This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/fH_gcKdAIP3uBlIddsjG_0qsj3E.roa File: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (raw, json) Hash identifier: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes= Subject key identifier: 7C:7F:E0:70:A7:40:20:FD:EE:06:52:1D:76:C8:C6:FF:4A:AC:8F:71 Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Certificate serial: 019B7B35E6446029209A5E3A05C09DA61592 Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/fH_gcKdAIP3uBlIddsjG_0qsj3E.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207143 IP address blocks: 185.178.192.0/22 maxlen: 22 185.178.192.0/24 maxlen: 24 185.178.193.0/24 maxlen: 24 185.178.194.0/24 maxlen: 24 185.178.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e6:44:60:29:20:9a:5e:3a:05:c0:9d:a6:15:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c7fe070a74020fdee06521d76c8c6ff4aac8f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:44:c9:eb:f6:68:76:e0:6e:31:21:e9:0b: 51:b6:22:32:51:e2:d2:4e:2e:ac:0f:b5:1f:d0:2d: 11:ce:6f:31:61:39:2e:cb:58:b9:b4:ce:1d:b5:e4: 8e:bd:9b:7a:c5:96:f1:f5:fc:ca:67:25:f6:85:1d: f3:ee:47:ee:07:a8:77:6b:af:44:61:f9:fb:12:e4: 32:ee:23:5b:e6:64:d9:63:e2:c4:18:8c:0c:ec:f2: 51:ec:0d:04:41:dc:d5:f3:5b:d4:22:cf:71:15:a7: 16:97:7e:0a:dc:34:1d:f9:b3:4e:00:d6:34:66:3d: 98:a0:ff:9b:17:fc:96:77:95:2e:98:23:94:d2:29: 80:3b:33:bf:13:9e:e9:40:b3:af:ae:9f:f4:be:98: e8:b9:a8:d6:8d:81:f9:b7:d5:c2:43:0d:7b:1c:bc: 79:de:a9:5d:19:08:98:9a:90:c3:bb:97:aa:0c:f4: f6:6d:21:f7:4e:56:e1:2f:2c:48:f2:19:8d:f0:b7: 01:10:cd:85:90:92:34:ff:98:f2:6a:ec:73:81:70: b3:6c:f0:18:ef:48:63:67:a8:10:c7:f4:b4:8e:88: 7f:ff:34:1c:c8:4b:e5:ae:e3:0f:73:56:cc:8a:93: d7:97:5f:c9:f0:51:8a:82:d2:1d:37:b5:81:f1:ac: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:E0:70:A7:40:20:FD:EE:06:52:1D:76:C8:C6:FF:4A:AC:8F:71 X509v3 Authority Key Identifier: keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/fH_gcKdAIP3uBlIddsjG_0qsj3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.192.0/22 Signature Algorithm: sha256WithRSAEncryption 85:b2:88:ac:fc:83:c5:2a:14:b2:93:98:12:eb:38:f1:b7:ee: 5b:89:66:2f:f2:ce:db:73:0c:d5:6e:db:bc:1c:b5:4b:f1:3a: bc:d3:ad:4e:56:b8:5b:3d:1f:21:65:61:fc:8e:1f:36:11:ff: 0b:b6:39:05:bf:f7:39:d2:c2:69:a7:64:d3:22:0b:d7:b7:cb: 02:3e:ed:54:4b:da:02:b5:7d:57:0f:a1:f8:50:68:32:07:93: 25:ba:55:fb:d9:d2:b4:f3:73:5c:1a:98:4e:1c:9a:67:9e:19: e1:35:99:c7:64:60:f1:04:74:f6:2e:97:31:5a:1c:9a:08:21: 96:1d:18:b9:fc:4a:91:f8:ff:e4:14:92:23:5b:78:e9:01:4e: 07:4f:f7:b0:02:6e:b5:cb:06:30:32:27:34:68:08:50:f8:f5: 55:9f:26:f0:29:15:ca:a9:62:9f:e0:16:f4:21:6a:b8:8f:59: fd:6e:33:8f:04:4d:05:d1:a3:fb:55:7d:c6:bb:6d:be:02:58: a9:d9:c5:da:69:e6:50:f1:e2:7f:21:35:4f:8b:f7:27:ab:c8: 47:8e:2c:dd:fa:0e:db:21:cc:38:ef:d2:08:0b:57:60:18:bc: 9b:f3:eb:8a:fd:aa:ea:a0:fe:2c:98:4c:d9:3d:db:85:ce:36: ee:ef:b0:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeZEYCkgml46BcCdphWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZGYwODQ1OTExOTk2OWQ0YjljMTdmNWE4NWU5MjczMmM1 NTE3ZDEwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzdmZTA3MGE3NDAyMGZkZWUwNjUyMWQ3NmM4YzZmZjRhYWM4ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW9Eyev2aHbgbjEh6QtRtiIyUeLS Ti6sD7Uf0C0Rzm8xYTkuy1i5tM4dteSOvZt6xZbx9fzKZyX2hR3z7kfuB6h3a69E Yfn7EuQy7iNb5mTZY+LEGIwM7PJR7A0EQdzV81vUIs9xFacWl34K3DQd+bNOANY0 Zj2YoP+bF/yWd5UumCOU0imAOzO/E57pQLOvrp/0vpjouajWjYH5t9XCQw17HLx5 3qldGQiYmpDDu5eqDPT2bSH3TlbhLyxI8hmN8LcBEM2FkJI0/5jyauxzgXCzbPAY 70hjZ6gQx/S0joh//zQcyEvlruMPc1bMipPXl1/J8FGKgtIdN7WB8awkSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHx/4HCnQCD97gZSHXbIxv9KrI9xMB8GA1UdIwQY MBaAFD/fCEWRGZadS5wX9aheknMsVRfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMt NzM2OWYyY2E1YjNiLzEvZkhfZ2NLZEFJUDN1QmxJZGRzakdfMHFzajNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjQ1Y2ItZjBiYS00NGZjLWJhOTMtNzM2OWYyY2E1YjNi LzEvUDk4SVJaRVpscDFMbkJmMXFGNlNjeXhWRjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubLAMA0G CSqGSIb3DQEBCwUAA4IBAQCFsois/IPFKhSyk5gS6zjxt+5biWYv8s7bcwzVbtu8 HLVL8Tq8061OVrhbPR8hZWH8jh82Ef8LtjkFv/c50sJpp2TTIgvXt8sCPu1US9oC tX1XD6H4UGgyB5MlulX72dK083NcGphOHJpnnhnhNZnHZGDxBHT2LpcxWhyaCCGW HRi5/EqR+P/kFJIjW3jpAU4HT/ewAm61ywYwMic0aAhQ+PVVnybwKRXKqWKf4Bb0 IWq4j1n9bjOPBE0F0aP7VX3Gu22+Alip2cXaaeZQ8eJ/ITVPi/cnq8hHjizd+g7b Icw479IIC1dgGLyb8+uK/arqoP4smEzZPduFzjbu77Dc -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:26 2026 by rpki-client