This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fuVacSwj9CSAPi4gbx8EVKVYNDo.roa File: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (raw, json) Hash identifier: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE= Subject key identifier: 7E:E5:5A:71:2C:23:F4:24:80:3E:2E:20:6F:1F:04:54:A5:58:34:3A Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Certificate serial: 019B7E37DE219987B0C23A15BC7E41DF18D2 Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fuVacSwj9CSAPi4gbx8EVKVYNDo.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 178.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:21:99:87:b0:c2:3a:15:bc:7e:41:df:18:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ee55a712c23f424803e2e206f1f0454a558343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:db:34:50:70:b5:70:9e:8b:ed:ef:28:62:56: 69:90:1a:29:96:c1:fc:cb:a4:55:ff:47:bb:f1:51: bc:44:ef:c1:d2:54:ce:e0:ff:97:a7:fc:e5:7c:b6: 0b:46:7d:d2:84:6d:d5:69:08:f0:a9:2f:fa:33:33: 48:f6:19:5c:b4:7f:4b:5b:14:e1:28:39:cd:a0:d8: 47:f4:b7:c7:42:ed:92:03:d1:11:18:4b:d3:60:1a: 1d:66:77:41:9d:95:1d:0b:fc:e1:73:55:9f:13:29: 41:fd:45:3d:d6:5f:7c:58:01:06:51:30:8a:1a:b0: 9c:c9:df:79:ed:7f:1b:e1:8a:05:10:24:e6:0a:6e: c3:3e:b6:3f:4d:9a:e1:03:a6:89:9c:3b:12:12:a8: ad:ba:4a:18:1b:d3:36:e0:2a:d5:79:7d:f1:5a:9d: 33:13:06:0b:3a:c3:b3:b3:ef:36:a4:e9:d9:52:5f: 65:19:1e:7d:d9:74:fa:c4:e6:8f:9d:56:71:74:e5: a3:b4:69:dc:2c:83:f6:e2:92:9e:f9:65:55:19:f0: 29:fa:55:1f:42:23:87:a8:96:2f:28:1d:81:0a:59: a4:bf:f5:53:a7:94:0f:48:bd:7c:3e:92:f4:f2:ad: 6c:fc:c5:5f:85:e7:49:f1:87:b8:ff:b2:dd:e8:f1: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E5:5A:71:2C:23:F4:24:80:3E:2E:20:6F:1F:04:54:A5:58:34:3A X509v3 Authority Key Identifier: keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fuVacSwj9CSAPi4gbx8EVKVYNDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.209.0/24 Signature Algorithm: sha256WithRSAEncryption 61:b9:63:9c:db:06:56:3b:57:98:bd:fe:03:d6:bc:5e:c2:47: 30:d0:fa:d6:e2:b3:6b:02:a9:9b:03:6d:11:ad:4e:c8:09:1c: e4:aa:92:9a:b6:80:1d:97:65:0f:e9:98:3b:03:80:2a:c4:20: f8:75:f6:1e:02:86:ed:7e:7f:d5:d6:44:15:ab:8f:a6:16:52: 62:6c:d0:8b:6d:03:8b:ca:98:59:f2:a1:f5:48:47:d8:26:57: 05:45:30:5f:93:4b:9d:b5:9e:e7:04:d5:2b:4c:5e:ee:87:51: 7d:8f:e6:94:0f:a3:e9:10:81:9e:41:7b:7a:d0:9c:1e:9c:5e: bc:b4:f9:20:ce:81:b8:f2:7b:cc:10:dc:e0:34:da:c2:92:97: ef:bf:c7:e9:30:80:bc:7d:91:e1:d8:37:8e:56:e1:9d:ab:2e: 9c:8f:0e:df:97:bb:a1:cb:4e:4c:6d:49:91:18:7c:72:82:f9: 4f:04:cb:0c:c1:29:e3:89:fd:df:b3:a1:ae:d6:15:63:15:fb: 43:99:99:ae:51:f8:5b:93:bb:95:61:bc:5a:89:2c:df:60:52: ab:78:40:cd:2a:8a:ce:e5:62:9f:62:66:ac:45:a5:1c:5f:97: 2d:3e:cf:71:ed:01:03:9f:a3:fe:29:fa:88:87:8f:1c:bd:47: e3:a5:49:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N94hmYewwjoVvH5B3xjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj ZTNmNmUwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWU1NWE3MTJjMjNmNDI0ODAzZTJlMjA2ZjFmMDQ1NGE1NTgzNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ds0UHC1cJ6L7e8oYlZpkBoplsH8 y6RV/0e78VG8RO/B0lTO4P+Xp/zlfLYLRn3ShG3VaQjwqS/6MzNI9hlctH9LWxTh KDnNoNhH9LfHQu2SA9ERGEvTYBodZndBnZUdC/zhc1WfEylB/UU91l98WAEGUTCK GrCcyd957X8b4YoFECTmCm7DPrY/TZrhA6aJnDsSEqitukoYG9M24CrVeX3xWp0z EwYLOsOzs+82pOnZUl9lGR592XT6xOaPnVZxdOWjtGncLIP24pKe+WVVGfAp+lUf QiOHqJYvKB2BClmkv/VTp5QPSL18PpL08q1s/MVfhedJ8Ye4/7Ld6PHNHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7lWnEsI/QkgD4uIG8fBFSlWDQ6MB8GA1UdIwQY MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt MDVkNThmMGNiODhjLzEvZnVWYWNTd2o5Q1NBUGk0Z2J4OEVWS1ZZTkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshTRMA0G CSqGSIb3DQEBCwUAA4IBAQBhuWOc2wZWO1eYvf4D1rxewkcw0PrW4rNrAqmbA20R rU7ICRzkqpKatoAdl2UP6Zg7A4AqxCD4dfYeAobtfn/V1kQVq4+mFlJibNCLbQOL yphZ8qH1SEfYJlcFRTBfk0udtZ7nBNUrTF7uh1F9j+aUD6PpEIGeQXt60JwenF68 tPkgzoG48nvMENzgNNrCkpfvv8fpMIC8fZHh2DeOVuGdqy6cjw7fl7uhy05MbUmR GHxygvlPBMsMwSnjif3fs6Gu1hVjFftDmZmuUfhbk7uVYbxaiSzfYFKreEDNKorO 5WKfYmasRaUcX5ctPs9x7QEDn6P+KfqIh48cvUfjpUmN -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:45 2026 by rpki-client