This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g82iO53YfmfKCpEVphAcRG_ucwA.roa File: g82iO53YfmfKCpEVphAcRG_ucwA.roa (raw, json) Hash identifier: tr9qjR3yyHOJSJTZqxg1D1v8BUKC1U11gP0PJJA+kAo= Subject key identifier: 83:CD:A2:3B:9D:D8:7E:67:CA:0A:91:15:A6:10:1C:44:6F:EE:73:00 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA77BD4AD3CD5FA1B926AFBCE4CF2A3 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g82iO53YfmfKCpEVphAcRG_ucwA.roa Signing time: Fri 02 Jan 2026 12:21:04 +0000 ROA not before: Fri 02 Jan 2026 12:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48877 IP address blocks: 178.34.84.0/24 maxlen: 24 178.34.85.0/24 maxlen: 24 178.34.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:7b:d4:ad:3c:d5:fa:1b:92:6a:fb:ce:4c:f2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83cda23b9dd87e67ca0a9115a6101c446fee7300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:9c:07:bb:c3:38:7c:76:60:ef:49:38:73: 5f:de:47:8e:58:22:ba:34:2a:39:5d:60:ff:c7:7a: 11:d9:11:ee:b2:6c:1f:4e:7a:d2:98:c5:ab:61:85: 4c:49:3f:b9:ab:12:8c:c2:fd:7f:f2:74:8b:8d:c8: 28:f9:f6:cc:11:88:c4:a4:af:e2:1c:f0:98:aa:2f: a6:0b:be:b8:93:05:98:e3:fb:4b:28:c4:e8:6e:17: a1:a4:45:43:50:da:f3:59:5a:e5:f8:38:d2:7b:58: 51:ed:b6:0e:00:77:8c:40:48:48:a1:84:1a:40:10: 9f:0e:5d:e7:94:7b:97:fa:8c:9b:51:a9:51:9b:89: 15:8c:a4:26:14:d7:94:82:54:59:9c:7e:0f:d7:5f: e4:8b:5a:9f:09:62:e0:63:88:53:5b:20:5d:9c:83: c0:d2:e9:12:ce:d1:39:d0:bd:d5:d1:77:b0:74:b5: c6:08:ac:32:5e:b7:5b:0c:23:b2:22:f7:6e:8d:53: 8a:6b:67:fa:45:d7:25:b9:f4:b4:7b:94:ec:e5:e6: b4:9c:42:2c:e7:3e:83:11:d4:11:0c:6f:e0:c3:48: ff:5d:c4:68:a8:44:d4:93:69:dd:02:ec:37:6f:b3: 53:c3:1b:23:9e:cb:b7:f4:e3:d8:81:9d:2a:67:43: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CD:A2:3B:9D:D8:7E:67:CA:0A:91:15:A6:10:1C:44:6F:EE:73:00 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/g82iO53YfmfKCpEVphAcRG_ucwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.34.84.0-178.34.86.255 Signature Algorithm: sha256WithRSAEncryption 21:e0:1f:8c:d6:4b:3c:d1:aa:13:98:7b:09:7d:2c:c4:c9:41: ca:5e:bb:7b:b5:cb:9a:51:91:9f:d4:87:86:3b:23:28:58:f9: 3b:63:5e:8d:ca:bf:2a:3b:99:0f:9a:ab:9e:2d:0b:96:fb:58: 0f:67:45:a4:a3:d7:a8:5b:f9:37:43:07:cd:60:14:81:c5:73: 28:a7:79:c2:c8:7f:e6:64:6f:b7:35:ce:94:50:38:42:44:d5: 18:72:da:c8:aa:5a:4c:1d:eb:41:0d:6f:13:a6:ca:43:5c:91: 42:f5:0a:4e:3f:18:7d:3e:62:ce:59:82:78:3f:12:6f:2b:66: 73:55:21:0e:5f:cd:0b:d5:b1:90:39:e3:df:d4:2d:3b:a8:9d: 0e:aa:f9:39:0d:0a:0e:56:aa:4d:24:72:3e:95:19:e5:6b:18: 07:5c:90:7f:ce:c0:d0:2d:1b:4c:2d:f7:23:96:55:6f:f4:d1: 00:d7:bb:63:ea:a7:49:cd:72:65:c8:08:7e:b0:bb:bd:a1:c1: 0d:ec:3f:3f:ca:67:b4:77:f1:f4:ef:05:2a:ff:1f:38:c4:9f: 36:90:42:61:79:b4:9a:66:0a:2c:b6:91:24:7e:9f:33:98:90: 5c:2e:39:e9:5a:c1:8c:ce:97:a6:25:d4:82:08:3d:4e:3a:2c: 39:83:b4:f9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+p3vUrTzV+huSavvOTPKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2NkYTIzYjlkZDg3ZTY3Y2EwYTkxMTVhNjEwMWM0NDZmZWU3MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXScB7vDOHx2YO9JOHNf3keOWCK6 NCo5XWD/x3oR2RHusmwfTnrSmMWrYYVMST+5qxKMwv1/8nSLjcgo+fbMEYjEpK/i HPCYqi+mC764kwWY4/tLKMTobhehpEVDUNrzWVrl+DjSe1hR7bYOAHeMQEhIoYQa QBCfDl3nlHuX+oybUalRm4kVjKQmFNeUglRZnH4P11/ki1qfCWLgY4hTWyBdnIPA 0ukSztE50L3V0XewdLXGCKwyXrdbDCOyIvdujVOKa2f6RdclufS0e5Ts5ea0nEIs 5z6DEdQRDG/gw0j/XcRoqETUk2ndAuw3b7NTwxsjnsu39OPYgZ0qZ0N+5QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIPNojud2H5nygqRFaYQHERv7nMAMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZzgyaU81M1lmbWZLQ3BFVnBoQWNSR191Y3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKyIlQD BACyIlYwDQYJKoZIhvcNAQELBQADggEBACHgH4zWSzzRqhOYewl9LMTJQcpeu3u1 y5pRkZ/Uh4Y7IyhY+TtjXo3Kvyo7mQ+aq54tC5b7WA9nRaSj16hb+TdDB81gFIHF cyinecLIf+Zkb7c1zpRQOEJE1Rhy2siqWkwd60ENbxOmykNckUL1Ck4/GH0+Ys5Z gng/Em8rZnNVIQ5fzQvVsZA549/ULTuonQ6q+TkNCg5Wqk0kcj6VGeVrGAdckH/O wNAtG0wt9yOWVW/00QDXu2Pqp0nNcmXICH6wu72hwQ3sPz/KZ7R38fTvBSr/HzjE nzaQQmF5tJpmCiy2kSR+nzOYkFwuOelawYzOl6Yl1IIIPU46LDmDtPk= -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:08 2026 by rpki-client