This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/RIJmcpqsOyhRMT_8YH6FyORD_tY.roa File: RIJmcpqsOyhRMT_8YH6FyORD_tY.roa (raw, json) Hash identifier: vIj6Llw4m9MXR4LYPtKFKtVkVJTQSERGEAEPyXkjVmg= Subject key identifier: 44:82:66:72:9A:AC:3B:28:51:31:3F:FC:60:7E:85:C8:E4:43:FE:D6 Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Certificate serial: 019B79ED6308572033466781B7B3ED06799F Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/RIJmcpqsOyhRMT_8YH6FyORD_tY.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51390 IP address blocks: 178.214.0.0/21 maxlen: 21 178.214.8.0/21 maxlen: 21 178.214.16.0/21 maxlen: 21 178.214.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.mft rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:08:57:20:33:46:67:81:b7:b3:ed:06:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448266729aac3b2851313ffc607e85c8e443fed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:6e:eb:24:2d:cf:2c:e6:1e:f6:47:f3:0f: 13:12:66:fa:de:9d:0d:4c:a2:a9:d8:0d:7e:c8:f7: 10:e5:32:af:9e:17:05:bf:82:d7:13:73:76:f9:ad: ea:fd:e4:9a:ef:e8:ac:d3:de:1f:fb:ca:ae:d1:eb: 76:e7:48:e9:93:ac:26:16:54:56:c9:de:78:37:d3: be:6a:a6:e4:2a:f2:d7:25:42:52:4e:ca:4a:3d:79: 84:a2:b0:08:cd:63:92:1d:36:88:f3:60:8b:d2:99: 22:7f:45:a6:63:8f:ec:91:a6:fd:8f:10:70:bb:1d: 79:65:22:ff:11:fe:36:2b:4a:90:f5:6f:8f:a4:a4: 80:57:ff:71:52:74:20:24:e7:ff:78:a1:9f:7a:cc: 40:dc:76:81:e7:ac:9e:bc:ee:ff:d9:27:55:cf:54: 70:b5:ab:35:ce:b9:37:99:be:da:45:54:5d:66:6f: 73:6f:47:40:43:f6:75:02:40:7d:98:ff:a3:75:b6: 6f:9b:cf:5f:f7:86:98:5c:85:0b:7d:8a:d8:28:02: b5:07:21:67:65:27:ce:27:35:19:14:cd:21:2d:5e: 75:a3:d5:bd:5a:be:e0:61:30:39:a1:79:e7:9b:bc: f4:73:07:93:e4:d9:6a:e0:4a:54:ed:bf:27:24:39: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:66:72:9A:AC:3B:28:51:31:3F:FC:60:7E:85:C8:E4:43:FE:D6 X509v3 Authority Key Identifier: keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/RIJmcpqsOyhRMT_8YH6FyORD_tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.214.0.0/19 Signature Algorithm: sha256WithRSAEncryption 44:9f:4f:e7:65:33:9d:7c:ce:c1:73:05:79:c9:ea:b7:4b:08: 37:d5:d6:ad:59:8f:a3:c9:b9:3e:2b:66:1e:aa:fe:90:ad:1b: 8f:69:22:92:d7:19:e4:76:13:bd:a7:0d:c7:70:70:e3:3e:94: 1c:aa:ec:ee:1f:d6:69:45:28:68:9c:19:51:14:ef:b5:05:23: 42:c0:60:c2:bb:29:93:77:c0:56:f9:f3:d2:2c:61:8c:ec:75: 62:62:15:1e:c9:e0:06:f1:ec:74:05:29:3d:09:12:28:4d:c6: 11:1e:ed:32:b6:ac:a8:af:48:e9:b3:0a:fc:6b:12:c1:b9:db: 7a:c3:19:03:4f:ff:60:6c:46:9c:bc:65:b7:a4:81:05:8d:7d: 65:19:df:20:1d:c8:e5:12:21:43:43:b2:a8:65:1a:fe:87:0d: 57:f0:ef:5c:36:c1:3a:37:40:51:e7:9f:b8:13:12:17:74:53: 61:59:52:8d:ba:82:38:7e:cc:b7:9c:84:c7:a0:fe:fb:26:b5: 26:b6:cf:70:47:a8:25:48:aa:05:a4:9f:c7:ff:d0:d2:d2:f0: 45:6e:79:24:66:b4:c6:d8:5c:38:35:9f:f9:8e:e0:ca:11:64: 5b:a6:10:3a:75:3b:d4:3a:7f:06:b5:e2:30:64:88:30:ec:8b: 7e:0a:ea:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WMIVyAzRmeBt7PtBnmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGEyODllYmIyZGQ2ODA2ZDYwYjhjNWFkMDM2Yzc5OGY2 NmJhMDYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDgyNjY3MjlhYWMzYjI4NTEzMTNmZmM2MDdlODVjOGU0NDNmZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNZu6yQtzyzmHvZH8w8TEmb63p0N TKKp2A1+yPcQ5TKvnhcFv4LXE3N2+a3q/eSa7+is094f+8qu0et250jpk6wmFlRW yd54N9O+aqbkKvLXJUJSTspKPXmEorAIzWOSHTaI82CL0pkif0WmY4/skab9jxBw ux15ZSL/Ef42K0qQ9W+PpKSAV/9xUnQgJOf/eKGfesxA3HaB56yevO7/2SdVz1Rw tas1zrk3mb7aRVRdZm9zb0dAQ/Z1AkB9mP+jdbZvm89f94aYXIULfYrYKAK1ByFn ZSfOJzUZFM0hLV51o9W9Wr7gYTA5oXnnm7z0cweT5Nlq4EpU7b8nJDl2jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESCZnKarDsoUTE//GB+hcjkQ/7WMB8GA1UdIwQY MBaAFLSKKJ67LdaAbWC4xa0DbHmPZroGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEt ZmVlMTM3Yzg5MGJjLzEvUklKbWNwcXNPeWhSTVRfOFlINkZ5T1JEX3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81OTkyZWItNGI4Mi00ZmQzLTkxMjEtZmVlMTM3Yzg5MGJj LzEvdElvb25yc3Qxb0J0WUxqRnJRTnNlWTltdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFstYAMA0G CSqGSIb3DQEBCwUAA4IBAQBEn0/nZTOdfM7BcwV5yeq3Swg31datWY+jybk+K2Ye qv6QrRuPaSKS1xnkdhO9pw3HcHDjPpQcquzuH9ZpRShonBlRFO+1BSNCwGDCuymT d8BW+fPSLGGM7HViYhUeyeAG8ex0BSk9CRIoTcYRHu0ytqyor0jpswr8axLBudt6 wxkDT/9gbEacvGW3pIEFjX1lGd8gHcjlEiFDQ7KoZRr+hw1X8O9cNsE6N0BR55+4 ExIXdFNhWVKNuoI4fsy3nITHoP77JrUmts9wR6glSKoFpJ/H/9DS0vBFbnkkZrTG 2Fw4NZ/5juDKEWRbphA6dTvUOn8GteIwZIgw7It+Cuol -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:35 2026 by rpki-client