This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/pBheYp73SEtAdhEMIPW7iRhovW4.roa File: pBheYp73SEtAdhEMIPW7iRhovW4.roa (raw, json) Hash identifier: UOlnn1MRtbLBLpm2RRy/WUUN5Tf1kYiRjMgHmqQo+hQ= Subject key identifier: A4:18:5E:62:9E:F7:48:4B:40:76:11:0C:20:F5:BB:89:18:68:BD:6E Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Certificate serial: 019B7DCA80A18DF7C1D4062EFBF669A07545 Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/pBheYp73SEtAdhEMIPW7iRhovW4.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 178.255.218.0/24 maxlen: 24 185.203.67.0/24 maxlen: 24 185.204.187.0/24 maxlen: 24 193.163.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:80:a1:8d:f7:c1:d4:06:2e:fb:f6:69:a0:75:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4185e629ef7484b4076110c20f5bb891868bd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:b3:c2:4f:1e:55:0b:1e:3c:9e:0b:fb:bc: cf:00:82:75:c6:96:c7:61:4e:d9:bf:95:7d:5c:70: 78:c0:69:5f:29:ce:25:15:e9:ab:0a:19:17:df:36: 33:45:cb:e3:22:56:f1:6d:65:0b:36:22:56:84:e6: 9b:e5:47:f9:cc:f9:a2:af:97:f4:17:fa:c3:35:89: 08:94:da:ee:c2:48:68:25:56:eb:47:49:58:58:fc: 5f:4a:0e:8d:a8:b6:3a:23:00:30:49:de:2a:4a:c7: eb:4d:29:3d:fe:0c:df:53:85:80:bc:83:1b:e9:a5: 15:8e:8a:91:92:8b:ec:c8:8e:84:e2:34:7c:92:8a: 26:37:41:79:94:27:24:37:dd:5f:da:af:16:d8:80: 33:aa:03:09:69:ec:99:9c:88:57:aa:21:96:4e:c3: 60:2e:6b:00:81:cd:4f:13:31:b9:17:92:ad:ab:f2: e3:ef:0e:86:cc:26:22:34:da:d1:da:b0:6f:c7:04: 7f:59:da:f0:84:8a:f1:3e:43:c8:36:18:2a:94:c8: 41:e7:fb:df:14:ab:f2:8c:9b:d0:97:ea:d3:60:b3: 3e:68:9d:bd:9e:c9:4e:4e:ef:a6:39:3c:e8:18:35: 35:f8:ab:6a:80:48:6a:b0:59:81:8e:a3:92:e0:bd: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:5E:62:9E:F7:48:4B:40:76:11:0C:20:F5:BB:89:18:68:BD:6E X509v3 Authority Key Identifier: keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/pBheYp73SEtAdhEMIPW7iRhovW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.218.0/24 185.203.67.0/24 185.204.187.0/24 193.163.88.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:71:d8:7e:e2:9d:77:80:28:e7:b4:6b:12:38:85:b5:64:21: c0:b6:43:00:0c:fa:db:25:77:08:26:67:68:ef:6f:e1:96:9e: f7:f0:17:43:85:d9:46:0b:58:6d:bf:1c:83:cd:d4:00:ea:aa: 81:81:d8:d0:9d:e8:dc:31:c1:91:a0:6a:14:d7:04:d6:26:b3: 34:58:02:c6:a7:92:ec:02:80:83:72:d2:ba:36:e1:bc:38:0c: ec:21:2a:c9:69:e3:3c:0a:ea:40:9d:00:72:01:80:f8:8b:70: 5e:e4:23:47:33:56:da:27:5c:16:b9:7a:53:61:23:22:51:f9: d8:0a:de:0d:eb:c5:8e:bb:a2:e8:63:13:3f:73:b9:f6:2b:8d: 97:98:ad:35:c4:f3:83:c8:f1:03:e8:18:3b:fc:24:25:e9:87: ab:8a:26:52:78:44:61:89:6f:e2:56:a2:46:b2:8c:df:c3:5b: 83:b3:05:26:5c:a4:19:10:21:e7:80:41:6a:5d:f0:b4:51:c5: 2c:38:01:b0:48:67:6c:ea:a5:89:8d:6e:b3:93:19:ad:28:cb: 27:de:2b:95:f1:51:73:c4:c9:4f:c0:4a:37:57:7d:88:a9:dc: ea:6e:eb:e5:ea:b1:50:36:ae:a0:0f:38:e0:1f:f0:d8:95:61: 54:bf:bc:ce -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yoChjffB1AYu+/ZpoHVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5 NDY4OTQwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDE4NWU2MjllZjc0ODRiNDA3NjExMGMyMGY1YmI4OTE4NjhiZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DCzwk8eVQsePJ4L+7zPAIJ1xpbH YU7Zv5V9XHB4wGlfKc4lFemrChkX3zYzRcvjIlbxbWULNiJWhOab5Uf5zPmir5f0 F/rDNYkIlNruwkhoJVbrR0lYWPxfSg6NqLY6IwAwSd4qSsfrTSk9/gzfU4WAvIMb 6aUVjoqRkovsyI6E4jR8koomN0F5lCckN91f2q8W2IAzqgMJaeyZnIhXqiGWTsNg LmsAgc1PEzG5F5Ktq/Lj7w6GzCYiNNrR2rBvxwR/WdrwhIrxPkPINhgqlMhB5/vf FKvyjJvQl+rTYLM+aJ29nslOTu+mOTzoGDU1+KtqgEhqsFmBjqOS4L21SQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKQYXmKe90hLQHYRDCD1u4kYaL1uMB8GA1UdIwQY MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et OTNlOTE4ZDEwZWM1LzEvcEJoZVlwNzNTRXRBZGhFTUlQVzdpUmhvdlc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1 LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsv/aAwQA uctDAwQAucy7AwQAwaNYMA0GCSqGSIb3DQEBCwUAA4IBAQB8cdh+4p13gCjntGsS OIW1ZCHAtkMADPrbJXcIJmdo72/hlp738BdDhdlGC1htvxyDzdQA6qqBgdjQnejc McGRoGoU1wTWJrM0WALGp5LsAoCDctK6NuG8OAzsISrJaeM8CupAnQByAYD4i3Be 5CNHM1baJ1wWuXpTYSMiUfnYCt4N68WOu6LoYxM/c7n2K42XmK01xPODyPED6Bg7 /CQl6YeriiZSeERhiW/iVqJGsozfw1uDswUmXKQZECHngEFqXfC0UcUsOAGwSGds 6qWJjW6zkxmtKMsn3iuV8VFzxMlPwEo3V32Iqdzqbuvl6rFQNq6gDzjgH/DYlWFU v7zO -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:17 2026 by rpki-client