This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/lM0ykYh8wCH6poD1ByzZO951DOs.roa File: lM0ykYh8wCH6poD1ByzZO951DOs.roa (raw, json) Hash identifier: O0xjxg/OZFV2+IIvgGtT77zr81ND+/n3L2jks1YfEO4= Subject key identifier: 94:CD:32:91:88:7C:C0:21:FA:A6:80:F5:07:2C:D9:3B:DE:75:0C:EB Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Certificate serial: 019B78351118B720A6FE0D2A3B5A439E6D58 Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/lM0ykYh8wCH6poD1ByzZO951DOs.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208507 IP address blocks: 178.218.240.0/23 maxlen: 23 178.218.240.0/24 maxlen: 24 178.218.241.0/24 maxlen: 24 178.218.242.0/23 maxlen: 23 178.218.242.0/24 maxlen: 24 178.218.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:18:b7:20:a6:fe:0d:2a:3b:5a:43:9e:6d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94cd3291887cc021faa680f5072cd93bde750ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:c2:61:21:e2:80:e0:b2:29:ee:17:5d:c9: 3d:ec:ed:ce:96:e3:54:b4:ac:62:57:93:f0:d5:80: db:1e:b8:33:06:ad:7a:09:09:77:e3:3c:fa:48:1d: 88:3b:4b:a5:30:24:35:31:96:50:e2:7c:d9:4a:8d: ee:13:d6:2d:73:e6:7e:af:fb:cd:7b:3b:8b:ba:71: 79:e7:81:d3:29:80:e7:7f:29:70:57:38:25:e7:34: 13:93:02:c5:15:1e:ab:93:49:1f:e8:ff:f6:37:05: 60:a3:01:a3:1d:75:15:35:58:dc:e8:08:7b:e0:6d: 0e:83:75:50:16:92:bd:23:13:25:9f:30:aa:f4:0a: 04:62:be:3b:10:40:3f:87:7e:3f:59:99:eb:bc:98: cb:13:55:2c:8a:ae:bd:d9:93:78:ba:b2:3a:70:6f: 79:6c:33:aa:54:f4:ea:75:da:39:8c:9b:63:ea:0d: 0c:8d:6b:f1:a9:73:aa:a7:5e:e7:56:60:fe:72:28: 04:55:cb:74:d9:de:c4:5c:e8:1c:04:53:2f:60:fc: e9:57:a9:c5:80:b0:b0:f7:e1:bd:a0:f0:98:e7:77: 62:ea:9d:e5:e3:5a:31:72:50:f1:9e:d6:9d:41:af: a7:ad:d3:77:68:7d:84:0d:ff:9e:03:7f:e7:b0:c2: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CD:32:91:88:7C:C0:21:FA:A6:80:F5:07:2C:D9:3B:DE:75:0C:EB X509v3 Authority Key Identifier: keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/lM0ykYh8wCH6poD1ByzZO951DOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.240.0/22 Signature Algorithm: sha256WithRSAEncryption 89:a0:f3:54:36:e4:de:50:55:e1:45:c0:a5:e1:72:9c:8c:74: ff:a5:57:d5:90:37:65:ee:8b:ba:5b:92:dd:30:38:66:05:60: 79:91:06:2d:33:be:05:97:4c:ea:fb:de:2d:d8:60:bc:98:f1: fb:36:65:e6:2d:a8:2f:3e:70:db:f0:b7:63:99:fe:07:40:bd: 8f:ef:a3:3d:fb:8d:a3:c4:b2:1f:be:d8:82:5c:4f:6a:87:5e: c9:48:b1:6f:d8:f0:d0:53:ca:8a:b1:b4:09:78:60:ff:29:f7: 83:ad:28:6e:f3:1e:76:38:15:84:84:16:30:03:59:ee:1a:0b: 84:83:60:7b:c9:cd:4d:f3:10:c1:6b:6a:fa:e4:2b:6b:4d:fd: 77:da:b9:57:b0:e5:7c:3d:52:0b:df:65:0b:e0:6c:30:44:9c: 9a:db:aa:ad:79:20:7c:24:14:32:e1:18:35:d2:aa:34:f3:ca: f0:6a:bd:d2:90:af:90:f0:f4:f0:5b:a7:ea:bd:1e:f5:f8:26: 43:7f:78:6e:30:6f:6a:6c:30:eb:03:c2:15:78:78:7c:50:4c: 28:a5:72:4b:d9:c4:17:23:f0:5b:94:9c:b6:68:1c:31:58:70: df:e9:83:0f:ad:7d:ad:97:5d:10:42:85:e7:5d:53:25:0c:fd: 18:23:02:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NREYtyCm/g0qO1pDnm1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj MjNiOTcwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGNkMzI5MTg4N2NjMDIxZmFhNjgwZjUwNzJjZDkzYmRlNzUwY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dvCYSHigOCyKe4XXck97O3OluNU tKxiV5Pw1YDbHrgzBq16CQl34zz6SB2IO0ulMCQ1MZZQ4nzZSo3uE9Ytc+Z+r/vN ezuLunF554HTKYDnfylwVzgl5zQTkwLFFR6rk0kf6P/2NwVgowGjHXUVNVjc6Ah7 4G0Og3VQFpK9IxMlnzCq9AoEYr47EEA/h34/WZnrvJjLE1Usiq692ZN4urI6cG95 bDOqVPTqddo5jJtj6g0MjWvxqXOqp17nVmD+cigEVct02d7EXOgcBFMvYPzpV6nF gLCw9+G9oPCY53di6p3l41oxclDxntadQa+nrdN3aH2EDf+eA3/nsMLLPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJTNMpGIfMAh+qaA9Qcs2TvedQzrMB8GA1UdIwQY MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It MGYyMmQ4OTY4OWEwLzEvbE0weWtZaDh3Q0g2cG9EMUJ5elpPOTUxRE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCstrwMA0G CSqGSIb3DQEBCwUAA4IBAQCJoPNUNuTeUFXhRcCl4XKcjHT/pVfVkDdl7ou6W5Ld MDhmBWB5kQYtM74Fl0zq+94t2GC8mPH7NmXmLagvPnDb8Ldjmf4HQL2P76M9+42j xLIfvtiCXE9qh17JSLFv2PDQU8qKsbQJeGD/KfeDrShu8x52OBWEhBYwA1nuGguE g2B7yc1N8xDBa2r65CtrTf132rlXsOV8PVIL32UL4GwwRJya26qteSB8JBQy4Rg1 0qo088rwar3SkK+Q8PTwW6fqvR71+CZDf3huMG9qbDDrA8IVeHh8UEwopXJL2cQX I/BblJy2aBwxWHDf6YMPrX2tl10QQoXnXVMlDP0YIwLN -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:19 2026 by rpki-client