This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/cd571qC5Gh-s6-ij9uvMCJgUNAw.roa File: cd571qC5Gh-s6-ij9uvMCJgUNAw.roa (raw, json) Hash identifier: WiOcaJIwRlhY8Y8YY2qhOSR4obgPpcg3+kkGw7FgGjM= Subject key identifier: 71:DE:7B:D6:A0:B9:1A:1F:AC:EB:E8:A3:F6:EB:CC:08:98:14:34:0C Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9 Certificate serial: 019B7758ECE8B529FE62DAFF26385F57636F Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/cd571qC5Gh-s6-ij9uvMCJgUNAw.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203258 IP address blocks: 178.21.32.0/24 maxlen: 24 178.21.33.0/24 maxlen: 24 178.21.34.0/24 maxlen: 24 178.21.38.0/24 maxlen: 24 178.21.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ec:e8:b5:29:fe:62:da:ff:26:38:5f:57:63:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71de7bd6a0b91a1facebe8a3f6ebcc089814340c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:15:c1:e2:f2:ad:58:bf:34:4b:b3:d5:16: 04:1d:cc:7b:43:26:56:41:4a:6a:af:65:70:8f:1d: cb:d4:80:bc:48:b6:76:dd:b1:49:63:10:45:d6:20: 3c:7c:de:74:4d:85:94:74:ae:57:96:6c:8f:9f:47: 61:a2:d5:e0:06:ab:97:39:9e:d8:6d:12:7f:f6:51: 48:86:ba:94:8c:46:e1:a2:f2:05:8f:0d:34:99:c0: b1:81:15:d2:3a:e0:65:32:94:a4:25:65:61:ee:90: 49:4b:78:d0:aa:a5:f7:cb:8f:7f:15:b7:9b:85:ea: ec:74:d0:f0:ca:db:8f:62:c2:6a:b8:a1:e4:30:a1: 33:74:a2:c7:f9:26:57:a3:20:6c:c2:d3:cc:d5:f2: a5:61:42:9c:7c:94:ac:dc:99:4b:25:4b:a0:d5:87: 31:4e:28:97:69:60:06:41:44:76:06:9a:ed:6e:94: 98:bd:7c:4f:07:8b:34:8e:54:51:cc:d5:af:c9:61: 32:a3:bc:5c:db:f7:52:e9:69:38:19:fc:75:72:7f: 36:02:7d:e8:47:a6:eb:23:fd:20:25:0d:39:3c:35: e2:de:89:98:8a:80:af:e6:1f:84:ed:91:ce:ba:2f: e6:33:77:51:55:c1:04:f3:63:d3:a8:e4:bc:88:d9: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:7B:D6:A0:B9:1A:1F:AC:EB:E8:A3:F6:EB:CC:08:98:14:34:0C X509v3 Authority Key Identifier: keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/cd571qC5Gh-s6-ij9uvMCJgUNAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.32.0-178.21.34.255 178.21.38.0/23 Signature Algorithm: sha256WithRSAEncryption ac:6b:ff:71:13:44:34:a1:ba:cd:1a:37:16:d8:fa:d3:cd:61: 61:b5:0e:85:73:d0:66:4b:8c:b6:de:ae:08:82:da:a8:59:36: 23:e2:4b:2a:e3:56:fc:20:db:62:30:75:4d:5e:58:21:25:34: b5:3c:f0:78:3b:52:4c:5c:d4:15:92:9a:9a:5c:7c:d5:a9:b5: c9:68:99:78:cc:9b:48:03:86:b4:6e:47:e1:c7:64:25:95:00: 0a:ac:04:3b:78:9b:60:45:fa:b5:13:28:79:55:c8:ea:a7:9d: 36:9c:f9:df:b4:53:cb:84:61:71:cb:bf:c0:89:c4:52:cd:74: 56:ce:b0:4f:94:fe:ab:82:2f:2e:ef:a1:4f:d9:25:cd:f0:73: 5b:64:ed:d5:2c:bd:02:d2:9b:aa:1d:2d:a4:6d:a1:e7:6a:53: f3:bd:fd:78:5f:c1:a3:e1:05:01:a6:82:66:54:d2:88:2e:48: 2d:78:f1:d0:ed:5e:f7:01:af:71:69:62:7e:ec:e5:80:aa:47: 7d:be:88:ea:0a:65:6e:3a:72:bb:f0:06:4d:72:b7:25:64:ce: ab:42:65:e2:42:e3:4c:10:09:1d:e5:27:6c:2f:92:1f:f5:62: 4c:6f:f4:89:6e:e9:4d:32:af:02:28:52:77:2b:d4:d8:8e:dd: ee:b4:88:02 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WOzotSn+Ytr/JjhfV2NvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTRkYmJhYjYzZTkxMTdkMGIwMmNiYWI1NjYzOWU2ZmQw ZDQwZDkwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWRlN2JkNmEwYjkxYTFmYWNlYmU4YTNmNmViY2MwODk4MTQzNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuowVweLyrVi/NEuz1RYEHcx7QyZW QUpqr2Vwjx3L1IC8SLZ23bFJYxBF1iA8fN50TYWUdK5XlmyPn0dhotXgBquXOZ7Y bRJ/9lFIhrqUjEbhovIFjw00mcCxgRXSOuBlMpSkJWVh7pBJS3jQqqX3y49/Fbeb hersdNDwytuPYsJquKHkMKEzdKLH+SZXoyBswtPM1fKlYUKcfJSs3JlLJUug1Ycx TiiXaWAGQUR2BprtbpSYvXxPB4s0jlRRzNWvyWEyo7xc2/dS6Wk4Gfx1cn82An3o R6brI/0gJQ05PDXi3omYioCv5h+E7ZHOui/mM3dRVcEE82PTqOS8iNmdDwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHHee9aguRofrOvoo/brzAiYFDQMMB8GA1UdIwQY MBaAFFgU27q2PpEX0LAsurVmOeb9DUDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JUYnVyWS1rUmZRc0N5NnRXWTU1djBOUU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMjJjM2YtOTFlNi00NWZiLWFmNzYt NjhhODA4OTcwMWY0LzEvY2Q1NzFxQzVHaC1zNi1pajl1dk1DSmdVTkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMjJjM2YtOTFlNi00NWZiLWFmNzYtNjhhODA4OTcwMWY0 LzEvV0JUYnVyWS1rUmZRc0N5NnRXWTU1djBOUU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWyFSAD BACyFSIDBAGyFSYwDQYJKoZIhvcNAQELBQADggEBAKxr/3ETRDShus0aNxbY+tPN YWG1DoVz0GZLjLbergiC2qhZNiPiSyrjVvwg22IwdU1eWCElNLU88Hg7Ukxc1BWS mppcfNWptclomXjMm0gDhrRuR+HHZCWVAAqsBDt4m2BF+rUTKHlVyOqnnTac+d+0 U8uEYXHLv8CJxFLNdFbOsE+U/quCLy7voU/ZJc3wc1tk7dUsvQLSm6odLaRtoedq U/O9/XhfwaPhBQGmgmZU0oguSC148dDtXvcBr3FpYn7s5YCqR32+iOoKZW46crvw Bk1ytyVkzqtCZeJC40wQCR3lJ2wvkh/1Ykxv9Ilu6U0yrwIoUncr1NiO3e60iAI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:47 2026 by rpki-client