This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/744IgXzHRA7i_KaZPXPHUM0eSxg.roa File: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (raw, json) Hash identifier: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A= Subject key identifier: EF:8E:08:81:7C:C7:44:0E:E2:FC:A6:99:3D:73:C7:50:CD:1E:4B:18 Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Certificate serial: 019B77C7328CFAE8477C2EB8A83E8AFB63BB Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/744IgXzHRA7i_KaZPXPHUM0eSxg.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206288 IP address blocks: 185.178.180.0/22 maxlen: 22 2a0a:6780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:32:8c:fa:e8:47:7c:2e:b8:a8:3e:8a:fb:63:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef8e08817cc7440ee2fca6993d73c750cd1e4b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:34:a8:08:7c:ba:7f:b9:ea:f0:0b:7a:61: 54:58:4b:1a:e6:48:74:dc:aa:09:24:0f:67:5f:b3: 0d:52:3e:1f:a5:40:e9:ee:f0:d6:31:38:b7:84:a2: 32:ca:78:7e:4c:bf:65:8c:e5:a4:ac:b6:82:2e:94: 98:c5:c0:40:1a:66:89:94:f8:0e:69:39:2f:a2:f0: 62:ed:b2:f9:b0:a4:16:65:d3:88:dc:03:0e:3b:94: 44:27:54:17:0e:9b:17:0a:e3:88:6c:37:b2:6c:21: 2c:e9:47:ba:eb:bf:e3:ca:1a:ab:d7:ba:21:05:09: 44:3c:6c:71:1e:a9:49:01:d3:9c:d3:71:48:2d:fc: 8b:7e:0d:b1:b8:d4:7b:af:b0:5e:03:90:c6:d2:76: af:71:1e:f3:7d:85:3e:7e:9d:05:9f:a2:85:e0:f1: 4b:7b:ee:67:85:e0:e6:38:47:80:81:b1:0d:10:38: 51:cf:18:d9:40:b7:27:f8:ca:e7:53:85:85:55:cf: 48:f9:95:9c:f7:2b:62:0d:d9:64:6f:af:7a:fd:1e: 7e:8e:c9:76:a4:46:c3:5e:5d:44:68:f0:00:d8:81: 2e:04:ad:e8:b0:4d:ae:b6:b6:d9:7d:5a:05:75:de: 8f:51:42:d1:28:1b:19:71:b6:74:55:32:93:fc:8d: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:08:81:7C:C7:44:0E:E2:FC:A6:99:3D:73:C7:50:CD:1E:4B:18 X509v3 Authority Key Identifier: keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/744IgXzHRA7i_KaZPXPHUM0eSxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.180.0/22 IPv6: 2a0a:6780::/29 Signature Algorithm: sha256WithRSAEncryption 5e:c9:3e:b0:27:ad:d4:4b:ac:ed:ce:f4:eb:8e:24:de:e6:31: 09:04:42:34:b4:fe:3b:fe:a1:aa:26:5e:ab:89:fa:86:45:1a: b0:06:35:e2:5f:41:98:a0:2e:d0:54:65:f4:f2:d8:6a:1f:98: fd:8b:14:1a:9e:33:09:ce:9a:2e:e0:e2:bd:23:b9:cb:dc:74: f4:75:94:d5:90:ea:fb:de:7b:ea:a3:05:45:41:e0:80:37:dd: 41:b3:29:c0:6b:a9:de:3b:6a:4d:92:dd:c4:d1:b3:c3:20:be: 24:49:b0:d1:1c:cc:46:18:3c:ae:bb:14:d3:5a:e3:30:e6:49: 22:2a:7e:5a:8c:b8:38:9e:c3:6c:9a:34:ad:3b:87:fe:18:1b: 49:60:a5:72:c2:2d:ba:74:de:5a:41:dd:d6:ff:8f:16:ad:c9: fd:75:31:9c:3b:d4:68:3c:9f:f9:f4:f4:19:2b:be:f8:ef:8f: c0:1b:fd:dd:7b:f5:8f:a4:6c:92:b6:31:5a:d9:3d:a6:da:1b: 7a:f7:fd:f4:3f:38:10:0b:f4:e1:2f:5a:2d:31:24:d4:84:71: 3c:8a:f1:92:1f:d7:ed:a6:bc:2d:d6:83:74:c3:d0:dd:04:29: bb:bf:56:fb:b4:f5:87:dc:65:48:a6:d3:ea:6a:ff:98:9e:36: 4f:c8:5e:c3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzKM+uhHfC64qD6K+2O7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTY0YTU3NTdmZGQ1NzI1YTYwODQ0ZjJhZTdlZjczYjEw N2E0YzAwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjhlMDg4MTdjYzc0NDBlZTJmY2E2OTkzZDczYzc1MGNkMWU0YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIQ0qAh8un+56vALemFUWEsa5kh0 3KoJJA9nX7MNUj4fpUDp7vDWMTi3hKIyynh+TL9ljOWkrLaCLpSYxcBAGmaJlPgO aTkvovBi7bL5sKQWZdOI3AMOO5REJ1QXDpsXCuOIbDeybCEs6Ue667/jyhqr17oh BQlEPGxxHqlJAdOc03FILfyLfg2xuNR7r7BeA5DG0navcR7zfYU+fp0Fn6KF4PFL e+5nheDmOEeAgbENEDhRzxjZQLcn+MrnU4WFVc9I+ZWc9ytiDdlkb696/R5+jsl2 pEbDXl1EaPAA2IEuBK3osE2utrbZfVoFdd6PUULRKBsZcbZ0VTKT/I14YQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO+OCIF8x0QO4vymmT1zx1DNHksYMB8GA1UdIwQY MBaAFCgWSldX/dVyWmCETyrn73OxB6TAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEt YWVhZTViYmMzOTIwLzEvNzQ0SWdYekhSQTdpX0thWlBYUEhVTTBlU3hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEtYWVhZTViYmMzOTIw LzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubK0MA0E AgACMAcDBQMqCmeAMA0GCSqGSIb3DQEBCwUAA4IBAQBeyT6wJ63US6ztzvTrjiTe 5jEJBEI0tP47/qGqJl6rifqGRRqwBjXiX0GYoC7QVGX08thqH5j9ixQanjMJzpou 4OK9I7nL3HT0dZTVkOr73nvqowVFQeCAN91BsynAa6neO2pNkt3E0bPDIL4kSbDR HMxGGDyuuxTTWuMw5kkiKn5ajLg4nsNsmjStO4f+GBtJYKVywi26dN5aQd3W/48W rcn9dTGcO9RoPJ/59PQZK77474/AG/3de/WPpGyStjFa2T2m2ht69/30PzgQC/Th L1otMSTUhHE8ivGSH9ftprwt1oN0w9DdBCm7v1b7tPWH3GVIptPqav+YnjZPyF7D -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:45 2026 by rpki-client