This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa File: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (raw, json) Hash identifier: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4= Subject key identifier: 7B:C6:43:27:57:DA:C7:8B:7D:52:32:3A:E0:F9:A6:3E:1C:89:78:AF Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2AA44314C4DB20AA1558975607367 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa Signing time: Fri 02 Jan 2026 18:22:48 +0000 ROA not before: Fri 02 Jan 2026 18:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 178.212.230.0/24 maxlen: 24 194.26.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:aa:44:31:4c:4d:b2:0a:a1:55:89:75:60:73:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc6432757dac78b7d52323ae0f9a63e1c8978af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:ae:dc:38:58:94:06:25:37:43:e5:81:72: d4:dd:1b:5b:bc:fb:fb:73:fe:f7:26:e0:fd:61:52: 5f:77:4f:9d:c6:f0:16:f3:28:ec:e2:5f:81:0b:f5: d8:b4:c3:81:bb:da:d7:b9:b5:c0:52:bb:52:b6:57: 21:f0:aa:ff:c7:46:fd:e3:a1:f2:cb:11:36:99:da: af:b3:2a:b7:29:70:04:03:97:76:35:71:88:27:95: ef:5b:a8:47:a1:96:d3:3f:1b:7e:29:67:ad:0e:d3: 5d:88:b5:26:13:f8:0b:1a:4e:04:dc:95:10:e4:69: e5:15:e0:6c:ed:97:de:77:f5:fe:34:5e:00:ed:7d: d7:95:a4:46:2e:cc:57:82:05:34:08:3e:a3:cb:1f: 2f:a2:ea:a0:1a:3b:d7:7d:dd:ce:c4:0c:23:dd:7a: 60:b6:e9:90:b4:ad:1f:d9:98:8e:6b:e4:3a:8d:64: f3:c6:f4:d4:22:87:1b:c9:62:50:2c:65:c3:4d:58: 92:9e:7f:f0:c9:4f:3e:2f:2a:53:5d:90:c7:26:96: 84:e6:55:61:dc:6a:81:de:ab:07:12:75:0b:17:c7: e0:e1:d6:d2:f2:cf:a3:2a:60:e9:6e:2f:14:1f:77: b1:42:cb:06:87:66:3f:ed:bb:7f:c9:a9:8f:16:16: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C6:43:27:57:DA:C7:8B:7D:52:32:3A:E0:F9:A6:3E:1C:89:78:AF X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.230.0/24 194.26.234.0/24 Signature Algorithm: sha256WithRSAEncryption ab:84:dd:15:27:51:c7:4f:e3:d6:6c:ae:af:a4:27:6f:3f:57: cc:de:0f:45:92:bf:2a:d6:75:24:97:47:fb:28:a3:20:c9:cc: 32:b6:ef:76:57:98:d3:3e:74:68:5f:d2:3d:5e:8e:36:f7:23: 84:c0:b7:d4:eb:be:3c:37:d4:c5:59:69:26:5c:7a:61:a5:b1: 0a:c7:be:24:6f:69:a4:4b:40:ab:80:be:f2:4b:a5:d8:3d:62: ed:0e:d3:d6:15:a4:5d:83:6e:67:f2:47:61:44:13:a0:a4:b1: 59:66:9f:75:e7:52:a5:67:9e:0b:ab:c2:ca:ff:e3:23:60:ca: 01:74:23:e9:c2:4f:90:b4:4c:6b:30:da:87:08:da:6c:0b:da: fa:8a:46:f6:7a:1e:60:16:9d:33:b5:9c:12:62:2b:83:f0:47: dd:76:4a:0d:7b:0c:5d:3f:ae:06:1b:b4:31:e3:28:33:fc:b4: 22:05:98:ff:f2:11:1b:b9:e5:8b:8b:94:04:bf:d4:c7:08:13: f6:7c:22:55:32:d9:11:77:b8:0a:27:af:00:e9:9d:90:1b:2d: f4:5a:de:da:68:7c:b4:2a:29:56:fe:cf:d6:86:54:49:b3:6d: 4b:7f:9a:2e:08:cf:e0:41:6d:33:d0:1b:e1:47:d8:29:2e:e4: b9:fb:cd:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8qpEMUxNsgqhVYl1YHNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmM2NDMyNzU3ZGFjNzhiN2Q1MjMyM2FlMGY5YTYzZTFjODk3OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHWu3DhYlAYlN0PlgXLU3RtbvPv7 c/73JuD9YVJfd0+dxvAW8yjs4l+BC/XYtMOBu9rXubXAUrtStlch8Kr/x0b946Hy yxE2mdqvsyq3KXAEA5d2NXGIJ5XvW6hHoZbTPxt+KWetDtNdiLUmE/gLGk4E3JUQ 5GnlFeBs7Zfed/X+NF4A7X3XlaRGLsxXggU0CD6jyx8vouqgGjvXfd3OxAwj3Xpg tumQtK0f2ZiOa+Q6jWTzxvTUIocbyWJQLGXDTViSnn/wyU8+LypTXZDHJpaE5lVh 3GqB3qsHEnULF8fg4dbS8s+jKmDpbi8UH3exQssGh2Y/7bt/yamPFhY/zwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvGQydX2seLfVIyOuD5pj4ciXivMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvZThaREoxZmF4NHQ5VWpJNjRQbW1QaHlKZUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstTmAwQA whrqMA0GCSqGSIb3DQEBCwUAA4IBAQCrhN0VJ1HHT+PWbK6vpCdvP1fM3g9Fkr8q 1nUkl0f7KKMgycwytu92V5jTPnRoX9I9Xo429yOEwLfU6748N9TFWWkmXHphpbEK x74kb2mkS0CrgL7yS6XYPWLtDtPWFaRdg25n8kdhRBOgpLFZZp9151KlZ54Lq8LK /+MjYMoBdCPpwk+QtExrMNqHCNpsC9r6ikb2eh5gFp0ztZwSYiuD8EfddkoNewxd P64GG7Qx4ygz/LQiBZj/8hEbueWLi5QEv9THCBP2fCJVMtkRd7gKJ68A6Z2QGy30 Wt7aaHy0KilW/s/WhlRJs21Lf5ouCM/gQW0z0BvhR9gpLuS5+83n -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client