This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/xd8WtTpNSiw3OPvDq9rsEjInsvA.roa File: xd8WtTpNSiw3OPvDq9rsEjInsvA.roa (raw, json) Hash identifier: fZ0V/o/vI20M9OPDqf1/6QRLbpnmYCprw2uInkjQ1rQ= Subject key identifier: C5:DF:16:B5:3A:4D:4A:2C:37:38:FB:C3:AB:DA:EC:12:32:27:B2:F0 Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Certificate serial: 019B7CED41E1D4F4CDF05D515CC8C76A15B9 Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/xd8WtTpNSiw3OPvDq9rsEjInsvA.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 178.22.213.0/24 maxlen: 24 178.22.214.0/24 maxlen: 24 178.22.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:41:e1:d4:f4:cd:f0:5d:51:5c:c8:c7:6a:15:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5df16b53a4d4a2c3738fbc3abdaec123227b2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e3:59:50:7e:3c:c4:51:32:2c:34:74:c2:91: 28:5c:e7:71:c7:82:a5:14:29:1a:b4:5b:03:64:cf: bb:57:d7:36:06:0a:88:c1:47:63:dc:19:84:e9:5f: 9d:0a:cd:ec:b7:26:c6:7a:df:93:c6:12:8a:b0:14: 14:2e:a4:72:77:c0:3e:fe:b9:ec:cc:39:1f:76:16: 6f:d4:75:24:45:d3:0c:0b:c2:b7:40:28:22:e5:cb: 50:2c:25:b0:84:15:c0:db:1d:6a:f6:d1:f5:59:91: 29:d5:d9:58:ed:69:84:69:5f:8e:38:43:23:bd:93: e7:9f:d8:52:5d:30:75:04:9d:0a:cc:3d:a2:db:88: bd:04:53:95:cf:ac:5c:7b:99:7a:dd:42:5c:14:2b: d2:6b:ea:c7:77:9d:82:01:f0:a6:45:c7:b3:12:34: 3d:29:69:ff:44:c5:d4:e5:8a:b1:e0:1c:26:1d:c1: fd:be:43:89:22:b5:0f:b6:1a:ee:90:6a:94:2e:65: 1c:f3:ff:24:3f:ab:d3:94:01:50:55:25:9c:30:ed: 02:45:52:a2:94:6b:4b:6b:b3:70:e8:53:e2:99:63: 6e:6c:0a:5d:9c:6e:5a:69:68:33:7d:9a:ca:96:07: b7:09:5b:3c:c4:a6:34:f2:02:bb:d3:ff:26:ce:6b: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:16:B5:3A:4D:4A:2C:37:38:FB:C3:AB:DA:EC:12:32:27:B2:F0 X509v3 Authority Key Identifier: keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/xd8WtTpNSiw3OPvDq9rsEjInsvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.213.0-178.22.215.255 Signature Algorithm: sha256WithRSAEncryption 34:ad:ef:26:c9:57:18:ab:b0:40:a7:f6:1e:4b:9b:83:b0:f7: 2c:a1:22:55:30:3e:e8:91:c1:a5:e9:e1:a2:1c:57:f0:1f:16: ca:18:5f:83:29:47:ce:49:5d:90:50:83:96:90:69:82:0f:70: 0a:1d:22:66:dc:3f:86:7f:e3:4c:35:ac:c6:0a:cb:95:81:f3: a1:bc:8b:d6:9c:3b:c3:6e:89:7c:78:e8:ca:23:cd:59:b0:3e: b7:99:60:1d:09:a0:8e:d4:99:d5:24:de:d0:2b:e9:ad:21:2d: ed:4b:f9:95:f1:e7:ea:e0:4a:14:97:ea:b5:b4:27:2d:c9:64: 00:aa:9b:96:94:17:a9:c2:ac:97:c5:e9:14:1e:bb:2a:71:49: 13:75:37:aa:97:af:26:7a:fc:07:3d:36:1a:0b:d8:a3:29:3d: 89:bc:5c:2d:89:62:72:c2:08:29:e2:36:55:b9:65:78:7c:04: ef:98:0a:fe:d4:43:fc:b4:c8:33:50:ab:84:2d:b2:e1:28:d7: 34:ba:62:5a:14:4b:0a:0f:63:04:cc:f8:6d:65:26:2a:8b:eb: bb:c7:68:54:cc:4c:5c:a9:c3:3d:9a:a8:48:94:53:ac:fd:1c: 04:48:1c:de:42:28:27:ac:08:09:41:d5:2b:6d:d0:0c:2d:0f: 6d:cd:57:fd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87UHh1PTN8F1RXMjHahW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjFhZDczMWM0Yzc1MjVmODg1YzVkMzc2NGQ0Y2UwZjBl OGM5OGYwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWRmMTZiNTNhNGQ0YTJjMzczOGZiYzNhYmRhZWMxMjMyMjdiMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uNZUH48xFEyLDR0wpEoXOdxx4Kl FCkatFsDZM+7V9c2BgqIwUdj3BmE6V+dCs3stybGet+TxhKKsBQULqRyd8A+/rns zDkfdhZv1HUkRdMMC8K3QCgi5ctQLCWwhBXA2x1q9tH1WZEp1dlY7WmEaV+OOEMj vZPnn9hSXTB1BJ0KzD2i24i9BFOVz6xce5l63UJcFCvSa+rHd52CAfCmRcezEjQ9 KWn/RMXU5Yqx4BwmHcH9vkOJIrUPthrukGqULmUc8/8kP6vTlAFQVSWcMO0CRVKi lGtLa7Nw6FPimWNubApdnG5aaWgzfZrKlge3CVs8xKY08gK70/8mzmtFbwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMXfFrU6TUosNzj7w6va7BIyJ7LwMB8GA1UdIwQY MBaAFHlhrXMcTHUl+IXF03ZNTODw6MmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYt OGFhY2MxZjQ4MTA4LzEveGQ4V3RUcE5TaXczT1B2RHE5cnNFakluc3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYjE3Y2EtZDAyZi00MDIyLWFkMDYtOGFhY2MxZjQ4MTA4 LzEvZVdHdGN4eE1kU1g0aGNYVGRrMU00UERveVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACyFtUD BAOyFtAwDQYJKoZIhvcNAQELBQADggEBADSt7ybJVxirsECn9h5Lm4Ow9yyhIlUw PuiRwaXp4aIcV/AfFsoYX4MpR85JXZBQg5aQaYIPcAodImbcP4Z/40w1rMYKy5WB 86G8i9acO8NuiXx46MojzVmwPreZYB0JoI7UmdUk3tAr6a0hLe1L+ZXx5+rgShSX 6rW0Jy3JZACqm5aUF6nCrJfF6RQeuypxSRN1N6qXryZ6/Ac9NhoL2KMpPYm8XC2J YnLCCCniNlW5ZXh8BO+YCv7UQ/y0yDNQq4QtsuEo1zS6YloUSwoPYwTM+G1lJiqL 67vHaFTMTFypwz2aqEiUU6z9HARIHN5CKCesCAlB1Stt0AwtD23NV/0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:16 2026 by rpki-client