This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8guMM5jdW6I2GhaccAeh8CfPtYE.roa File: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (raw, json) Hash identifier: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno= Subject key identifier: F2:0B:8C:33:98:DD:5B:A2:36:1A:16:9C:70:07:A1:F0:27:CF:B5:81 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1610ECA6865EFF1370CAFE141D526A Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8guMM5jdW6I2GhaccAeh8CfPtYE.roa Signing time: Fri 02 Jan 2026 14:21:51 +0000 ROA not before: Fri 02 Jan 2026 14:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 178.239.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:10:ec:a6:86:5e:ff:13:70:ca:fe:14:1d:52:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f20b8c3398dd5ba2361a169c7007a1f027cfb581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:d1:af:20:3e:49:73:89:af:d0:96:b0:58: 02:de:1f:87:dd:25:e0:09:e3:c2:37:8f:21:63:8e: 2e:6c:1c:44:23:82:2e:fc:1b:43:10:f2:fc:42:01: af:c1:c1:51:0a:1e:8f:26:09:7d:c0:17:97:33:d9: 02:ab:f7:07:dd:cb:70:2e:34:f2:be:47:11:68:04: d9:df:40:e9:d7:3a:02:ae:db:67:e8:2f:31:03:6a: 17:29:50:c4:54:48:b0:d5:2d:29:28:98:16:93:b0: 20:68:8c:fa:02:8d:e0:75:d8:60:1f:73:08:ec:df: 27:7d:eb:eb:ca:62:f7:18:b9:5b:32:a6:c5:9a:f4: fa:6c:de:42:c7:d9:c0:65:35:a9:fd:60:d0:bb:19: 6e:81:89:9c:38:68:55:3d:37:9a:97:6d:77:3c:98: e6:28:c7:00:aa:31:10:f2:c8:71:2f:55:65:08:68: d0:5d:0c:3b:b8:78:43:f5:c6:fc:7f:3c:44:69:ce: 73:92:9d:35:cf:17:6c:be:76:b5:9d:96:c4:fb:21: 80:e5:8a:4d:44:4a:45:fa:c4:bd:5d:86:14:e8:dc: 75:b6:67:30:d7:7a:2b:09:ef:cf:e6:61:12:48:0f: b2:69:3b:fe:2a:e6:4f:36:6d:7c:68:a9:0d:55:d5: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:8C:33:98:DD:5B:A2:36:1A:16:9C:70:07:A1:F0:27:CF:B5:81 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8guMM5jdW6I2GhaccAeh8CfPtYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.113.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:2c:b8:28:00:b8:26:a5:d1:ad:9c:b3:e7:72:23:62:49:f7: c0:ba:e0:9a:24:11:b5:60:ea:26:bb:1d:42:14:24:40:59:4b: f8:04:ed:47:ef:6f:cf:71:cc:a1:d5:65:fc:af:c5:b3:d0:a5: 5c:0b:2a:9e:5f:27:85:3c:1f:01:d2:ad:50:a6:27:df:22:df: 8b:5a:56:da:99:3a:0f:e5:55:75:8f:71:10:42:88:7b:be:b8: 5f:97:6a:b3:b9:48:cc:70:2b:1d:8b:aa:c5:a3:3e:0e:6f:46: 06:f1:79:06:05:b4:7d:22:6a:e0:0f:b1:ec:93:34:13:59:57: ae:36:83:50:33:15:45:90:21:83:59:66:c8:df:12:9e:62:fe: e3:a9:15:6f:4a:9b:07:2b:21:b0:ab:84:a4:2b:35:94:a9:e1: 33:7e:d0:e1:5c:69:a5:63:b2:0a:0e:5e:6d:53:fe:c0:ee:b9: 5b:8c:e2:9c:71:41:34:b0:40:90:a1:45:17:62:f9:e3:f4:1a: df:cd:13:4c:19:b1:66:7b:12:2f:47:64:9a:6e:ee:5c:54:b4: d2:23:64:34:f7:dd:7a:8d:ac:7f:d1:f2:11:00:53:f8:d9:b6: fe:82:ec:85:ee:88:59:4b:88:18:79:01:c6:68:4d:67:37:da: df:9e:f1:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FhDspoZe/xNwyv4UHVJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjBiOGMzMzk4ZGQ1YmEyMzYxYTE2OWM3MDA3YTFmMDI3Y2ZiNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA283RryA+SXOJr9CWsFgC3h+H3SXg CePCN48hY44ubBxEI4Iu/BtDEPL8QgGvwcFRCh6PJgl9wBeXM9kCq/cH3ctwLjTy vkcRaATZ30Dp1zoCrttn6C8xA2oXKVDEVEiw1S0pKJgWk7AgaIz6Ao3gddhgH3MI 7N8nfevrymL3GLlbMqbFmvT6bN5Cx9nAZTWp/WDQuxlugYmcOGhVPTeal213PJjm KMcAqjEQ8shxL1VlCGjQXQw7uHhD9cb8fzxEac5zkp01zxdsvna1nZbE+yGA5YpN REpF+sS9XYYU6Nx1tmcw13orCe/P5mESSA+yaTv+KuZPNm18aKkNVdVnxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPILjDOY3VuiNhoWnHAHofAnz7WBMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvOGd1TU01amRXNkkyR2hhY2NBZWg4Q2ZQdFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu9xMA0G CSqGSIb3DQEBCwUAA4IBAQA7LLgoALgmpdGtnLPnciNiSffAuuCaJBG1YOomux1C FCRAWUv4BO1H72/Pccyh1WX8r8Wz0KVcCyqeXyeFPB8B0q1QpiffIt+LWlbamToP 5VV1j3EQQoh7vrhfl2qzuUjMcCsdi6rFoz4Ob0YG8XkGBbR9ImrgD7HskzQTWVeu NoNQMxVFkCGDWWbI3xKeYv7jqRVvSpsHKyGwq4SkKzWUqeEzftDhXGmlY7IKDl5t U/7A7rlbjOKccUE0sECQoUUXYvnj9BrfzRNMGbFmexIvR2Sabu5cVLTSI2Q09916 jax/0fIRAFP42bb+guyF7ohZS4gYeQHGaE1nN9rfnvEB -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client