This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/IwITwGp3B4_pSMBNtVpyOQEaMCE.roa File: IwITwGp3B4_pSMBNtVpyOQEaMCE.roa (raw, json) Hash identifier: DL9ccQKNzsDchyhG4KBBhWIj3j9jhXmlBTwSGH+MLOI= Subject key identifier: 23:02:13:C0:6A:77:07:8F:E9:48:C0:4D:B5:5A:72:39:01:1A:30:21 Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1 Certificate serial: 019B7910473C92AABAF54EA35964AD50022F Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/IwITwGp3B4_pSMBNtVpyOQEaMCE.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203560 IP address blocks: 178.21.144.0/24 maxlen: 24 178.21.145.0/24 maxlen: 24 178.21.146.0/24 maxlen: 24 185.8.168.0/24 maxlen: 24 185.8.169.0/24 maxlen: 24 2a02:2c0::/48 maxlen: 48 2a02:2c0:1::/48 maxlen: 48 2a02:2c0:2::/48 maxlen: 48 2a02:2c0:10::/48 maxlen: 48 2a02:2c0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:47:3c:92:aa:ba:f5:4e:a3:59:64:ad:50:02:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=230213c06a77078fe948c04db55a7239011a3021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:b1:d0:60:27:8c:bc:67:94:bf:b3:eb:83: 13:c8:2c:0d:1f:cd:4b:d9:27:e8:42:1e:f7:d8:be: f3:ab:9f:a7:74:56:4b:74:53:9a:27:11:cc:f9:e1: 34:b8:b6:f2:d6:a3:49:df:fc:78:fc:87:5d:2d:70: 9b:1a:dd:46:fa:fa:57:2d:43:4a:c0:91:8f:25:de: 75:d5:1a:5e:d6:3d:cc:04:04:b9:e4:2b:a8:31:09: e0:a3:e4:2e:84:a2:78:04:99:7b:00:2a:ce:ea:07: dd:4d:d6:11:12:89:3d:45:33:f9:c9:e5:e8:64:3f: a9:e1:ab:28:45:75:25:44:5c:d9:82:a4:aa:f1:3e: 80:06:d6:43:f1:57:0d:ef:fb:fc:42:e4:de:73:e7: d3:7c:3c:07:e4:ee:ce:26:aa:c1:36:28:7d:ae:94: 32:2b:f5:02:aa:45:30:2c:a4:00:5e:39:d1:df:de: 06:b2:ef:bd:6d:1d:35:30:54:ec:56:41:68:dd:b6: 7e:7e:ae:20:48:76:53:0e:87:a8:34:b1:f6:e3:e4: bf:49:5c:a6:38:e3:a3:1a:70:8f:a9:0a:9d:e1:c7: 7a:90:be:bc:15:cc:1e:44:1d:1a:8e:30:58:e1:56: e3:83:ba:34:f3:37:f0:a6:d2:64:57:4b:68:e2:89: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:13:C0:6A:77:07:8F:E9:48:C0:4D:B5:5A:72:39:01:1A:30:21 X509v3 Authority Key Identifier: keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/IwITwGp3B4_pSMBNtVpyOQEaMCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.144.0-178.21.146.255 185.8.168.0/23 IPv6: 2a02:2c0::-2a02:2c0:2:ffff:ffff:ffff:ffff:ffff 2a02:2c0:10::/47 Signature Algorithm: sha256WithRSAEncryption 1e:af:46:52:61:c6:80:03:45:fb:75:12:fa:ce:f3:d3:d9:cd: 79:32:d6:f0:25:0a:11:1f:fa:d6:ce:9c:b1:2e:9a:7e:41:20: 