This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa File: tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa (raw, json) Hash identifier: QH0sRva7RS+lctZ8onEh+mUTqcR1lWAI/dUY/rIRqdA= Subject key identifier: B5:91:2E:AF:AE:43:65:14:31:4B:C2:7E:DC:73:E2:4F:B6:47:1D:94 Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca Certificate serial: 019B78A287D050BBB5AF693E7AE90A7FBD7B Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50771 IP address blocks: 178.218.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:87:d0:50:bb:b5:af:69:3e:7a:e9:0a:7f:bd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5912eafae436514314bc27edc73e24fb6471d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:b4:d9:74:75:be:08:06:7e:94:4b:79:ce: 56:e4:1d:08:d1:fa:ae:4b:af:0c:dc:8e:a2:a8:8f: 64:67:ea:ab:0f:ef:6c:50:63:d3:78:f3:10:46:f9: 71:00:64:4a:da:a1:0d:8c:fa:76:1c:f6:58:fb:34: 33:f2:4c:2f:77:6b:df:34:f1:ce:18:d1:28:3d:85: 77:d3:e0:d3:4a:ec:77:99:61:8a:3b:b7:47:fb:0f: 52:38:8d:41:4a:73:4e:f6:23:f9:83:94:2d:f4:2b: 00:5e:a9:39:68:11:5e:9b:69:76:04:44:de:c0:7d: 2c:d2:fb:01:e6:ba:0b:cc:60:e3:34:9b:0d:ea:61: 79:56:a2:43:d8:8c:0a:9e:5d:4b:96:5f:67:9c:f3: 11:c9:6e:06:3d:10:b3:04:81:55:22:d6:02:ac:73: 73:ce:0b:87:3e:28:5d:4b:ae:33:f1:60:6b:97:ee: 89:a0:60:8d:89:f4:d2:42:dc:ea:a2:18:25:0f:72: 57:e4:cb:0e:c9:e6:83:0e:21:98:5d:b5:fe:a4:22: 5b:29:ed:b9:06:20:f0:00:2b:0d:00:40:97:42:4e: 36:f6:b1:5d:86:c4:3f:91:73:c6:65:64:e0:8c:cd: 74:10:46:36:77:23:94:7a:3e:1d:a0:5d:83:c2:d8: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:2E:AF:AE:43:65:14:31:4B:C2:7E:DC:73:E2:4F:B6:47:1D:94 X509v3 Authority Key Identifier: keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.218.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:1f:6e:64:78:0e:5b:0a:8d:ba:c5:cd:ed:92:39:d0:9e:7a: 5e:46:af:d8:4c:2d:57:3c:11:01:91:b7:34:c2:47:69:f2:63: f2:bf:c3:55:c7:de:ad:68:de:5f:1d:64:f3:54:d4:c4:52:9e: 7e:32:d4:06:f8:04:15:74:38:10:5c:bf:07:35:ca:9d:01:81: 9b:04:3b:d5:4c:85:ff:5f:ed:92:7e:98:97:db:8e:ba:09:46: 5d:59:d1:fb:c8:6c:4f:86:eb:9e:f4:ac:2e:5f:e4:79:a2:3e: c7:7a:8d:16:4f:9a:29:22:04:f0:21:a3:e7:ae:ec:f2:d1:78: e6:12:b4:2b:05:30:6e:af:ba:09:a1:39:85:67:42:45:5d:6c: 86:dd:a1:1c:39:da:ab:a6:e3:73:ec:8f:d4:c7:1d:6b:67:14: 30:67:ee:88:25:14:ca:0a:5e:cd:14:4d:b6:13:0f:fc:fd:af: 1d:78:77:cc:3a:46:55:19:63:56:21:17:65:6e:df:da:dd:db: 81:53:8b:51:53:c8:ba:d8:46:dd:f1:f0:52:b6:02:a7:36:cd: d5:d1:77:33:05:15:65:a3:e3:ea:12:9a:0a:6b:d2:da:d0:d3: e2:b3:e9:90:42:f4:07:85:be:e5:b2:37:e8:e6:b4:d6:d9:ef: b0:21:9a:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oofQULu1r2k+eukKf717MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTJlOTI0ZmNhY2I4NjJjZjNiNjRmNTZlNzY3YmMzMjZm MjdmY2EwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTkxMmVhZmFlNDM2NTE0MzE0YmMyN2VkYzczZTI0ZmI2NDcxZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ+02XR1vggGfpRLec5W5B0I0fqu S68M3I6iqI9kZ+qrD+9sUGPTePMQRvlxAGRK2qENjPp2HPZY+zQz8kwvd2vfNPHO GNEoPYV30+DTSux3mWGKO7dH+w9SOI1BSnNO9iP5g5Qt9CsAXqk5aBFem2l2BETe wH0s0vsB5roLzGDjNJsN6mF5VqJD2IwKnl1Lll9nnPMRyW4GPRCzBIFVItYCrHNz zguHPihdS64z8WBrl+6JoGCNifTSQtzqohglD3JX5MsOyeaDDiGYXbX+pCJbKe25 BiDwACsNAECXQk429rFdhsQ/kXPGZWTgjM10EEY2dyOUej4doF2DwthJtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWRLq+uQ2UUMUvCftxz4k+2Rx2UMB8GA1UdIwQY MBaAFIgS6ST8rLhizztk9W52e8Mm8n/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJMcEpQeXN1R0xQTzJUMWJuWjd3eWJ5ZjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zYTk4ZTItOGFlOC00NzIzLTg5NTkt Y2UyZDhlM2ZjODA0LzEvdFpFdXI2NURaUlF4UzhKLTNIUGlUN1pISFpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zYTk4ZTItOGFlOC00NzIzLTg5NTktY2UyZDhlM2ZjODA0 LzEvaUJMcEpQeXN1R0xQTzJUMWJuWjd3eWJ5ZjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEstoQMA0G CSqGSIb3DQEBCwUAA4IBAQANH25keA5bCo26xc3tkjnQnnpeRq/YTC1XPBEBkbc0 wkdp8mPyv8NVx96taN5fHWTzVNTEUp5+MtQG+AQVdDgQXL8HNcqdAYGbBDvVTIX/ X+2SfpiX2466CUZdWdH7yGxPhuue9KwuX+R5oj7Heo0WT5opIgTwIaPnruzy0Xjm ErQrBTBur7oJoTmFZ0JFXWyG3aEcOdqrpuNz7I/Uxx1rZxQwZ+6IJRTKCl7NFE22 Ew/8/a8deHfMOkZVGWNWIRdlbt/a3duBU4tRU8i62Ebd8fBStgKnNs3V0XczBRVl o+PqEpoKa9La0NPis+mQQvQHhb7lsjfo5rTW2e+wIZqw -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:57 2026 by rpki-client