This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jYIpRSLFBTYlYtuvaocXrO2d9-g.roa File: jYIpRSLFBTYlYtuvaocXrO2d9-g.roa (raw, json) Hash identifier: Vznj0zcjtpS3RVpl7EfMwaoGTOfcRfhTtn3VYGlLcx8= Subject key identifier: 8D:82:29:45:22:C5:05:36:25:62:DB:AF:6A:87:17:AC:ED:9D:F7:E8 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83986993EF43D830C4A0E7EAE7C567 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jYIpRSLFBTYlYtuvaocXrO2d9-g.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20527 IP address blocks: 178.170.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:98:69:93:ef:43:d8:30:c4:a0:e7:ea:e7:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d82294522c505362562dbaf6a8717aced9df7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:d5:9a:7f:f2:5b:4e:90:25:04:05:a2:bd: 9a:04:a6:a8:92:97:e2:51:80:97:8e:e8:cd:0f:88: e9:52:92:37:d6:fc:87:15:91:f0:d9:94:a9:32:26: 12:7f:7d:a2:48:75:8a:6f:84:b1:5c:80:ba:1a:e0: 6a:3d:5f:35:3c:6e:db:4d:3c:7e:cf:5b:bd:f8:7d: a1:f5:2c:7d:86:04:65:c2:05:b5:c9:74:a7:63:ad: fc:dd:5e:26:36:8f:56:c0:20:30:cf:ca:ec:1b:6a: 58:a4:3f:5b:db:65:8b:97:45:b0:89:d7:3d:42:9a: 41:ef:81:b9:85:22:4f:88:d3:bd:a0:ca:10:04:3b: 8e:89:b5:74:82:a1:92:a5:6e:4c:22:9e:34:0b:bb: 63:b1:8a:04:e0:28:3b:a5:0a:c5:1b:8c:bf:b2:7f: 87:a1:d5:39:cc:21:dc:88:19:94:47:06:e2:89:8d: 9a:ef:62:ab:14:30:bb:2b:85:7c:2e:68:36:4e:d4: 9f:74:df:b9:0a:cd:63:58:c1:33:c8:44:9e:cc:f3: 92:de:e9:55:27:2f:73:0b:da:0b:93:93:ea:50:47: 07:5a:ac:bf:e6:37:0a:4d:82:17:d0:bd:32:a3:26: aa:0b:fb:d5:a1:92:9e:10:b8:f3:20:48:eb:f4:be: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:29:45:22:C5:05:36:25:62:DB:AF:6A:87:17:AC:ED:9D:F7:E8 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jYIpRSLFBTYlYtuvaocXrO2d9-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.170.233.0/24 Signature Algorithm: sha256WithRSAEncryption 85:e8:c3:b6:03:c8:b3:c1:0c:ad:61:e1:73:23:d9:10:c7:d8: 1a:e5:00:2a:4d:fc:53:35:71:6c:b4:3e:65:65:12:93:0a:58: 47:d6:b6:be:8c:bb:ad:51:98:af:77:f6:80:4d:6a:c0:98:cf: b6:64:c7:8f:1d:1e:38:28:29:ae:46:5b:a7:e3:56:7f:a9:5d: a0:a3:d9:bc:46:db:95:ee:99:35:1b:90:ae:c1:bf:c8:bc:53: 0e:66:57:f6:ed:c2:42:5d:35:1b:cf:14:c3:ee:fa:15:a3:4d: fd:4e:69:0e:e9:df:65:d1:67:f4:27:73:8b:16:65:52:c5:80: 5b:60:35:2c:ea:b5:a6:15:eb:85:96:80:5f:07:30:6d:f2:06: 39:67:66:87:b6:9c:23:0a:69:e6:36:2d:04:f4:7a:ce:92:0a: ed:92:9d:8f:1c:90:4e:21:3f:cc:f8:25:e0:0c:35:ef:3e:24: 5b:93:79:ed:d6:53:32:cd:24:7e:e4:d0:bd:b0:0c:04:b9:9c: 24:9a:7f:31:f4:b7:0d:a7:fa:8e:7a:60:79:70:f7:f6:af:0b: fa:81:3b:69:47:26:9f:78:ab:7f:8a:42:ad:0a:a9:d7:34:34: b7:45:ea:fc:c6:1f:77:00:ae:94:e3:bf:cb:27:d5:78:c4:f1: 87:80:b7:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5hpk+9D2DDEoOfq58VnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDgyMjk0NTIyYzUwNTM2MjU2MmRiYWY2YTg3MTdhY2VkOWRmN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1STVmn/yW06QJQQFor2aBKaokpfi UYCXjujND4jpUpI31vyHFZHw2ZSpMiYSf32iSHWKb4SxXIC6GuBqPV81PG7bTTx+ z1u9+H2h9Sx9hgRlwgW1yXSnY6383V4mNo9WwCAwz8rsG2pYpD9b22WLl0Wwidc9 QppB74G5hSJPiNO9oMoQBDuOibV0gqGSpW5MIp40C7tjsYoE4Cg7pQrFG4y/sn+H odU5zCHciBmURwbiiY2a72KrFDC7K4V8Lmg2TtSfdN+5Cs1jWMEzyESezPOS3ulV Jy9zC9oLk5PqUEcHWqy/5jcKTYIX0L0yoyaqC/vVoZKeELjzIEjr9L7yywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2CKUUixQU2JWLbr2qHF6ztnffoMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvallJcFJTTEZCVFlsWXR1dmFvY1hyTzJkOS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqrpMA0G CSqGSIb3DQEBCwUAA4IBAQCF6MO2A8izwQytYeFzI9kQx9ga5QAqTfxTNXFstD5l ZRKTClhH1ra+jLutUZivd/aATWrAmM+2ZMePHR44KCmuRlun41Z/qV2go9m8RtuV 7pk1G5Cuwb/IvFMOZlf27cJCXTUbzxTD7voVo039TmkO6d9l0Wf0J3OLFmVSxYBb YDUs6rWmFeuFloBfBzBt8gY5Z2aHtpwjCmnmNi0E9HrOkgrtkp2PHJBOIT/M+CXg DDXvPiRbk3nt1lMyzSR+5NC9sAwEuZwkmn8x9LcNp/qOemB5cPf2rwv6gTtpRyaf eKt/ikKtCqnXNDS3Rer8xh93AK6U47/LJ9V4xPGHgLfH -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:24 2026 by rpki-client