This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/g94vFJQj_wihdo8vb0U6HQIQH3Q.roa File: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (raw, json) Hash identifier: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y= Subject key identifier: 83:DE:2F:14:94:23:FF:08:A1:76:8F:2F:6F:45:3A:1D:02:10:1F:74 Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0 Certificate serial: 019B7C7FA9B30CB6CDBC20760FF51B4D6004 Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/g94vFJQj_wihdo8vb0U6HQIQH3Q.roa Signing time: Fri 02 Jan 2026 02:18:19 +0000 ROA not before: Fri 02 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56504 IP address blocks: 178.237.57.0/24 maxlen: 24 178.237.58.0/24 maxlen: 24 2a0d:5540:1::/48 maxlen: 48 2a0d:5540:2::/48 maxlen: 48 2a0d:5540:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a9:b3:0c:b6:cd:bc:20:76:0f:f5:1b:4d:60:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0 Validity Not Before: Jan 2 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83de2f149423ff08a1768f2f6f453a1d02101f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:ec:ca:8e:60:3c:22:be:3b:5e:ba:39:77: 0d:f0:65:ac:cc:14:4e:bd:4d:31:0c:9c:48:ab:90: 4f:74:18:c5:95:e2:31:4c:95:82:26:7c:9c:1e:80: 10:f3:7f:d0:c4:70:ee:2c:55:d7:61:34:fa:4f:c8: 9d:ed:36:f1:28:ed:98:8d:61:41:c3:a9:ac:b3:ff: 2b:ab:55:a9:52:91:45:ec:58:09:4a:ba:e0:4e:dd: 08:c2:08:40:5d:40:46:23:42:99:9b:ce:8c:31:38: 52:1e:61:3b:2a:ec:ed:2b:09:e4:d5:cb:f0:84:c1: b1:13:75:f7:9e:1a:22:bf:df:1e:8e:06:88:6e:60: 05:96:bb:72:f9:4c:32:44:c8:b2:83:c2:62:d3:6a: 70:af:c0:59:1b:6d:e6:c1:34:c6:8c:b0:2a:d6:bb: 30:1c:b9:8c:5e:11:fc:f5:c1:f2:0d:b8:ce:db:b9: d8:f3:b7:be:43:dd:09:e3:2a:51:19:ac:56:97:7f: 9e:d9:01:9b:d4:ef:60:fe:12:9b:87:05:50:f6:01: 25:15:41:50:ab:59:98:13:43:19:a7:37:72:8d:1e: a0:24:5c:5d:6c:58:50:5c:e2:04:c9:f9:38:b1:1f: 98:ea:c3:df:f2:8d:03:58:93:18:6c:34:7a:9a:6a: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DE:2F:14:94:23:FF:08:A1:76:8F:2F:6F:45:3A:1D:02:10:1F:74 X509v3 Authority Key Identifier: keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/g94vFJQj_wihdo8vb0U6HQIQH3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.57.0-178.237.58.255 IPv6: 2a0d:5540:1::-2a0d:5540:2:ffff:ffff:ffff:ffff:ffff 2a0d:5540:a::/48 Signature Algorithm: sha256WithRSAEncryption 2a:94:75:ca:63:fc:39:89:e6:7f:7b:06:9d:7c:e5:1f:cd:46: 92:97:89:d0:aa:01:1e:b2:1c:54:d3:5b:51:16:b0:8c:35:a4: 42:21:11:ee:08:33:99:07:af:b3:dd:a2:b3:d1:a5:92:06:f6: f6:66:2c:88:1d:d1:e3:08:ad:34:a6:ab:e6:a4:0e:f4:5a:16: cb:98:38:b6:e9:e6:1d:b0:1d:22:f9:33:63:0e:a7:e2:bb:23: db:eb:23:01:3e:38:e1:e3:ce:c7:df:4e:4f:d2:ac:a5:65:42: 7f:e2:c8:09:d8:37:98:77:a0:23:6a:5b:7b:18:aa:78:c2:42: 9f:57:ed:49:ac:78:9a:9a:18:c8:22:3b:cb:6b:55:19:81:cf: eb:ad:64:35:21:01:6b:db:d7:4b:b0:66:78:59:91:dd:af:ca: e9:f7:cd:a1:80:9f:aa:2c:cd:12:82:74:45:cf:ad:2f:ec:68: 77:6e:83:ec:8d:63:e1:f9:ef:11:58:55:99:41:5a:db:33:47: 9a:c5:ee:d4:da:c9:f2:6d:95:7e:c4:b7:87:9c:23:4b:5e:74: 61:b6:d4:dc:1a:66:05:cb:e9:d2:22:de:9e:51:5b:dd:b7:db: 6c:f7:c5:88:24:b8:66:a2:37:65:37:1f:ff:ca:55:e5:8c:75: 51:0d:9f:52 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt8f6mzDLbNvCB2D/UbTWAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj OTJiYTAwHhcNMjYwMTAyMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RlMmYxNDk0MjNmZjA4YTE3NjhmMmY2ZjQ1M2ExZDAyMTAxZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvXsyo5gPCK+O166OXcN8GWszBRO vU0xDJxIq5BPdBjFleIxTJWCJnycHoAQ83/QxHDuLFXXYTT6T8id7TbxKO2YjWFB w6mss/8rq1WpUpFF7FgJSrrgTt0IwghAXUBGI0KZm86MMThSHmE7KuztKwnk1cvw hMGxE3X3nhoiv98ejgaIbmAFlrty+UwyRMiyg8Ji02pwr8BZG23mwTTGjLAq1rsw HLmMXhH89cHyDbjO27nY87e+Q90J4ypRGaxWl3+e2QGb1O9g/hKbhwVQ9gElFUFQ q1mYE0MZpzdyjR6gJFxdbFhQXOIEyfk4sR+Y6sPf8o0DWJMYbDR6mmrvVwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFIPeLxSUI/8IoXaPL29FOh0CEB90MB8GA1UdIwQY MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt ZjY5NjIyNDI1NjUxLzEvZzk0dkZKUWpfd2loZG84dmIwVTZIUUlRSDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAUBAIAATAOMAwDBACy7TkD BACy7TowIwQCAAIwHTASAwcAKg1VQAABAwcAKg1VQAACAwcAKg1VQAAKMA0GCSqG SIb3DQEBCwUAA4IBAQAqlHXKY/w5ieZ/ewadfOUfzUaSl4nQqgEeshxU01tRFrCM NaRCIRHuCDOZB6+z3aKz0aWSBvb2ZiyIHdHjCK00pqvmpA70WhbLmDi26eYdsB0i +TNjDqfiuyPb6yMBPjjh487H305P0qylZUJ/4sgJ2DeYd6Ajalt7GKp4wkKfV+1J rHiamhjIIjvLa1UZgc/rrWQ1IQFr29dLsGZ4WZHdr8rp982hgJ+qLM0SgnRFz60v 7Gh3boPsjWPh+e8RWFWZQVrbM0eaxe7U2snybZV+xLeHnCNLXnRhttTcGmYFy+nS It6eUVvdt9ts98WIJLhmojdlNx//ylXljHVRDZ9S -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:50 2026 by rpki-client