This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/5rkPYXEpgRvzPTucyjqYBpgUeYk.roa File: 5rkPYXEpgRvzPTucyjqYBpgUeYk.roa (raw, json) Hash identifier: 7MvWTFZsobYNkMfS9BsnC/97q/D5gvNOhf8R5zgBI1E= Subject key identifier: E6:B9:0F:61:71:29:81:1B:F3:3D:3B:9C:CA:3A:98:06:98:14:79:89 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842F398DE1E4073511B3F1C26DC11F Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/5rkPYXEpgRvzPTucyjqYBpgUeYk.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210546 IP address blocks: 178.250.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2f:39:8d:e1:e4:07:35:11:b3:f1:c2:6d:c1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6b90f617129811bf33d3b9cca3a980698147989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:b0:7e:f7:e7:a7:5a:fb:82:93:17:44:b3: 18:ae:03:7d:09:c1:a9:03:ba:9b:83:68:79:03:07: b6:57:33:b0:d0:e4:5e:cd:c2:b6:73:f2:9a:30:10: 15:bd:8b:94:5e:0f:bb:4e:b7:49:83:30:27:a2:a1: a1:84:1a:a6:39:ee:5d:4c:7a:b7:ba:8e:12:08:2a: 10:81:0d:af:58:64:b2:b6:ee:09:86:3e:c7:dc:15: ca:b6:80:23:8f:4f:3b:1e:6d:2e:20:c4:0b:19:26: 25:b6:13:95:45:30:b4:0d:65:e6:10:80:08:ef:37: 3e:b2:e6:db:0b:5e:0d:fd:d2:91:f5:ec:58:be:56: 25:1e:f8:e9:59:4c:5a:cb:09:e2:a3:f4:63:36:02: 92:45:aa:60:c1:e2:3f:aa:bd:be:0c:ac:b5:e6:93: 20:cc:0b:21:0a:ac:d2:07:69:07:04:09:c0:d0:ea: 39:c3:8d:37:d1:47:6f:f0:f5:ae:54:7b:6d:1f:45: 01:ea:22:ea:44:7e:23:39:10:b0:d9:f1:05:f3:98: ea:53:db:18:93:13:3e:28:f2:a5:59:fa:46:18:90: f3:31:70:4b:6c:eb:6d:56:cf:e6:c2:d6:20:a8:a7: 8a:4e:ff:b5:0f:4d:0d:2b:98:0e:12:d1:bf:be:d5: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:0F:61:71:29:81:1B:F3:3D:3B:9C:CA:3A:98:06:98:14:79:89 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/5rkPYXEpgRvzPTucyjqYBpgUeYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.186.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:78:86:fb:e4:1f:1e:e6:90:5b:12:30:96:52:0f:42:b9:68: 13:39:05:18:30:5f:77:0d:24:67:cd:71:39:e8:d9:a6:95:86: f3:20:77:9b:ed:ee:c9:4e:7e:d1:c1:af:fc:87:96:af:d5:e8: bd:ce:8f:44:63:ff:02:04:46:38:11:8d:3c:f0:04:ec:d7:f2: b6:5c:33:47:8a:51:43:4a:62:2a:f9:1a:c1:b9:90:2b:18:ba: 56:23:81:b0:2e:1c:22:f6:53:9b:8b:ed:74:5f:ed:01:2a:51: cd:af:ae:a7:ce:55:59:14:b8:25:07:59:14:5c:db:8b:fd:f4: 29:cb:78:2c:07:c0:d4:bd:2c:1f:dd:15:7f:2e:24:12:48:4d: e5:98:1c:dc:34:4c:5b:2f:92:e0:01:4c:7a:d2:23:0a:90:00: ab:66:48:79:c6:08:31:3e:45:68:96:79:48:d6:e4:76:0f:96: 8f:fd:e5:86:76:e7:f8:9b:c2:bc:b3:e7:2b:a8:95:d0:69:4d: 80:69:ad:b9:ed:9f:00:39:0b:f3:da:24:05:3e:bd:53:69:25: 10:ab:57:84:43:c2:66:4e:06:9c:ea:e7:d6:20:aa:0a:99:e7: 48:2a:e9:58:ad:3e:17:bb:bc:f3:7f:af:ca:02:60:62:5d:e5: d4:c0:c8:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hC85jeHkBzURs/HCbcEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmI5MGY2MTcxMjk4MTFiZjMzZDNiOWNjYTNhOTgwNjk4MTQ3OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9mwfvfnp1r7gpMXRLMYrgN9CcGp A7qbg2h5Awe2VzOw0ORezcK2c/KaMBAVvYuUXg+7TrdJgzAnoqGhhBqmOe5dTHq3 uo4SCCoQgQ2vWGSytu4Jhj7H3BXKtoAjj087Hm0uIMQLGSYlthOVRTC0DWXmEIAI 7zc+subbC14N/dKR9exYvlYlHvjpWUxaywnio/RjNgKSRapgweI/qr2+DKy15pMg zAshCqzSB2kHBAnA0Oo5w4030Udv8PWuVHttH0UB6iLqRH4jORCw2fEF85jqU9sY kxM+KPKlWfpGGJDzMXBLbOttVs/mwtYgqKeKTv+1D00NK5gOEtG/vtVodQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOa5D2FxKYEb8z07nMo6mAaYFHmJMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvNXJrUFlYRXBnUnZ6UFR1Y3lqcVlCcGdVZVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvq6MA0G CSqGSIb3DQEBCwUAA4IBAQAreIb75B8e5pBbEjCWUg9CuWgTOQUYMF93DSRnzXE5 6NmmlYbzIHeb7e7JTn7Rwa/8h5av1ei9zo9EY/8CBEY4EY088ATs1/K2XDNHilFD SmIq+RrBuZArGLpWI4GwLhwi9lObi+10X+0BKlHNr66nzlVZFLglB1kUXNuL/fQp y3gsB8DUvSwf3RV/LiQSSE3lmBzcNExbL5LgAUx60iMKkACrZkh5xggxPkVolnlI 1uR2D5aP/eWGduf4m8K8s+crqJXQaU2Aaa257Z8AOQvz2iQFPr1TaSUQq1eEQ8Jm Tgac6ufWIKoKmedIKulYrT4Xu7zzf6/KAmBiXeXUwMgx -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:16 2026 by rpki-client