This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/X7EGq3ULp4qMjdusm-fC_K2E7p4.roa File: X7EGq3ULp4qMjdusm-fC_K2E7p4.roa (raw, json) Hash identifier: DCGD9YxklsauNoagw/am2/7dOGgzTpV9Ou4m28+2cEg= Subject key identifier: 5F:B1:06:AB:75:0B:A7:8A:8C:8D:DB:AC:9B:E7:C2:FC:AD:84:EE:9E Certificate issuer: /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Certificate serial: 019B7F13DDBD455C61A07BE0DF918AC86B0C Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/X7EGq3ULp4qMjdusm-fC_K2E7p4.roa Signing time: Fri 02 Jan 2026 14:19:26 +0000 ROA not before: Fri 02 Jan 2026 14:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212606 IP address blocks: 185.178.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:dd:bd:45:5c:61:a0:7b:e0:df:91:8a:c8:6b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a Validity Not Before: Jan 2 14:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fb106ab750ba78a8c8ddbac9be7c2fcad84ee9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:27:87:72:d3:7d:4f:57:8e:87:ad:fc:18: a6:f5:e2:e6:7c:52:d7:5b:3a:64:97:89:09:31:16: 91:25:74:32:f8:2a:2c:3d:83:09:a5:3f:55:36:59: 57:87:77:3b:92:d4:43:f5:f8:71:45:29:aa:1a:cd: a5:0c:e3:39:3f:e7:b8:50:cd:be:9c:e0:4d:23:31: ee:db:f6:e3:9b:0e:87:66:dd:22:48:84:36:1f:84: f8:17:5d:4a:c4:a4:65:be:8a:c6:3b:bd:00:18:67: a6:54:39:70:d3:07:a9:3b:5d:37:ab:11:c6:6a:29: 5f:9f:1d:b7:29:ca:04:dd:13:e5:67:fc:ad:cf:18: 21:50:1c:04:34:c1:14:b7:fc:3f:74:27:1d:fe:9e: 03:d4:cc:e1:b6:42:11:8b:fd:b1:6f:2d:22:fe:c8: 4b:41:2c:0e:33:96:0e:2d:2b:3e:5d:8b:da:33:3d: a4:85:aa:19:2f:0a:85:03:bf:cf:aa:e1:d8:ef:f9: 76:11:95:27:fc:d4:5f:02:2f:3e:ac:af:f0:00:f4: 22:04:94:77:1b:74:5f:07:3d:9f:36:42:08:3b:33: 2f:28:23:91:d3:40:e4:4c:53:1a:13:4f:c4:42:ce: 34:6a:80:d6:2f:c5:fc:e2:c6:c2:d6:b3:e3:d5:bc: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B1:06:AB:75:0B:A7:8A:8C:8D:DB:AC:9B:E7:C2:FC:AD:84:EE:9E X509v3 Authority Key Identifier: keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/X7EGq3ULp4qMjdusm-fC_K2E7p4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.49.0/24 Signature Algorithm: sha256WithRSAEncryption 72:68:0b:ae:57:a6:70:52:ae:33:b9:71:77:3a:c0:7e:a5:18: e0:4e:4c:d5:2f:07:7b:5e:9a:41:c4:7f:1f:30:17:9e:bd:2f: ac:81:fc:97:7b:e1:f5:59:a3:7c:8e:68:e6:53:8b:e4:61:37: 3e:3e:de:29:f1:e1:59:6a:9b:34:52:3c:f7:a6:45:19:63:1b: fa:d2:15:c9:03:35:52:19:30:42:11:0d:70:05:3f:6c:20:5a: 99:56:1e:d9:5d:2e:7d:b5:9b:16:d5:0a:1e:f4:e9:09:01:9a: 14:b9:11:b3:c1:f3:59:02:1c:7e:44:6d:e7:e1:b6:53:1a:45: e0:42:7c:82:54:83:bb:2b:29:67:57:c9:48:b1:fa:21:48:ed: 2f:26:76:57:c0:bf:27:8b:1c:38:6f:91:e4:84:df:d7:d7:8d: ca:46:56:a1:c6:36:74:9d:7b:8e:bd:0e:73:8a:54:36:22:86: c3:f5:16:83:c4:6d:38:00:d8:5d:fd:82:6c:bf:00:b2:76:6a: e2:58:c0:81:83:fa:05:8e:78:6a:42:95:28:4d:83:a7:80:1b: 99:c1:fc:18:7c:02:3d:f1:7a:98:20:34:18:1b:54:dc:6e:d2: da:8b:e0:fa:3a:1a:97:e8:66:17:c7:59:d3:86:96:6d:30:d8: 10:e4:12:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E929RVxhoHvg35GKyGsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk MmQyN2EwHhcNMjYwMTAyMTQxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmIxMDZhYjc1MGJhNzhhOGM4ZGRiYWM5YmU3YzJmY2FkODRlZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvonh3LTfU9Xjoet/Bim9eLmfFLX Wzpkl4kJMRaRJXQy+CosPYMJpT9VNllXh3c7ktRD9fhxRSmqGs2lDOM5P+e4UM2+ nOBNIzHu2/bjmw6HZt0iSIQ2H4T4F11KxKRlvorGO70AGGemVDlw0wepO103qxHG ailfnx23KcoE3RPlZ/ytzxghUBwENMEUt/w/dCcd/p4D1MzhtkIRi/2xby0i/shL QSwOM5YOLSs+XYvaMz2khaoZLwqFA7/PquHY7/l2EZUn/NRfAi8+rK/wAPQiBJR3 G3RfBz2fNkIIOzMvKCOR00DkTFMaE0/EQs40aoDWL8X84sbC1rPj1byjYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF+xBqt1C6eKjI3brJvnwvythO6eMB8GA1UdIwQY MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt ZGU5N2U5MTQxZmVkLzEvWDdFR3EzVUxwNHFNamR1c20tZkNfSzJFN3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubIxMA0G CSqGSIb3DQEBCwUAA4IBAQByaAuuV6ZwUq4zuXF3OsB+pRjgTkzVLwd7XppBxH8f MBeevS+sgfyXe+H1WaN8jmjmU4vkYTc+Pt4p8eFZaps0Ujz3pkUZYxv60hXJAzVS GTBCEQ1wBT9sIFqZVh7ZXS59tZsW1Qoe9OkJAZoUuRGzwfNZAhx+RG3n4bZTGkXg QnyCVIO7KylnV8lIsfohSO0vJnZXwL8nixw4b5HkhN/X143KRlahxjZ0nXuOvQ5z ilQ2IobD9RaDxG04ANhd/YJsvwCydmriWMCBg/oFjnhqQpUoTYOngBuZwfwYfAI9 8XqYIDQYG1TcbtLai+D6OhqX6GYXx1nThpZtMNgQ5BIi -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:50 2026 by rpki-client