This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/T_J2gttaZHfPXFwYPEnqU4DuSH0.roa File: T_J2gttaZHfPXFwYPEnqU4DuSH0.roa (raw, json) Hash identifier: ehbYh6/mcaifo0NfLUxIkQ+Z4QysKZUHdNB+6ZGBtPc= Subject key identifier: 4F:F2:76:82:DB:5A:64:77:CF:5C:5C:18:3C:49:EA:53:80:EE:48:7D Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d Certificate serial: 019B7AC8953A3AA35AEB3934EE61F9F0D296 Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/T_J2gttaZHfPXFwYPEnqU4DuSH0.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205325 IP address blocks: 178.216.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:95:3a:3a:a3:5a:eb:39:34:ee:61:f9:f0:d2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed55d23579c64127155aef650696e79531d508d Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ff27682db5a6477cf5c5c183c49ea5380ee487d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e8:a1:a8:a5:09:e0:ed:6e:59:9a:55:33:f2: 67:30:15:3f:af:8e:49:dc:b2:e4:87:e3:eb:00:ef: 75:76:6c:f7:6b:99:3a:bf:68:fb:c6:ce:94:ec:5e: 12:80:7f:e9:63:12:66:ba:9c:bf:e2:81:31:fd:b5: 7f:73:35:89:03:5f:8e:d2:2c:1f:87:51:9b:57:85: 64:78:db:85:2b:70:ba:85:f9:36:59:04:cb:c6:ba: d7:79:bf:1c:a4:da:50:77:87:0d:25:41:66:a3:0e: 78:70:0f:08:21:a5:c2:53:b7:07:4b:2d:2f:60:26: db:a5:3d:83:d2:18:fa:fe:b1:b2:30:97:b8:70:72: c7:53:bc:4a:9f:3f:02:91:f8:bd:83:06:a9:f5:ec: 0d:8d:77:4a:74:b5:cb:1c:28:84:de:4c:ef:f4:3e: 06:e2:4f:9e:24:83:23:ac:9b:98:c9:3d:76:3d:3c: c2:a8:1e:18:0d:1b:0e:6e:14:60:35:e1:e3:59:43: b2:f2:37:0c:87:ac:5b:fd:05:ef:72:a6:42:0b:1d: fe:48:ed:0f:bf:48:bf:97:6b:c6:96:d9:5e:2f:86: 41:9c:3e:dc:6d:02:b5:6a:e0:40:1d:13:6b:e1:e6: e5:17:cf:1f:fa:47:a2:4a:88:32:5c:08:c9:15:4b: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:76:82:DB:5A:64:77:CF:5C:5C:18:3C:49:EA:53:80:EE:48:7D X509v3 Authority Key Identifier: keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/T_J2gttaZHfPXFwYPEnqU4DuSH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.245.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:29:c8:b9:27:ab:ef:a2:69:f9:68:2f:54:57:12:e4:d1:11: 0f:d4:58:b5:b3:20:3b:8b:72:dc:64:2e:b3:cd:5b:5a:62:5f: af:3c:99:cb:0c:a4:f2:0f:c0:b7:12:c9:e0:48:4d:c2:45:73: 91:d7:c6:47:e0:ac:6b:11:8a:6c:95:7a:ba:4e:1a:a6:d2:5a: aa:73:89:cf:2d:0c:84:06:81:1c:e4:86:0f:1f:8e:d4:03:ad: 8b:10:2a:ed:b2:46:da:97:6f:91:b0:5b:9d:12:a5:8e:5d:14: d4:3a:34:4c:c1:02:d5:d1:85:6c:76:d5:56:65:4f:df:e2:8d: 53:e9:e6:d8:52:f0:92:08:3a:2f:a7:2c:6c:13:7f:6d:ec:0d: 58:f8:fc:df:af:80:99:20:5d:ac:10:ea:a7:42:85:85:93:79: a4:22:3b:22:b9:5b:cc:38:57:ef:9b:9d:95:96:00:01:8d:09: d6:ce:ac:5a:a1:10:42:16:a8:05:58:a0:59:92:a5:59:83:b2: fd:7d:48:7e:a4:37:43:29:60:d8:a8:e1:ea:3b:98:88:d6:7b: 84:aa:4a:02:f2:33:ac:35:b1:5d:d0:19:99:0e:b2:d9:de:21: 02:ba:d3:01:8c:da:fd:b5:ce:02:be:27:a4:1e:97:88:72:1f: c0:e0:a0:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJU6OqNa6zk07mH58NKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDU1ZDIzNTc5YzY0MTI3MTU1YWVmNjUwNjk2ZTc5NTMx ZDUwOGQwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmYyNzY4MmRiNWE2NDc3Y2Y1YzVjMTgzYzQ5ZWE1MzgwZWU0ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuihqKUJ4O1uWZpVM/JnMBU/r45J 3LLkh+PrAO91dmz3a5k6v2j7xs6U7F4SgH/pYxJmupy/4oEx/bV/czWJA1+O0iwf h1GbV4VkeNuFK3C6hfk2WQTLxrrXeb8cpNpQd4cNJUFmow54cA8IIaXCU7cHSy0v YCbbpT2D0hj6/rGyMJe4cHLHU7xKnz8Ckfi9gwap9ewNjXdKdLXLHCiE3kzv9D4G 4k+eJIMjrJuYyT12PTzCqB4YDRsObhRgNeHjWUOy8jcMh6xb/QXvcqZCCx3+SO0P v0i/l2vGltleL4ZBnD7cbQK1auBAHRNr4eblF88f+keiSogyXAjJFUtLdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/ydoLbWmR3z1xcGDxJ6lOA7kh9MB8GA1UdIwQY MBaAFB7VXSNXnGQScVWu9lBpbnlTHVCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUt MWU5ZmY5MTgwOGMyLzEvVF9KMmd0dGFaSGZQWEZ3WVBFbnFVNER1U0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUtMWU5ZmY5MTgwOGMy LzEvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstj1MA0G CSqGSIb3DQEBCwUAA4IBAQBOKci5J6vvomn5aC9UVxLk0REP1Fi1syA7i3LcZC6z zVtaYl+vPJnLDKTyD8C3EsngSE3CRXOR18ZH4KxrEYpslXq6Thqm0lqqc4nPLQyE BoEc5IYPH47UA62LECrtskbal2+RsFudEqWOXRTUOjRMwQLV0YVsdtVWZU/f4o1T 6ebYUvCSCDovpyxsE39t7A1Y+Pzfr4CZIF2sEOqnQoWFk3mkIjsiuVvMOFfvm52V lgABjQnWzqxaoRBCFqgFWKBZkqVZg7L9fUh+pDdDKWDYqOHqO5iI1nuEqkoC8jOs NbFd0BmZDrLZ3iECutMBjNr9tc4CviekHpeIch/A4KCy -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:44 2026 by rpki-client