This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa File: rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa (raw, json) Hash identifier: FOCcBoXQG14i7Fi0nDAmmqDfc5/wMS3xKazNxC7cZRc= Subject key identifier: AD:7D:35:14:E0:BD:B4:31:C8:C5:15:5A:1C:00:1E:AB:2A:CF:E0:4A Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019B791025E454FC6E84F2079711F9BEFC9D Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41847 IP address blocks: 178.251.179.0/24 maxlen: 24 178.251.180.0/24 maxlen: 24 178.251.181.0/24 maxlen: 24 178.251.182.0/24 maxlen: 24 178.251.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:25:e4:54:fc:6e:84:f2:07:97:11:f9:be:fc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad7d3514e0bdb431c8c5155a1c001eab2acfe04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:bb:d4:4f:44:5b:b9:9b:63:11:16:e2:a7: 99:f3:c0:74:d9:6c:ed:2b:c3:5c:af:e5:c7:66:f8: f9:54:c0:c7:47:5f:7f:b5:5e:44:e8:d2:80:a9:1b: 9d:dd:56:7d:94:ab:28:5d:2c:b8:d1:fa:5e:62:16: 5f:c5:5b:7c:93:cd:b4:26:69:9f:6a:9a:5e:23:83: 37:97:ad:a7:f8:2f:e6:ba:3e:17:52:e4:f8:91:08: 68:1f:ce:0a:4b:d7:6a:f0:75:33:fa:a4:81:0d:e2: 69:66:51:fa:5d:cb:a1:91:ce:8d:94:b7:88:03:81: 6a:6e:98:88:a7:0f:fd:dc:20:a5:1b:0a:a8:4f:6b: a8:79:bd:1e:bd:72:14:ea:87:be:e9:be:19:c6:ea: 5e:4b:f5:75:c0:08:0c:e5:11:bf:ec:ab:ef:63:9b: cf:0b:7f:ee:f8:80:f9:c1:e7:4b:3d:b8:5e:0e:27: d4:37:5e:40:84:c3:d3:cd:a5:7d:52:3a:9f:68:43: d2:96:47:94:2a:92:e3:7c:24:63:16:2e:dd:56:99: c3:64:5b:43:ab:be:e0:c8:98:23:f4:ed:ba:22:7f: 55:5b:de:5b:71:b1:2c:32:b7:b7:09:00:94:d4:7a: 76:41:41:30:c0:e0:77:c1:01:76:c4:d1:f2:48:b5: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:35:14:E0:BD:B4:31:C8:C5:15:5A:1C:00:1E:AB:2A:CF:E0:4A X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/rX01FOC9tDHIxRVaHAAeqyrP4Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.179.0-178.251.183.255 Signature Algorithm: sha256WithRSAEncryption 77:29:02:b9:ee:d2:39:45:80:3c:54:16:cf:c0:c9:8c:ad:1a: e9:09:fb:14:34:3b:a8:0e:81:45:19:92:24:79:8b:15:ef:f0: 6a:19:20:ae:50:8f:1b:a3:53:5f:41:25:68:96:06:a5:f1:66: 0f:ac:65:94:ae:61:e1:69:dd:c2:2f:3c:3e:99:b6:28:9d:7f: 7d:51:02:c9:22:6a:38:0c:c8:4f:6e:74:6d:fd:81:71:6b:25: bb:c6:4a:16:1a:4c:0a:3b:a5:e6:62:22:2b:30:6d:ff:3f:83: df:95:fb:a8:2e:7a:d8:54:f8:a4:d9:c0:26:fc:f8:86:e6:a4: ad:67:0f:40:74:c7:5c:36:18:89:6e:8d:e9:e6:88:e0:bc:4c: 22:64:99:ab:0e:f2:5c:80:f0:ec:f1:4d:aa:93:72:eb:f6:05: ba:75:18:4e:99:20:65:a7:42:a2:1b:a4:4e:7f:0a:f9:31:cc: 07:fe:3e:8c:67:bd:b5:d1:4c:32:bd:3d:ac:91:46:22:74:b9: 9d:21:50:3b:fe:5b:c2:04:ea:5b:5d:06:00:6b:f9:47:f7:a6: e7:bb:0c:75:d5:3f:7a:3c:f0:c7:20:48:83:b2:7c:70:54:0b: 03:8d:f5:30:c8:64:59:11:0d:cc:0b:44:65:33:41:da:1b:98: 04:50:6c:8b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ECXkVPxuhPIHlxH5vvydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDdkMzUxNGUwYmRiNDMxYzhjNTE1NWExYzAwMWVhYjJhY2ZlMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQS71E9EW7mbYxEW4qeZ88B02Wzt K8Ncr+XHZvj5VMDHR19/tV5E6NKAqRud3VZ9lKsoXSy40fpeYhZfxVt8k820Jmmf appeI4M3l62n+C/muj4XUuT4kQhoH84KS9dq8HUz+qSBDeJpZlH6Xcuhkc6NlLeI A4FqbpiIpw/93CClGwqoT2uoeb0evXIU6oe+6b4ZxupeS/V1wAgM5RG/7KvvY5vP C3/u+ID5wedLPbheDifUN15AhMPTzaV9UjqfaEPSlkeUKpLjfCRjFi7dVpnDZFtD q77gyJgj9O26In9VW95bcbEsMre3CQCU1Hp2QUEwwOB3wQF2xNHySLU3UQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK19NRTgvbQxyMUVWhwAHqsqz+BKMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEvclgwMUZPQzl0REhJeFJWYUhBQWVxeXJQNEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACy+7MD BAOy+7AwDQYJKoZIhvcNAQELBQADggEBAHcpArnu0jlFgDxUFs/AyYytGukJ+xQ0 O6gOgUUZkiR5ixXv8GoZIK5QjxujU19BJWiWBqXxZg+sZZSuYeFp3cIvPD6Ztiid f31RAskiajgMyE9udG39gXFrJbvGShYaTAo7peZiIiswbf8/g9+V+6guethU+KTZ wCb8+IbmpK1nD0B0x1w2GIlujenmiOC8TCJkmasO8lyA8OzxTaqTcuv2Bbp1GE6Z IGWnQqIbpE5/CvkxzAf+PoxnvbXRTDK9PayRRiJ0uZ0hUDv+W8IE6ltdBgBr+Uf3 pue7DHXVP3o88McgSIOyfHBUCwON9TDIZFkRDcwLRGUzQdobmARQbIs= -----END CERTIFICATE-----Generated at Tue Feb 3 00:04:51 2026 by rpki-client