This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/yuN29w4l_cl-IkkGgslbzfGqDe4.roa File: yuN29w4l_cl-IkkGgslbzfGqDe4.roa (raw, json) Hash identifier: sMZJIkJQSxOhfVvEO/9QeKqeZ75CwlugDT+33MJ4iW4= Subject key identifier: CA:E3:76:F7:0E:25:FD:C9:7E:22:49:06:82:C9:5B:CD:F1:AA:0D:EE Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403 Certificate serial: 019B78A2E4B16D65C3A2F5585F765904C7C0 Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/yuN29w4l_cl-IkkGgslbzfGqDe4.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 178.211.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e4:b1:6d:65:c3:a2:f5:58:5f:76:59:04:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cae376f70e25fdc97e22490682c95bcdf1aa0dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:a3:e0:41:a0:b6:8f:c6:7a:b0:00:38:19: 29:f0:0e:55:12:81:0e:05:d7:22:a5:4e:db:a1:f7: f7:bb:9a:4f:e6:d9:64:97:54:99:f7:86:a2:f6:92: 7b:10:43:2d:f4:54:20:5c:83:7f:fc:f5:a8:76:de: ce:ce:cb:05:70:23:85:c3:11:47:01:3c:9c:f8:18: 8c:90:06:19:c5:45:a4:e4:ff:e3:c8:99:86:97:3b: cf:86:92:1a:95:95:e6:bc:b2:be:1e:04:b2:40:21: 9d:ad:04:d4:af:4a:30:fc:6b:96:80:61:2b:57:68: fd:dc:64:d1:4c:57:8a:96:c1:30:6d:9e:ab:9d:31: 08:3b:20:81:0c:9c:83:e1:a7:92:84:ba:90:03:80: e0:2c:7e:35:38:d1:de:f7:0a:4c:f5:b1:8c:8a:07: cc:c2:ed:4c:e3:25:c7:57:48:29:97:6c:33:b1:97: a8:c2:dd:11:f7:ec:4d:91:b8:37:5c:3e:e1:59:df: de:52:06:fb:f4:f9:e4:f8:d5:d4:e5:a5:19:4b:bb: 1a:da:cc:2a:c6:93:cf:2a:c8:f8:33:15:8e:9d:cf: 90:5c:fe:33:c1:12:77:c8:b3:65:c6:4b:54:73:e0: 59:84:f8:14:0f:0c:60:3c:3c:33:a1:29:9c:91:fa: f0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:76:F7:0E:25:FD:C9:7E:22:49:06:82:C9:5B:CD:F1:AA:0D:EE X509v3 Authority Key Identifier: keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/yuN29w4l_cl-IkkGgslbzfGqDe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.142.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:9f:53:88:6b:d9:ab:37:c5:96:d4:d2:4d:26:4e:38:a4:9f: ec:60:27:84:36:6b:fa:17:5e:f9:91:b9:bd:d8:99:14:7a:3f: 8b:f5:41:c4:0d:95:cb:02:c7:43:b0:03:26:58:5d:49:ab:be: 0b:f3:8f:5c:2a:a6:7d:f7:ab:50:39:53:49:a5:8c:fd:a8:48: 4e:9e:eb:44:63:ab:fe:f9:82:dd:7c:9e:8b:3f:ab:d2:59:99: 1c:1f:41:7c:34:c7:37:6e:e6:48:8a:b3:12:75:62:78:9a:0a: 52:6d:8c:85:a1:b1:8c:c8:12:d3:cd:08:dc:35:24:25:b2:a0: e1:ee:96:8b:2f:78:d9:b0:a4:9a:17:74:f4:01:77:32:d0:41: 38:40:1c:e9:eb:bf:00:bd:54:aa:82:37:c6:7c:25:5a:c9:18: 2b:9d:7b:9e:5f:89:b6:d5:cd:09:5f:62:cc:92:f9:57:08:76: b2:d8:5b:98:16:36:5a:be:53:af:05:e6:d7:21:52:99:2e:71: 7a:13:13:df:d7:e4:c0:b0:5a:ef:ea:4f:a5:5b:9c:04:6f:14: 9a:f0:77:0d:0f:28:0f:d9:ee:62:44:e1:15:5b:8c:c2:45:01: f8:89:4d:a8:ef:88:6f:be:da:f7:b1:bd:c1:b9:c9:36:7d:d7: 49:4d:5f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouSxbWXDovVYX3ZZBMfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx ODk0MDMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWUzNzZmNzBlMjVmZGM5N2UyMjQ5MDY4MmM5NWJjZGYxYWEwZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V+j4EGgto/GerAAOBkp8A5VEoEO BdcipU7boff3u5pP5tlkl1SZ94ai9pJ7EEMt9FQgXIN//PWodt7OzssFcCOFwxFH ATyc+BiMkAYZxUWk5P/jyJmGlzvPhpIalZXmvLK+HgSyQCGdrQTUr0ow/GuWgGEr V2j93GTRTFeKlsEwbZ6rnTEIOyCBDJyD4aeShLqQA4DgLH41ONHe9wpM9bGMigfM wu1M4yXHV0gpl2wzsZeowt0R9+xNkbg3XD7hWd/eUgb79Pnk+NXU5aUZS7sa2swq xpPPKsj4MxWOnc+QXP4zwRJ3yLNlxktUc+BZhPgUDwxgPDwzoSmckfrwOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrjdvcOJf3JfiJJBoLJW83xqg3uMB8GA1UdIwQY MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt Y2IxNjhhZmRiMzQzLzEveXVOMjl3NGxfY2wtSWtrR2dzbGJ6ZkdxRGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOOMA0G CSqGSIb3DQEBCwUAA4IBAQBvn1OIa9mrN8WW1NJNJk44pJ/sYCeENmv6F175kbm9 2JkUej+L9UHEDZXLAsdDsAMmWF1Jq74L849cKqZ996tQOVNJpYz9qEhOnutEY6v+ +YLdfJ6LP6vSWZkcH0F8NMc3buZIirMSdWJ4mgpSbYyFobGMyBLTzQjcNSQlsqDh 7paLL3jZsKSaF3T0AXcy0EE4QBzp678AvVSqgjfGfCVayRgrnXueX4m21c0JX2LM kvlXCHay2FuYFjZavlOvBebXIVKZLnF6ExPf1+TAsFrv6k+lW5wEbxSa8HcNDygP 2e5iROEVW4zCRQH4iU2o74hvvtr3sb3Buck2fddJTV/y -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client