This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/gX_bo7WycAyP4eHEuchQhpnD15s.roa File: gX_bo7WycAyP4eHEuchQhpnD15s.roa (raw, json) Hash identifier: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA= Subject key identifier: 81:7F:DB:A3:B5:B2:70:0C:8F:E1:E1:C4:B9:C8:50:86:99:C3:D7:9B Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f Certificate serial: 019B7DCAD0A750BCB498448CEFC41A23C331 Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/gX_bo7WycAyP4eHEuchQhpnD15s.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207733 IP address blocks: 178.250.134.0/23 maxlen: 24 2a0c:bd40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d0:a7:50:bc:b4:98:44:8c:ef:c4:1a:23:c3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=817fdba3b5b2700c8fe1e1c4b9c8508699c3d79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:23:f6:49:d1:63:b1:9d:a6:9b:09:38:de:3d: 5a:10:44:f5:d1:1e:05:a2:15:85:b3:ee:c9:e8:73: d0:60:02:af:ce:06:d6:7e:69:32:a5:4c:6a:5e:a3: 3f:f9:8e:d0:2f:25:3f:22:bd:9d:1d:67:d2:85:88: ea:c6:91:ba:70:a3:98:73:85:36:f6:21:43:c1:dc: d9:86:d7:f7:51:14:40:19:cd:39:8d:3c:a0:bb:97: 1f:46:fc:d4:65:1d:f3:ac:74:75:a0:6f:3d:88:af: 02:59:1d:ee:49:a6:ef:3e:54:55:2a:98:2f:1c:23: 35:c6:10:df:63:fc:37:2f:54:24:50:d9:c1:9b:a3: 0c:16:dc:99:8d:38:76:a5:e3:21:9a:75:e4:10:9b: e1:c8:40:5c:f0:fd:8b:6b:19:1c:61:be:14:89:81: 6b:0e:88:05:d4:0e:18:e9:e2:99:54:31:99:7c:fd: aa:dd:5a:36:42:2c:f4:e2:6f:9f:f8:d3:fd:94:d1: f3:13:20:8f:a4:91:02:97:a9:32:78:9d:db:c6:ea: f3:df:8e:6b:19:00:04:4d:3b:a3:84:10:95:da:58: a7:42:5b:8e:2b:9f:75:fc:f6:a1:a3:5d:74:ff:36: d6:65:e3:11:bf:8f:1f:d9:96:38:24:8c:c8:47:84: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7F:DB:A3:B5:B2:70:0C:8F:E1:E1:C4:B9:C8:50:86:99:C3:D7:9B X509v3 Authority Key Identifier: keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/gX_bo7WycAyP4eHEuchQhpnD15s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.134.0/23 IPv6: 2a0c:bd40::/29 Signature Algorithm: sha256WithRSAEncryption 7a:a0:67:f6:c6:c6:2d:c2:f4:e8:9e:75:9d:9e:aa:d7:c4:aa: e9:f0:34:1e:52:58:7c:81:00:6c:a6:41:9d:a0:2b:82:23:85: ab:90:52:39:e0:24:90:09:d2:c6:03:65:c5:0c:dd:bc:00:98: 4f:c9:7e:b3:00:e9:11:d5:87:24:be:d8:50:50:0e:73:b8:e1: 0b:57:2d:49:ed:e4:8c:46:d1:e9:b1:a2:bf:e6:7b:ef:7e:41: 20:c0:7b:1c:eb:2a:32:b3:12:4e:4f:6c:2b:d4:de:ab:6b:06: 74:0a:3e:27:92:cf:d4:6f:75:f6:92:ab:52:ce:c5:33:58:8f: 61:1b:22:ad:77:3f:c8:4e:eb:ac:ee:fe:4c:5b:d4:8b:f4:49: 54:bd:70:d0:0c:ca:b0:b7:5e:ed:59:8c:90:f6:db:96:71:b1: 89:1c:92:82:dc:d8:fe:34:bd:7a:0d:77:5f:70:8e:87:44:7e: 78:72:61:70:61:e2:cf:d2:fa:29:3e:d1:e4:d5:f5:1b:e5:71: f2:0f:e7:b6:cd:32:c3:56:b2:ab:0e:18:66:ea:5a:39:50:c4: 99:2e:45:c8:60:77:d3:13:8c:bc:06:37:0d:d8:e1:b3:ab:57: 74:3d:98:75:4b:9d:89:d2:3f:9e:00:20:88:4a:4d:78:a9:34: 76:cb:b0:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ytCnULy0mESM78QaI8MxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw NDRhN2YwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTdmZGJhM2I1YjI3MDBjOGZlMWUxYzRiOWM4NTA4Njk5YzNkNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CP2SdFjsZ2mmwk43j1aEET10R4F ohWFs+7J6HPQYAKvzgbWfmkypUxqXqM/+Y7QLyU/Ir2dHWfShYjqxpG6cKOYc4U2 9iFDwdzZhtf3URRAGc05jTygu5cfRvzUZR3zrHR1oG89iK8CWR3uSabvPlRVKpgv HCM1xhDfY/w3L1QkUNnBm6MMFtyZjTh2peMhmnXkEJvhyEBc8P2LaxkcYb4UiYFr DogF1A4Y6eKZVDGZfP2q3Vo2Qiz04m+f+NP9lNHzEyCPpJECl6kyeJ3bxurz345r GQAETTujhBCV2linQluOK591/Paho110/zbWZeMRv48f2ZY4JIzIR4R1xwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIF/26O1snAMj+HhxLnIUIaZw9ebMB8GA1UdIwQY MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt ZWI1MDkzYjIzMWMxLzEvZ1hfYm83V3ljQXlQNGVIRXVjaFFocG5EMTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsvqGMA0E AgACMAcDBQMqDL1AMA0GCSqGSIb3DQEBCwUAA4IBAQB6oGf2xsYtwvTonnWdnqrX xKrp8DQeUlh8gQBspkGdoCuCI4WrkFI54CSQCdLGA2XFDN28AJhPyX6zAOkR1Yck vthQUA5zuOELVy1J7eSMRtHpsaK/5nvvfkEgwHsc6yoysxJOT2wr1N6rawZ0Cj4n ks/Ub3X2kqtSzsUzWI9hGyKtdz/ITuus7v5MW9SL9ElUvXDQDMqwt17tWYyQ9tuW cbGJHJKC3Nj+NL16DXdfcI6HRH54cmFwYeLP0vopPtHk1fUb5XHyD+e2zTLDVrKr Dhhm6lo5UMSZLkXIYHfTE4y8BjcN2OGzq1d0PZh1S52J0j+eACCISk14qTR2y7Bg -----END CERTIFICATE-----Generated at Mon Jan 26 19:41:58 2026 by rpki-client