This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/S5sg_JlC0ToZAwD4YEM_73rgGFY.roa File: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (raw, json) Hash identifier: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU= Subject key identifier: 4B:9B:20:FC:99:42:D1:3A:19:03:00:F8:60:43:3F:EF:7A:E0:18:56 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019B79ED300B96D24765707E0EA1DF16BD09 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/S5sg_JlC0ToZAwD4YEM_73rgGFY.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 178.212.61.0/24 maxlen: 24 178.212.62.0/24 maxlen: 24 178.212.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:0b:96:d2:47:65:70:7e:0e:a1:df:16:bd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b9b20fc9942d13a190300f860433fef7ae01856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:7a:be:bd:29:7b:f0:99:39:ef:b8:a7:27: 28:cd:1b:b2:b2:e6:74:4b:20:45:2e:45:86:87:78: 8c:93:c7:e4:5f:fb:d5:73:6f:c0:17:aa:87:3d:e6: 74:1e:2c:56:9a:79:cb:16:f8:88:e9:4e:0b:ff:a4: 4d:3f:c9:e4:d7:48:13:c5:37:37:7c:ee:d4:90:a5: 6a:ce:b8:77:10:66:f1:3a:98:11:0a:d1:f8:65:bc: 93:dc:49:40:98:df:af:a2:48:20:0f:c5:98:b4:c6: 56:55:08:24:b1:68:65:73:5a:33:08:1c:9b:b1:f3: c0:fc:9c:36:50:85:24:23:41:53:73:f1:f2:c0:cd: dc:e2:79:5b:35:c8:8c:0b:95:a5:6a:00:81:f1:0d: 1e:c5:3a:31:95:a3:43:4c:49:89:03:00:5e:09:f5: 80:09:bb:f8:ad:35:c5:f5:e5:c8:16:7d:d9:1f:bd: 51:83:91:b8:93:1f:7d:f4:03:a9:e6:36:1a:6f:d7: 0d:ff:67:7f:e4:84:45:6e:6c:c9:b4:18:49:1f:d7: ce:c5:95:ff:31:74:07:f2:11:ab:94:ac:30:e0:2f: ec:f4:92:29:f4:4b:0b:67:35:9e:9f:d0:99:a4:7b: e6:0f:7e:eb:1c:a8:08:66:d6:70:e0:e9:22:5a:1c: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:20:FC:99:42:D1:3A:19:03:00:F8:60:43:3F:EF:7A:E0:18:56 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/S5sg_JlC0ToZAwD4YEM_73rgGFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.61.0-178.212.63.255 Signature Algorithm: sha256WithRSAEncryption 38:99:1f:cd:7e:92:8d:2d:2e:e4:8e:b1:61:f0:36:45:ab:6e: 51:d1:78:b3:33:89:40:de:22:20:b5:48:96:3e:74:50:e3:17: 4b:b4:d5:4f:2f:82:f4:8c:46:10:ee:38:51:61:d5:18:fd:d6: 31:9d:47:5d:bb:49:aa:a1:d3:c9:67:96:f1:a7:96:54:f5:bc: 91:11:82:d2:d8:24:37:28:39:16:76:e2:ce:1a:8d:90:22:ff: 31:c1:6e:ee:a6:84:32:04:77:1a:e1:34:e5:54:88:21:ad:c7: 5f:db:51:bd:4b:fc:7a:7d:7f:4a:14:3c:72:40:d5:60:82:54: 2f:8f:12:13:a2:df:90:5b:d9:f7:72:8e:e4:e7:5d:16:37:ab: 03:dc:62:bc:f4:e2:e8:f3:c2:1a:6c:64:0a:62:87:08:8f:ec: 68:ec:b9:2c:be:00:38:af:2c:24:96:03:5c:d1:c4:3b:4e:ad: 4a:2c:7c:03:97:78:91:73:99:59:ab:47:ab:f8:fc:84:c2:f1: a3:5e:72:f9:e2:cc:c3:8d:80:f3:f1:12:b9:53:60:07:41:f3: 9b:9c:ab:40:ad:64:9a:6c:44:80:fa:7c:6e:c0:1e:3f:aa:a3: cd:df:1e:d8:c3:c1:79:8b:a2:0e:c7:52:a3:22:da:fc:c5:27: c8:19:50:71 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57TALltJHZXB+DqHfFr0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjliMjBmYzk5NDJkMTNhMTkwMzAwZjg2MDQzM2ZlZjdhZTAxODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hd6vr0pe/CZOe+4pycozRuysuZ0 SyBFLkWGh3iMk8fkX/vVc2/AF6qHPeZ0HixWmnnLFviI6U4L/6RNP8nk10gTxTc3 fO7UkKVqzrh3EGbxOpgRCtH4ZbyT3ElAmN+vokggD8WYtMZWVQgksWhlc1ozCByb sfPA/Jw2UIUkI0FTc/HywM3c4nlbNciMC5WlagCB8Q0exToxlaNDTEmJAwBeCfWA Cbv4rTXF9eXIFn3ZH71Rg5G4kx999AOp5jYab9cN/2d/5IRFbmzJtBhJH9fOxZX/ MXQH8hGrlKww4C/s9JIp9EsLZzWen9CZpHvmD37rHKgIZtZw4OkiWhwDfwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEubIPyZQtE6GQMA+GBDP+964BhWMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvUzVzZ19KbEMwVG9aQXdENFlFTV83M3JnR0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACy1D0D BAay1AAwDQYJKoZIhvcNAQELBQADggEBADiZH81+ko0tLuSOsWHwNkWrblHReLMz iUDeIiC1SJY+dFDjF0u01U8vgvSMRhDuOFFh1Rj91jGdR127Saqh08lnlvGnllT1 vJERgtLYJDcoORZ24s4ajZAi/zHBbu6mhDIEdxrhNOVUiCGtx1/bUb1L/Hp9f0oU PHJA1WCCVC+PEhOi35Bb2fdyjuTnXRY3qwPcYrz04ujzwhpsZApihwiP7GjsuSy+ ADivLCSWA1zRxDtOrUosfAOXeJFzmVmrR6v4/ITC8aNecvnizMONgPPxErlTYAdB 85ucq0CtZJpsRID6fG7AHj+qo83fHtjDwXmLog7HUqMi2vzFJ8gZUHE= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:36 2026 by rpki-client