This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/exDfA3mCHQ1z62LVEBj8dbMqjBw.roa File: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (raw, json) Hash identifier: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg= Subject key identifier: 7B:10:DF:03:79:82:1D:0D:73:EB:62:D5:10:18:FC:75:B3:2A:8C:1C Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce Certificate serial: 019B78A337C26F44E60D06E73325A54ED62C Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/exDfA3mCHQ1z62LVEBj8dbMqjBw.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198722 IP address blocks: 212.18.110.0/24 maxlen: 24 2a12:8400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:c2:6f:44:e6:0d:06:e7:33:25:a5:4e:d6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b10df0379821d0d73eb62d51018fc75b32a8c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:15:04:d4:dd:12:64:92:0d:2e:1d:81:89: 43:74:73:e7:9b:09:4c:e6:10:66:b0:2d:57:9f:bb: 97:4f:4e:43:33:52:ee:a2:3c:72:98:9b:c7:b3:b0: e8:01:ef:ae:5a:34:59:04:fc:3c:f0:35:2b:af:e2: 6e:d2:b6:ab:61:34:d0:21:df:da:bb:a2:8c:cf:33: fc:16:9c:e2:ce:23:79:dc:55:31:28:29:79:68:2f: 95:de:9d:03:52:89:41:0b:34:81:ff:e9:97:52:f8: 75:49:e2:f3:a0:0c:c6:23:70:aa:05:94:e6:ea:68: 94:74:50:14:c0:10:b7:a9:44:24:40:e6:c6:ba:85: 02:33:96:0c:8f:d5:59:16:5c:24:62:29:10:38:30: 61:e4:43:80:76:e0:40:2e:62:05:62:0f:95:aa:65: fe:7a:66:96:10:9b:df:42:6d:69:c8:70:51:98:6f: b2:02:ec:bc:77:fa:f6:cb:cb:88:7f:6e:e3:65:b7: b7:84:c4:17:4c:3e:db:7e:d7:f5:da:c2:d6:4f:1d: 22:67:70:9b:4d:68:72:d0:e0:bb:85:e1:07:1e:b7: 23:e6:6a:27:15:ff:19:db:5c:39:8d:99:68:e5:60: b4:03:b6:56:69:9e:5d:d2:a7:0a:22:e3:cc:1f:25: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:10:DF:03:79:82:1D:0D:73:EB:62:D5:10:18:FC:75:B3:2A:8C:1C X509v3 Authority Key Identifier: keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/exDfA3mCHQ1z62LVEBj8dbMqjBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.18.110.0/24 IPv6: 2a12:8400::/32 Signature Algorithm: sha256WithRSAEncryption 1e:fd:6e:dd:7f:8d:00:c0:97:fb:df:48:df:2f:c9:20:bc:0b: 13:41:8f:c0:a0:d2:2d:f6:18:e4:94:51:48:ad:03:6b:8b:2a: 23:bd:2b:0a:f1:68:26:a4:fd:38:48:b7:10:4a:3e:82:72:d4: 7d:6d:2f:90:27:58:8a:5a:24:ba:60:19:b5:d8:cd:fc:2c:4e: 86:7a:ef:46:fa:56:69:53:b8:fb:0e:a8:b9:19:d3:1b:95:6b: 7c:2f:74:cb:c9:eb:c6:ba:2b:8f:9a:41:64:d3:70:73:ac:a7: bb:7c:86:ea:a1:70:04:b5:59:b0:cc:a3:76:55:1f:59:ec:39: 9e:9c:23:f3:c6:87:4d:66:cf:e0:3c:c5:3a:96:a7:b6:78:fd: 37:5f:b2:c5:54:88:a2:be:d5:52:b0:91:12:b0:8d:1c:f2:fa: 3f:3f:25:0f:8d:4a:41:14:73:46:e9:d0:af:29:bc:7c:59:08: a5:4d:d2:26:27:d3:5c:7d:5b:73:da:8d:b3:fa:48:b2:79:12: 31:95:7c:88:9f:02:fd:3e:e9:d2:93:a6:1b:e2:b9:e3:55:60: 69:a7:a0:a8:cb:ce:e2:da:5d:31:c8:7f:4e:d8:b3:60:b7:cc: a4:36:e5:ed:48:97:73:6e:dd:01:f9:58:33:bf:29:16:b3:22: f8:b6:34:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ozfCb0TmDQbnMyWlTtYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1 M2FiY2UwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjEwZGYwMzc5ODIxZDBkNzNlYjYyZDUxMDE4ZmM3NWIzMmE4YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKUVBNTdEmSSDS4dgYlDdHPnmwlM 5hBmsC1Xn7uXT05DM1LuojxymJvHs7DoAe+uWjRZBPw88DUrr+Ju0rarYTTQId/a u6KMzzP8FpziziN53FUxKCl5aC+V3p0DUolBCzSB/+mXUvh1SeLzoAzGI3CqBZTm 6miUdFAUwBC3qUQkQObGuoUCM5YMj9VZFlwkYikQODBh5EOAduBALmIFYg+VqmX+ emaWEJvfQm1pyHBRmG+yAuy8d/r2y8uIf27jZbe3hMQXTD7bftf12sLWTx0iZ3Cb TWhy0OC7heEHHrcj5monFf8Z21w5jZlo5WC0A7ZWaZ5d0qcKIuPMHyWGOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHsQ3wN5gh0Nc+ti1RAY/HWzKowcMB8GA1UdIwQY MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt Zjk1NDAwMmY1MjQ1LzEvZXhEZkEzbUNIUTF6NjJMVkVCajhkYk1xakJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1 LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1BJuMA0E AgACMAcDBQAqEoQAMA0GCSqGSIb3DQEBCwUAA4IBAQAe/W7df40AwJf730jfL8kg vAsTQY/AoNIt9hjklFFIrQNriyojvSsK8WgmpP04SLcQSj6CctR9bS+QJ1iKWiS6 YBm12M38LE6Geu9G+lZpU7j7Dqi5GdMblWt8L3TLyevGuiuPmkFk03BzrKe7fIbq oXAEtVmwzKN2VR9Z7DmenCPzxodNZs/gPMU6lqe2eP03X7LFVIiivtVSsJESsI0c 8vo/PyUPjUpBFHNG6dCvKbx8WQilTdImJ9NcfVtz2o2z+kiyeRIxlXyInwL9PunS k6Yb4rnjVWBpp6Coy87i2l0xyH9O2LNgt8ykNuXtSJdzbt0B+VgzvykWsyL4tjT7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:26:01 2026 by rpki-client