This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/_3UUxWfdIKjZ94RP_R__5_MA69o.roa File: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (raw, json) Hash identifier: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY= Subject key identifier: FF:75:14:C5:67:DD:20:A8:D9:F7:84:4F:FD:1F:FF:E7:F3:00:EB:DA Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2 Certificate serial: 019B76EB70ECA70326B2C63713E9DF9EA975 Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/_3UUxWfdIKjZ94RP_R__5_MA69o.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202650 IP address blocks: 178.213.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:70:ec:a7:03:26:b2:c6:37:13:e9:df:9e:a9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff7514c567dd20a8d9f7844ffd1fffe7f300ebda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:c9:a1:07:39:2a:3b:17:98:ec:d4:64:51: d4:12:19:9e:3c:78:6c:9d:b8:e9:2a:86:cd:f1:4f: 90:f3:f6:2b:0e:14:d1:b2:e3:7f:f1:35:11:c8:0f: 78:a4:56:9c:c2:ba:f3:4c:56:00:a2:5e:4d:39:7f: a0:d3:8f:0b:73:7a:0a:38:34:cc:6b:84:fe:c0:66: ee:c4:18:66:30:8b:da:25:cb:f3:27:fb:2f:21:ba: ab:c6:83:20:14:ae:e5:c7:dd:74:ab:a9:7d:6b:68: 2d:9c:b0:cd:97:90:b6:ee:ae:bd:0f:57:7a:0a:a8: ac:5e:a5:b3:cd:72:e3:b6:94:79:30:24:5d:04:df: 42:29:7c:0f:29:da:cd:57:98:97:7a:9a:44:b6:28: b6:a0:f6:60:ef:d9:69:4d:8b:b6:ca:21:61:af:7a: d1:66:a0:d2:d9:36:06:b2:ad:0e:97:83:85:4c:d2: cd:c3:bc:1a:41:29:bf:f7:87:3f:31:29:02:72:50: 3c:43:25:8c:da:44:00:82:45:fe:43:1c:08:3d:a5: ff:3f:85:68:8d:38:d3:da:f8:60:7e:c2:d4:65:41: c2:96:ab:15:9c:6e:56:20:23:ff:05:c0:f2:02:68: a7:3b:d2:91:39:26:08:b2:3e:f5:95:75:10:18:98: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:75:14:C5:67:DD:20:A8:D9:F7:84:4F:FD:1F:FF:E7:F3:00:EB:DA X509v3 Authority Key Identifier: keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/_3UUxWfdIKjZ94RP_R__5_MA69o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.87.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ea:40:12:7f:8e:28:1e:db:de:b8:28:d1:f5:73:2a:e2:84: 82:d4:f4:f1:59:5c:99:7c:a4:f3:ab:e4:9e:ea:a6:d4:fa:92: ee:a9:f3:1a:30:42:41:9d:7e:9c:d4:91:bc:ee:df:3e:e8:09: 0e:6c:68:5b:53:5c:a2:8d:3b:28:10:c8:98:3b:65:6d:64:43: dd:97:9b:42:75:a5:b5:9b:1e:e9:24:e9:2d:85:07:92:2d:8d: db:96:71:05:21:49:f3:b2:55:3d:a6:01:94:4c:dd:e0:ad:33: ef:d4:fc:d1:ac:32:69:41:3b:fc:24:fc:fa:6e:d6:05:e6:ee: ef:38:3c:3f:15:9f:3b:1c:84:82:7c:3f:e1:ad:b0:07:ea:b6: e9:77:b1:c3:d9:76:56:9d:9e:7b:c8:da:bd:05:99:71:86:00: da:64:98:74:27:ee:d6:57:07:01:1e:7a:3c:0b:65:1b:dc:78: de:17:8e:ce:be:58:ae:a1:46:74:6e:8d:63:05:92:f0:64:bd: bf:bd:3e:f2:6b:f2:51:43:96:7e:4c:0a:01:ad:64:6b:cd:ff: 31:0c:5f:f6:bf:fa:a3:cf:03:b2:05:19:da:4b:e1:d5:65:4f: 14:4c:83:e1:6a:a3:a7:a2:b9:02:83:86:73:71:b9:ca:d8:f6: 5f:34:fa:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263DspwMmssY3E+nfnql1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw MjY1YTIwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjc1MTRjNTY3ZGQyMGE4ZDlmNzg0NGZmZDFmZmZlN2YzMDBlYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmXJoQc5KjsXmOzUZFHUEhmePHhs nbjpKobN8U+Q8/YrDhTRsuN/8TURyA94pFacwrrzTFYAol5NOX+g048Lc3oKODTM a4T+wGbuxBhmMIvaJcvzJ/svIbqrxoMgFK7lx910q6l9a2gtnLDNl5C27q69D1d6 CqisXqWzzXLjtpR5MCRdBN9CKXwPKdrNV5iXeppEtii2oPZg79lpTYu2yiFhr3rR ZqDS2TYGsq0Ol4OFTNLNw7waQSm/94c/MSkCclA8QyWM2kQAgkX+QxwIPaX/P4Vo jTjT2vhgfsLUZUHClqsVnG5WICP/BcDyAminO9KROSYIsj71lXUQGJjIEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP91FMVn3SCo2feET/0f/+fzAOvaMB8GA1UdIwQY MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt YzE4YWQzNmE3YjMwLzEvXzNVVXhXZmRJS2paOTRSUF9SX181X01BNjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstVXMA0G CSqGSIb3DQEBCwUAA4IBAQAp6kASf44oHtveuCjR9XMq4oSC1PTxWVyZfKTzq+Se 6qbU+pLuqfMaMEJBnX6c1JG87t8+6AkObGhbU1yijTsoEMiYO2VtZEPdl5tCdaW1 mx7pJOkthQeSLY3blnEFIUnzslU9pgGUTN3grTPv1PzRrDJpQTv8JPz6btYF5u7v ODw/FZ87HISCfD/hrbAH6rbpd7HD2XZWnZ57yNq9BZlxhgDaZJh0J+7WVwcBHno8 C2Ub3HjeF47OvliuoUZ0bo1jBZLwZL2/vT7ya/JRQ5Z+TAoBrWRrzf8xDF/2v/qj zwOyBRnaS+HVZU8UTIPhaqOnorkCg4ZzcbnK2PZfNPoB -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:40 2026 by rpki-client