This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/tC2pXEfIIS_ssbaAFt1HYp326ls.roa File: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (raw, json) Hash identifier: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE= Subject key identifier: B4:2D:A9:5C:47:C8:21:2F:EC:B1:B6:80:16:DD:47:62:9D:F6:EA:5B Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Certificate serial: 019B7E3867E1AFB139011F1DAB603075EA0F Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/tC2pXEfIIS_ssbaAFt1HYp326ls.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8586 IP address blocks: 178.16.238.0/24 maxlen: 24 178.16.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:67:e1:af:b1:39:01:1f:1d:ab:60:30:75:ea:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b42da95c47c8212fecb1b68016dd47629df6ea5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:88:3c:8f:e2:3e:1e:47:e2:41:5a:0b:73:53: 06:6d:17:67:e9:af:f9:c4:37:c1:21:0f:5e:e8:a9: a9:49:6f:da:09:da:8f:bb:21:4b:d8:7e:95:de:a5: 69:92:54:6d:74:df:e7:ee:7f:4a:6e:47:01:c8:d9: 71:48:70:f4:5a:9f:d2:2b:71:42:77:a7:b9:13:a8: 60:e3:64:c4:4c:20:c9:ab:bd:37:a7:a1:ee:1e:6b: 3f:aa:75:ac:0b:a7:eb:d1:2f:91:72:d6:1f:7e:e5: 78:10:00:b2:bb:63:e7:cd:4d:75:04:62:bf:b1:49: 1e:b2:a6:61:63:ca:46:ad:4f:2e:bc:55:1e:79:e9: 87:85:dc:a4:4a:5c:84:f4:51:ed:88:1c:a1:50:67: 35:c8:88:6a:23:2e:9d:e4:e7:50:0f:a3:1c:b4:1a: 06:2d:c4:21:f0:f5:38:d3:a5:3e:51:e0:02:6e:5c: dd:21:4c:99:5a:1a:75:3c:b1:fd:55:4f:27:a6:43: 17:9a:df:27:5d:ef:a6:6f:14:bb:95:c0:21:0a:21: e6:54:40:1f:f5:a4:4c:85:4c:65:e4:ef:a8:54:27: bd:00:3f:94:c0:d4:35:2f:3c:0d:1e:7c:d4:7d:13: f5:d4:fa:09:84:56:ea:21:6e:15:d3:1b:4a:a4:95: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:A9:5C:47:C8:21:2F:EC:B1:B6:80:16:DD:47:62:9D:F6:EA:5B X509v3 Authority Key Identifier: keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/tC2pXEfIIS_ssbaAFt1HYp326ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.16.238.0/23 Signature Algorithm: sha256WithRSAEncryption 97:04:3c:d6:50:8b:7b:a4:3f:18:bc:94:5e:55:1f:e9:a4:a9: ea:7b:4e:14:2e:9a:2c:8f:16:30:10:94:3e:74:89:c2:1b:8f: 87:ac:1b:50:d1:48:0b:8a:1a:3f:e1:ab:6b:a8:10:f0:32:33: fc:fe:80:0c:01:d2:09:b9:ef:f2:dd:13:79:05:e4:0a:d3:39: b0:cd:05:de:bc:1c:a4:03:c9:43:19:f8:de:01:ce:69:79:62: d2:81:4b:03:9a:73:e5:47:e0:65:66:e8:b4:21:a1:c0:1d:92: 18:92:e3:5f:be:49:9e:da:2d:1a:6b:5b:c5:d0:3f:48:d2:64: d3:2d:12:aa:b4:81:45:59:22:55:cd:5f:44:26:9d:b9:9d:8c: 29:27:e7:fb:fa:1e:52:71:b7:b3:01:75:80:91:b0:ed:00:87: 5e:ab:75:80:7c:7a:2f:74:1b:10:cc:63:a4:91:dc:17:d3:fd: 27:03:96:51:8b:ce:15:64:9e:1f:22:47:8d:ad:83:76:7d:44: 01:ea:a6:67:c5:79:74:de:99:96:03:c0:04:1e:53:30:f7:fe: b2:eb:eb:49:2a:84:40:6c:02:99:63:59:6f:a0:74:d1:3e:cf: 5a:86:cc:f9:b4:e0:81:ad:88:84:82:e9:f5:fb:35:ae:e7:4b: 52:a1:87:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGfhr7E5AR8dq2AwdeoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh NDY0ZWUwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDJkYTk1YzQ3YzgyMTJmZWNiMWI2ODAxNmRkNDc2MjlkZjZlYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ig8j+I+HkfiQVoLc1MGbRdn6a/5 xDfBIQ9e6KmpSW/aCdqPuyFL2H6V3qVpklRtdN/n7n9KbkcByNlxSHD0Wp/SK3FC d6e5E6hg42TETCDJq703p6HuHms/qnWsC6fr0S+RctYffuV4EACyu2PnzU11BGK/ sUkesqZhY8pGrU8uvFUeeemHhdykSlyE9FHtiByhUGc1yIhqIy6d5OdQD6MctBoG LcQh8PU406U+UeACblzdIUyZWhp1PLH9VU8npkMXmt8nXe+mbxS7lcAhCiHmVEAf 9aRMhUxl5O+oVCe9AD+UwNQ1LzwNHnzUfRP11PoJhFbqIW4V0xtKpJUFBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQtqVxHyCEv7LG2gBbdR2Kd9upbMB8GA1UdIwQY MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt MzgyMGY3ZWUyY2I4LzEvdEMycFhFZklJU19zc2JhQUZ0MUhZcDMyNmxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4 LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBshDuMA0G CSqGSIb3DQEBCwUAA4IBAQCXBDzWUIt7pD8YvJReVR/ppKnqe04ULposjxYwEJQ+ dInCG4+HrBtQ0UgLiho/4atrqBDwMjP8/oAMAdIJue/y3RN5BeQK0zmwzQXevByk A8lDGfjeAc5peWLSgUsDmnPlR+BlZui0IaHAHZIYkuNfvkme2i0aa1vF0D9I0mTT LRKqtIFFWSJVzV9EJp25nYwpJ+f7+h5ScbezAXWAkbDtAIdeq3WAfHovdBsQzGOk kdwX0/0nA5ZRi84VZJ4fIkeNrYN2fUQB6qZnxXl03pmWA8AEHlMw9/6y6+tJKoRA bAKZY1lvoHTRPs9ahsz5tOCBrYiEgun1+zWu50tSoYdJ -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:31 2026 by rpki-client