This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fVCgve75g5R98_-xURrB2xygaQo.roa File: fVCgve75g5R98_-xURrB2xygaQo.roa (raw, json) Hash identifier: 52RGA6SelKNk+dolsvrzXHbR/GGI/H7RTi0a7BsEzdA= Subject key identifier: 7D:50:A0:BD:EE:F9:83:94:7D:F3:FF:B1:51:1A:C1:DB:1C:A0:69:0A Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160327B6E69DF7FADC562C9411D921 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fVCgve75g5R98_-xURrB2xygaQo.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 178.239.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:03:27:b6:e6:9d:f7:fa:dc:56:2c:94:11:d9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d50a0bdeef983947df3ffb1511ac1db1ca0690a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:4b:d8:ee:11:ee:2b:0f:95:74:14:00:b9: a7:93:fe:a0:f4:e2:69:b4:09:b7:97:60:c6:41:e7: 4b:79:9d:62:9d:3b:e7:d7:29:91:0f:69:77:ed:0a: 49:02:b6:4c:dc:79:a0:b6:67:f4:a1:ce:7c:dc:6f: 0d:d4:77:c7:fa:32:47:31:2b:87:2d:8e:35:5f:e3: e1:f4:6f:1f:92:4a:c7:51:85:79:7c:1b:94:82:b6: 87:8a:bd:e3:63:67:a2:27:9f:5c:eb:ce:c9:ce:5e: ee:00:a6:92:d0:b5:2d:bc:4a:5a:f5:96:2c:01:dd: c8:70:2e:f6:75:86:1d:b9:ec:19:0c:80:cd:0f:2b: 32:f2:93:db:95:ef:71:43:0c:bc:64:44:35:58:78: 40:24:62:f2:b6:81:c2:84:9e:c9:ca:a9:8b:68:c5: b1:04:f2:3d:17:5d:2d:07:99:f7:da:28:69:d8:3f: 4e:55:a6:0b:a4:c9:6b:b6:4d:f2:b1:40:e8:f8:1c: 3a:d1:bb:4e:bf:8f:08:6c:c6:7b:ae:7a:3e:63:e9: 17:9a:3f:9c:e7:b2:53:48:06:c4:a3:08:f1:ef:c2: 1e:03:bb:a3:35:04:ff:e5:71:48:74:57:d8:75:c8: 1d:17:4a:56:c9:46:02:ee:49:73:90:9e:72:82:f0: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:A0:BD:EE:F9:83:94:7D:F3:FF:B1:51:1A:C1:DB:1C:A0:69:0A X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/fVCgve75g5R98_-xURrB2xygaQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.112.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:51:71:e3:fb:b0:8c:64:76:27:6f:3c:73:1a:15:37:e8:9d: 60:32:af:f0:a3:57:4d:00:3b:3d:a1:63:1b:92:65:23:99:9a: fa:cf:85:61:42:ef:08:14:9b:be:1f:4e:22:31:3d:0f:cd:6f: d3:2e:1e:76:a0:90:3d:ae:a3:19:71:da:30:91:f2:18:28:43: c9:68:b9:f3:66:7d:a3:11:75:f1:7e:bf:4b:d2:07:01:52:20: 18:cd:47:ca:fb:c3:9a:08:ac:20:0a:f3:32:8f:05:fb:5b:18: cc:64:f0:6a:7d:92:59:d2:6a:8d:b2:29:21:cb:33:6b:9d:b1: 1f:11:a8:14:67:ad:5b:ef:b8:30:95:c7:ca:49:ec:d8:eb:62: 55:c8:43:07:7a:51:78:9f:ec:39:d3:49:35:2a:81:67:d5:34: 44:f4:cf:d4:e3:a7:42:b9:f6:43:4b:47:7a:a2:9d:57:03:a0: 94:ff:b8:30:9f:57:4d:d6:3a:b3:d4:cf:d6:de:fe:84:89:d3: 7f:5a:d6:8a:44:c6:b8:dd:74:ad:10:53:6c:dd:e5:75:88:5b: af:b4:8e:64:6e:f5:7a:f9:16:86:75:e9:48:95:1c:5f:ba:a4: 8e:d8:8b:fe:49:67:dd:c2:05:f3:07:2f:1b:c4:05:5f:a7:ba: 97:57:f0:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgMntuad9/rcViyUEdkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDUwYTBiZGVlZjk4Mzk0N2RmM2ZmYjE1MTFhYzFkYjFjYTA2OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWBL2O4R7isPlXQUALmnk/6g9OJp tAm3l2DGQedLeZ1inTvn1ymRD2l37QpJArZM3Hmgtmf0oc583G8N1HfH+jJHMSuH LY41X+Ph9G8fkkrHUYV5fBuUgraHir3jY2eiJ59c687Jzl7uAKaS0LUtvEpa9ZYs Ad3IcC72dYYduewZDIDNDysy8pPble9xQwy8ZEQ1WHhAJGLytoHChJ7JyqmLaMWx BPI9F10tB5n32ihp2D9OVaYLpMlrtk3ysUDo+Bw60btOv48IbMZ7rno+Y+kXmj+c 57JTSAbEowjx78IeA7ujNQT/5XFIdFfYdcgdF0pWyUYC7klzkJ5ygvAqhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1QoL3u+YOUffP/sVEawdscoGkKMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvZlZDZ3ZlNzVnNVI5OF8teFVSckIyeHlnYVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu9wMA0G CSqGSIb3DQEBCwUAA4IBAQCdUXHj+7CMZHYnbzxzGhU36J1gMq/wo1dNADs9oWMb kmUjmZr6z4VhQu8IFJu+H04iMT0PzW/TLh52oJA9rqMZcdowkfIYKEPJaLnzZn2j EXXxfr9L0gcBUiAYzUfK+8OaCKwgCvMyjwX7WxjMZPBqfZJZ0mqNsikhyzNrnbEf EagUZ61b77gwlcfKSezY62JVyEMHelF4n+w500k1KoFn1TRE9M/U46dCufZDS0d6 op1XA6CU/7gwn1dN1jqz1M/W3v6EidN/WtaKRMa43XStEFNs3eV1iFuvtI5kbvV6 +RaGdelIlRxfuqSO2Iv+SWfdwgXzBy8bxAVfp7qXV/Cl -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:24 2026 by rpki-client