fa: 60:d1:1a:1d:1a:aa:e5:a1:78:a3:e7:c9:0e:aa:5a:36:99:27: cb:09:fc:d8:56:63:c1:05:b4:46:f7:c2:e1:f7:7d:94:51:5a: bb:77:e7:3c:4e:1f:e4:00:b6:4c:78:0b:0e:9f:9f:e0:e9:53: 8d:a4:76:be:9a:33:da:91:06:83:18:33:1a:b0:35:4e:cd:56: 37:e0:c5:04:9f:50:83:65:ce:e3:ba:6b:00:01:ea:8f:4f:b4: 35:ac:70:4c:fb:25:18:47:39:8f:6e:0d:f1:96:a4:1b:2e:b5: 1c:b6:80:79:27:e6:1d:21:68:12:e2:da:d7:79:77:f7:93:25: 3f:64:12:2d:f5:18:eb:09:05:18:1e:93:25:39:93:4d:7d:20: 0c:56:51:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW8ffn0wXrf1AUJ4cCFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh NmFhMjQwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTJmMmUzMTU3MWY0ZjE1NzhhMDU0NGY5ODM3NjE2ZTk0OTlhNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOQKPBTmRwzRe0twBZtlIDXGWx5x Gy0z8LnrvsMnfhXaXp/iW1OeHDylryvh6RKscT6q/znQJiEX7uhGWvNzXbYa0j5/ l8+w6MQu8pyfnTObgycgoegTwxk50D1FusyI7YuB23HhDf5BXYBZsbQrcNel+nEW Un1ZgoEda+ZWnwUeH0E/YJDbNRQOgclTiJi5bCaUezT7ZJD7l0pjzjz8wh0Km1nP nfrmYgKjcSw3W1zp1sLGhWQ+7vBthsMwyo51y0WFPZr3oqWAOl+tVcc1f9KrLJ2L ngkahHb9XBijepNylBqkySZ6tUCth89I3H/+JB7EFYxzEjLWRlO2JxtjQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIkvLjFXH08VeKBUT5g3YW6UmacLMB8GA1UdIwQY MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt NTE3ZjZmZjNlNGY5LzEvaVM4dU1WY2ZUeFY0b0ZSUG1EZGhicFNacHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5 LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstjgMA0G CSqGSIb3DQEBCwUAA4IBAQAxnJ0GeBLvoLbhbZbWBWPojywLvEM3DpoK2HCqiWWP ALRAZhxD+J2e2TpWa1qZSfKEkRIUXa8aE9MoO6hs4JZe74TqfYfPp3Z2uNw31Hgs 2rKcEvCgm69/rPqNccqFLx2fSS2h6xbMMe4ewfpg0RodGqrloXij58kOqlo2mSfL CfzYVmPBBbRG98Lh932UUVq7d+c8Th/kALZMeAsOn5/g6VONpHa+mjPakQaDGDMa sDVOzVY34MUEn1CDZc7jumsAAeqPT7Q1rHBM+yUYRzmPbg3xlqQbLrUctoB5J+Yd IWgS4trXeXf3kyU/ZBIt9RjrCQUYHpMlOZNNfSAMVlEU -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:58 2026 by rpki-client