This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/18LvMJbaobz9RVoG3KwWtt6oPsk.roa File: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (raw, json) Hash identifier: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY= Subject key identifier: D7:C2:EF:30:96:DA:A1:BC:FD:45:5A:06:DC:AC:16:B6:DE:A8:3E:C9 Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Certificate serial: 019B78353332836F5A9BFBFBB8226D34C933 Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/18LvMJbaobz9RVoG3KwWtt6oPsk.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52093 IP address blocks: 185.156.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:33:32:83:6f:5a:9b:fb:fb:b8:22:6d:34:c9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c2ef3096daa1bcfd455a06dcac16b6dea83ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:44:ed:49:53:1a:30:53:ed:f5:26:a1:f4: 35:de:5c:e2:e1:89:d3:f3:a8:e0:8e:63:65:ef:76: 8d:45:01:20:c3:20:d6:18:57:6c:62:5e:41:d7:49: 16:0f:e4:e0:9d:80:00:5e:1a:f9:b5:de:05:9d:c3: 89:da:ed:c6:a4:e8:e3:30:41:8c:cc:02:ad:c3:b4: ba:68:b9:30:2c:43:cd:a1:d0:94:60:29:6c:2d:6f: d0:59:06:2f:9a:4d:17:a1:8f:80:b6:4e:ce:d3:24: eb:21:76:d2:8e:8a:72:83:f8:f0:db:f1:74:55:0c: 4f:f9:74:0f:dc:8d:df:dd:74:3d:5d:55:52:d6:06: 67:6b:61:a0:b7:2d:ec:e8:93:48:9d:6d:76:b4:a3: ee:1f:4a:fe:7d:22:57:aa:40:a2:3b:a7:86:7b:9c: 45:9e:5c:fc:0e:e3:c3:31:66:b0:f8:51:ae:6d:6d: 5e:33:bb:4e:dd:73:ce:cd:53:b0:05:ee:cf:78:98: c9:fb:35:50:82:be:a4:ac:34:6a:0c:c0:5a:ad:a0: 83:27:90:7e:50:d8:ca:a9:36:f5:69:0f:2c:4f:dc: e0:1a:92:e0:35:72:1b:e7:ad:39:2a:7f:c5:05:da: 17:0c:20:9a:60:d3:ee:aa:0c:89:fe:29:e2:b3:b7: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:EF:30:96:DA:A1:BC:FD:45:5A:06:DC:AC:16:B6:DE:A8:3E:C9 X509v3 Authority Key Identifier: keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/18LvMJbaobz9RVoG3KwWtt6oPsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.4.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d3:9e:90:3d:b5:5a:8a:96:e3:a5:43:cd:1d:0d:9d:24:a7: 5d:70:63:8b:57:c5:93:a7:4e:df:e0:ed:5d:82:52:f6:cc:af: 6d:a2:5f:b9:71:37:d3:f5:bc:f6:f9:af:51:da:23:18:13:ab: ab:f2:e9:bc:c6:bd:bf:53:4b:eb:0b:b5:41:47:bc:93:0e:69: 7b:56:be:2b:2c:cc:d1:56:ee:61:3b:0c:9c:ba:68:f9:37:ae: 06:5a:53:8b:3f:81:ed:b9:e7:80:96:a7:94:cf:02:0a:1b:3a: c5:46:29:f2:3f:f2:a2:4f:ec:c0:20:2e:eb:68:e2:67:66:cf: f8:73:2c:1e:cd:f5:a7:59:0a:ee:1f:e4:65:a7:77:d4:74:a1: 52:01:14:1c:41:73:92:0f:ae:e1:5c:fe:f6:23:1c:65:22:09: fd:53:49:ac:a1:a3:19:0e:84:fb:05:e6:04:95:8f:a4:5f:b0: a1:38:80:65:a9:b4:6e:b5:4c:6e:80:b9:84:4f:ad:ee:23:64: 98:5f:fb:c3:1d:c2:63:7c:1a:3d:06:86:44:83:c6:e3:12:b3: 72:44:96:db:d2:5d:55:ba:41:2c:cd:b5:d0:2c:d5:b5:57:dd: 97:84:16:f6:d3:14:f3:8c:a3:10:1d:a6:40:4d:04:d9:9b:43: 7b:8c:3e:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTMyg29am/v7uCJtNMkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx MTQ0OWEwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2MyZWYzMDk2ZGFhMWJjZmQ0NTVhMDZkY2FjMTZiNmRlYTgzZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rtE7UlTGjBT7fUmofQ13lzi4YnT 86jgjmNl73aNRQEgwyDWGFdsYl5B10kWD+TgnYAAXhr5td4FncOJ2u3GpOjjMEGM zAKtw7S6aLkwLEPNodCUYClsLW/QWQYvmk0XoY+Atk7O0yTrIXbSjopyg/jw2/F0 VQxP+XQP3I3f3XQ9XVVS1gZna2Ggty3s6JNInW12tKPuH0r+fSJXqkCiO6eGe5xF nlz8DuPDMWaw+FGubW1eM7tO3XPOzVOwBe7PeJjJ+zVQgr6krDRqDMBaraCDJ5B+ UNjKqTb1aQ8sT9zgGpLgNXIb5605Kn/FBdoXDCCaYNPuqgyJ/inis7fuqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfC7zCW2qG8/UVaBtysFrbeqD7JMB8GA1UdIwQY MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt MDQwZTA2NDRmYmU4LzEvMThMdk1KYmFvYno5UlZvRzNLd1d0dDZvUHNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4 LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZwEMA0G CSqGSIb3DQEBCwUAA4IBAQAz056QPbVaipbjpUPNHQ2dJKddcGOLV8WTp07f4O1d glL2zK9tol+5cTfT9bz2+a9R2iMYE6ur8um8xr2/U0vrC7VBR7yTDml7Vr4rLMzR Vu5hOwycumj5N64GWlOLP4HtueeAlqeUzwIKGzrFRinyP/KiT+zAIC7raOJnZs/4 cywezfWnWQruH+Rlp3fUdKFSARQcQXOSD67hXP72IxxlIgn9U0msoaMZDoT7BeYE lY+kX7ChOIBlqbRutUxugLmET63uI2SYX/vDHcJjfBo9BoZEg8bjErNyRJbb0l1V ukEszbXQLNW1V92XhBb20xTzjKMQHaZATQTZm0N7jD4+ -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:23 2026 by rpki-client