This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-VXXvTxiFQn4AHEyaNKo4sYMTvY.roa File: 1-VXXvTxiFQn4AHEyaNKo4sYMTvY.roa (raw, json) Hash identifier: tS3rhk1/AkBcPMa569ehPmRqy3O9375EYdIqwo8Uci4= Subject key identifier: F9:55:D7:BD:3C:62:15:09:F8:00:71:32:68:D2:A8:E2:C6:0C:4E:F6 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839D8F40A28908D9C767E1384626D0 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-VXXvTxiFQn4AHEyaNKo4sYMTvY.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49070 IP address blocks: 178.170.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9d:8f:40:a2:89:08:d9:c7:67:e1:38:46:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f955d7bd3c621509f800713268d2a8e2c60c4ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:3a:51:4e:93:2c:5a:88:1d:53:69:bf:e2: ed:5a:33:12:aa:39:44:3b:d9:09:43:9b:1b:92:32: 29:f1:5b:f4:b9:a5:98:0a:c6:66:ba:4e:f7:bc:82: 2f:b3:35:69:8e:d4:aa:b1:1a:e0:33:92:1f:8f:34: 61:64:d7:b5:f6:bc:2d:d1:9d:6f:dc:d5:ba:63:ae: c7:50:63:ee:62:f9:11:c9:33:6d:b2:13:b6:08:fb: 94:df:1d:ae:e4:2d:df:a3:df:87:64:ce:f5:7d:ad: c3:2a:26:71:8f:46:ca:6d:58:18:1a:0c:39:a6:fc: 12:92:cf:e2:37:c2:7c:ea:c3:09:cf:ee:75:b1:bb: 3c:78:88:f8:a9:65:55:85:89:d8:93:35:83:5e:b5: 09:a5:5a:9f:cf:2c:c9:be:66:b9:26:5c:0d:38:f2: ab:12:d2:a1:a1:fd:6d:74:51:23:4e:d0:11:c4:f6: 6b:ca:b8:15:40:29:fa:3f:e3:cd:67:1c:4a:96:80: 83:30:ad:bf:df:ff:c9:ae:d9:41:66:fe:7d:f7:d0: dd:fc:01:cd:ec:b8:9d:27:4f:03:42:56:6f:d6:06: e5:f5:38:70:38:c4:5a:3e:3f:df:a8:e2:9a:62:f8: 57:7e:0a:d6:43:db:05:56:49:84:47:a9:84:b9:e2: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:D7:BD:3C:62:15:09:F8:00:71:32:68:D2:A8:E2:C6:0C:4E:F6 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-VXXvTxiFQn4AHEyaNKo4sYMTvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.235.0/24 Signature Algorithm: sha256WithRSAEncryption b1:9f:5b:f3:28:9d:24:32:8f:a7:62:3b:cf:5e:b2:77:03:c9: 0f:c8:bd:bb:eb:78:1d:80:25:e1:93:b0:42:48:89:ee:34:f0: 89:d9:b6:b0:e1:08:9e:39:68:e2:06:48:b0:f4:86:c1:4c:2c: 58:7c:21:31:87:64:cf:73:8c:c3:8e:e6:38:a8:26:a6:c0:93: dd:8f:1c:a0:09:43:6f:dd:17:63:82:c0:c1:69:61:27:5e:f4: 6e:e4:d4:50:0c:00:27:bf:fd:2c:ff:52:47:de:30:1c:fa:af: 4e:a7:bd:db:14:c7:5e:9a:a7:80:6f:7d:fb:ed:39:01:8d:7e: d9:8a:69:bc:c5:c1:4f:32:91:52:41:02:b7:54:c0:b9:06:2a: 86:d0:1e:6c:04:f0:bc:c1:d0:5d:79:a2:5b:19:48:5b:be:3e: d2:0b:6f:de:56:df:c6:b3:d2:8c:df:e7:de:31:f0:aa:d1:cb: 31:c9:d6:15:43:61:a0:41:35:fe:a9:99:85:42:5d:d5:e3:fb: 35:9e:d8:1b:27:69:d1:1d:8c:10:81:82:eb:58:27:15:79:52: 6d:f0:85:89:23:21:c7:9c:3e:dc:32:98:e8:b7:e3:24:89:5f: 03:71:c1:ee:b7:a9:70:2c:0d:42:1c:40:82:ba:0f:85:58:06: 13:0f:ef:28 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g52PQKKJCNnHZ+E4RibQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTU1ZDdiZDNjNjIxNTA5ZjgwMDcxMzI2OGQyYThlMmM2MGM0ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr086UU6TLFqIHVNpv+LtWjMSqjlE O9kJQ5sbkjIp8Vv0uaWYCsZmuk73vIIvszVpjtSqsRrgM5IfjzRhZNe19rwt0Z1v 3NW6Y67HUGPuYvkRyTNtshO2CPuU3x2u5C3fo9+HZM71fa3DKiZxj0bKbVgYGgw5 pvwSks/iN8J86sMJz+51sbs8eIj4qWVVhYnYkzWDXrUJpVqfzyzJvma5JlwNOPKr EtKhof1tdFEjTtARxPZryrgVQCn6P+PNZxxKloCDMK2/3//JrtlBZv5999Dd/AHN 7LidJ08DQlZv1gbl9ThwOMRaPj/fqOKaYvhXfgrWQ9sFVkmER6mEueL3RQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlV1708YhUJ+ABxMmjSqOLGDE72MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvMS1WWFh2VHhpRlFuNEFIRXlhTktvNHNZTVR2WS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4 Zi8xL1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALKq6zAN BgkqhkiG9w0BAQsFAAOCAQEAsZ9b8yidJDKPp2I7z16ydwPJD8i9u+t4HYAl4ZOw QkiJ7jTwidm2sOEInjlo4gZIsPSGwUwsWHwhMYdkz3OMw47mOKgmpsCT3Y8coAlD b90XY4LAwWlhJ170buTUUAwAJ7/9LP9SR94wHPqvTqe92xTHXpqngG99++05AY1+ 2YppvMXBTzKRUkECt1TAuQYqhtAebATwvMHQXXmiWxlIW74+0gtv3lbfxrPSjN/n 3jHwqtHLMcnWFUNhoEE1/qmZhUJd1eP7NZ7YGydp0R2MEIGC61gnFXlSbfCFiSMh x5w+3DKY6LfjJIlfA3HB7repcCwNQhxAgroPhVgGEw/vKA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client