This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa File: S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa (raw, json) Hash identifier: vxfwKl9OJNlj62NwZPK4TBDjwebx7L8XA//O2MRpF/I= Subject key identifier: 4B:FC:40:C3:84:C0:28:3D:07:9B:0D:B1:9E:1B:47:2F:79:39:6A:86 Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e Certificate serial: 019B7F15D84532087234821027A58DAA0572 Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200414 IP address blocks: 178.219.128.0/24 maxlen: 24 178.219.131.0/24 maxlen: 24 185.11.108.0/23 maxlen: 23 185.101.190.0/24 maxlen: 24 194.29.180.0/23 maxlen: 23 195.110.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d8:45:32:08:72:34:82:10:27:a5:8d:aa:05:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bfc40c384c0283d079b0db19e1b472f79396a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:9f:ef:fe:10:54:06:fb:da:bb:9f:18:10: ef:43:9c:a9:fe:e7:c0:19:ee:62:0b:4b:01:c5:b8: 35:07:a5:67:27:23:fd:73:18:4c:d1:b1:33:0d:18: 62:6c:b3:9b:b6:db:31:20:a9:63:44:6b:1b:a0:71: 31:03:02:42:83:77:9a:22:71:42:91:c5:5d:81:30: 7d:4a:57:b8:e7:9b:7a:48:d3:57:48:11:7d:75:43: 23:98:e7:33:b9:84:5f:0f:41:de:7a:cd:9c:34:1c: 49:ec:5a:d1:d0:fa:41:04:e5:f0:a2:7c:f9:d6:00: 85:30:a4:68:59:4b:57:1b:97:76:68:55:85:ba:31: 81:fa:8c:e4:4a:ac:e4:b4:0b:5d:2f:56:65:06:3e: 2f:69:07:65:54:c4:dd:17:4b:e8:e6:80:40:00:15: 11:c3:f1:50:43:af:b5:a8:97:f3:7d:7f:ec:fd:5a: db:bc:71:bb:8a:2d:84:ea:4e:fa:b6:00:26:3b:c5: 12:50:d7:02:d0:e1:ca:f3:e0:9c:8f:22:e1:95:20: f8:cf:47:60:c2:ad:71:d9:3d:72:63:6c:c1:85:78: 8b:f3:ce:52:6a:99:df:f7:ae:78:87:e2:62:41:ad: 80:bc:f5:7b:4b:06:9b:ac:16:14:c2:dd:f6:62:99: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:40:C3:84:C0:28:3D:07:9B:0D:B1:9E:1B:47:2F:79:39:6A:86 X509v3 Authority Key Identifier: keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/S_xAw4TAKD0Hmw2xnhtHL3k5aoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.128.0/24 178.219.131.0/24 185.11.108.0/23 185.101.190.0/24 194.29.180.0/23 195.110.50.0/24 Signature Algorithm: sha256WithRSAEncryption 84:6a:83:9f:57:43:ac:b6:20:46:a6:37:00:0a:c8:ac:d8:69: 5e:3f:9b:f8:22:cd:d0:c7:f6:dd:e0:63:53:5d:19:3d:48:d7: 2f:67:c4:51:fd:be:76:7b:9a:50:3d:9e:b0:c5:74:2a:b1:f2: 83:f9:53:5f:5a:cb:e4:8b:df:68:5f:d1:7d:9a:64:f9:79:86: 7b:fe:39:22:f3:58:dc:15:c2:99:be:46:de:9e:d5:30:13:bf: 19:64:43:bc:45:a4:8c:50:c9:7b:0c:26:b0:ac:da:77:e1:07: 5d:af:44:7a:43:61:5a:0f:5c:b7:71:b0:36:54:b2:54:ab:a3: e3:a0:0b:b8:54:0d:cd:70:59:d2:11:65:13:62:4c:34:09:2c: 00:87:06:20:bd:7d:5c:03:2b:67:e2:1d:5c:59:0f:58:2b:47: 27:d5:f3:ff:1c:8d:de:c5:c4:b0:45:0e:17:11:ac:ed:7a:9e: c4:7d:28:d4:f2:dd:ac:b4:38:b6:15:8b:f6:23:e2:2b:10:f3: 0c:b6:86:92:27:5c:56:a7:a9:33:a8:fc:eb:00:93:2f:c5:08: 51:bf:bd:db:c5:ea:0b:54:70:e2:a8:39:af:55:1b:39:f5:ff: 8f:eb:51:b4:5d:a4:f7:e6:8f:66:8a:9b:4c:b1:0f:86:c3:cd: 0b:72:24:8c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FdhFMghyNIIQJ6WNqgVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk MzFmMmUwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmZjNDBjMzg0YzAyODNkMDc5YjBkYjE5ZTFiNDcyZjc5Mzk2YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWef7/4QVAb72rufGBDvQ5yp/ufA Ge5iC0sBxbg1B6VnJyP9cxhM0bEzDRhibLObttsxIKljRGsboHExAwJCg3eaInFC kcVdgTB9Sle455t6SNNXSBF9dUMjmOczuYRfD0Hees2cNBxJ7FrR0PpBBOXwonz5 1gCFMKRoWUtXG5d2aFWFujGB+ozkSqzktAtdL1ZlBj4vaQdlVMTdF0vo5oBAABUR w/FQQ6+1qJfzfX/s/VrbvHG7ii2E6k76tgAmO8USUNcC0OHK8+CcjyLhlSD4z0dg wq1x2T1yY2zBhXiL885Sapnf9654h+JiQa2AvPV7SwabrBYUwt32YpkSIQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEv8QMOEwCg9B5sNsZ4bRy95OWqGMB8GA1UdIwQY MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt ZGM4YjUyZTNlYTBhLzEvU194QXc0VEFLRDBIbXcyeG5odEhMM2s1YW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAstuAAwQA stuDAwQBuQtsAwQAuWW+AwQBwh20AwQAw24yMA0GCSqGSIb3DQEBCwUAA4IBAQCE aoOfV0OstiBGpjcACsis2GleP5v4Is3Qx/bd4GNTXRk9SNcvZ8RR/b52e5pQPZ6w xXQqsfKD+VNfWsvki99oX9F9mmT5eYZ7/jki81jcFcKZvkbentUwE78ZZEO8RaSM UMl7DCawrNp34Qddr0R6Q2FaD1y3cbA2VLJUq6PjoAu4VA3NcFnSEWUTYkw0CSwA hwYgvX1cAytn4h1cWQ9YK0cn1fP/HI3excSwRQ4XEaztep7EfSjU8t2stDi2FYv2 I+IrEPMMtoaSJ1xWp6kzqPzrAJMvxQhRv73bxeoLVHDiqDmvVRs59f+P61G0XaT3 5o9miptMsQ+Gw80LciSM -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:52 2026 by rpki-client