This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa File: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (raw, json) Hash identifier: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA= Subject key identifier: 2B:80:A1:50:A0:C6:7D:2D:58:C8:C5:3C:43:5E:8C:10:72:0E:EE:FD Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Certificate serial: 019B7E37DD532BC0713B74243489ABE32203 Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 178.20.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dd:53:2b:c0:71:3b:74:24:34:89:ab:e3:22:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b80a150a0c67d2d58c8c53c435e8c10720eeefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:f6:13:a4:94:e5:53:d9:b9:9d:a4:1e:0a: ae:04:97:91:af:68:f5:38:8c:0b:57:d5:c6:b4:db: a2:dd:1e:5d:84:63:89:ed:2a:35:19:0d:00:e6:1e: b4:78:5f:5c:77:f6:6c:eb:f5:cf:3c:a7:5e:b9:fa: 1b:57:24:92:47:55:7f:cb:62:fd:1d:a0:d8:6b:7b: 6b:0d:08:47:66:f7:4f:41:7d:65:0b:ec:a4:a4:cb: c6:39:5a:a6:ed:8b:3b:32:b0:04:0f:2a:fe:4e:1c: 42:7c:56:1f:58:f4:15:17:c9:e8:bc:4b:51:84:f0: de:82:f1:bd:bf:cc:eb:7b:b7:2f:a0:46:52:55:a7: 9d:6b:ca:84:62:c0:dc:eb:b3:54:96:fb:e1:9b:ee: 3d:b9:ac:56:c3:df:32:df:67:c4:7d:f3:45:c4:fb: f0:f3:6e:94:1b:dc:d4:11:90:52:4e:84:31:8a:42: 2f:1e:8b:84:d9:6a:e6:90:3e:b3:47:4c:2f:b9:74: 5f:fe:15:bd:d4:a9:eb:b1:f0:53:d1:11:1c:06:e3: 17:31:d9:39:9f:10:0b:10:e6:c7:ae:b1:02:d3:7a: a2:53:a9:17:1d:cd:2d:39:6a:6c:5c:9b:22:39:87: 86:1b:d4:43:d4:ec:12:fd:5a:bb:0e:dc:e9:48:27: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:80:A1:50:A0:C6:7D:2D:58:C8:C5:3C:43:5E:8C:10:72:0E:EE:FD X509v3 Authority Key Identifier: keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.211.0/24 Signature Algorithm: sha256WithRSAEncryption e4:6c:7a:be:eb:d5:c7:d0:e6:3b:51:8b:67:e6:39:67:8b:dc: 64:cd:82:60:fe:7c:d3:68:7b:c3:fe:ac:a7:22:c1:11:b9:a5: ce:bf:5d:cf:40:15:59:75:a1:fa:a9:81:b8:ca:42:4a:74:5a: ce:85:63:8e:3c:93:fc:0c:f7:94:d2:26:57:d5:1a:ef:f7:a9: af:53:75:56:2a:1f:03:65:38:bd:4b:40:87:f5:3f:34:7e:f7: 9c:c4:93:84:30:82:08:00:02:71:2e:7f:9a:81:52:4f:c8:18: d5:a9:62:4d:e0:dc:ae:f9:1c:91:87:0e:51:01:9b:f4:e0:3e: 5c:a3:42:6a:11:17:62:b8:b2:68:5b:c6:a0:b8:5e:b9:f1:bf: 60:a6:4c:d5:16:3c:10:bd:db:4b:6f:df:76:b4:92:15:98:d4: a9:d6:a6:28:14:4a:df:8f:3d:4b:54:7e:73:f2:36:e5:aa:18: 69:bc:46:68:3f:0c:48:87:22:00:89:40:99:f5:c8:39:e5:32: a5:3b:9a:81:c8:fe:c6:0c:28:a1:b7:bd:68:b0:ec:44:d3:f6: a5:13:a0:14:d5:01:e7:90:42:d2:11:04:39:ce:ee:6c:94:fc: 3d:a2:ac:51:dc:ae:48:9f:82:08:8b:84:f9:e2:dc:67:ec:26: cc:e4:7c:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N91TK8BxO3QkNImr4yIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj ZTNmNmUwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgwYTE1MGEwYzY3ZDJkNThjOGM1M2M0MzVlOGMxMDcyMGVlZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tT2E6SU5VPZuZ2kHgquBJeRr2j1 OIwLV9XGtNui3R5dhGOJ7So1GQ0A5h60eF9cd/Zs6/XPPKdeufobVySSR1V/y2L9 HaDYa3trDQhHZvdPQX1lC+ykpMvGOVqm7Ys7MrAEDyr+ThxCfFYfWPQVF8novEtR hPDegvG9v8zre7cvoEZSVaeda8qEYsDc67NUlvvhm+49uaxWw98y32fEffNFxPvw 826UG9zUEZBSToQxikIvHouE2WrmkD6zR0wvuXRf/hW91KnrsfBT0REcBuMXMdk5 nxALEObHrrEC03qiU6kXHc0tOWpsXJsiOYeGG9RD1OwS/Vq7DtzpSCfoUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuAoVCgxn0tWMjFPENejBByDu79MB8GA1UdIwQY MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt MDVkNThmMGNiODhjLzEvSzRDaFVLREdmUzFZeU1VOFExNk1FSElPN3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshTTMA0G CSqGSIb3DQEBCwUAA4IBAQDkbHq+69XH0OY7UYtn5jlni9xkzYJg/nzTaHvD/qyn IsERuaXOv13PQBVZdaH6qYG4ykJKdFrOhWOOPJP8DPeU0iZX1Rrv96mvU3VWKh8D ZTi9S0CH9T80fvecxJOEMIIIAAJxLn+agVJPyBjVqWJN4Nyu+RyRhw5RAZv04D5c o0JqERdiuLJoW8aguF658b9gpkzVFjwQvdtLb992tJIVmNSp1qYoFErfjz1LVH5z 8jblqhhpvEZoPwxIhyIAiUCZ9cg55TKlO5qByP7GDCiht71osOxE0/alE6AU1QHn kELSEQQ5zu5slPw9oqxR3K5In4IIi4T54txn7CbM5HxK -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:50 2026 by rpki-client