This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/isQJz9goh0eO4eEL1oxtfeOuTHc.roa File: isQJz9goh0eO4eEL1oxtfeOuTHc.roa (raw, json) Hash identifier: +u5g7kbMKmTR3+DRB4nSO5Wrklp5Nrp8LPPP0yIm63I= Subject key identifier: 8A:C4:09:CF:D8:28:87:47:8E:E1:E1:0B:D6:8C:6D:7D:E3:AE:4C:77 Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Certificate serial: 019B7F15A20675C54E3D06AFC0FDCCE98DA0 Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/isQJz9goh0eO4eEL1oxtfeOuTHc.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208165 IP address blocks: 178.57.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a2:06:75:c5:4e:3d:06:af:c0:fd:cc:e9:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac409cfd82887478ee1e10bd68c6d7de3ae4c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:8b:d3:e3:b9:08:d4:84:c4:09:7b:26:01: 81:84:81:cd:99:fd:10:54:e4:29:90:ec:50:dc:bb: 88:c8:2a:e3:31:6f:99:2b:09:1e:99:f4:b7:d8:3e: 41:1c:30:33:6f:66:83:b8:e9:ef:78:bc:82:58:12: 2f:ba:5b:cd:10:7d:77:d8:a7:75:a5:27:c6:17:cf: 27:d6:fe:4d:d5:71:85:eb:2e:82:e6:6a:9b:7b:d6: 60:f0:4c:5a:4c:1e:27:17:fd:cf:73:38:76:8c:c1: 23:62:9d:9e:2a:fa:8b:69:e9:b7:05:37:ae:87:a1: ac:e7:d9:5a:e9:76:af:5b:66:0a:43:78:db:7f:64: 80:64:76:f4:e1:04:4c:56:a8:72:b5:47:2a:a8:12: 0b:df:19:8f:b6:eb:56:e1:f9:4a:64:70:bf:7e:ce: 40:bc:1b:ac:d5:f6:68:b2:23:7b:0e:35:46:84:39: fb:a2:24:74:b8:dc:03:b4:4d:98:10:bd:13:a9:33: ec:16:d7:41:75:a6:99:8a:90:21:bb:7a:d2:b6:54: d1:28:d2:4e:f8:5e:ed:ed:47:ca:2a:a0:9f:a8:e6: 67:c8:4e:ce:5a:29:38:79:3c:ef:db:dd:de:92:94: ea:22:a6:7f:8b:17:68:13:38:7e:3f:c7:f2:21:86: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:09:CF:D8:28:87:47:8E:E1:E1:0B:D6:8C:6D:7D:E3:AE:4C:77 X509v3 Authority Key Identifier: keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/isQJz9goh0eO4eEL1oxtfeOuTHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.57.95.0/24 Signature Algorithm: sha256WithRSAEncryption 30:62:ee:66:0e:9c:82:9d:69:df:f8:c7:f0:84:8b:99:64:7e: 0e:76:a3:6b:00:66:57:c2:d7:97:6d:17:b1:b4:77:9b:44:ec: 0c:65:31:37:05:24:f6:b8:a0:95:56:40:61:c0:2f:12:fc:86: 1a:90:ae:ba:78:5b:e1:26:ae:f8:37:ee:d9:b7:39:05:db:ea: 75:13:fc:d4:c0:88:5e:1c:65:e4:89:1d:6b:35:43:e9:bf:46: 10:00:09:d7:f1:bf:7f:d9:72:df:df:8f:1c:aa:8c:07:6e:72: f8:b8:d9:0a:7e:92:75:04:72:71:ed:37:71:7c:5b:db:1e:a1: 46:03:d8:35:70:0f:f1:4e:a4:d0:14:6d:fb:86:61:6b:72:f8: 6b:ed:fb:45:af:19:b4:c1:73:29:b7:70:a7:40:94:d2:c4:b0: c6:81:ea:19:9f:a5:df:1e:1a:8d:da:01:fb:9f:da:87:71:8f: 0a:3a:08:7c:b9:59:88:1a:30:76:91:50:ec:7e:24:18:a5:be: ed:69:5c:3c:96:87:93:c6:d4:75:81:73:2c:26:04:81:f7:f7: 4e:a6:51:d6:5a:ff:a2:92:ab:d9:b6:c5:1f:29:62:4d:2d:9f: 7f:b8:0a:c6:29:8d:5e:c4:d7:25:64:29:94:a3:72:dc:41:ca: 35:3e:13:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaIGdcVOPQavwP3M6Y2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjlmZTNkODgyYzkzZTM4ZThiNmEyODZhMzE3N2RjMTdl OTlhYzcwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWM0MDljZmQ4Mjg4NzQ3OGVlMWUxMGJkNjhjNmQ3ZGUzYWU0Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jeL0+O5CNSExAl7JgGBhIHNmf0Q VOQpkOxQ3LuIyCrjMW+ZKwkemfS32D5BHDAzb2aDuOnveLyCWBIvulvNEH132Kd1 pSfGF88n1v5N1XGF6y6C5mqbe9Zg8ExaTB4nF/3Pczh2jMEjYp2eKvqLaem3BTeu h6Gs59la6XavW2YKQ3jbf2SAZHb04QRMVqhytUcqqBIL3xmPtutW4flKZHC/fs5A vBus1fZosiN7DjVGhDn7oiR0uNwDtE2YEL0TqTPsFtdBdaaZipAhu3rStlTRKNJO +F7t7UfKKqCfqOZnyE7OWik4eTzv293ekpTqIqZ/ixdoEzh+P8fyIYag7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrECc/YKIdHjuHhC9aMbX3jrkx3MB8GA1UdIwQY MBaAFMRp/j2ILJPjjotqKGoxd9wX6ZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2Et NjFkOWEyM2YzNDExLzEvaXNRSno5Z29oMGVPNGVFTDFveHRmZU91VEhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2EtNjFkOWEyM2YzNDEx LzEveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsjlfMA0G CSqGSIb3DQEBCwUAA4IBAQAwYu5mDpyCnWnf+MfwhIuZZH4OdqNrAGZXwteXbRex tHebROwMZTE3BST2uKCVVkBhwC8S/IYakK66eFvhJq74N+7ZtzkF2+p1E/zUwIhe HGXkiR1rNUPpv0YQAAnX8b9/2XLf348cqowHbnL4uNkKfpJ1BHJx7TdxfFvbHqFG A9g1cA/xTqTQFG37hmFrcvhr7ftFrxm0wXMpt3CnQJTSxLDGgeoZn6XfHhqN2gH7 n9qHcY8KOgh8uVmIGjB2kVDsfiQYpb7taVw8loeTxtR1gXMsJgSB9/dOplHWWv+i kqvZtsUfKWJNLZ9/uArGKY1exNclZCmUo3LcQco1PhNq -----END CERTIFICATE-----Generated at Tue Feb 3 00:18:15 2026 by rpki-client