This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa File: gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa (raw, json) Hash identifier: WyEGcdxX1fE4gxlSc9tIw2aO8N6fipj9ySbKblEWZfM= Subject key identifier: 81:80:79:F0:0B:0E:B7:05:CF:9C:F3:0D:94:F5:7C:63:F5:1F:AA:C8 Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855 Certificate serial: 019B7F153DE558A985AAEE8A43A72BAAD8A3 Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa Signing time: Fri 02 Jan 2026 14:20:57 +0000 ROA not before: Fri 02 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35454 IP address blocks: 178.21.56.0/21 maxlen: 21 178.21.56.0/24 maxlen: 24 178.21.57.0/24 maxlen: 24 178.21.58.0/24 maxlen: 24 178.21.59.0/24 maxlen: 24 178.21.60.0/24 maxlen: 24 178.21.61.0/24 maxlen: 24 178.21.62.0/24 maxlen: 24 178.21.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3d:e5:58:a9:85:aa:ee:8a:43:a7:2b:aa:d8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=818079f00b0eb705cf9cf30d94f57c63f51faac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:2f:4c:62:e6:83:0a:42:93:20:83:f1:13: 4a:ff:b6:1e:f2:c9:e1:2a:21:6e:02:b7:48:a1:72: 43:f2:1e:cf:f1:8b:ee:0e:8f:63:b6:d6:3b:a0:d6: 94:97:90:64:e5:b5:95:cb:02:71:61:c1:6a:36:eb: a9:7d:37:0a:53:35:3d:75:3e:bd:02:8a:75:c1:50: 04:74:e2:28:3e:cf:ed:da:5c:ba:d2:60:a7:1c:aa: 2d:86:d4:8f:79:1a:cb:0a:56:84:f9:85:60:44:1e: 5d:89:5b:7d:f9:00:27:fb:82:75:7c:6b:06:d7:2e: 06:3e:d8:61:8d:00:6d:57:a4:25:6e:fe:65:e9:4c: 9c:5c:8f:83:a5:42:15:4e:39:a5:af:36:40:11:92: 8b:2b:2c:a9:d1:8c:33:d5:82:c7:31:d6:3e:95:83: 3c:63:38:7e:17:ac:52:51:03:8a:7e:55:0f:a9:44: 1a:3a:9a:ac:a6:e2:d3:c6:86:51:4f:93:ed:dd:3b: 58:ec:8f:de:01:e1:c2:b6:b8:ed:4a:b7:f9:84:26: 0c:fe:ae:f7:a7:59:b5:8c:ca:6f:92:7c:c6:b3:99: 5c:b9:24:86:ac:12:80:f3:ed:e3:05:a7:73:a9:8f: 06:00:35:ff:90:c1:26:ff:55:39:d5:4d:5b:06:c1: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:80:79:F0:0B:0E:B7:05:CF:9C:F3:0D:94:F5:7C:63:F5:1F:AA:C8 X509v3 Authority Key Identifier: keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/gYB58AsOtwXPnPMNlPV8Y_Ufqsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.56.0/21 Signature Algorithm: sha256WithRSAEncryption 27:d5:1f:b2:7c:69:31:89:9b:0a:c7:b6:41:3b:8e:5f:08:7c: e0:74:53:22:5d:44:79:e9:73:4a:a5:a7:7d:6c:2e:40:3e:55: 59:50:08:90:45:65:b4:b7:55:bf:07:2d:68:be:4c:24:08:62: fb:68:e9:bd:09:9d:0c:6c:4c:16:51:97:55:09:91:d6:d1:c6: a8:34:10:10:5f:87:8a:f9:0d:74:3b:8a:a8:a1:2e:31:e9:5b: 7c:71:a8:d0:28:59:44:d6:46:bc:8a:36:ca:71:c6:cc:e5:00: 3f:8c:9e:37:d6:62:8d:ab:cd:03:27:b1:59:60:66:8d:d2:89: 94:04:cc:2c:0d:66:91:a5:41:e7:af:97:ab:62:b1:d4:63:25: ef:60:e5:0b:2c:f8:e5:3a:b5:43:e2:eb:ea:88:9d:ce:aa:53: db:29:7f:92:bb:9c:da:63:61:ac:23:77:ae:66:de:68:46:8b: e2:95:6c:f7:1a:7c:04:e8:24:eb:0d:9b:ea:b8:4b:ea:15:15: 7e:f2:e0:17:18:e9:ab:42:a6:48:30:8c:e2:49:31:fd:7f:aa: ac:28:f6:7c:d2:5e:c7:7e:7b:c9:ba:22:ca:bc:7c:6d:3c:62: 79:09:d2:20:57:38:04:fa:62:fb:37:fd:00:60:47:39:d3:18: b8:75:e9:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FT3lWKmFqu6KQ6crqtijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOTRlYjBlOTg5ODdhMmFkZjhmOTVhMDNlNzg2NTk5MWEy MDE4NTUwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTgwNzlmMDBiMGViNzA1Y2Y5Y2YzMGQ5NGY1N2M2M2Y1MWZhYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdkvTGLmgwpCkyCD8RNK/7Ye8snh KiFuArdIoXJD8h7P8YvuDo9jttY7oNaUl5Bk5bWVywJxYcFqNuupfTcKUzU9dT69 Aop1wVAEdOIoPs/t2ly60mCnHKothtSPeRrLClaE+YVgRB5diVt9+QAn+4J1fGsG 1y4GPthhjQBtV6Qlbv5l6UycXI+DpUIVTjmlrzZAEZKLKyyp0Ywz1YLHMdY+lYM8 Yzh+F6xSUQOKflUPqUQaOpqspuLTxoZRT5Pt3TtY7I/eAeHCtrjtSrf5hCYM/q73 p1m1jMpvknzGs5lcuSSGrBKA8+3jBadzqY8GADX/kMEm/1U51U1bBsEORwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGAefALDrcFz5zzDZT1fGP1H6rIMB8GA1UdIwQY MBaAFNCU6w6YmHoq34+VoD54ZZkaIBhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAt ZTRhODZiMGZmZDJlLzEvZ1lCNThBc090d1hQblBNTmxQVjhZX1VmcXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zN2RlNTktOWNhNC00NDdlLWE1MTAtZTRhODZiMGZmZDJl LzEvMEpUckRwaVllaXJmajVXZ1BuaGxtUm9nR0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDshU4MA0G CSqGSIb3DQEBCwUAA4IBAQAn1R+yfGkxiZsKx7ZBO45fCHzgdFMiXUR56XNKpad9 bC5APlVZUAiQRWW0t1W/By1ovkwkCGL7aOm9CZ0MbEwWUZdVCZHW0caoNBAQX4eK +Q10O4qooS4x6Vt8cajQKFlE1ka8ijbKccbM5QA/jJ431mKNq80DJ7FZYGaN0omU BMwsDWaRpUHnr5erYrHUYyXvYOULLPjlOrVD4uvqiJ3OqlPbKX+Su5zaY2GsI3eu Zt5oRovilWz3GnwE6CTrDZvquEvqFRV+8uAXGOmrQqZIMIziSTH9f6qsKPZ80l7H fnvJuiLKvHxtPGJ5CdIgVzgE+mL7N/0AYEc50xi4dek9 -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:13 2026 by rpki-client