This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/11f9_EaW8zxcu9dcHLvxzqf38Lo.roa File: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (raw, json) Hash identifier: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o= Subject key identifier: D7:57:FD:FC:46:96:F3:3C:5C:BB:D7:5C:1C:BB:F1:CE:A7:F7:F0:BA Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A3490D598461D1DB6EE48D6C702948 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/11f9_EaW8zxcu9dcHLvxzqf38Lo.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 178.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:49:0d:59:84:61:d1:db:6e:e4:8d:6c:70:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d757fdfc4696f33c5cbbd75c1cbbf1cea7f7f0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:f5:f4:e7:79:2e:93:c5:21:a5:cd:df:fa: 9a:74:42:21:f2:7c:3f:19:a0:45:78:b5:e2:21:7a: 57:d6:4b:8d:a0:84:5d:19:52:88:bc:a1:75:26:bc: ae:cf:23:2c:18:11:52:43:40:a0:db:bf:1e:22:fe: f3:27:25:94:73:69:32:17:0f:bd:77:ef:b2:da:aa: ce:92:bd:68:ce:c8:17:94:b6:af:e8:cf:70:e4:a9: 50:43:4f:de:a8:8a:66:c5:cf:04:9a:c5:dc:1a:aa: f2:5a:83:67:70:bd:b2:6f:a0:23:ef:11:2d:b8:da: 05:4c:73:1e:04:79:2c:ab:e6:de:c9:da:cc:e6:ca: 3b:84:f2:10:70:09:27:3d:d8:d3:38:6e:bf:6d:4d: dd:00:56:16:f1:47:c0:6a:3a:ae:7b:86:29:d8:cd: c1:5e:cf:1c:7d:2f:62:a2:00:a9:00:8d:ed:f1:f1: 16:31:a3:e2:62:3d:bd:ab:97:08:38:78:d8:71:4d: 18:1e:89:6a:34:e1:1f:07:bd:ea:c4:a1:67:f4:b0: 2d:c4:d6:4d:22:f2:a8:14:01:3a:6c:c2:58:7d:3b: bf:39:d3:07:14:56:a7:4c:be:c9:44:e9:6f:47:86: ab:49:4a:a0:fb:9a:e6:e8:42:f2:01:8a:37:c0:3b: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:FD:FC:46:96:F3:3C:5C:BB:D7:5C:1C:BB:F1:CE:A7:F7:F0:BA X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/11f9_EaW8zxcu9dcHLvxzqf38Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.32.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:76:39:64:e6:79:a2:fb:ff:67:0b:a7:55:f5:33:f1:a3:e6: bf:a1:95:12:8c:8d:22:7d:4d:47:42:65:1c:c5:51:ff:16:a6: e9:11:9c:fc:c6:0b:8b:6e:e1:d7:e8:96:cb:14:ad:6a:9d:e0: 96:d7:a7:6c:44:bb:7a:4f:8b:d1:99:77:d5:78:bf:b2:c1:e9: 37:39:67:d6:5f:fd:09:36:59:42:54:67:d1:fd:a1:81:f1:74: 38:52:01:1d:60:5b:d7:28:85:2a:8f:3a:28:11:d1:21:03:69: b1:fc:62:1a:d4:29:f6:0e:b7:36:4e:b1:1a:4d:78:67:26:eb: f7:84:51:23:ec:e5:ad:76:45:40:ae:fc:b2:e7:ca:4e:e2:d0: 27:e1:3c:b3:cb:69:de:d7:26:b1:e6:f9:5d:d2:19:e5:19:45: a7:a2:11:cb:e2:1e:98:03:bf:7c:5b:68:f9:1d:b3:64:58:ed: 9c:2c:89:3c:13:a7:39:32:6d:e8:65:74:1f:8a:bb:d9:07:80: 4b:ab:23:b2:b3:bc:31:20:96:d5:00:a5:5b:ae:e0:bb:c6:09: a7:59:bf:11:37:6f:74:12:65:15:4b:8f:fe:51:f8:75:31:32: 32:85:d6:56:07:a8:a0:f7:4a:a9:61:2c:76:9e:50:72:b4:98: c9:57:1f:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0kNWYRh0dtu5I1scClIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU3ZmRmYzQ2OTZmMzNjNWNiYmQ3NWMxY2JiZjFjZWE3ZjdmMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQL19Od5LpPFIaXN3/qadEIh8nw/ GaBFeLXiIXpX1kuNoIRdGVKIvKF1JryuzyMsGBFSQ0Cg278eIv7zJyWUc2kyFw+9 d++y2qrOkr1ozsgXlLav6M9w5KlQQ0/eqIpmxc8EmsXcGqryWoNncL2yb6Aj7xEt uNoFTHMeBHksq+beydrM5so7hPIQcAknPdjTOG6/bU3dAFYW8UfAajque4Yp2M3B Xs8cfS9iogCpAI3t8fEWMaPiYj29q5cIOHjYcU0YHolqNOEfB73qxKFn9LAtxNZN IvKoFAE6bMJYfTu/OdMHFFanTL7JROlvR4arSUqg+5rm6ELyAYo3wDtFnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdX/fxGlvM8XLvXXBy78c6n9/C6MB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvMTFmOV9FYVc4enhjdTlkY0hMdnh6cWYzOExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv0gMA0G CSqGSIb3DQEBCwUAA4IBAQCfdjlk5nmi+/9nC6dV9TPxo+a/oZUSjI0ifU1HQmUc xVH/FqbpEZz8xguLbuHX6JbLFK1qneCW16dsRLt6T4vRmXfVeL+ywek3OWfWX/0J NllCVGfR/aGB8XQ4UgEdYFvXKIUqjzooEdEhA2mx/GIa1Cn2Drc2TrEaTXhnJuv3 hFEj7OWtdkVArvyy58pO4tAn4Tyzy2ne1yax5vld0hnlGUWnohHL4h6YA798W2j5 HbNkWO2cLIk8E6c5Mm3oZXQfirvZB4BLqyOys7wxIJbVAKVbruC7xgmnWb8RN290 EmUVS4/+Ufh1MTIyhdZWB6ig90qpYSx2nlBytJjJVx/g -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:54 2026 by rpki-client