This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa File: zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa (raw, json) Hash identifier: C+8e5I+GbSwAG5M+lCl7ucBJaBL9QyOfEWbG2V8egMY= Subject key identifier: CC:98:8E:5C:66:C6:C1:45:80:40:D7:55:A3:C5:B4:90:D5:ED:4E:F6 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2A779A8C5956920491D646D5E193 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29497 IP address blocks: 178.155.4.0/24 maxlen: 24 178.155.5.0/24 maxlen: 24 178.155.7.0/24 maxlen: 24 2a00:1fa1::/33 maxlen: 33 2a00:1fa1:e00::/40 maxlen: 40 2a00:1fa1:4e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2a:77:9a:8c:59:56:92:04:91:d6:46:d5:e1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc988e5c66c6c1458040d755a3c5b490d5ed4ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:f3:1e:38:4c:77:60:6e:1c:32:4a:e2:cf: 23:57:ba:03:bc:d1:67:39:09:f2:4e:b8:f8:97:d6: 67:4b:e8:0e:ce:ce:99:dc:62:fc:bc:d6:e0:0d:03: c6:d5:8e:81:b1:a7:ab:a8:04:fb:1f:55:78:8c:fc: 3e:49:c4:3b:03:1d:76:05:36:0e:e4:23:74:4c:69: ed:64:52:f8:97:27:5a:45:62:3b:ae:a9:16:8a:c5: 7e:33:bc:41:ec:71:46:7a:1f:af:21:53:11:70:ed: c8:dc:7f:e8:08:01:35:21:2a:d9:df:ea:11:12:f7: 4b:c3:64:5f:2c:27:9e:12:68:81:5e:6d:d6:66:06: 11:bc:9d:ba:60:53:23:74:2a:33:9a:96:1f:53:14: f0:1e:32:e3:cf:39:6c:9c:cb:c4:03:37:60:e2:f9: 56:a6:70:64:21:a4:92:f2:3e:ec:bb:19:c0:36:e2: 63:88:bd:74:29:ef:2d:6f:54:04:40:d5:80:a0:bb: 77:ff:49:37:13:4c:5c:8e:a2:dc:ef:5c:0f:b3:97: 72:4f:29:7d:98:a2:03:c2:a0:13:4c:82:88:ba:e7: 96:31:41:c0:cd:a0:fb:38:93:5a:af:56:9b:02:91: f5:0b:68:79:2e:b9:b6:81:8f:74:ad:4a:59:95:55: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:8E:5C:66:C6:C1:45:80:40:D7:55:A3:C5:B4:90:D5:ED:4E:F6 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zJiOXGbGwUWAQNdVo8W0kNXtTvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.155.4.0/23 178.155.7.0/24 IPv6: 2a00:1fa1::/33 Signature Algorithm: sha256WithRSAEncryption 05:20:43:72:8b:e8:6b:c1:9d:0b:91:4e:8c:bb:ff:0b:7b:ce: d4:b8:b9:fa:be:53:36:3b:a4:35:a4:3d:b9:13:25:b9:15:45: 5c:6b:a8:5f:6e:b6:4f:cc:4a:14:d4:cb:8e:cb:4b:d5:45:d6: d6:cf:e1:8b:10:12:f4:e2:58:ab:1a:35:27:7d:86:58:9d:3e: 40:6a:0c:cd:08:fa:db:fc:1e:b1:26:2e:71:82:57:58:d7:e8: 12:50:33:5a:87:01:0b:15:47:f3:85:94:ac:8c:15:1e:d2:3c: a4:6e:dc:0b:24:e3:61:f5:46:9c:4a:39:85:51:26:91:f4:87: 34:5b:87:86:2c:de:b3:fd:b4:60:38:d5:56:1c:ea:7a:f8:5b: 42:43:69:61:24:a5:41:62:ba:82:b8:ac:24:a7:de:fe:6e:1b: 52:d7:bd:ef:1f:42:9c:0b:e9:84:03:9d:d4:43:ff:4e:0a:22: a5:3d:89:22:90:43:3f:3c:ed:5f:0e:c6:fb:e2:cd:af:dd:09: 71:f1:5a:be:34:40:c0:8a:85:42:58:21:5b:d7:3b:f2:26:e1: db:9f:8c:4c:5a:2d:f2:23:72:31:21:bc:c6:36:fe:61:12:83: 9b:a3:8a:22:0d:67:84:11:ca:59:50:75:ce:12:6e:b3:7c:b0: bf:9b:c8:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9yip3moxZVpIEkdZG1eGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzk4OGU1YzY2YzZjMTQ1ODA0MGQ3NTVhM2M1YjQ5MGQ1ZWQ0ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tvzHjhMd2BuHDJK4s8jV7oDvNFn OQnyTrj4l9ZnS+gOzs6Z3GL8vNbgDQPG1Y6BsaerqAT7H1V4jPw+ScQ7Ax12BTYO 5CN0TGntZFL4lydaRWI7rqkWisV+M7xB7HFGeh+vIVMRcO3I3H/oCAE1ISrZ3+oR EvdLw2RfLCeeEmiBXm3WZgYRvJ26YFMjdCozmpYfUxTwHjLjzzlsnMvEAzdg4vlW pnBkIaSS8j7suxnANuJjiL10Ke8tb1QEQNWAoLt3/0k3E0xcjqLc71wPs5dyTyl9 mKIDwqATTIKIuueWMUHAzaD7OJNar1abApH1C2h5Lrm2gY90rUpZlVUHnwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMyYjlxmxsFFgEDXVaPFtJDV7U72MB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvekppT1hHYkd3VVdBUU5kVm84VzBrTlh0VHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBspsEAwQA spsHMA4EAgACMAgDBgcqAB+hADANBgkqhkiG9w0BAQsFAAOCAQEABSBDcovoa8Gd C5FOjLv/C3vO1Li5+r5TNjukNaQ9uRMluRVFXGuoX262T8xKFNTLjstL1UXW1s/h ixAS9OJYqxo1J32GWJ0+QGoMzQj62/wesSYucYJXWNfoElAzWocBCxVH84WUrIwV HtI8pG7cCyTjYfVGnEo5hVEmkfSHNFuHhizes/20YDjVVhzqevhbQkNpYSSlQWK6 grisJKfe/m4bUte97x9CnAvphAOd1EP/TgoipT2JIpBDPzztXw7G++LNr90JcfFa vjRAwIqFQlghW9c78ibh25+MTFot8iNyMSG8xjb+YRKDm6OKIg1nhBHKWVB1zhJu s3ywv5vI7w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client