This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa File: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (raw, json) Hash identifier: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q= Subject key identifier: FB:4B:D5:8B:81:47:1C:07:60:10:03:7E:68:06:6A:C6:20:A3:4B:42 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019B7AC8B6FE82786778A0EA409C9B5C0FE2 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136714 IP address blocks: 178.248.112.0/21 maxlen: 21 178.248.112.0/22 maxlen: 24 178.248.112.0/23 maxlen: 23 178.248.114.0/23 maxlen: 23 178.248.116.0/22 maxlen: 22 178.248.116.0/23 maxlen: 23 178.248.116.0/24 maxlen: 24 178.248.117.0/24 maxlen: 24 178.248.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b6:fe:82:78:67:78:a0:ea:40:9c:9b:5c:0f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb4bd58b81471c076010037e68066ac620a34b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:0a:fb:f5:25:a1:fc:fb:59:0e:1a:5d:eb: 5a:a8:b0:46:e7:ce:b6:73:49:60:4a:a1:34:e3:25: d5:a8:67:bd:d4:6a:db:64:f8:b6:65:3b:ee:48:e1: 26:af:1d:f5:63:12:fe:d4:57:8c:20:30:f4:e9:36: 08:6d:b7:e9:76:d8:08:04:e3:cc:69:c8:cb:31:f1: e4:0b:cd:64:ad:6d:92:b7:db:c2:58:cd:a0:9a:ff: 96:a6:8a:df:78:dd:b6:7a:f9:ca:5e:fe:4d:f8:a1: f0:a9:40:9a:df:ef:e5:e6:07:b9:78:b6:84:a4:6c: 8a:01:ac:06:df:ed:8c:c4:10:f5:bc:6e:c4:67:8a: aa:9e:38:b1:a7:6c:e6:65:3e:95:db:10:88:c5:2f: cf:47:7d:e8:08:40:5d:e5:bc:e2:0e:25:1c:73:32: 12:49:4e:f1:18:5b:f4:1a:be:1c:68:59:71:42:43: b4:68:fe:fd:3a:1c:2f:a2:39:54:0e:01:26:4b:70: 8c:54:06:5f:be:64:3a:c8:c5:11:6e:43:41:87:ad: c2:af:e0:d8:49:1d:eb:7c:8c:6a:5b:b4:b7:f8:4e: 02:e5:c6:88:63:70:82:89:70:7a:d9:99:d0:63:3c: 26:32:24:93:1f:19:c0:10:e1:27:e3:e7:ca:d7:32: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4B:D5:8B:81:47:1C:07:60:10:03:7E:68:06:6A:C6:20:A3:4B:42 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.248.112.0/21 Signature Algorithm: sha256WithRSAEncryption 64:92:2f:ab:38:26:65:f1:af:51:3c:74:44:42:7b:52:39:36: 50:da:6e:ad:eb:89:e1:c8:91:b2:9c:7a:cf:11:dd:67:03:74: e6:40:9d:51:a4:d4:62:a1:68:4e:43:ee:0e:b3:f1:a3:35:95: f7:5e:f9:b3:a2:66:f4:47:2b:0d:67:99:34:16:19:2c:31:11: 4b:36:bd:2e:de:ed:24:43:38:d9:b5:3b:56:2a:97:68:d9:e3: 2f:d8:5a:69:1a:5d:ee:3f:83:a3:1c:53:23:ee:dd:09:e3:4c: a2:be:20:dc:97:ae:00:5b:45:9a:07:98:62:5b:f2:ae:94:b3: 98:c4:6a:fc:00:a1:3c:cc:9a:24:03:58:5b:8f:e3:f3:bc:14: b1:bb:ad:58:b3:80:c8:65:56:d5:21:83:71:76:d4:d3:4c:ae: 59:3d:06:ad:eb:5d:8e:ea:3e:7a:7f:d5:d5:14:bf:23:39:5a: c2:1a:44:f1:e8:01:07:90:5b:16:b1:e6:76:63:a8:5c:84:68: ab:ac:5d:5c:d8:a4:7b:08:e7:64:1d:ba:96:bb:c3:20:72:14: 49:4e:8a:5e:7f:9b:a9:e2:c8:33:c7:d9:5d:7f:a8:c2:d3:c4: 9e:4d:f3:c3:2d:df:5f:32:e1:e2:ba:c2:94:4a:51:3e:26:7e: cc:3e:b8:8e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yLb+gnhneKDqQJybXA/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjRiZDU4YjgxNDcxYzA3NjAxMDAzN2U2ODA2NmFjNjIwYTM0YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonUK+/Ulofz7WQ4aXetaqLBG5862 c0lgSqE04yXVqGe91GrbZPi2ZTvuSOEmrx31YxL+1FeMIDD06TYIbbfpdtgIBOPM acjLMfHkC81krW2St9vCWM2gmv+WporfeN22evnKXv5N+KHwqUCa3+/l5ge5eLaE pGyKAawG3+2MxBD1vG7EZ4qqnjixp2zmZT6V2xCIxS/PR33oCEBd5bziDiUcczIS SU7xGFv0Gr4caFlxQkO0aP79OhwvojlUDgEmS3CMVAZfvmQ6yMURbkNBh63Cr+DY SR3rfIxqW7S3+E4C5caIY3CCiXB62ZnQYzwmMiSTHxnAEOEn4+fK1zINBQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtL1YuBRxwHYBADfmgGasYgo0tCMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvMS0wdlZpNEZISEFkZ0VBTi1hQVpxeGlDalMwSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTIvNDVhYzBmLTM4M2EtNGViNC1iMTg4LTk5NjE4OWY5Y2Ux NC8xL0NmRGN6cmRQRVlXczJYcnVxc0pkMmw2YkNUWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7L4cDAN BgkqhkiG9w0BAQsFAAOCAQEAZJIvqzgmZfGvUTx0REJ7Ujk2UNpureuJ4ciRspx6 zxHdZwN05kCdUaTUYqFoTkPuDrPxozWV9175s6Jm9EcrDWeZNBYZLDERSza9Lt7t JEM42bU7ViqXaNnjL9haaRpd7j+DoxxTI+7dCeNMor4g3JeuAFtFmgeYYlvyrpSz mMRq/AChPMyaJANYW4/j87wUsbutWLOAyGVW1SGDcXbU00yuWT0Gretdjuo+en/V 1RS/IzlawhpE8egBB5BbFrHmdmOoXIRoq6xdXNikewjnZB26lrvDIHIUSU6KXn+b qeLIM8fZXX+owtPEnk3zwy3fXzLh4rrClEpRPiZ+zD64jg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:46 2026 by rpki-client