This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa File: gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa (raw, json) Hash identifier: b6VMFnv1cWNK34raB+2k08c62RJCIrNzmgwZP9swjd4= Subject key identifier: 80:7E:41:14:FB:CB:8C:2A:B3:39:C3:D8:A9:54:3A:43:E7:74:6B:2F Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae Certificate serial: 019B76EB6FC15447A6F10E152690FB8BC288 Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 178.250.16.0/24 maxlen: 24 178.250.18.0/24 maxlen: 24 185.24.240.0/24 maxlen: 24 2a00:fc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6f:c1:54:47:a6:f1:0e:15:26:90:fb:8b:c2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=807e4114fbcb8c2ab339c3d8a9543a43e7746b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a8:07:43:cf:d7:d3:21:32:ba:4d:be:1d:95: 21:6e:58:fd:dd:b2:32:2a:b0:00:21:5a:2e:05:6c: 70:c9:ad:cb:7a:24:2e:8e:96:04:49:9f:ab:54:1d: 5c:41:c2:d8:0f:f5:4c:1b:d1:e9:4e:94:c7:d4:76: 30:8a:81:fb:45:4f:df:cc:af:66:99:e8:d8:01:8b: a0:ab:6e:b4:71:87:d4:1c:0e:e6:7d:72:30:46:e0: f4:ab:8f:16:52:a7:87:11:29:f9:6a:28:b6:78:86: 0b:ea:54:38:ec:06:5b:8b:25:99:bd:7c:04:29:77: 4d:3e:43:bf:9c:96:53:ea:86:5f:66:0a:3d:13:4f: e4:40:e6:42:ee:76:ee:42:2e:7f:7d:c2:32:ec:07: ea:03:66:f7:3f:04:15:6b:e3:11:0f:a8:13:4b:41: 55:cf:f7:90:4b:cf:9e:cd:51:46:5f:c3:5e:47:8e: 6c:49:0a:60:e6:d7:cb:45:cc:92:49:8a:07:5b:2f: 11:c5:f1:f2:b2:f5:78:0b:f4:85:4c:eb:07:55:29: 88:29:d0:c8:d7:a9:0d:72:6c:1f:38:81:68:16:93: 1b:2c:3c:96:26:13:ce:2e:10:a4:7b:72:de:b7:ef: 41:08:b5:e5:e0:c6:38:b2:be:65:74:0f:27:12:f1: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:41:14:FB:CB:8C:2A:B3:39:C3:D8:A9:54:3A:43:E7:74:6B:2F X509v3 Authority Key Identifier: keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/gH5BFPvLjCqzOcPYqVQ6Q-d0ay8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.16.0/24 178.250.18.0/24 185.24.240.0/24 IPv6: 2a00:fc80::/48 Signature Algorithm: sha256WithRSAEncryption 21:8b:61:01:0e:31:98:c5:8f:99:76:29:68:48:a5:83:c7:8d: e1:6b:2e:bd:98:a2:99:7c:8e:6c:25:c0:d5:96:c6:74:b1:ba: 01:47:e6:be:19:7c:b1:3a:1d:34:8b:7b:6a:d7:ef:e7:c9:a2: ef:eb:7c:93:e8:e4:60:b7:1b:26:49:87:d5:d0:f6:ce:01:bf: de:5d:18:64:7c:30:21:51:cc:4c:85:10:63:31:3f:be:35:e7: 3d:bd:15:ba:0b:02:b3:f5:59:57:61:9b:02:14:64:3f:09:21: 67:64:9f:dc:99:bc:cc:1b:5f:99:a6:2e:49:83:53:cb:43:23: 4e:49:0a:b7:05:b2:40:e6:c3:56:36:fd:8c:92:88:21:7c:3e: 3e:24:5b:7e:5a:23:5a:2b:78:6f:4d:05:a8:47:a4:eb:67:d5: 99:62:a2:32:12:b8:54:f8:52:a7:a3:91:61:38:5c:2b:8f:ec: 82:22:e7:87:19:a5:07:59:45:0e:0f:cd:cd:d6:a3:fb:61:a9: ef:fe:36:ec:43:22:a1:5f:f1:1c:78:75:a5:cc:28:d3:ba:bd: 34:ad:5f:09:6d:03:66:38:ce:c5:e6:58:c8:25:e8:de:5c:0b: 62:ee:d2:f1:fd:10:e8:57:b8:ef:c3:c2:0e:f7:89:0c:30:87: 7f:62:0c:9d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt262/BVEem8Q4VJpD7i8KIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2M1ODliOTliYTQ5NDJjYWRlZGMxNzg5Mzg5NjQyOTYz YzQ4YWUwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDdlNDExNGZiY2I4YzJhYjMzOWMzZDhhOTU0M2E0M2U3NzQ2YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKgHQ8/X0yEyuk2+HZUhblj93bIy KrAAIVouBWxwya3LeiQujpYESZ+rVB1cQcLYD/VMG9HpTpTH1HYwioH7RU/fzK9m mejYAYugq260cYfUHA7mfXIwRuD0q48WUqeHESn5aii2eIYL6lQ47AZbiyWZvXwE KXdNPkO/nJZT6oZfZgo9E0/kQOZC7nbuQi5/fcIy7AfqA2b3PwQVa+MRD6gTS0FV z/eQS8+ezVFGX8NeR45sSQpg5tfLRcySSYoHWy8RxfHysvV4C/SFTOsHVSmIKdDI 16kNcmwfOIFoFpMbLDyWJhPOLhCke3Let+9BCLXl4MY4sr5ldA8nEvExxwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFIB+QRT7y4wqsznD2KlUOkPndGsvMB8GA1UdIwQY MBaAFOPMWJuZuklCyt7cF4k4lkKWPEiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzIt MWMyMjY3ZWJmNWQ1LzEvZ0g1QkZQdkxqQ3F6T2NQWXFWUTZRLWQwYXk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzItMWMyMjY3ZWJmNWQ1 LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAsvoQAwQA svoSAwQAuRjwMA8EAgACMAkDBwAqAPyAAAAwDQYJKoZIhvcNAQELBQADggEBACGL YQEOMZjFj5l2KWhIpYPHjeFrLr2Yopl8jmwlwNWWxnSxugFH5r4ZfLE6HTSLe2rX 7+fJou/rfJPo5GC3GyZJh9XQ9s4Bv95dGGR8MCFRzEyFEGMxP7415z29FboLArP1 WVdhmwIUZD8JIWdkn9yZvMwbX5mmLkmDU8tDI05JCrcFskDmw1Y2/YySiCF8Pj4k W35aI1oreG9NBahHpOtn1ZliojISuFT4UqejkWE4XCuP7IIi54cZpQdZRQ4Pzc3W o/thqe/+NuxDIqFf8Rx4daXMKNO6vTStXwltA2Y4zsXmWMgl6N5cC2Lu0vH9EOhX uO/Dwg73iQwwh39iDJ0= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:19 2026 by rpki-client