84:ec:2c:a0:ab:b6:77:c6:3a:d7:2d:38:16:ac:05:1e:ec:54: 9a:c3:20:32:91:5c:cf:4e:a4:fb:18:87:29:17:84:19:8a:f7: f5:65:5f:bd:c3:c4:d3:3d:c3:d9:6a:0b:22:62:f3:c4:a4:6c: 86:d8:bc:b9:96:04:e3:a7:7d:94:0f:d4:ae:59:63:9d:66:5f: 1a:4c:26:a6:33:cc:c4:6f:6d:c6:27:00:44:f3:7d:fd:4b:7a: 09:f3:7b:ac:10:0e:3e:b2:24:46:52:8f:ce:79:a6:1c:63:18: 7b:4c:67:06:bc:43:6e:9d:fa:1b:d3:2a:b1:df:aa:cb:12:4d: c2:17:9e:b4:c3:c7:d7:43:06:62:58:6c:30:52:d3:3e:5b:94: 01:c0:c4:ca:8e:89:d4:e3:ee:61:61:18:ea:ca:20:01:25:04: 46:bd:3d:d5:35:45:df:98:ca:06:93:92:10:6f:ce:98:8f:f7: 5d:f5:79:b4:5c:69:e1:16:af:86:4a:f5:4f:f5:73:c5:34:12: 63:da:58:f3:e5:a0:bc:f0:c5:72:8c:2c:13:af:b7:9e:9a:d1: 81:a9:48:f4 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt5EEc8kqq69U6jWWStUAIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTE1N2IyOTE4Y2FkY2E4YTVhOWZiYzY2ZTk3NzYwOGE2 ZGY1ZTEwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzAyMTNjMDZhNzcwNzhmZTk0OGMwNGRiNTVhNzIzOTAxMWEzMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2yx0GAnjLxnlL+z64MTyCwNH81L 2SfoQh732L7zq5+ndFZLdFOaJxHM+eE0uLby1qNJ3/x4/IddLXCbGt1G+vpXLUNK wJGPJd511Rpe1j3MBAS55CuoMQngo+QuhKJ4BJl7ACrO6gfdTdYREok9RTP5yeXo ZD+p4asoRXUlRFzZgqSq8T6ABtZD8VcN7/v8QuTec+fTfDwH5O7OJqrBNih9rpQy K/UCqkUwLKQAXjnR394Gsu+9bR01MFTsVkFo3bZ+fq4gSHZTDoeoNLH24+S/SVym OOOjGnCPqQqd4cd6kL68FcweRB0ajjBY4Vbjg7o08zfwptJkV0to4omAXwIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFCMCE8BqdweP6UjATbVacjkBGjAhMB8GA1UdIwQY MBaAFHPhV7KRjK3KilqfvGbpd2CKbfXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAt MDBhMTU0YjhlY2IxLzEvSXdJVHdHcDNCNF9wU01CTnRWcHlPUUVhTUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9iYmNkNTMtYzRmOC00MjQ1LWJiOTAtMDBhMTU0YjhlY2Ix LzEvYy1GWHNwR01yY3FLV3AtOFp1bDNZSXB0OWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAaBAIAATAUMAwDBASyFZAD BACyFZIDBAG5CKgwIQQCAAIwGzAQAwUGKgICwAMHACoCAsAAAgMHASoCAsAAEDAN BgkqhkiG9w0BAQsFAAOCAQEAHq9GUmHGgANF+3US+s7z09nNeTLW8CUKER/61s6c sS6afkEghOwsoKu2d8Y61y04FqwFHuxUmsMgMpFcz06k+xiHKReEGYr39WVfvcPE 0z3D2WoLImLzxKRshti8uZYE46d9lA/UrlljnWZfGkwmpjPMxG9txicARPN9/Ut6 CfN7rBAOPrIkRlKPznmmHGMYe0xnBrxDbp36G9Mqsd+qyxJNwheetMPH10MGYlhs MFLTPluUAcDEyo6J1OPuYWEY6sogASUERr091TVF35jKBpOSEG/OmI/3XfV5tFxp 4Ravhkr1T/VzxTQSY9pY8+WgvPDFcowsE6+3nprRgalI9A== -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:07 2026 by rpki-client