This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jFaYiFLbe55xWFWeErU6ohA5CZc.roa File: jFaYiFLbe55xWFWeErU6ohA5CZc.roa (raw, json) Hash identifier: m490gnBOSyRIY7/mrYGcUMkd3PT7RVs1cw/0TuG5R64= Subject key identifier: 8C:56:98:88:52:DB:7B:9E:71:58:55:9E:12:B5:3A:A2:10:39:09:97 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED1AD2B5EED417AFC5F22A6EB0F46 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jFaYiFLbe55xWFWeErU6ohA5CZc.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 178.253.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:ad:2b:5e:ed:41:7a:fc:5f:22:a6:eb:0f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c56988852db7b9e7158559e12b53aa210390997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:f3:47:6b:75:0d:2f:af:ae:c4:54:c7:65: 32:52:29:ee:ac:81:c7:6b:d7:66:e0:fb:13:23:5c: 93:39:f8:7d:8d:9f:90:f5:64:e3:02:4f:eb:5b:1f: a8:e0:0f:83:4f:57:fc:9c:f3:5e:21:43:88:47:f5: f7:35:00:5f:f8:e5:99:e6:9e:41:80:17:6f:4d:ee: b9:2f:75:fe:aa:f9:dd:0e:51:8a:f1:df:9c:16:e6: c5:4b:72:a9:f5:98:5e:68:59:96:c1:b4:48:85:c7: ff:c5:6a:e0:ab:f0:3c:05:83:a7:5f:ba:fd:78:f9: 7f:3b:e1:19:f5:00:c5:02:0f:a8:b7:2f:e3:27:bd: 75:94:60:ca:c7:5f:1f:8b:c2:4f:58:75:e9:5f:de: 2d:78:78:72:db:cc:91:c5:06:23:cf:1f:06:1b:46: 1b:ab:be:1c:63:e7:11:af:e5:39:bd:79:c8:06:90: 54:ca:c7:f6:2f:18:68:a9:08:bc:98:5e:e4:fd:89: d7:a1:c1:2a:e5:0d:37:c6:9a:76:14:f5:59:03:19: 20:09:6b:4c:de:e7:a2:33:5a:0d:d1:66:ec:6a:5b: 9c:b6:75:8a:14:db:d8:63:b8:d1:28:09:1b:ab:5e: db:fd:81:a7:a7:1d:6a:11:47:a8:99:1b:06:d8:5d: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:56:98:88:52:DB:7B:9E:71:58:55:9E:12:B5:3A:A2:10:39:09:97 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jFaYiFLbe55xWFWeErU6ohA5CZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.205.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:15:fe:12:96:78:24:da:2c:f8:e7:6d:20:34:bc:c1:fd:7f: b0:25:3d:86:53:a9:7b:ea:0b:ed:7f:98:9c:7a:1a:10:e1:f7: 80:a5:5c:96:0f:c8:a0:b3:9d:b9:ab:72:5f:df:6a:67:35:40: c9:cc:53:04:71:d6:8c:9c:56:8b:dc:4f:89:e0:41:83:3c:d8: 0f:3b:a3:47:01:19:31:41:7c:c3:98:ae:6b:fd:35:e6:4c:8a: e8:f7:94:8e:9c:55:d4:57:b7:00:33:8b:7d:9c:85:c4:da:f7: 0b:98:11:c4:bc:4a:05:12:d7:45:a3:65:6e:ec:46:37:66:de: f3:59:af:23:71:7e:cb:b0:c5:46:72:53:5a:c8:6c:1a:5c:3d: cc:0e:e9:ef:af:b4:70:34:b6:74:09:25:d4:64:28:99:66:a6: 01:8e:88:bb:07:8b:29:4b:7e:be:06:e8:d5:a3:d1:c0:9a:da: 62:fd:76:6a:b8:9c:c3:16:a3:3f:ff:9e:bb:e6:52:8e:50:56: 84:ba:ec:e1:9e:65:30:86:8f:ef:33:1b:4b:5e:fd:90:74:7f: e7:85:a9:11:33:09:48:12:37:a6:f9:63:d9:cf:24:03:ac:4e: 29:d1:7d:7c:a6:13:9e:89:59:5a:f9:3f:e1:5b:95:16:92:9a: 7d:a4:dd:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftGtK17tQXr8XyKm6w9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzU2OTg4ODUyZGI3YjllNzE1ODU1OWUxMmI1M2FhMjEwMzkwOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5PzR2t1DS+vrsRUx2UyUinurIHH a9dm4PsTI1yTOfh9jZ+Q9WTjAk/rWx+o4A+DT1f8nPNeIUOIR/X3NQBf+OWZ5p5B gBdvTe65L3X+qvndDlGK8d+cFubFS3Kp9ZheaFmWwbRIhcf/xWrgq/A8BYOnX7r9 ePl/O+EZ9QDFAg+oty/jJ711lGDKx18fi8JPWHXpX94teHhy28yRxQYjzx8GG0Yb q74cY+cRr+U5vXnIBpBUysf2LxhoqQi8mF7k/YnXocEq5Q03xpp2FPVZAxkgCWtM 3ueiM1oN0WbsaluctnWKFNvYY7jRKAkbq17b/YGnpx1qEUeomRsG2F1nTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxWmIhS23uecVhVnhK1OqIQOQmXMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvakZhWWlGTGJlNTV4V0ZXZUVyVTZvaEE1Q1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3NMA0G CSqGSIb3DQEBCwUAA4IBAQCeFf4Slngk2iz4520gNLzB/X+wJT2GU6l76gvtf5ic ehoQ4feApVyWD8igs525q3Jf32pnNUDJzFMEcdaMnFaL3E+J4EGDPNgPO6NHARkx QXzDmK5r/TXmTIro95SOnFXUV7cAM4t9nIXE2vcLmBHEvEoFEtdFo2Vu7EY3Zt7z Wa8jcX7LsMVGclNayGwaXD3MDunvr7RwNLZ0CSXUZCiZZqYBjoi7B4spS36+BujV o9HAmtpi/XZquJzDFqM//5675lKOUFaEuuzhnmUwho/vMxtLXv2QdH/nhakRMwlI Ejem+WPZzyQDrE4p0X18phOeiVla+T/hW5UWkpp9pN3e -----END CERTIFICATE-----Generated at Sun Jan 18 10:03:20 2026 by rpki-client