This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/178FadV0_TakM5s0KyNnx7XwyS8.roa
File: 178FadV0_TakM5s0KyNnx7XwyS8.roa (raw, json)
Hash identifier: NB7/+IMaOVDjrWQIcodfb7SNVY8yhv944En96Q047/8=
Subject key identifier: D7:BF:05:69:D5:74:FD:36:A4:33:9B:34:2B:23:67:C7:B5:F0:C9:2F
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 019B7F1597383078BB1E850E71D1B7B2F66F
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/178FadV0_TakM5s0KyNnx7XwyS8.roa
Signing time: Fri 02 Jan 2026 14:21:19 +0000
ROA not before: Fri 02 Jan 2026 14:21:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20681
IP address blocks: 46.19.248.0/21 maxlen: 24
185.16.140.0/22 maxlen: 24
193.178.175.0/24 maxlen: 24
193.219.31.0/24 maxlen: 24
2a01:8300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:97:38:30:78:bb:1e:85:0e:71:d1:b7:b2:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jan 2 14:21:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7bf0569d574fd36a4339b342b2367c7b5f0c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:bd:8a:17:ad:2f:ad:23:10:c8:5c:a4:fb:
38:2b:a6:fc:03:13:5d:00:d6:f2:b0:e5:9c:07:a8:
0a:ef:46:c0:bf:8e:d7:0a:ad:a4:9e:30:03:5a:09:
f6:ae:fb:16:cd:0b:d7:95:df:f1:d7:c1:f2:89:46:
90:ea:30:41:cb:92:62:eb:b5:0c:c6:b3:96:58:dd:
37:03:8e:14:9a:05:66:38:16:5e:15:0e:79:15:86:
2e:81:23:16:01:c7:34:c4:99:7b:4e:71:e9:60:5f:
e2:86:8d:d2:27:e8:92:6e:c1:61:76:b6:5d:0f:68:
dc:fc:fd:a7:2c:72:03:e8:26:b0:19:f6:a1:9f:a5:
e0:66:e0:40:7f:22:84:15:4d:6e:88:ce:35:7f:cb:
d6:bb:03:c6:b9:7f:34:30:8d:b5:15:f1:fa:49:47:
20:14:da:cc:f0:6c:fe:66:cc:ab:54:32:53:15:bc:
ea:01:8e:2c:9b:74:a0:ba:0b:50:c7:b6:06:80:14:
56:27:27:5d:d9:51:54:0c:24:38:99:fa:eb:c6:6a:
97:f7:bb:76:1f:bf:69:6c:ef:b9:fd:6a:4c:59:60:
86:be:57:b8:65:d2:08:a0:29:f2:fa:f1:f9:6c:ca:
2e:cf:4d:90:d9:2f:2f:c8:41:19:c0:3b:82:1b:03:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:05:69:D5:74:FD:36:A4:33:9B:34:2B:23:67:C7:B5:F0:C9:2F
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/178FadV0_TakM5s0KyNnx7XwyS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.248.0/21
185.16.140.0/22
193.178.175.0/24
193.219.31.0/24
IPv6:
2a01:8300::/32
Signature Algorithm: sha256WithRSAEncryption
69:77:c4:ff:2a:fd:a4:ee:f3:5a:0e:cc:1a:3c:43:09:ff:3e:
f0:44:b0:ed:bc:e1:88:17:2a:72:16:b7:83:6f:a7:cc:44:7a:
67:9a:78:9d:24:0d:83:71:a8:49:02:a0:d7:6c:f8:75:ef:dd:
54:46:6b:8f:03:41:04:e5:c9:94:81:71:2e:c9:af:55:96:1b:
83:ba:1b:1b:8e:51:7d:f8:fe:d1:49:6a:e8:04:00:c5:de:30:
1b:e4:de:9f:85:58:73:54:36:56:e0:96:1d:1d:de:f9:b2:2c:
57:a3:eb:d6:cb:37:d3:ba:df:be:5b:d9:09:5a:9a:58:bf:97:
f2:af:be:2c:bc:ba:93:b7:24:07:17:9a:f1:65:cc:1b:03:c3:
59:79:07:c9:c4:ef:fa:1e:7c:11:9d:33:ff:8c:c9:b5:2e:2d:
b1:22:09:4d:8d:8f:80:89:5b:6e:dc:0f:f6:38:3f:a1:2a:23:
a1:0f:d4:3c:d5:e1:d1:06:df:a3:55:07:b0:74:9c:8e:61:d0:
6d:fa:ba:d7:25:04:56:ec:2a:25:4b:b2:8b:88:66:38:f7:67:
5f:92:b0:9e:b4:cc:cc:bc:89:b3:66:48:40:e7:8c:b3:cb:51:
d2:12:4c:5e:1a:b2:62:a1:f3:81:57:63:aa:bb:1d:56:be:6d:
df:56:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:35 2026 by rpki-client