This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/RiT1T6npNSXEXd8fhbHiM4637q0.roa File: RiT1T6npNSXEXd8fhbHiM4637q0.roa (raw, json) Hash identifier: NHkdWxbHLzyfPJ1mnvKUICI3ejIRSL1dMC4QU4Yd+Ig= Subject key identifier: 46:24:F5:4F:A9:E9:35:25:C4:5D:DF:1F:85:B1:E2:33:8E:B7:EE:AD Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d Certificate serial: 019B78A21013FF66769559645C4CB12169AF Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/RiT1T6npNSXEXd8fhbHiM4637q0.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50894 IP address blocks: 178.22.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:10:13:ff:66:76:95:59:64:5c:4c:b1:21:69:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4624f54fa9e93525c45ddf1f85b1e2338eb7eead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:e7:74:94:e3:f6:bc:78:20:7f:ee:f7:fb: 28:c6:c7:ca:bb:46:f0:7e:34:63:ea:b4:12:9d:68: 80:6d:9c:33:86:61:2a:17:fd:f4:e5:f6:14:77:18: b2:52:25:44:a9:a6:8d:e7:5d:01:ac:5b:5a:e6:59: a5:dd:f3:10:9a:00:7d:b9:ed:3e:fa:b8:58:a0:00: 18:6d:cd:ba:e2:55:92:76:7d:3b:53:13:53:ca:d8: 87:a7:8a:b5:0f:15:3d:40:09:1e:c0:39:00:7c:32: 05:b4:3f:2b:1a:46:d8:43:b1:c5:3d:68:6e:64:d4: a3:96:e6:a5:49:e1:d9:b4:fa:6f:d6:1c:44:aa:ba: b3:9c:b1:05:0c:67:94:99:f5:e9:1d:e0:2d:98:75: e2:b5:b0:2a:ff:29:5e:c7:c6:21:67:0c:d1:82:14: 1e:86:e7:f0:1a:92:bd:ba:1f:b7:4a:ca:e4:d4:1c: 57:39:40:b8:9a:a2:7f:54:fd:4a:2b:c1:ad:7c:68: f2:b0:1d:53:4e:89:56:79:8e:27:8f:31:8d:82:9a: 31:d5:6c:be:cc:f2:47:01:f4:cd:24:1f:17:5c:cd: ab:8f:87:00:9d:15:a2:9d:0b:7e:a5:ce:bc:c6:09: ea:b9:05:35:76:14:78:cd:d9:27:09:af:61:2e:da: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:24:F5:4F:A9:E9:35:25:C4:5D:DF:1F:85:B1:E2:33:8E:B7:EE:AD X509v3 Authority Key Identifier: keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/RiT1T6npNSXEXd8fhbHiM4637q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.22.240.0/21 Signature Algorithm: sha256WithRSAEncryption 24:3f:a1:fa:07:01:fa:82:44:60:91:3f:11:4c:8b:06:34:f1: 9e:d7:cc:92:eb:f3:a1:fc:11:dd:d6:7b:48:8c:8b:db:57:4e: 9b:77:57:de:80:22:8e:62:20:d8:83:88:d5:1f:0e:95:4d:4c: cf:94:dc:d0:d1:53:8e:53:5d:e5:a5:a1:6f:60:9c:c8:d7:25: 8a:a3:26:60:54:fe:7d:98:7b:a2:00:65:de:c2:75:4e:f8:8b: fe:73:60:9d:86:f7:fd:c7:bb:50:a7:a7:f9:20:f3:f8:d8:ba: 1c:e6:ae:87:46:97:2a:5d:71:c9:12:ff:f8:74:4c:2d:bd:1d: c2:79:b2:fe:9d:46:36:da:9b:c8:c1:9d:34:85:7c:5c:21:19: ef:89:9f:2f:22:ec:93:d1:0d:4a:79:76:a5:a5:ca:48:0d:6b: a5:17:c3:76:40:d1:18:dc:75:b2:d1:cf:fc:c5:04:5d:d9:1a: d3:19:f2:ef:5d:87:35:91:23:e0:42:bc:04:89:a4:07:21:23: 50:fc:45:0f:65:e3:af:c8:bb:1a:e0:81:2f:25:09:e4:8e:c0: e0:62:0e:1c:da:b8:09:60:18:d0:3a:c1:3e:b9:03:a1:86:25: 9c:c8:ae:ce:ba:38:de:f3:18:2c:b7:e9:4b:0a:ee:6a:90:37: fe:87:3d:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohAT/2Z2lVlkXEyxIWmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2RjMTkzMDllNjc4YzE0ODI1ZmM3MjA4M2NhMWRlYzc4 NDNmNGQwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjI0ZjU0ZmE5ZTkzNTI1YzQ1ZGRmMWY4NWIxZTIzMzhlYjdlZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOvndJTj9rx4IH/u9/soxsfKu0bw fjRj6rQSnWiAbZwzhmEqF/305fYUdxiyUiVEqaaN510BrFta5lml3fMQmgB9ue0+ +rhYoAAYbc264lWSdn07UxNTytiHp4q1DxU9QAkewDkAfDIFtD8rGkbYQ7HFPWhu ZNSjlualSeHZtPpv1hxEqrqznLEFDGeUmfXpHeAtmHXitbAq/ylex8YhZwzRghQe hufwGpK9uh+3Ssrk1BxXOUC4mqJ/VP1KK8GtfGjysB1TTolWeY4njzGNgpox1Wy+ zPJHAfTNJB8XXM2rj4cAnRWinQt+pc68xgnquQU1dhR4zdknCa9hLtqD7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYk9U+p6TUlxF3fH4Wx4jOOt+6tMB8GA1UdIwQY MBaAFJ49wZMJ5njBSCX8cgg8od7HhD9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmozQmt3bm1lTUZJSmZ4eUNEeWgzc2VFUDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MzJlZGQtNDg4Zi00NGQ4LTgxMGIt ZjdhZDk3YzBlY2JkLzEvUmlUMVQ2bnBOU1hFWGQ4ZmhiSGlNNDYzN3EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MzJlZGQtNDg4Zi00NGQ4LTgxMGItZjdhZDk3YzBlY2Jk LzEvbmozQmt3bm1lTUZJSmZ4eUNEeWgzc2VFUDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDshbwMA0G CSqGSIb3DQEBCwUAA4IBAQAkP6H6BwH6gkRgkT8RTIsGNPGe18yS6/Oh/BHd1ntI jIvbV06bd1fegCKOYiDYg4jVHw6VTUzPlNzQ0VOOU13lpaFvYJzI1yWKoyZgVP59 mHuiAGXewnVO+Iv+c2Cdhvf9x7tQp6f5IPP42Loc5q6HRpcqXXHJEv/4dEwtvR3C ebL+nUY22pvIwZ00hXxcIRnviZ8vIuyT0Q1KeXalpcpIDWulF8N2QNEY3HWy0c/8 xQRd2RrTGfLvXYc1kSPgQrwEiaQHISNQ/EUPZeOvyLsa4IEvJQnkjsDgYg4c2rgJ YBjQOsE+uQOhhiWcyK7Oujje8xgst+lLCu5qkDf+hz08 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:52 2026 by rpki-client