This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0df0MfwwwLUexOTwxBqkvWX8_cM.roa File: 0df0MfwwwLUexOTwxBqkvWX8_cM.roa (raw, json) Hash identifier: NapVlKmSaeNDQ+JPEfNvdfQSy2sgMOZV85rPIT9DH0c= Subject key identifier: D1:D7:F4:31:FC:30:C0:B5:1E:C4:E4:F0:C4:1A:A4:BD:65:FC:FD:C3 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B812A95686739D30AD5B823F6238 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0df0MfwwwLUexOTwxBqkvWX8_cM.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30475 IP address blocks: 178.218.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b8:12:a9:56:86:73:9d:30:ad:5b:82:3f:62:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d7f431fc30c0b51ec4e4f0c41aa4bd65fcfdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:dd:70:cc:90:bb:40:2f:f5:9c:0a:16:cc: 0f:a3:a8:e8:c4:20:03:f6:7f:10:c5:54:44:39:ed: be:17:de:e1:18:f4:6d:5f:aa:d3:fc:94:ec:6c:8b: eb:1a:44:96:60:3d:a1:e6:f9:99:ad:b8:e1:fa:9c: d2:64:17:44:8b:47:20:5c:3e:6e:ca:e9:c8:bf:da: 46:a6:af:46:fc:25:14:8f:f1:4a:19:95:ae:04:30: 2b:8b:df:51:1b:8f:42:01:dc:17:ae:2c:34:ca:61: 1a:32:7b:01:16:ee:56:f9:74:df:94:6d:74:47:79: a4:e2:f3:2c:68:81:00:25:69:fe:2a:c8:b9:05:17: 4d:72:fe:51:3d:b3:80:61:e7:fb:67:03:f9:f8:79: ca:5e:1a:4f:50:99:8c:ed:95:f7:02:69:8d:3c:6d: 74:3c:9d:da:3a:eb:5e:51:8f:ee:8c:f6:2a:9d:e7: 10:8c:72:da:bb:0b:7b:63:3d:12:27:61:60:46:8e: e4:cc:0d:05:e7:b1:84:85:e5:01:6e:27:84:f1:62: 8c:cc:27:27:e0:15:73:43:01:53:1e:9a:3d:ae:e7: ee:d4:0e:85:64:61:1d:5a:aa:c0:81:da:b7:6d:25: 7c:37:43:1b:cf:e3:02:1c:16:54:31:f9:5b:bc:64: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D7:F4:31:FC:30:C0:B5:1E:C4:E4:F0:C4:1A:A4:BD:65:FC:FD:C3 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0df0MfwwwLUexOTwxBqkvWX8_cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.146.0/24 Signature Algorithm: sha256WithRSAEncryption af:17:35:df:44:1a:bc:fc:8d:13:3a:88:36:56:0e:d0:3b:42: f1:2f:3a:93:64:57:92:81:50:ae:91:7f:df:68:65:0f:96:77: d4:e2:e3:28:87:21:02:05:9d:cf:27:db:a0:66:d9:c5:9c:dd: af:ba:62:ee:24:bf:7e:a6:2d:03:05:2d:39:19:3b:94:ee:73: 83:19:d6:42:57:3b:25:92:99:ef:18:a2:0c:4b:f9:99:de:7e: a6:2f:ba:00:2b:60:48:46:b2:c3:69:e8:b8:1e:1e:39:45:1c: 27:c4:da:80:80:ff:bc:9b:f9:f1:b7:68:52:4f:97:f2:ad:bc: 2c:02:b2:3a:47:97:8f:95:80:2f:d1:f8:0f:90:99:e2:67:ba: c0:23:d6:4c:eb:97:7e:7c:95:34:29:a1:14:6f:95:ea:d3:ba: 8a:9d:7b:a9:5e:37:51:31:36:c6:05:f7:05:71:bd:7c:24:73: 2c:88:dc:5f:5f:17:37:57:74:09:43:8c:1c:71:a6:ea:f5:ca: 4b:f6:4d:59:d4:63:bb:e9:47:af:1f:08:5f:85:4f:08:9c:e6: fe:7c:3a:37:21:37:07:26:d9:82:75:c8:b7:f1:f1:40:8c:5f: f3:20:a6:76:7a:e4:36:70:f6:22:5a:56:b9:84:63:89:e0:4f: 62:09:05:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grgSqVaGc50wrVuCP2I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQ3ZjQzMWZjMzBjMGI1MWVjNGU0ZjBjNDFhYTRiZDY1ZmNmZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl3dcMyQu0Av9ZwKFswPo6joxCAD 9n8QxVREOe2+F97hGPRtX6rT/JTsbIvrGkSWYD2h5vmZrbjh+pzSZBdEi0cgXD5u yunIv9pGpq9G/CUUj/FKGZWuBDAri99RG49CAdwXriw0ymEaMnsBFu5W+XTflG10 R3mk4vMsaIEAJWn+Ksi5BRdNcv5RPbOAYef7ZwP5+HnKXhpPUJmM7ZX3AmmNPG10 PJ3aOuteUY/ujPYqnecQjHLauwt7Yz0SJ2FgRo7kzA0F57GEheUBbieE8WKMzCcn 4BVzQwFTHpo9rufu1A6FZGEdWqrAgdq3bSV8N0Mbz+MCHBZUMflbvGS7zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHX9DH8MMC1HsTk8MQapL1l/P3DMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvMGRmME1md3d3TFVleE9Ud3hCcWt2V1g4X2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstqSMA0G CSqGSIb3DQEBCwUAA4IBAQCvFzXfRBq8/I0TOog2Vg7QO0LxLzqTZFeSgVCukX/f aGUPlnfU4uMohyECBZ3PJ9ugZtnFnN2vumLuJL9+pi0DBS05GTuU7nODGdZCVzsl kpnvGKIMS/mZ3n6mL7oAK2BIRrLDaei4Hh45RRwnxNqAgP+8m/nxt2hST5fyrbws ArI6R5ePlYAv0fgPkJniZ7rAI9ZM65d+fJU0KaEUb5Xq07qKnXupXjdRMTbGBfcF cb18JHMsiNxfXxc3V3QJQ4wccabq9cpL9k1Z1GO76UevHwhfhU8InOb+fDo3ITcH JtmCdci38fFAjF/zIKZ2euQ2cPYiWla5hGOJ4E9iCQXS -----END CERTIFICATE-----Generated at Sun Jan 11 12:33:46 2026 by rpki-client