This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa File: aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa (raw, json) Hash identifier: K+hfO/BW2nP6cpPF3ceYJcKox+Ctdij1CCqhzl808Eo= Subject key identifier: 69:32:28:12:AB:77:1B:07:B3:6C:06:59:4E:62:97:61:3D:0E:D1:24 Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Certificate serial: 019B7F83C9052BE94C2C15A06E595303D1D4 Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa Signing time: Fri 02 Jan 2026 16:21:41 +0000 ROA not before: Fri 02 Jan 2026 16:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52070 IP address blocks: 178.21.40.0/23 maxlen: 23 178.21.40.0/24 maxlen: 24 178.21.41.0/24 maxlen: 24 2a01:9800::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c9:05:2b:e9:4c:2c:15:a0:6e:59:53:03:d1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7 Validity Not Before: Jan 2 16:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69322812ab771b07b36c06594e6297613d0ed124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:6c:57:89:f9:da:2f:9b:53:f8:eb:04:9b: c7:78:05:d3:6e:24:1c:1e:5e:87:a8:55:04:02:70: 65:52:0d:e3:40:93:f3:da:2c:5f:2f:66:de:9f:77: e8:f8:bd:3b:73:df:37:09:1a:5c:cb:f8:41:23:c0: b0:e8:f6:e2:a4:67:f0:9c:08:4b:cd:75:a3:49:f0: 70:fb:78:dc:fe:1f:39:ca:ea:c0:05:f8:84:53:58: f9:9e:06:3d:bb:a3:04:3b:a7:0e:53:9c:8f:48:85: 14:0b:a8:73:58:d8:41:0b:a9:c0:06:8a:30:35:bf: 6f:3b:2e:e5:cd:3b:51:81:47:22:d8:07:14:d5:23: 4d:5b:aa:21:92:69:75:ba:50:39:e0:6d:a0:ba:8c: aa:ac:e1:62:b3:32:66:8a:5d:e7:34:1e:c6:e8:b6: f9:f4:26:75:96:09:a6:ba:b4:0e:fd:33:ae:e0:4c: db:f7:72:95:71:d9:2f:f1:c3:f8:96:1a:e5:0d:ce: 54:e6:5e:1f:fe:13:8a:f7:99:82:2f:01:13:4b:dc: e8:3f:89:be:d8:9e:b4:f9:a3:8d:2b:74:5d:93:32: da:d3:24:14:fd:f8:45:92:2e:7a:57:06:14:aa:d7: d1:d2:71:bc:69:43:42:73:0f:3c:4e:25:91:20:14: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:28:12:AB:77:1B:07:B3:6C:06:59:4E:62:97:61:3D:0E:D1:24 X509v3 Authority Key Identifier: keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/aTIoEqt3GwezbAZZTmKXYT0O0SQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.40.0/23 IPv6: 2a01:9800::/35 Signature Algorithm: sha256WithRSAEncryption 07:f5:77:d7:fd:15:e0:d9:b1:4b:39:a5:0e:93:16:af:f2:b4: d4:5a:b1:1b:12:8a:e2:07:83:36:8c:9c:f9:98:db:cd:78:57: 94:9a:3c:d8:02:69:89:73:c6:74:cd:e1:cd:26:e5:6b:21:d7: 03:8f:3e:ed:5f:64:95:b4:fb:e8:6f:ed:d4:8e:ba:4e:f8:0f: ff:42:a8:44:90:32:10:08:3f:d5:cc:8f:0e:93:1b:3b:da:3c: 81:4c:ae:2d:3d:f1:58:55:3a:2c:9d:df:54:73:c6:7a:73:93: d7:45:0f:e4:4f:fa:d1:66:75:e8:6e:99:0e:e6:79:c9:c4:1b: d3:c5:7d:cb:0f:b3:7f:d5:12:77:80:9c:a8:d0:71:d4:c0:8e: 9c:f6:55:4c:7f:0e:04:f0:e1:66:b1:7d:b2:0f:d8:10:80:89: e0:68:2e:0c:84:99:98:ca:73:31:23:0e:14:58:9b:32:1e:93: e3:a2:9b:ba:c4:f9:3a:51:2f:29:41:e7:5d:8b:7c:19:d8:8c: 60:bc:6a:5c:ff:83:2f:76:5c:64:7c:91:4b:5d:61:7b:8e:b7: af:b8:e7:eb:f9:55:87:f0:10:b9:46:66:8f:e1:7f:b8:1a:54: 06:af:9f:e3:c7:15:df:d6:5a:ab:f1:04:07:cd:c0:1a:2f:d5: 7b:81:01:8c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/g8kFK+lMLBWgbllTA9HUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy YzNjZDcwHhcNMjYwMTAyMTYyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTMyMjgxMmFiNzcxYjA3YjM2YzA2NTk0ZTYyOTc2MTNkMGVkMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC5sV4n52i+bU/jrBJvHeAXTbiQc Hl6HqFUEAnBlUg3jQJPz2ixfL2ben3fo+L07c983CRpcy/hBI8Cw6PbipGfwnAhL zXWjSfBw+3jc/h85yurABfiEU1j5ngY9u6MEO6cOU5yPSIUUC6hzWNhBC6nABoow Nb9vOy7lzTtRgUci2AcU1SNNW6ohkml1ulA54G2guoyqrOFiszJmil3nNB7G6Lb5 9CZ1lgmmurQO/TOu4Ezb93KVcdkv8cP4lhrlDc5U5l4f/hOK95mCLwETS9zoP4m+ 2J60+aONK3RdkzLa0yQU/fhFki56VwYUqtfR0nG8aUNCcw88TiWRIBRjiwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFGkyKBKrdxsHs2wGWU5il2E9DtEkMB8GA1UdIwQY MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt OWYxNTBjOGVhOTcxLzEvYVRJb0VxdDNHd2V6YkFaWlRtS1hZVDBPMFNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBshUoMA4E AgACMAgDBgUqAZgAADANBgkqhkiG9w0BAQsFAAOCAQEAB/V31/0V4NmxSzmlDpMW r/K01FqxGxKK4geDNoyc+ZjbzXhXlJo82AJpiXPGdM3hzSblayHXA48+7V9klbT7 6G/t1I66TvgP/0KoRJAyEAg/1cyPDpMbO9o8gUyuLT3xWFU6LJ3fVHPGenOT10UP 5E/60WZ16G6ZDuZ5ycQb08V9yw+zf9USd4CcqNBx1MCOnPZVTH8OBPDhZrF9sg/Y EICJ4GguDISZmMpzMSMOFFibMh6T46KbusT5OlEvKUHnXYt8GdiMYLxqXP+DL3Zc ZHyRS11he463r7jn6/lVh/AQuUZmj+F/uBpUBq+f48cV39Zaq/EEB83AGi/Ve4EB jA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:31 2026 by rpki-client