This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kx0iDFbsXmf1_joPchYNl-Qa3D0.roa File: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (raw, json) Hash identifier: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0= Subject key identifier: 93:1D:22:0C:56:EC:5E:67:F5:FE:3A:0F:72:16:0D:97:E4:1A:DC:3D Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C87C4D90C193312A4D6A522AEAFC Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kx0iDFbsXmf1_joPchYNl-Qa3D0.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60064 IP address blocks: 5.178.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c8:7c:4d:90:c1:93:31:2a:4d:6a:52:2a:ea:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=931d220c56ec5e67f5fe3a0f72160d97e41adc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:bf:52:78:f3:40:7e:b7:59:06:9a:b4:82: 34:cc:6e:46:ee:bc:0d:47:fe:a2:e3:05:e8:a1:47: 4f:c8:ad:08:ae:ab:3d:db:7c:3e:93:89:2a:14:20: a6:d8:7d:cb:98:b0:f1:14:32:1d:25:36:72:7f:d4: 58:83:b0:c3:fb:ab:5e:32:6b:7f:35:d0:70:62:c9: 21:51:e9:6e:ef:b7:ec:4b:c2:4c:13:d0:19:ea:63: 4c:e3:9f:2a:f8:f5:fe:0b:d8:c6:0f:70:df:58:53: b5:5b:bd:d2:7f:f6:2b:e6:eb:b4:ac:02:cc:33:b8: 10:6f:a6:8a:2f:2b:91:d7:8f:13:27:09:f3:9c:b8: 56:2a:76:82:97:77:c5:53:d1:6c:8d:d8:7d:8c:94: f3:b6:30:45:83:2e:d5:ea:93:33:c8:83:6d:bf:91: d2:d2:bd:b0:63:27:bf:52:81:13:3b:9e:ca:24:c0: 57:6c:7f:3d:e7:8b:42:a0:6a:48:2f:80:d1:ec:83: f2:c6:55:d2:40:59:e6:36:ae:ca:57:da:56:50:4a: 74:b7:81:50:fd:86:2c:1a:f9:d8:66:50:68:1f:20: f8:30:a4:87:46:02:93:59:78:c5:b8:3c:0a:4d:05: 8f:34:af:8c:84:8e:15:8b:0e:bd:98:89:9b:37:1e: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1D:22:0C:56:EC:5E:67:F5:FE:3A:0F:72:16:0D:97:E4:1A:DC:3D X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kx0iDFbsXmf1_joPchYNl-Qa3D0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.2.0/24 Signature Algorithm: sha256WithRSAEncryption a1:53:46:ea:aa:04:0d:40:5c:52:92:a5:de:9c:e3:3b:0f:42: c1:f2:c0:6a:c8:c6:83:25:c3:3a:42:33:f2:a1:11:fd:f2:d9: 26:15:b1:0c:97:bd:6d:6d:10:e5:6b:6e:2f:45:04:7b:9d:e8: 10:b2:ec:cf:98:9d:d8:17:f9:a9:2a:44:99:73:7f:07:df:22: 07:9f:97:ce:3d:5b:78:f7:7f:4a:31:c2:fb:c9:96:89:08:12: 97:da:9e:48:c8:e9:f6:c5:c8:de:73:00:25:6e:21:50:9a:a0: 39:cb:02:79:f2:b7:3e:8c:a1:61:e4:0e:e9:79:9b:00:99:70: d1:64:60:f7:d8:c4:67:aa:ee:af:85:41:09:b9:19:0d:30:08: 17:10:82:d7:2e:c6:af:ac:7f:58:2b:28:f7:48:88:2c:65:04: 9e:e1:12:69:56:1a:c9:14:4b:bc:b1:20:e2:68:56:ea:ee:1f: 5e:5b:73:33:22:19:7c:f2:2a:c4:23:54:39:6c:92:cc:31:66: 3a:f4:65:a5:cf:06:b0:99:09:de:57:42:75:bd:fc:b3:1a:76: 59:a8:a4:c8:45:71:63:a1:b1:63:12:c4:21:67:15:35:cc:ff: 4e:11:08:de:c5:c1:35:e6:72:28:4c:9f:d5:9d:c2:48:cb:5c: 01:01:13:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsh8TZDBkzEqTWpSKur8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzFkMjIwYzU2ZWM1ZTY3ZjVmZTNhMGY3MjE2MGQ5N2U0MWFkYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLq/UnjzQH63WQaatII0zG5G7rwN R/6i4wXooUdPyK0Irqs923w+k4kqFCCm2H3LmLDxFDIdJTZyf9RYg7DD+6teMmt/ NdBwYskhUelu77fsS8JME9AZ6mNM458q+PX+C9jGD3DfWFO1W73Sf/Yr5uu0rALM M7gQb6aKLyuR148TJwnznLhWKnaCl3fFU9Fsjdh9jJTztjBFgy7V6pMzyINtv5HS 0r2wYye/UoETO57KJMBXbH8954tCoGpIL4DR7IPyxlXSQFnmNq7KV9pWUEp0t4FQ /YYsGvnYZlBoHyD4MKSHRgKTWXjFuDwKTQWPNK+MhI4Viw69mImbNx7BzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMdIgxW7F5n9f46D3IWDZfkGtw9MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEva3gwaURGYnNYbWYxX2pvUGNoWU5sLVFhM0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbICMA0G CSqGSIb3DQEBCwUAA4IBAQChU0bqqgQNQFxSkqXenOM7D0LB8sBqyMaDJcM6QjPy oRH98tkmFbEMl71tbRDla24vRQR7negQsuzPmJ3YF/mpKkSZc38H3yIHn5fOPVt4 939KMcL7yZaJCBKX2p5IyOn2xcjecwAlbiFQmqA5ywJ58rc+jKFh5A7peZsAmXDR ZGD32MRnqu6vhUEJuRkNMAgXEILXLsavrH9YKyj3SIgsZQSe4RJpVhrJFEu8sSDi aFbq7h9eW3MzIhl88irEI1Q5bJLMMWY69GWlzwawmQneV0J1vfyzGnZZqKTIRXFj obFjEsQhZxU1zP9OEQjexcE15nIoTJ/VncJIy1wBARMW -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:03 2026 by rpki-client