This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/bM8ylzi-juLOcTs8he0_ihn2-Lg.roa File: bM8ylzi-juLOcTs8he0_ihn2-Lg.roa (raw, json) Hash identifier: WIBob7fZMLUTFgps19iz8qcrHP4DZX+mfV40VJTLBzA= Subject key identifier: 6C:CF:32:97:38:BE:8E:E2:CE:71:3B:3C:85:ED:3F:8A:19:F6:F8:B8 Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb Certificate serial: 019B7F151D05B853CDE44F67F8011A854E7F Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/bM8ylzi-juLOcTs8he0_ihn2-Lg.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197494 IP address blocks: 178.218.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1d:05:b8:53:cd:e4:4f:67:f8:01:1a:85:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ccf329738be8ee2ce713b3c85ed3f8a19f6f8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:92:8b:52:f7:01:a8:66:45:ae:b0:86:bd: 80:12:6b:be:5a:cb:b2:fb:89:9a:e2:2d:34:a6:14: ce:b8:d6:90:5c:fc:c7:07:6d:66:53:9d:d0:e1:2f: 67:5c:56:d1:33:7e:93:15:92:f4:51:cb:f2:4c:b5: e7:c9:64:01:33:51:a4:54:cf:9a:23:71:ae:d1:8c: 81:3f:fe:1a:25:82:08:c9:b6:33:d5:75:86:20:52: 0f:8a:a3:0e:8d:c7:86:e8:0f:c4:90:55:e5:0d:96: d1:c4:0b:1c:23:5c:3e:8a:27:80:06:c4:d0:9d:13: eb:cc:9e:ac:97:fc:e2:38:b3:9e:e6:dc:0a:8d:ce: a6:f6:4f:29:74:2e:e7:b9:7c:1f:5e:40:96:a7:82: b8:8d:ff:dd:0e:4b:eb:f6:b1:6c:91:fa:3a:9c:1d: 0e:a0:0b:98:4d:a9:f1:71:63:fb:06:88:f8:5f:fc: 6e:db:7f:6a:a6:9f:17:18:55:81:ce:c8:b4:80:e4: fa:88:8d:94:60:b4:49:c6:03:ba:d4:94:eb:cd:3e: 99:e0:19:31:d9:9c:7c:62:60:e2:e9:e8:1f:66:51: aa:29:35:cc:00:3c:8b:2a:05:dd:cc:08:e9:c2:ef: 5c:a4:0b:14:43:87:5e:cd:17:4a:68:0a:00:d6:bb: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CF:32:97:38:BE:8E:E2:CE:71:3B:3C:85:ED:3F:8A:19:F6:F8:B8 X509v3 Authority Key Identifier: keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/bM8ylzi-juLOcTs8he0_ihn2-Lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.247.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:86:0a:05:cf:a6:5b:33:0f:c2:91:9b:bb:67:42:d5:38:f4: 79:4b:4d:58:71:d7:00:6e:3f:2b:41:d0:04:f4:2e:a4:aa:ed: 87:9a:39:dd:51:17:33:46:73:78:c6:76:f8:34:f2:b7:a0:85: 44:37:3a:fb:0d:f0:0f:40:9f:66:d8:4e:d8:20:97:70:3a:e0: 14:16:a4:4f:c4:17:84:a3:fd:9e:9e:cc:70:c1:32:58:9e:0e: 4d:5e:49:4b:b8:22:ae:97:02:d4:2e:32:2d:3d:e5:df:22:5e: 58:cd:5e:9d:38:9b:47:f7:b1:00:c2:9a:48:2f:71:c5:c3:32: 9a:7c:ad:50:b8:82:7b:8d:01:35:a0:60:17:2c:9a:1d:14:3b: 94:7b:e2:2d:43:6b:dd:9d:50:d7:64:89:c9:52:20:01:58:53: a5:66:0a:92:c1:8b:b1:f6:3b:80:c8:91:79:17:6d:29:b7:37: 7e:27:4c:fa:ab:ec:e4:35:4c:bf:51:0f:9c:10:84:b9:b8:9c: 03:af:dc:5c:a2:e4:d1:dd:ef:a0:d7:79:22:2e:3a:ee:f4:4b: a1:06:da:8d:ea:47:0d:d9:d5:d0:84:a2:2f:8e:e2:82:0f:cc: 09:60:58:65:be:a4:a9:c9:06:c5:b5:ec:71:76:48:8c:a5:51: 8b:5e:c4:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FR0FuFPN5E9n+AEahU5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5 NDgyY2IwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NmMzI5NzM4YmU4ZWUyY2U3MTNiM2M4NWVkM2Y4YTE5ZjZmOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihmSi1L3AahmRa6whr2AEmu+Wsuy +4ma4i00phTOuNaQXPzHB21mU53Q4S9nXFbRM36TFZL0UcvyTLXnyWQBM1GkVM+a I3Gu0YyBP/4aJYIIybYz1XWGIFIPiqMOjceG6A/EkFXlDZbRxAscI1w+iieABsTQ nRPrzJ6sl/ziOLOe5twKjc6m9k8pdC7nuXwfXkCWp4K4jf/dDkvr9rFskfo6nB0O oAuYTanxcWP7Boj4X/xu239qpp8XGFWBzsi0gOT6iI2UYLRJxgO61JTrzT6Z4Bkx 2Zx8YmDi6egfZlGqKTXMADyLKgXdzAjpwu9cpAsUQ4dezRdKaAoA1rtRNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzPMpc4vo7iznE7PIXtP4oZ9vi4MB8GA1UdIwQY MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt ZTc3MTdiMjg3MDY2LzEvYk04eWx6aS1qdUxPY1RzOGhlMF9paG4yLUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2 LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstr3MA0G CSqGSIb3DQEBCwUAA4IBAQCNhgoFz6ZbMw/CkZu7Z0LVOPR5S01YcdcAbj8rQdAE 9C6kqu2HmjndURczRnN4xnb4NPK3oIVENzr7DfAPQJ9m2E7YIJdwOuAUFqRPxBeE o/2ensxwwTJYng5NXklLuCKulwLULjItPeXfIl5YzV6dOJtH97EAwppIL3HFwzKa fK1QuIJ7jQE1oGAXLJodFDuUe+ItQ2vdnVDXZInJUiABWFOlZgqSwYux9juAyJF5 F20ptzd+J0z6q+zkNUy/UQ+cEIS5uJwDr9xcouTR3e+g13kiLjru9EuhBtqN6kcN 2dXQhKIvjuKCD8wJYFhlvqSpyQbFtexxdkiMpVGLXsQV -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:40 2026 by rpki-client