This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/llfMrhUWfSkRK5hK0AzdhqQLJv8.roa File: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (raw, json) Hash identifier: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI= Subject key identifier: 96:57:CC:AE:15:16:7D:29:11:2B:98:4A:D0:0C:DD:86:A4:0B:26:FF Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08 Certificate serial: 019B7D5CD38BDED59C432A08333645015CFC Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/llfMrhUWfSkRK5hK0AzdhqQLJv8.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209162 IP address blocks: 178.239.24.0/24 maxlen: 24 178.239.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:8b:de:d5:9c:43:2a:08:33:36:45:01:5c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9657ccae15167d29112b984ad00cdd86a40b26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:95:81:12:17:4b:ec:a6:d7:db:8f:0b:74: f3:b5:23:13:7d:93:c1:38:fb:37:35:69:53:d1:a2: f9:3a:1f:f3:e6:09:9e:14:44:c8:d2:07:01:81:a2: 46:8c:b6:5f:dc:a1:6c:3a:1b:77:97:46:f7:b2:cb: 64:2b:6a:84:c3:a7:91:1a:de:46:f3:bb:57:67:13: 86:7b:d7:cd:49:f7:3a:51:ff:f2:44:a9:ee:6b:0f: 1f:f6:e3:4d:76:b5:de:56:62:16:2f:bf:c0:25:94: 0d:2b:f9:97:bf:73:4c:40:6e:3c:14:7f:60:c3:89: 77:89:58:b7:f0:43:02:7b:62:b8:da:d6:63:1a:28: 51:c9:22:c3:41:19:ce:9a:65:0a:0d:5f:cc:ae:3a: 57:bd:de:31:f6:49:3b:27:78:a5:74:0d:fa:ca:e3: d6:8b:1b:64:26:ee:0b:82:f0:38:3a:93:76:ec:ff: 61:42:b0:72:9c:88:91:3e:1c:7b:09:e9:dd:d3:ce: 44:5b:20:6a:29:9e:e5:6e:d4:3b:7b:47:a2:35:29: e5:a8:10:c5:cb:e3:ff:8b:f2:df:2d:73:cf:d4:25: 9d:8e:61:c2:a0:2e:8f:6e:df:f6:8b:04:2c:ee:bb: 89:f2:ce:1b:bf:f5:ee:bd:05:3b:90:df:69:41:8e: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:57:CC:AE:15:16:7D:29:11:2B:98:4A:D0:0C:DD:86:A4:0B:26:FF X509v3 Authority Key Identifier: keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/llfMrhUWfSkRK5hK0AzdhqQLJv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.24.0/24 178.239.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:e8:61:b6:1f:85:ce:2f:ac:79:cf:ea:65:20:8b:69:04:a7: 3e:71:e7:49:58:a0:46:0b:fa:57:7a:83:f2:7f:4d:21:77:57: 04:a9:c3:cf:99:2e:10:79:ce:16:c4:cd:37:59:ad:d1:cd:d6: 1e:e2:66:2a:3f:88:d1:e0:b8:ff:50:de:1a:a6:01:67:85:6f: 1d:88:56:b7:8d:92:fc:b4:d0:e0:55:7d:55:a6:3e:4f:17:fb: e5:19:7f:30:3f:c8:da:c7:6b:0e:92:08:57:34:02:42:93:4f: 7c:13:a1:ba:7e:7c:a9:1e:e2:9f:f5:7f:eb:db:22:5d:a4:c1: 60:d5:44:2b:f1:50:ac:03:2a:b1:f0:00:00:94:e9:9b:d0:20: 77:b5:5b:d5:83:99:c4:1e:8f:23:1f:c0:68:4e:12:72:30:35: 00:aa:f4:7b:f8:a9:37:8b:1f:24:1c:59:61:bf:0b:fb:ef:18: a2:25:b0:66:ef:d2:cd:aa:78:b8:91:bb:c2:f7:cb:3b:50:63: e6:ab:4e:56:d7:01:29:7a:79:f4:7d:9d:02:5b:24:07:5b:d8: e2:c9:46:fc:af:9c:c8:bf:8b:c1:a2:ae:7c:d3:46:20:f6:82: 61:c8:0a:bb:b3:8a:22:35:2b:66:e6:be:de:11:cc:f2:1a:bd: 88:83:ef:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XNOL3tWcQyoIMzZFAVz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx NDVlMDgwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjU3Y2NhZTE1MTY3ZDI5MTEyYjk4NGFkMDBjZGQ4NmE0MGIyNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZeVgRIXS+ym19uPC3TztSMTfZPB OPs3NWlT0aL5Oh/z5gmeFETI0gcBgaJGjLZf3KFsOht3l0b3sstkK2qEw6eRGt5G 87tXZxOGe9fNSfc6Uf/yRKnuaw8f9uNNdrXeVmIWL7/AJZQNK/mXv3NMQG48FH9g w4l3iVi38EMCe2K42tZjGihRySLDQRnOmmUKDV/MrjpXvd4x9kk7J3ildA36yuPW ixtkJu4LgvA4OpN27P9hQrBynIiRPhx7Cend085EWyBqKZ7lbtQ7e0eiNSnlqBDF y+P/i/LfLXPP1CWdjmHCoC6Pbt/2iwQs7ruJ8s4bv/XuvQU7kN9pQY5w+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJZXzK4VFn0pESuYStAM3YakCyb/MB8GA1UdIwQY MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt ZDJiMDJhNDAzYzdiLzEvbGxmTXJoVVdmU2tSSzVoSzBBemRocVFMSnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu8YAwQA su8aMA0GCSqGSIb3DQEBCwUAA4IBAQBs6GG2H4XOL6x5z+plIItpBKc+cedJWKBG C/pXeoPyf00hd1cEqcPPmS4Qec4WxM03Wa3RzdYe4mYqP4jR4Lj/UN4apgFnhW8d iFa3jZL8tNDgVX1Vpj5PF/vlGX8wP8jax2sOkghXNAJCk098E6G6fnypHuKf9X/r 2yJdpMFg1UQr8VCsAyqx8AAAlOmb0CB3tVvVg5nEHo8jH8BoThJyMDUAqvR7+Kk3 ix8kHFlhvwv77xiiJbBm79LNqni4kbvC98s7UGPmq05W1wEpenn0fZ0CWyQHW9ji yUb8r5zIv4vBoq5800Yg9oJhyAq7s4oiNStm5r7eEczyGr2Ig++J -----END CERTIFICATE-----Generated at Tue Jan 27 06:50:56 2026 by rpki-client