This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/OxD51mZyUSy88WgP3TSafX3fVSM.roa File: OxD51mZyUSy88WgP3TSafX3fVSM.roa (raw, json) Hash identifier: ZUvDT5JmZoKJbZ2aaD6n8DqRqPOQ2yLOsnmhPBma0XE= Subject key identifier: 3B:10:F9:D6:66:72:51:2C:BC:F1:68:0F:DD:34:9A:7D:7D:DF:55:23 Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Certificate serial: 019B78351045DB0AC6F6EDE781393A53EA2C Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/OxD51mZyUSy88WgP3TSafX3fVSM.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15533 IP address blocks: 178.218.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:10:45:db:0a:c6:f6:ed:e7:81:39:3a:53:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b10f9d66672512cbcf1680fdd349a7d7ddf5523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:ba:4a:87:02:a9:85:15:c0:c6:de:a6:22: 4e:19:33:89:51:86:ed:1f:de:f7:96:41:ab:6b:3c: aa:f0:40:5a:6a:aa:fb:75:5f:3c:59:68:69:ba:94: a3:85:75:b4:e2:67:5b:c2:d9:86:e7:a3:bb:08:e7: f4:83:92:6a:df:d4:6f:b7:4a:b7:48:90:d6:cd:a4: 4d:55:a5:66:e9:09:ba:37:02:f7:23:c5:4b:20:46: 9f:a2:1d:b0:72:94:43:a1:3b:52:59:88:ea:5f:e1: 5b:c7:9c:de:5c:46:35:14:2a:63:64:3a:37:e8:34: 6f:8e:13:65:8d:c1:ca:8a:a5:48:0e:8a:fe:1b:4f: 4d:d7:32:59:36:c5:c7:18:b6:6e:3a:f3:d4:57:ca: 62:2b:1f:a3:e9:f9:04:e9:79:97:11:3c:f4:52:03: 4a:4e:b2:bf:1c:fe:32:08:8b:63:5e:59:cb:7f:3a: 34:f0:ec:1f:f1:08:59:45:ee:76:4a:68:41:a6:a8: bb:3a:03:1f:9a:ce:54:82:ae:b6:ac:47:d7:eb:f8: b6:17:00:ff:68:36:67:49:b1:65:47:db:fe:be:9a: f3:b2:c5:10:55:a0:fb:bd:5e:43:2a:0e:95:43:5c: 4e:29:9e:72:5a:6d:47:d0:a1:a0:c8:83:1f:1c:a3: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:10:F9:D6:66:72:51:2C:BC:F1:68:0F:DD:34:9A:7D:7D:DF:55:23 X509v3 Authority Key Identifier: keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/OxD51mZyUSy88WgP3TSafX3fVSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.242.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:1c:9c:24:4d:a7:a6:fe:b1:c8:d8:da:a4:22:a6:3e:4b:6e: 97:f6:d3:cd:42:91:3a:92:01:ea:f1:2f:68:b8:b7:b6:d7:59: 68:2c:58:18:d7:27:64:ab:bc:c1:d1:c3:1d:52:15:f3:f5:78: 2e:fd:f7:8f:7e:e4:c7:5b:ea:b5:46:12:d9:d7:60:fc:f2:4e: 73:77:18:e1:2e:7a:4d:ec:7b:df:1e:9a:fc:02:59:50:96:a3: 09:9f:55:c2:d0:69:92:3d:6c:f7:03:72:b4:0d:74:31:c6:f9: 47:94:02:f5:00:b0:4c:20:2b:44:90:2f:0e:30:8e:e8:bd:ba: a1:fc:7f:e3:31:dc:b7:15:4d:d3:4a:0e:8c:64:91:d6:55:2a: 7f:39:f6:3b:07:67:66:28:4f:e6:4b:f4:07:bd:ad:d9:0b:45: c2:27:76:28:ef:dd:47:af:06:06:e2:0b:a3:58:06:0a:51:71: 76:15:ef:20:66:6e:07:62:cf:6e:8d:3e:69:68:d8:c9:8b:c2: 43:d0:6a:69:61:7b:1e:a9:df:ec:df:5c:bf:1b:bd:1d:1a:8c: b7:82:ef:ee:6e:fd:d5:eb:24:af:dc:c5:e4:62:81:38:aa:a0: e9:5b:a4:97:ab:67:95:aa:9f:53:6d:c3:98:fb:d7:fc:0f:ce: 8c:75:2f:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRBF2wrG9u3ngTk6U+osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj MjNiOTcwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjEwZjlkNjY2NzI1MTJjYmNmMTY4MGZkZDM0OWE3ZDdkZGY1NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nS6SocCqYUVwMbepiJOGTOJUYbt H973lkGrazyq8EBaaqr7dV88WWhpupSjhXW04mdbwtmG56O7COf0g5Jq39Rvt0q3 SJDWzaRNVaVm6Qm6NwL3I8VLIEafoh2wcpRDoTtSWYjqX+Fbx5zeXEY1FCpjZDo3 6DRvjhNljcHKiqVIDor+G09N1zJZNsXHGLZuOvPUV8piKx+j6fkE6XmXETz0UgNK TrK/HP4yCItjXlnLfzo08Owf8QhZRe52SmhBpqi7OgMfms5Ugq62rEfX6/i2FwD/ aDZnSbFlR9v+vprzssUQVaD7vV5DKg6VQ1xOKZ5yWm1H0KGgyIMfHKOOFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsQ+dZmclEsvPFoD900mn1931UjMB8GA1UdIwQY MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It MGYyMmQ4OTY4OWEwLzEvT3hENTFtWnlVU3k4OFdnUDNUU2FmWDNmVlNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBstryMA0G CSqGSIb3DQEBCwUAA4IBAQAfHJwkTaem/rHI2NqkIqY+S26X9tPNQpE6kgHq8S9o uLe211loLFgY1ydkq7zB0cMdUhXz9Xgu/fePfuTHW+q1RhLZ12D88k5zdxjhLnpN 7HvfHpr8AllQlqMJn1XC0GmSPWz3A3K0DXQxxvlHlAL1ALBMICtEkC8OMI7ovbqh /H/jMdy3FU3TSg6MZJHWVSp/OfY7B2dmKE/mS/QHva3ZC0XCJ3Yo791HrwYG4guj WAYKUXF2Fe8gZm4HYs9ujT5paNjJi8JD0GppYXseqd/s31y/G70dGoy3gu/ubv3V 6ySv3MXkYoE4qqDpW6SXq2eVqp9TbcOY+9f8D86MdS+6 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:44 2026 by rpki-client