This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/0Esi1JdAsAMlcmdtnGTaonQpuF8.roa File: 0Esi1JdAsAMlcmdtnGTaonQpuF8.roa (raw, json) Hash identifier: jA0reA7/GEa0j86CVpuQcx390RyaeWC5ePIdBFA+M1E= Subject key identifier: D0:4B:22:D4:97:40:B0:03:25:72:67:6D:9C:64:DA:A2:74:29:B8:5F Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7 Certificate serial: 019B7C13212E6E26F2F877D0710E92D21DB0 Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/0Esi1JdAsAMlcmdtnGTaonQpuF8.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207058 IP address blocks: 185.167.88.0/24 maxlen: 24 185.167.89.0/24 maxlen: 24 185.167.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:21:2e:6e:26:f2:f8:77:d0:71:0e:92:d2:1d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d04b22d49740b0032572676d9c64daa27429b85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:cf:2f:c6:42:8b:42:3d:b9:c5:25:9e:a0: 25:2d:f5:df:eb:7e:34:b0:07:3a:a4:33:5d:cf:56: 1a:30:0b:fa:a8:ef:ad:60:8a:15:3b:95:bd:5a:19: 00:2c:a5:5e:79:2b:92:24:b9:74:74:ec:d0:18:42: 60:bf:f3:d8:a0:ca:b9:2b:13:43:8f:27:d3:ac:86: 15:ff:49:de:50:61:03:f1:7a:33:e5:79:14:a8:ca: c1:b5:99:e9:73:42:20:4e:94:fc:43:d7:18:46:57: 48:23:cc:96:03:59:fe:39:a7:5c:8c:26:08:49:70: 07:49:c2:21:16:26:cf:7a:95:96:1d:aa:3d:20:c4: c6:a6:20:d4:2f:61:da:23:0e:47:07:a8:c4:d9:73: 38:bc:27:d6:5b:49:23:66:32:49:a7:45:ca:ce:75: 86:55:05:cf:b9:62:03:a9:29:8a:24:6d:f2:c0:3e: f1:85:df:b8:22:cf:da:38:30:db:a4:6b:c8:0c:45: cc:49:ed:ac:6a:3d:08:c8:a9:e0:f6:17:9e:e6:f4: f1:a5:ae:a9:94:a9:8b:c7:21:71:41:93:6b:50:18: 67:2e:b8:e0:e2:03:5e:10:db:ab:01:0c:5b:db:52: 4b:22:89:33:30:7b:ff:78:77:01:7b:28:43:b5:92: 7f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4B:22:D4:97:40:B0:03:25:72:67:6D:9C:64:DA:A2:74:29:B8:5F X509v3 Authority Key Identifier: keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/0Esi1JdAsAMlcmdtnGTaonQpuF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.88.0-185.167.90.255 Signature Algorithm: sha256WithRSAEncryption 00:a9:5e:fd:5d:7d:cc:5b:1c:6a:09:e7:b4:dc:ec:68:88:6d: d2:e0:cd:d5:fd:4f:bc:9e:60:c8:6b:05:d3:22:9d:4d:e7:9c: 00:fd:5a:9c:be:d7:ec:9d:fe:5b:8f:05:24:4a:cb:5f:c0:66: 3e:6c:c8:3d:54:07:a4:6f:ba:ec:d9:1e:85:43:2a:4f:61:6a: 20:69:ac:13:77:54:9f:6b:98:4f:57:23:a6:b7:71:4d:8c:1a: 33:69:b4:e6:a2:27:21:10:0c:27:d5:54:bc:dd:31:02:56:c7: 5f:54:af:02:ba:a4:4e:bd:f9:5e:44:26:3d:d1:cd:77:34:df: 08:b4:f5:cb:2c:dc:72:02:e9:0e:d8:8a:e9:bc:25:07:c2:7d: 87:fe:18:94:88:c8:e5:2e:2b:51:f6:77:8c:2a:56:e3:98:b9: b7:80:be:b1:95:63:58:54:0e:5b:15:17:6a:be:e1:da:9d:85: ad:7c:43:0c:86:46:30:4b:84:7f:ba:c6:f3:57:3a:9f:d2:e1: 4d:12:f0:e6:eb:97:c9:78:8d:a5:74:b2:72:78:7e:f6:26:81: 51:da:c8:75:c2:19:df:ea:2d:79:03:78:58:f5:67:aa:4e:84: 3c:2f:19:f7:f0:c0:d7:ac:d3:01:2e:25:61:75:76:15:64:fb: f4:ab:47:19 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EyEubiby+HfQcQ6S0h2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZmZhNTQyZjNkOGM5YjA3YmY3NmVhZThhODY5ODVhM2Q3 YjRkYzcwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDRiMjJkNDk3NDBiMDAzMjU3MjY3NmQ5YzY0ZGFhMjc0MjliODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xzPL8ZCi0I9ucUlnqAlLfXf6340 sAc6pDNdz1YaMAv6qO+tYIoVO5W9WhkALKVeeSuSJLl0dOzQGEJgv/PYoMq5KxND jyfTrIYV/0neUGED8Xoz5XkUqMrBtZnpc0IgTpT8Q9cYRldII8yWA1n+OadcjCYI SXAHScIhFibPepWWHao9IMTGpiDUL2HaIw5HB6jE2XM4vCfWW0kjZjJJp0XKznWG VQXPuWIDqSmKJG3ywD7xhd+4Is/aODDbpGvIDEXMSe2saj0IyKng9hee5vTxpa6p lKmLxyFxQZNrUBhnLrjg4gNeENurAQxb21JLIokzMHv/eHcBeyhDtZJ/ZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNBLItSXQLADJXJnbZxk2qJ0KbhfMB8GA1UdIwQY MBaAFIT/pULz2Mmwe/duroqGmFo9e03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEt N2MwZmQyOWNmM2U5LzEvMEVzaTFKZEFzQU1sY21kdG5HVGFvblFwdUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83MWZmZjktMzQzZC00ZjA3LWE0OTEtN2MwZmQyOWNmM2U5 LzEvaFAtbFF2UFl5YkI3OTI2dWlvYVlXajE3VGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5p1gD BAC5p1owDQYJKoZIhvcNAQELBQADggEBAACpXv1dfcxbHGoJ57Tc7GiIbdLgzdX9 T7yeYMhrBdMinU3nnAD9Wpy+1+yd/luPBSRKy1/AZj5syD1UB6RvuuzZHoVDKk9h aiBprBN3VJ9rmE9XI6a3cU2MGjNptOaiJyEQDCfVVLzdMQJWx19UrwK6pE69+V5E Jj3RzXc03wi09css3HIC6Q7Yium8JQfCfYf+GJSIyOUuK1H2d4wqVuOYubeAvrGV Y1hUDlsVF2q+4dqdha18QwyGRjBLhH+6xvNXOp/S4U0S8Obrl8l4jaV0snJ4fvYm gVHayHXCGd/qLXkDeFj1Z6pOhDwvGffwwNes0wEuJWF1dhVk+/SrRxk= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:30 2026 by rpki-client