This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/I-G0evMv-W7tENceyq5-skj-8AE.roa File: I-G0evMv-W7tENceyq5-skj-8AE.roa (raw, json) Hash identifier: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I= Subject key identifier: 23:E1:B4:7A:F3:2F:F9:6E:ED:10:D7:1E:CA:AE:7E:B2:48:FE:F0:01 Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa Certificate serial: 019B77C6CD39DCA900278D840DF3D3F2E733 Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/I-G0evMv-W7tENceyq5-skj-8AE.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202513 IP address blocks: 185.248.78.0/23 maxlen: 23 185.248.78.0/24 maxlen: 24 185.248.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cd:39:dc:a9:00:27:8d:84:0d:f3:d3:f2:e7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c679522eb892589d7364af579a724040e929f0aa Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e1b47af32ff96eed10d71ecaae7eb248fef001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:c8:ba:40:ea:0e:29:72:bb:39:c2:5f:01: 4a:e0:65:09:bb:91:a9:cc:c5:0b:4b:9b:a6:a6:79: 7d:67:81:88:df:a3:e4:b2:fb:f7:a4:21:47:8e:7c: af:22:c3:6a:a8:a0:37:d0:29:da:2c:b3:f1:e7:4c: 21:41:b2:b4:02:ec:57:b8:22:94:93:3a:21:99:79: d2:9c:dc:66:1c:4e:3a:44:1f:2a:31:e7:b8:45:24: 90:0d:47:43:51:94:8b:c0:94:2c:42:f6:62:fd:9a: f1:84:58:35:00:70:d3:60:ea:35:8f:7d:02:85:e3: cc:fb:cf:dc:27:6f:62:58:3b:db:ae:da:24:b7:12: b9:e8:78:70:ba:fe:83:f7:03:7d:dd:fa:5b:59:02: a1:05:84:80:1c:43:09:b6:b2:7d:f3:94:1d:6c:4f: b1:cf:84:b3:46:2f:7a:91:8c:c0:82:3d:d9:dd:17: 78:85:b1:02:b9:20:0a:89:1e:97:a3:b4:67:f4:a3: 98:d4:4e:61:e0:d9:6c:7c:54:9a:e6:1c:02:4a:80: 74:05:69:db:a8:ee:ec:9e:be:6e:46:02:b2:67:7d: 54:86:84:e9:0d:74:6b:92:00:ae:73:c8:88:90:8b: 36:2c:d8:67:fa:33:69:a7:c6:c4:a0:95:37:e6:95: 12:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:B4:7A:F3:2F:F9:6E:ED:10:D7:1E:CA:AE:7E:B2:48:FE:F0:01 X509v3 Authority Key Identifier: keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/I-G0evMv-W7tENceyq5-skj-8AE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.78.0/23 Signature Algorithm: sha256WithRSAEncryption d3:52:31:73:aa:80:00:88:bc:0a:66:43:7f:e8:3d:ad:70:8e: a9:b3:c8:3a:f4:aa:ff:c9:ce:0f:fd:a0:5b:d5:fb:00:06:04: c9:df:1f:7c:a5:48:83:49:15:80:1b:3d:1c:81:e3:32:54:49: 8a:f9:a4:8f:14:87:27:2b:f7:55:0a:07:6a:ab:8a:34:a2:8d: a2:68:b4:0e:1b:7e:05:37:91:4e:a6:85:9c:f1:ff:22:cb:04: dd:e2:c2:ea:b9:11:e0:d3:b9:4e:35:36:60:5d:7b:e4:b9:c9: 8a:f9:5b:ef:42:e5:c1:bc:bd:f1:65:f9:bf:4e:70:b7:a5:a3: e9:45:58:7c:1d:d7:09:d1:b5:1e:b9:2a:20:84:ca:2e:35:44: 96:e9:ae:73:7e:3b:8d:34:fb:f0:1f:16:27:e1:de:2e:c0:db: c2:14:3f:2e:d2:5d:12:64:88:2c:87:34:ed:1b:12:4b:e9:a7: 3f:b5:81:64:0a:b9:1e:28:c9:50:5b:77:8b:48:0e:22:a5:e2: 38:c0:bd:6f:6b:5b:8a:97:dc:1e:d8:a9:78:8e:1a:97:45:1c: 1f:bc:cf:f3:d6:0f:44:96:a5:ed:64:49:2d:b9:49:5b:67:bf: bd:5b:f3:77:c0:09:5f:96:a1:85:bf:09:8a:22:ff:93:81:e9: 6a:34:2c:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs053KkAJ42EDfPT8uczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Nzk1MjJlYjg5MjU4OWQ3MzY0YWY1NzlhNzI0MDQwZTky OWYwYWEwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UxYjQ3YWYzMmZmOTZlZWQxMGQ3MWVjYWFlN2ViMjQ4ZmVmMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4rIukDqDilyuznCXwFK4GUJu5Gp zMULS5umpnl9Z4GI36Pksvv3pCFHjnyvIsNqqKA30CnaLLPx50whQbK0AuxXuCKU kzohmXnSnNxmHE46RB8qMee4RSSQDUdDUZSLwJQsQvZi/ZrxhFg1AHDTYOo1j30C hePM+8/cJ29iWDvbrtoktxK56Hhwuv6D9wN93fpbWQKhBYSAHEMJtrJ985QdbE+x z4SzRi96kYzAgj3Z3Rd4hbECuSAKiR6Xo7Rn9KOY1E5h4NlsfFSa5hwCSoB0BWnb qO7snr5uRgKyZ31UhoTpDXRrkgCuc8iIkIs2LNhn+jNpp8bEoJU35pUSJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPhtHrzL/lu7RDXHsqufrJI/vABMB8GA1UdIwQY MBaAFMZ5Ui64klidc2SvV5pyQEDpKfCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgt ZGMxMGQ1ZDNiZDgwLzEvSS1HMGV2TXYtVzd0RU5jZXlxNS1za2otOEFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80NWM5ODEtMTc4MC00YzY2LTlmOTgtZGMxMGQ1ZDNiZDgw LzEveG5sU0xyaVNXSjF6Wks5WG1uSkFRT2twOEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufhOMA0G CSqGSIb3DQEBCwUAA4IBAQDTUjFzqoAAiLwKZkN/6D2tcI6ps8g69Kr/yc4P/aBb 1fsABgTJ3x98pUiDSRWAGz0cgeMyVEmK+aSPFIcnK/dVCgdqq4o0oo2iaLQOG34F N5FOpoWc8f8iywTd4sLquRHg07lONTZgXXvkucmK+VvvQuXBvL3xZfm/TnC3paPp RVh8HdcJ0bUeuSoghMouNUSW6a5zfjuNNPvwHxYn4d4uwNvCFD8u0l0SZIgshzTt GxJL6ac/tYFkCrkeKMlQW3eLSA4ipeI4wL1va1uKl9we2Kl4jhqXRRwfvM/z1g9E lqXtZEktuUlbZ7+9W/N3wAlflqGFvwmKIv+TgelqNCxP -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:17 2026 by rpki-client