This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa File: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (raw, json) Hash identifier: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288= Subject key identifier: AC:35:7E:1C:5E:CB:25:98:6C:77:A6:B6:A5:8B:6E:A8:5C:85:DB:ED Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3 Certificate serial: 019BC437A24CB76D6BBED9CDAA803247FD74 Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa Signing time: Fri 16 Jan 2026 00:32:18 +0000 ROA not before: Fri 16 Jan 2026 00:32:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 178.132.48.0/24 maxlen: 24 178.132.49.0/24 maxlen: 24 178.132.50.0/24 maxlen: 24 178.132.51.0/24 maxlen: 24 178.132.52.0/24 maxlen: 24 178.132.53.0/24 maxlen: 24 178.132.54.0/24 maxlen: 24 178.132.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c4:37:a2:4c:b7:6d:6b:be:d9:cd:aa:80:32:47:fd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3 Validity Not Before: Jan 16 00:32:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac357e1c5ecb25986c77a6b6a58b6ea85c85dbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:5e:a1:05:3a:73:cd:9a:84:94:25:75:66: 26:6d:2c:9e:c1:8f:21:b7:0c:76:a5:04:ba:fb:34: 6a:5b:d6:c3:29:18:fe:94:da:79:2a:7b:22:51:a5: 2f:03:44:a4:91:37:df:a0:ce:4e:ed:7a:a4:7c:c9: 0e:b1:95:4b:15:80:da:34:bc:31:bc:98:11:48:0a: 56:01:31:34:ba:9e:e5:da:46:96:13:08:99:48:bd: 23:46:f8:d6:c1:5b:18:d1:28:3c:9c:e1:4a:05:0a: f8:94:db:cb:67:25:b4:ff:36:8a:7e:b6:71:9e:30: 79:4d:82:cc:1e:a6:61:79:ff:b4:75:06:4a:da:1b: 99:06:3b:7d:bc:37:43:a2:b7:b8:98:72:8d:ac:bb: de:73:34:a8:d7:f5:94:5e:76:0b:e5:20:88:e8:bf: 89:8a:34:08:0d:21:5b:ed:4d:64:36:a0:2b:58:5a: 43:5f:d3:01:b6:7d:20:f4:21:54:ba:ea:74:e4:30: ad:83:f9:1e:18:66:29:84:7f:19:59:2d:3a:d2:4d: b7:b1:83:cc:0e:c0:60:13:ac:97:d2:16:3b:7b:be: b4:d4:c5:1b:7f:6c:ad:8d:ea:d7:47:b6:ff:70:b1: 6f:18:5c:e2:47:a9:86:13:74:7c:b6:16:10:cb:de: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:7E:1C:5E:CB:25:98:6C:77:A6:B6:A5:8B:6E:A8:5C:85:DB:ED X509v3 Authority Key Identifier: keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.48.0/21 Signature Algorithm: sha256WithRSAEncryption c5:64:49:41:38:21:91:ad:fa:61:42:c9:a4:28:ac:82:69:76: 84:71:23:e7:ef:6c:a7:72:cd:38:4f:b9:6d:25:ae:0b:71:42: f8:54:ab:f5:ac:b2:bb:f4:c4:e1:e1:f1:1e:8b:7a:51:75:45: fe:47:e4:22:be:68:a0:fa:76:88:f1:aa:a6:47:ce:64:57:3e: 02:9d:c0:47:97:92:97:85:b5:89:ea:64:e3:36:94:2a:28:9e: 92:55:e9:2b:a6:74:2a:a1:16:3d:71:aa:96:8d:a4:f2:a9:03: b1:f4:f4:ee:10:00:27:a8:63:3d:ef:4f:96:35:0f:a0:f4:fc: 6a:33:35:ef:3f:a8:98:0b:5c:f4:d6:26:b4:60:94:19:dc:4a: e8:d2:ac:0f:b6:6e:2a:f4:cb:27:83:f6:df:09:d8:50:8e:c5: 38:f3:eb:6e:8a:2d:ec:c4:4e:c9:61:8b:35:23:74:eb:33:02: 71:4f:41:89:64:ff:60:2f:f4:6d:8d:43:a7:af:40:da:a0:7d: b2:a9:46:a7:78:a7:3d:84:44:d3:01:7e:5e:39:44:f3:af:6a: c6:fb:1e:f1:90:ba:0d:79:7b:4b:ab:47:50:6f:c9:09:ed:b3: 70:15:f7:ad:95:4e:3f:90:68:44:42:38:1e:cc:5a:53:69:66: 37:35:07:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvEN6JMt21rvtnNqoAyR/10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDg2NDdlZmI4ODIxMGYwMTZiNjc1NmQzNzY2ZTkyOTU5 NDRhYTMwHhcNMjYwMTE2MDAzMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzM1N2UxYzVlY2IyNTk4NmM3N2E2YjZhNThiNmVhODVjODVkYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCVeoQU6c82ahJQldWYmbSyewY8h twx2pQS6+zRqW9bDKRj+lNp5KnsiUaUvA0SkkTffoM5O7XqkfMkOsZVLFYDaNLwx vJgRSApWATE0up7l2kaWEwiZSL0jRvjWwVsY0Sg8nOFKBQr4lNvLZyW0/zaKfrZx njB5TYLMHqZhef+0dQZK2huZBjt9vDdDore4mHKNrLveczSo1/WUXnYL5SCI6L+J ijQIDSFb7U1kNqArWFpDX9MBtn0g9CFUuup05DCtg/keGGYphH8ZWS060k23sYPM DsBgE6yX0hY7e7601MUbf2ytjerXR7b/cLFvGFziR6mGE3R8thYQy97wGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKw1fhxeyyWYbHemtqWLbqhchdvtMB8GA1UdIwQY MBaAFNkIZH77iCEPAWtnVtN2bpKVlEqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFoa2Z2dUlJUThCYTJkVzAzWnVrcFdVU3FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMTlkNWUtMGQ1Yi00MjMxLWJkYWQt NDMyNjVlZjk1ZDkyLzEvckRWLUhGN0xKWmhzZDZhMnBZdHVxRnlGMi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8wMTlkNWUtMGQ1Yi00MjMxLWJkYWQtNDMyNjVlZjk1ZDky LzEvMlFoa2Z2dUlJUThCYTJkVzAzWnVrcFdVU3FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsoQwMA0G CSqGSIb3DQEBCwUAA4IBAQDFZElBOCGRrfphQsmkKKyCaXaEcSPn72yncs04T7lt Ja4LcUL4VKv1rLK79MTh4fEei3pRdUX+R+Qivmig+naI8aqmR85kVz4CncBHl5KX hbWJ6mTjNpQqKJ6SVekrpnQqoRY9caqWjaTyqQOx9PTuEAAnqGM970+WNQ+g9Pxq MzXvP6iYC1z01ia0YJQZ3Ero0qwPtm4q9Msng/bfCdhQjsU48+tuii3sxE7JYYs1 I3TrMwJxT0GJZP9gL/RtjUOnr0DaoH2yqUaneKc9hETTAX5eOUTzr2rG+x7xkLoN eXtLq0dQb8kJ7bNwFfetlU4/kGhEQjgezFpTaWY3NQeE -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:28 2026 by rpki-client