This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/jOeIMzKbhpgFfG5e3hDQe_UydwM.roa File: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (raw, json) Hash identifier: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y= Subject key identifier: 8C:E7:88:33:32:9B:86:98:05:7C:6E:5E:DE:10:D0:7B:F5:32:77:03 Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Certificate serial: 019B797EED8779C0047179B36499016F6C86 Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/jOeIMzKbhpgFfG5e3hDQe_UydwM.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50489 IP address blocks: 178.18.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ed:87:79:c0:04:71:79:b3:64:99:01:6f:6c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce78833329b8698057c6e5ede10d07bf5327703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:25:a2:a1:ed:cb:6b:cb:b1:3b:f2:c9:48: cd:ff:03:77:87:a5:2d:4b:73:d3:dc:bd:63:b9:82: 15:20:9e:cb:01:5d:86:e1:5d:30:80:a2:7a:c6:42: d0:a6:e5:f9:56:7f:eb:4a:b7:23:66:a0:65:61:29: 69:59:d3:26:bd:df:02:d7:ed:08:f4:3f:d7:a2:68: 70:8b:c7:de:48:c2:a1:04:4b:10:8c:77:3d:f9:cc: f1:9b:7e:14:c0:14:46:f2:76:85:a2:63:bd:19:4d: b8:c0:ff:41:5d:f3:7a:16:62:82:0e:01:16:78:07: 51:49:b5:86:6f:d3:47:87:17:2d:b9:81:82:a2:a2: c6:e6:1c:13:02:4e:7f:d2:1f:34:54:7c:83:e5:c1: 21:52:d4:d8:7f:cd:8c:94:52:ab:7e:83:d2:3a:ee: a4:43:67:40:b7:72:1d:c7:0a:bb:04:36:22:85:54: df:b2:77:f1:90:94:45:91:52:45:ba:bb:6d:b0:c3: 8e:dd:10:c9:af:ee:38:75:a2:cc:89:b1:f9:86:69: 95:91:19:40:6e:29:76:3e:15:40:8d:13:2a:c6:f1: 8e:fc:55:db:bf:6d:cf:01:04:6f:70:b7:43:59:77: ed:ed:31:0f:0e:ec:93:b5:54:68:5f:56:34:19:73: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E7:88:33:32:9B:86:98:05:7C:6E:5E:DE:10:D0:7B:F5:32:77:03 X509v3 Authority Key Identifier: keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/jOeIMzKbhpgFfG5e3hDQe_UydwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.18.118.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e6:27:10:b3:8e:34:d0:3e:12:1e:0b:8f:95:1a:df:8f:73: 30:67:f6:b4:f6:65:61:ae:f4:9d:48:6e:c4:32:aa:49:d3:93: 22:cb:52:e5:13:36:82:95:e9:9e:0e:3e:21:7f:47:f3:e8:be: 25:fe:cc:3d:d1:ce:33:4e:33:59:26:33:30:de:10:26:86:70: ba:d1:84:30:f0:4e:6f:41:b7:bd:a6:82:0a:cd:a5:11:50:d5: 06:08:b4:c2:0e:a3:db:b8:c1:c0:aa:83:85:02:95:4e:04:eb: cc:5a:55:de:9c:61:0e:87:41:0b:8b:64:28:b5:af:b8:85:5d: 07:98:04:26:6f:79:fe:6c:39:b8:2b:b5:f7:5e:eb:56:f5:7e: c7:60:89:ca:bd:cf:51:3b:5d:f3:30:5f:67:e0:c3:a4:ac:1a: 59:a4:67:ae:8c:22:1b:8a:51:87:a0:b0:ff:3a:21:4e:5e:06: c1:25:68:6a:54:a1:f7:0d:8a:ec:3c:0b:42:62:54:09:34:f4: 16:b7:5b:bd:a0:62:29:a1:15:bb:b4:6a:f9:55:cc:74:4d:54: b8:12:ef:f9:77:5d:77:81:7d:f7:f9:b1:84:e9:40:11:6d:db: 68:0a:8b:32:b8:e3:05:20:d3:ed:df:36:ff:f4:57:1e:d0:17: 11:d3:5f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fu2HecAEcXmzZJkBb2yGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx YWQzNGUwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2U3ODgzMzMyOWI4Njk4MDU3YzZlNWVkZTEwZDA3YmY1MzI3NzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEkloqHty2vLsTvyyUjN/wN3h6Ut S3PT3L1juYIVIJ7LAV2G4V0wgKJ6xkLQpuX5Vn/rSrcjZqBlYSlpWdMmvd8C1+0I 9D/Xomhwi8feSMKhBEsQjHc9+czxm34UwBRG8naFomO9GU24wP9BXfN6FmKCDgEW eAdRSbWGb9NHhxctuYGCoqLG5hwTAk5/0h80VHyD5cEhUtTYf82MlFKrfoPSOu6k Q2dAt3Idxwq7BDYihVTfsnfxkJRFkVJFurttsMOO3RDJr+44daLMibH5hmmVkRlA bil2PhVAjRMqxvGO/FXbv23PAQRvcLdDWXft7TEPDuyTtVRoX1Y0GXPrGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzniDMym4aYBXxuXt4Q0Hv1MncDMB8GA1UdIwQY MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt Y2E1ZTY4NTQzOGEyLzEvak9lSU16S2JocGdGZkc1ZTNoRFFlX1V5ZHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshJ2MA0G CSqGSIb3DQEBCwUAA4IBAQBO5icQs4400D4SHguPlRrfj3MwZ/a09mVhrvSdSG7E MqpJ05Miy1LlEzaClemeDj4hf0fz6L4l/sw90c4zTjNZJjMw3hAmhnC60YQw8E5v Qbe9poIKzaURUNUGCLTCDqPbuMHAqoOFApVOBOvMWlXenGEOh0ELi2Qota+4hV0H mAQmb3n+bDm4K7X3XutW9X7HYInKvc9RO13zMF9n4MOkrBpZpGeujCIbilGHoLD/ OiFOXgbBJWhqVKH3DYrsPAtCYlQJNPQWt1u9oGIpoRW7tGr5Vcx0TVS4Eu/5d113 gX33+bGE6UARbdtoCosyuOMFINPt3zb/9Fce0BcR018f -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client