This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/4o_tAUtgP-njAXhmOmcH5E-LEBE.roa File: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (raw, json) Hash identifier: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc= Subject key identifier: E2:8F:ED:01:4B:60:3F:E9:E3:01:78:66:3A:67:07:E4:4F:8B:10:11 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019B797EF71BA418D713F5F3C003F8322D96 Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/4o_tAUtgP-njAXhmOmcH5E-LEBE.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6697 IP address blocks: 178.159.240.0/21 maxlen: 21 2a0c:b1c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:1b:a4:18:d7:13:f5:f3:c0:03:f8:32:2d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28fed014b603fe9e30178663a6707e44f8b1011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:07:6e:3a:2a:ca:30:f7:ce:05:fc:1a:88: 72:c7:9f:35:c7:a7:95:47:71:94:38:70:8a:32:29: 5d:09:b9:b1:a9:2c:4c:f1:b1:cd:c5:95:ca:73:a1: 4e:f2:e0:ca:8e:eb:8b:2a:57:4d:bc:9f:26:2f:ce: 4e:9d:de:3c:a0:19:30:3f:c1:7b:bb:bb:70:ea:f1: ff:03:78:a9:58:c9:54:be:86:22:f4:68:a8:b7:ee: 83:15:a9:72:00:6c:ae:ac:94:8c:bc:87:50:19:0d: 0a:86:7c:a1:86:5f:cb:83:e7:dc:6e:44:6f:02:08: 95:82:09:d4:00:f2:7a:db:2c:c2:0f:b0:54:1d:dd: 3a:ea:1d:4d:83:02:26:92:bd:54:91:e1:aa:70:38: b2:3d:e7:29:91:52:13:4c:76:a5:89:13:e6:b1:6e: e0:90:cd:27:b1:33:f3:95:b4:20:17:ef:8d:0b:7e: 6b:15:62:15:67:2b:e1:61:1b:3a:40:39:79:b6:c5: 3c:d9:13:4c:1a:06:9b:a9:e9:df:04:02:5e:06:67: cc:4a:c8:6b:c2:5a:ba:54:47:09:f0:1b:ba:ab:bb: 81:9b:86:1f:4c:7a:d1:4f:c4:33:26:12:f4:c0:5d: 9b:af:4b:b1:05:00:0b:64:3e:16:8e:49:72:d8:13: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:ED:01:4B:60:3F:E9:E3:01:78:66:3A:67:07:E4:4F:8B:10:11 X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/4o_tAUtgP-njAXhmOmcH5E-LEBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.159.240.0/21 IPv6: 2a0c:b1c2::/32 Signature Algorithm: sha256WithRSAEncryption 3b:06:46:be:2f:60:1d:85:c4:89:07:66:fc:8a:bf:cc:cb:fc: 78:7b:90:4c:c9:3f:50:94:8a:9c:a1:c2:f0:63:ce:cb:6e:78: 58:5f:51:8f:43:b4:83:4f:39:b8:ed:a8:65:ad:14:cc:b9:88: 11:38:25:2a:76:60:8b:b3:36:16:ba:d6:65:fe:78:13:6a:51: db:27:eb:71:06:a3:2f:16:b7:bd:98:28:50:b5:bd:9f:42:c7: b4:fd:22:71:91:6d:c0:ba:85:5f:d5:7f:18:71:f3:0b:d5:e6: c3:a7:0f:08:7f:72:64:83:fc:8c:0b:9c:e6:98:61:80:ea:25: 39:73:7b:8c:f7:8e:07:00:6b:f1:2f:96:bc:d1:43:07:04:20: 52:37:a4:2d:c5:a6:77:6a:73:fb:99:d6:7a:02:ef:ef:be:f8: 48:92:17:7d:3c:59:1c:db:3b:a1:53:cf:5c:13:f8:3c:f3:d4: b6:4e:07:b4:b4:cc:dc:ad:19:6e:65:ca:eb:ff:0b:1a:15:24: 54:97:b1:b9:43:61:bf:8e:93:f8:ee:b3:94:50:85:99:77:f0: 15:8e:ff:d8:18:14:f7:28:65:d7:b2:30:76:d2:be:52:68:e8: cc:e5:ad:67:da:4f:7b:51:b2:fe:43:84:c7:a9:9c:cd:d0:bd: 27:6e:6f:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fvcbpBjXE/XzwAP4Mi2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjhmZWQwMTRiNjAzZmU5ZTMwMTc4NjYzYTY3MDdlNDRmOGIxMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9sHbjoqyjD3zgX8Gohyx581x6eV R3GUOHCKMildCbmxqSxM8bHNxZXKc6FO8uDKjuuLKldNvJ8mL85Ond48oBkwP8F7 u7tw6vH/A3ipWMlUvoYi9Giot+6DFalyAGyurJSMvIdQGQ0Khnyhhl/Lg+fcbkRv AgiVggnUAPJ62yzCD7BUHd066h1NgwImkr1UkeGqcDiyPecpkVITTHaliRPmsW7g kM0nsTPzlbQgF++NC35rFWIVZyvhYRs6QDl5tsU82RNMGgabqenfBAJeBmfMSshr wlq6VEcJ8Bu6q7uBm4YfTHrRT8QzJhL0wF2br0uxBQALZD4Wjkly2BPw5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOKP7QFLYD/p4wF4ZjpnB+RPixARMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvNG9fdEFVdGdQLW5qQVhobU9tY0g1RS1MRUJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDsp/wMA0E AgACMAcDBQAqDLHCMA0GCSqGSIb3DQEBCwUAA4IBAQA7Bka+L2AdhcSJB2b8ir/M y/x4e5BMyT9QlIqcocLwY87LbnhYX1GPQ7SDTzm47ahlrRTMuYgROCUqdmCLszYW utZl/ngTalHbJ+txBqMvFre9mChQtb2fQse0/SJxkW3AuoVf1X8YcfML1ebDpw8I f3Jkg/yMC5zmmGGA6iU5c3uM944HAGvxL5a80UMHBCBSN6QtxaZ3anP7mdZ6Au/v vvhIkhd9PFkc2zuhU89cE/g889S2Tge0tMzcrRluZcrr/wsaFSRUl7G5Q2G/jpP4 7rOUUIWZd/AVjv/YGBT3KGXXsjB20r5SaOjM5a1n2k97UbL+Q4THqZzN0L0nbm/w -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:55 2026 by rpki-client