This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/i_jDxQlns2GJJCWhsafnRSJG5lY.roa File: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (raw, json) Hash identifier: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw= Subject key identifier: 8B:F8:C3:C5:09:67:B3:61:89:24:25:A1:B1:A7:E7:45:22:46:E6:56 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160522591D87E92027FB9B0974B6FE Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/i_jDxQlns2GJJCWhsafnRSJG5lY.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44213 IP address blocks: 178.239.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:05:22:59:1d:87:e9:20:27:fb:9b:09:74:b6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bf8c3c50967b361892425a1b1a7e7452246e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:20:cd:ca:0c:77:a6:71:c9:bf:57:1a:2c: 88:e5:d0:f3:be:c8:b5:95:ec:7c:a7:79:8d:b8:be: 3d:0f:aa:dd:4c:ef:39:6a:4d:06:9d:a0:f7:a6:3a: 24:36:ab:ed:0e:5c:ff:a2:18:94:13:9b:ac:61:14: a2:26:80:00:ac:17:ee:08:3c:29:ac:8e:56:f3:23: 85:79:8b:ba:33:c5:6c:dc:b7:ea:c1:25:e1:ec:00: 71:7d:58:8c:40:84:28:fe:30:02:08:09:e8:ff:41: 0a:3e:e3:84:67:e3:63:b2:7c:7c:af:eb:4c:c7:ae: 8d:77:f2:c0:cf:d0:b5:b3:28:37:5d:ff:74:94:49: b3:db:fc:a8:19:65:6f:70:c9:96:65:d1:52:30:83: 9a:cb:33:f2:b3:9b:41:44:a5:cb:d5:c8:7d:66:7d: aa:66:0a:cd:46:0e:b3:8e:b6:f6:b2:4f:4d:7f:d2: bd:b8:c9:fc:06:e5:b3:c4:d6:e1:f9:e3:62:ea:ec: 36:4b:6b:d6:89:13:a2:d1:fc:8d:29:7f:8c:06:99: be:3b:c4:ba:92:4e:1d:42:59:1e:0b:5e:8e:2e:1a: 3a:4e:79:65:f4:7f:13:93:f5:09:57:be:57:57:35: a4:27:8f:2f:14:4b:fb:3a:6a:d5:f6:97:67:b7:68: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F8:C3:C5:09:67:B3:61:89:24:25:A1:B1:A7:E7:45:22:46:E6:56 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/i_jDxQlns2GJJCWhsafnRSJG5lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.116.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7e:29:fe:80:94:c6:f7:84:ff:23:f7:73:cd:86:4c:4f:e1: 24:a6:58:50:2c:ea:e4:70:25:dc:82:18:02:27:4a:1f:a5:0c: dc:36:7f:74:ad:3f:55:6a:bc:e9:f4:61:f5:5f:d6:75:6d:2f: b1:32:43:c9:f0:ca:7b:66:2f:91:26:eb:13:e6:b7:49:92:ea: 96:61:2f:b9:66:5f:41:cc:e4:77:42:16:50:58:02:66:33:ff: 51:6b:81:99:79:50:1a:77:50:d5:e9:b4:ca:29:f3:7e:65:f4: e2:75:97:56:7d:df:d9:b2:0f:fc:f3:0b:00:ae:33:9d:4a:df: 89:d0:73:24:49:ba:88:7f:dc:64:ab:1a:6f:6f:e6:34:a2:3f: 9c:95:cc:09:be:59:3e:69:20:4a:90:d0:4a:d2:1e:01:5e:7e: e5:1d:65:79:30:29:3e:c9:c8:2a:17:fa:15:fc:45:52:17:68: 09:2a:06:a8:0d:58:6c:bf:de:e3:ba:c4:6e:4e:1a:d6:af:16: 43:4d:23:8a:50:33:50:ad:9c:d6:fd:46:25:9c:7f:8f:81:7b: f6:ca:5f:89:84:1f:d0:46:22:cc:2b:f4:cb:a5:eb:7f:db:a2: 0a:91:76:aa:00:81:e8:77:be:3c:ad:c2:08:c1:17:7a:65:01: 31:b3:c8:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FgUiWR2H6SAn+5sJdLb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmY4YzNjNTA5NjdiMzYxODkyNDI1YTFiMWE3ZTc0NTIyNDZlNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uogzcoMd6Zxyb9XGiyI5dDzvsi1 lex8p3mNuL49D6rdTO85ak0GnaD3pjokNqvtDlz/ohiUE5usYRSiJoAArBfuCDwp rI5W8yOFeYu6M8Vs3LfqwSXh7ABxfViMQIQo/jACCAno/0EKPuOEZ+Njsnx8r+tM x66Nd/LAz9C1syg3Xf90lEmz2/yoGWVvcMmWZdFSMIOayzPys5tBRKXL1ch9Zn2q ZgrNRg6zjrb2sk9Nf9K9uMn8BuWzxNbh+eNi6uw2S2vWiROi0fyNKX+MBpm+O8S6 kk4dQlkeC16OLho6Tnll9H8Tk/UJV75XVzWkJ48vFEv7OmrV9pdnt2g9ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIv4w8UJZ7NhiSQlobGn50UiRuZWMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvaV9qRHhRbG5zMkdKSkNXaHNhZm5SU0pHNWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu90MA0G CSqGSIb3DQEBCwUAA4IBAQBtfin+gJTG94T/I/dzzYZMT+EkplhQLOrkcCXcghgC J0ofpQzcNn90rT9Varzp9GH1X9Z1bS+xMkPJ8Mp7Zi+RJusT5rdJkuqWYS+5Zl9B zOR3QhZQWAJmM/9Ra4GZeVAad1DV6bTKKfN+ZfTidZdWfd/Zsg/88wsArjOdSt+J 0HMkSbqIf9xkqxpvb+Y0oj+clcwJvlk+aSBKkNBK0h4BXn7lHWV5MCk+ycgqF/oV /EVSF2gJKgaoDVhsv97jusRuThrWrxZDTSOKUDNQrZzW/UYlnH+PgXv2yl+JhB/Q RiLMK/TLpet/26IKkXaqAIHod748rcIIwRd6ZQExs8ge -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:53 2026 by rpki-client