This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/18zWu2t9FX1lnKKSOJ-wqrXZDlc.roa File: 18zWu2t9FX1lnKKSOJ-wqrXZDlc.roa (raw, json) Hash identifier: 0BXMmMdMu8eYxMp8FhxV0R1nzge1U3VJ+pk2UqoMn0I= Subject key identifier: D7:CC:D6:BB:6B:7D:15:7D:65:9C:A2:92:38:9F:B0:AA:B5:D9:0E:57 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019BC785DDC981E70340BE4FE9E77164B1F6 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/18zWu2t9FX1lnKKSOJ-wqrXZDlc.roa Signing time: Fri 16 Jan 2026 15:56:37 +0000 ROA not before: Fri 16 Jan 2026 15:56:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60439 IP address blocks: 178.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:85:dd:c9:81:e7:03:40:be:4f:e9:e7:71:64:b1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 16 15:56:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ccd6bb6b7d157d659ca292389fb0aab5d90e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:5e:8b:8e:f1:ea:72:bb:8f:b1:d3:e5:4f: aa:ae:4e:1e:5c:cb:4a:2c:cb:c8:13:f3:f7:15:ec: b6:1c:0d:6b:66:45:ea:78:e2:08:de:66:d1:8c:14: 59:d5:fd:43:50:fd:1b:ba:a6:d3:b5:8b:dd:77:fa: a0:5d:ab:fe:c4:00:d7:71:b7:4d:06:01:cd:a2:71: 54:2d:86:f3:4e:b6:e1:e7:90:f2:83:c4:f0:c7:45: 26:64:90:1d:82:58:89:1d:cc:83:c5:aa:65:f2:7a: ae:40:97:c1:f9:87:a2:80:f6:3e:55:c3:60:12:86: 2a:f7:b0:94:0d:46:51:c5:92:2c:88:06:9a:27:90: 64:26:2f:1f:48:fd:77:ec:5c:89:e5:92:74:b0:17: 1f:02:b5:ae:ab:7d:50:83:c1:1c:db:17:11:60:94: b4:9c:24:ac:a5:a7:fe:84:08:cf:c9:77:2e:de:45: e3:c8:e2:9d:95:e2:a2:b1:77:d8:ba:1e:48:ca:b7: e8:27:e9:99:e0:b6:ce:ce:6d:fd:1c:cb:4a:e9:6d: 23:cb:dd:33:05:60:f0:9d:8f:18:3f:99:26:b6:42: 8f:99:ce:a8:c9:0a:20:b4:a5:15:46:19:fb:2e:45: dd:6d:e0:ee:47:8d:02:e2:a5:45:78:79:21:0d:ae: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CC:D6:BB:6B:7D:15:7D:65:9C:A2:92:38:9F:B0:AA:B5:D9:0E:57 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/18zWu2t9FX1lnKKSOJ-wqrXZDlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.233.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:06:42:d7:0c:0c:2e:1e:8a:4a:b6:1f:8c:9f:30:27:82:b3: 8f:4b:a9:47:33:2f:8b:01:0e:d0:16:0b:25:cc:70:e5:8f:11: 58:a7:4d:2d:56:98:72:05:d8:74:77:fe:82:0f:72:f9:9e:54: c9:08:38:bf:35:ea:43:a7:77:78:75:78:13:0b:6d:7b:22:ad: 8b:33:8c:b6:a7:ee:bd:ae:db:69:cd:fd:16:00:c7:6c:75:a7: 65:e1:fe:37:1c:6d:2e:9f:12:d1:78:1a:0c:bd:43:6f:e5:e2: b6:80:ea:f6:5a:07:3b:46:df:92:25:1f:c0:f4:2d:b5:19:98: e9:b8:6f:15:92:e6:07:63:0a:ec:c1:7d:db:56:7d:26:57:d2: 49:3f:9a:6e:83:93:b1:ff:92:75:0d:fd:f2:1f:0f:3e:b0:ea: 3b:1d:40:93:b5:22:46:40:d2:34:9f:6f:91:e3:9b:79:2f:28: 5a:f1:fa:ad:ad:2e:42:c4:b4:31:08:f9:03:81:4a:e3:88:cf: 17:79:bb:b8:90:ef:f2:f0:6a:12:1b:80:97:52:f4:8c:24:05: 0c:7b:6c:40:5f:b4:fe:3a:62:3b:bc:d0:e1:5e:07:ec:ae:3e: f4:a9:bd:52:a2:df:b1:4d:7c:02:17:15:05:fd:ec:40:3e:73: c6:c6:d3:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHhd3JgecDQL5P6edxZLH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTE2MTU1NjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2NjZDZiYjZiN2QxNTdkNjU5Y2EyOTIzODlmYjBhYWI1ZDkwZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJei47x6nK7j7HT5U+qrk4eXMtK LMvIE/P3Fey2HA1rZkXqeOII3mbRjBRZ1f1DUP0buqbTtYvdd/qgXav+xADXcbdN BgHNonFULYbzTrbh55Dyg8Twx0UmZJAdgliJHcyDxapl8nquQJfB+YeigPY+VcNg EoYq97CUDUZRxZIsiAaaJ5BkJi8fSP137FyJ5ZJ0sBcfArWuq31Qg8Ec2xcRYJS0 nCSspaf+hAjPyXcu3kXjyOKdleKisXfYuh5IyrfoJ+mZ4LbOzm39HMtK6W0jy90z BWDwnY8YP5kmtkKPmc6oyQogtKUVRhn7LkXdbeDuR40C4qVFeHkhDa4tgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfM1rtrfRV9ZZyikjifsKq12Q5XMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvMTh6V3UydDlGWDFsbktLU09KLXdxclhaRGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3pMA0G CSqGSIb3DQEBCwUAA4IBAQBdBkLXDAwuHopKth+MnzAngrOPS6lHMy+LAQ7QFgsl zHDljxFYp00tVphyBdh0d/6CD3L5nlTJCDi/NepDp3d4dXgTC217Iq2LM4y2p+69 rttpzf0WAMdsdadl4f43HG0unxLReBoMvUNv5eK2gOr2Wgc7Rt+SJR/A9C21GZjp uG8VkuYHYwrswX3bVn0mV9JJP5pug5Ox/5J1Df3yHw8+sOo7HUCTtSJGQNI0n2+R 45t5Lyha8fqtrS5CxLQxCPkDgUrjiM8Xebu4kO/y8GoSG4CXUvSMJAUMe2xAX7T+ OmI7vNDhXgfsrj70qb1Sot+xTXwCFxUF/exAPnPGxtOJ -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:51 2026 by rpki-client