This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/5AsWyF1f4ujjHWSDojwUCJzIsQo.roa File: 5AsWyF1f4ujjHWSDojwUCJzIsQo.roa (raw, json) Hash identifier: i1HUG5lw4XQU4xSl9+H4tPoxXwRgahcdEdU4boFga8o= Subject key identifier: E4:0B:16:C8:5D:5F:E2:E8:E3:1D:64:83:A2:3C:14:08:9C:C8:B1:0A Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Certificate serial: 019B7F83C9C4B628AF9858DCCF8696C3DB6A Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/5AsWyF1f4ujjHWSDojwUCJzIsQo.roa Signing time: Fri 02 Jan 2026 16:21:41 +0000 ROA not before: Fri 02 Jan 2026 16:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52155 IP address blocks: 178.21.44.0/24 maxlen: 24 178.21.45.0/24 maxlen: 24 178.21.46.0/24 maxlen: 24 178.21.47.0/24 maxlen: 24 2a01:9800:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c9:c4:b6:28:af:98:58:dc:cf:86:96:c3:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Validity Not Before: Jan 2 16:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40b16c85d5fe2e8e31d6483a23c14089cc8b10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:df:49:b2:90:6e:9e:eb:c3:96:d7:fd:14: 18:82:16:5f:5f:16:63:0c:eb:d1:c9:1d:a3:4b:df: d3:6b:1b:fc:e0:e8:8e:83:17:d9:1e:7e:8c:19:3b: 02:93:4c:84:fb:5b:71:3d:ec:94:1c:08:23:af:51: d7:65:74:1a:de:f0:47:d0:84:e6:b7:e5:31:3f:b1: 54:a8:5f:19:ff:31:6c:11:1f:0a:82:25:67:3a:dd: 98:a0:65:41:1a:e5:d6:5e:80:e0:6c:7a:8f:5b:23: 25:0e:52:5b:8a:4d:1d:fa:7c:5b:fb:2d:4a:70:92: b4:ba:ea:23:a8:a5:0d:28:81:f7:47:71:47:50:b9: 79:08:85:3b:ec:ef:1a:ac:3e:e7:25:13:8f:b2:3b: 47:52:0a:18:66:6b:e7:2f:48:9f:ed:0f:e7:5c:74: 0d:22:76:64:67:6a:9e:8b:3f:76:36:7e:b5:5e:f6: 4c:ad:4a:ea:b1:59:50:ab:b1:63:3a:7c:71:b5:d0: 20:7d:a7:aa:26:45:98:1a:50:d1:0c:18:ec:2b:33: d5:82:e3:6d:e3:04:c9:07:35:f8:d9:f2:60:dd:97: 26:df:17:75:1c:68:8b:71:72:92:06:21:8f:da:31: aa:92:5f:15:47:45:dd:51:eb:e8:4d:2d:e2:8e:40: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:16:C8:5D:5F:E2:E8:E3:1D:64:83:A2:3C:14:08:9C:C8:B1:0A X509v3 Authority Key Identifier: keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/5AsWyF1f4ujjHWSDojwUCJzIsQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.44.0/22 IPv6: 2a01:9800:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:85:5d:ad:75:87:b5:00:9d:19:57:be:3c:07:38:68:cb:9d: 0a:dc:f0:7a:a9:dc:50:e1:75:c8:54:da:f4:b2:9b:0d:c9:58: a4:5c:f9:c5:d7:8d:1f:f5:db:58:18:e9:75:d2:da:d4:a6:1f: 61:b7:f2:79:5b:8d:d0:9b:85:90:29:6f:96:f2:f1:03:b1:c3: e5:c5:a7:fe:b1:6a:a4:b0:45:51:4b:86:dc:e0:02:82:3a:63: 4c:b4:db:70:62:4f:94:93:04:cb:b1:64:21:7c:33:da:31:35: af:d6:0d:b1:19:77:cf:2f:db:90:f9:26:f6:9e:b2:1c:17:af: c1:80:e7:80:d7:a3:47:38:1a:a8:53:2a:a0:cd:04:5b:9e:e0: d8:5d:ef:42:4d:e7:67:59:52:47:a5:16:6d:f7:de:86:ed:32: a1:dc:4c:db:04:87:96:c3:f8:a9:a2:c8:63:6d:3c:b5:17:e5: fd:b9:0b:eb:f0:ac:dd:72:82:39:b0:b5:ce:d2:04:02:b6:21: 9e:63:4f:ef:a1:40:e9:98:87:7e:97:74:ae:d9:3c:eb:ab:e0: 07:97:9a:8e:2b:e7:93:01:09:04:fa:02:2b:c9:c4:fd:73:0a: ed:e4:f1:df:e9:65:b9:0d:be:44:ac:33:a5:8f:b4:0f:ed:21: 07:c4:c9:02 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/g8nEtiivmFjcz4aWw9tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy YzNjZDcwHhcNMjYwMTAyMTYyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDBiMTZjODVkNWZlMmU4ZTMxZDY0ODNhMjNjMTQwODljYzhiMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM7fSbKQbp7rw5bX/RQYghZfXxZj DOvRyR2jS9/Taxv84OiOgxfZHn6MGTsCk0yE+1txPeyUHAgjr1HXZXQa3vBH0ITm t+UxP7FUqF8Z/zFsER8KgiVnOt2YoGVBGuXWXoDgbHqPWyMlDlJbik0d+nxb+y1K cJK0uuojqKUNKIH3R3FHULl5CIU77O8arD7nJROPsjtHUgoYZmvnL0if7Q/nXHQN InZkZ2qeiz92Nn61XvZMrUrqsVlQq7FjOnxxtdAgfaeqJkWYGlDRDBjsKzPVguNt 4wTJBzX42fJg3Zcm3xd1HGiLcXKSBiGP2jGqkl8VR0XdUevoTS3ijkAH1QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOQLFshdX+Lo4x1kg6I8FAicyLEKMB8GA1UdIwQY MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt OWYxNTBjOGVhOTcxLzEvNUFzV3lGMWY0dWpqSFdTRG9qd1VDSnpJc1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCshUsMA4E AgACMAgDBgQqAZgAgDANBgkqhkiG9w0BAQsFAAOCAQEAioVdrXWHtQCdGVe+PAc4 aMudCtzweqncUOF1yFTa9LKbDclYpFz5xdeNH/XbWBjpddLa1KYfYbfyeVuN0JuF kClvlvLxA7HD5cWn/rFqpLBFUUuG3OACgjpjTLTbcGJPlJMEy7FkIXwz2jE1r9YN sRl3zy/bkPkm9p6yHBevwYDngNejRzgaqFMqoM0EW57g2F3vQk3nZ1lSR6UWbffe hu0yodxM2wSHlsP4qaLIY208tRfl/bkL6/Cs3XKCObC1ztIEArYhnmNP76FA6ZiH fpd0rtk866vgB5eajivnkwEJBPoCK8nE/XMK7eTx3+lluQ2+RKwzpY+0D+0hB8TJ Ag== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:32 2026 by rpki-client