This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/d5Zhp1cA_fqDZ1FzU959TA66aj4.roa File: d5Zhp1cA_fqDZ1FzU959TA66aj4.roa (raw, json) Hash identifier: SuNZX9fanarDL2+daC3fGFckgN7apSeTYCwNJVS+b94= Subject key identifier: 77:96:61:A7:57:00:FD:FA:83:67:51:73:53:DE:7D:4C:0E:BA:6A:3E Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Certificate serial: 019B791097B745B49B02012F333F910E6C9D Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/d5Zhp1cA_fqDZ1FzU959TA66aj4.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51579 IP address blocks: 178.213.112.0/21 maxlen: 22 178.213.112.0/22 maxlen: 22 178.213.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:97:b7:45:b4:9b:02:01:2f:33:3f:91:0e:6c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=779661a75700fdfa8367517353de7d4c0eba6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:c3:df:53:79:1a:cc:c0:61:7d:16:d0:d5: 24:70:97:fd:fb:58:7e:cf:8c:4d:63:03:75:55:de: 5e:29:d4:75:16:84:7f:8a:c3:a4:32:a1:78:04:96: 49:9d:2e:83:c1:5b:d9:4d:0d:74:92:b3:43:0b:ac: 8c:87:8b:65:23:8a:f6:76:69:3b:7f:3b:84:c2:73: 7a:f8:b2:1c:89:49:55:29:0a:7e:63:3d:7d:70:10: bb:68:14:0b:0e:6c:ab:3e:83:fa:82:f4:86:50:63: cf:2b:9c:b8:91:3e:fc:03:1e:e5:fa:27:cf:a5:4f: 5a:4c:34:6c:03:d1:bd:c1:b1:83:a5:b6:cb:9c:f2: f8:dd:80:6b:7a:71:3e:d1:13:1c:4b:bf:c4:e3:98: 08:a9:ac:69:2d:63:d2:85:7e:c3:16:8b:5a:e3:39: fc:2b:13:ed:30:9b:17:0e:c0:9e:1b:60:62:75:78: 18:3f:06:88:0d:84:2f:fe:ef:46:24:a5:17:63:62: 12:2b:50:22:d2:04:c1:6b:99:67:f3:d8:fe:ef:47: 07:b0:07:6e:85:86:9a:23:3e:48:20:7f:5f:d3:5c: 8d:0d:8b:6f:ba:9e:ab:e8:e2:13:65:e1:22:aa:c9: db:18:50:6b:24:fc:8d:f4:d5:b8:51:41:ac:53:96: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:61:A7:57:00:FD:FA:83:67:51:73:53:DE:7D:4C:0E:BA:6A:3E X509v3 Authority Key Identifier: keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/d5Zhp1cA_fqDZ1FzU959TA66aj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.112.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:9c:94:84:81:b7:27:58:aa:ce:ba:9e:5d:ac:34:5f:85:de: 22:6d:e1:2b:fa:4b:f5:7a:2f:64:37:e8:aa:de:af:13:61:43: 34:67:f8:88:1d:b3:9c:d7:37:e5:61:fc:af:a8:57:ae:e7:9b: 6d:bb:b8:41:e8:3b:73:83:ab:80:3c:88:5e:8d:8c:d1:5e:0f: c3:16:f0:7a:27:5c:f9:66:be:2a:4c:c6:63:f7:65:8f:15:3b: d6:1e:0d:10:72:9e:97:5b:42:54:7d:47:62:38:17:3a:9a:3b: 5b:e9:10:f5:1c:22:ec:4a:9e:05:e1:3f:95:c6:b4:dd:17:25: 45:ff:3e:93:f4:74:59:f3:64:cc:3e:96:59:7a:ed:74:8c:c8: f6:8d:d6:f9:41:c2:a7:29:60:c4:08:09:73:6e:57:c1:5e:24: 39:42:4c:05:60:83:7e:83:cc:f3:e0:b0:c2:59:7c:55:c9:dd: 66:34:b6:a2:b7:c0:5a:ab:fe:01:90:84:78:c2:e0:3e:77:80: d7:a8:05:44:74:39:f4:06:61:7f:cc:84:3e:67:2a:70:4e:ca: a6:52:ce:da:29:25:6f:ca:02:b5:5f:26:1a:ab:cc:26:58:9b: 4b:67:85:d1:e0:5e:d5:c6:e4:42:2f:d9:87:42:30:43:cb:76: 53:38:5e:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJe3RbSbAgEvMz+RDmydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz NTA5ZTYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Nzk2NjFhNzU3MDBmZGZhODM2NzUxNzM1M2RlN2Q0YzBlYmE2YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNjD31N5GszAYX0W0NUkcJf9+1h+ z4xNYwN1Vd5eKdR1FoR/isOkMqF4BJZJnS6DwVvZTQ10krNDC6yMh4tlI4r2dmk7 fzuEwnN6+LIciUlVKQp+Yz19cBC7aBQLDmyrPoP6gvSGUGPPK5y4kT78Ax7l+ifP pU9aTDRsA9G9wbGDpbbLnPL43YBrenE+0RMcS7/E45gIqaxpLWPShX7DFota4zn8 KxPtMJsXDsCeG2BidXgYPwaIDYQv/u9GJKUXY2ISK1Ai0gTBa5ln89j+70cHsAdu hYaaIz5IIH9f01yNDYtvup6r6OITZeEiqsnbGFBrJPyN9NW4UUGsU5YxkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeWYadXAP36g2dRc1PefUwOumo+MB8GA1UdIwQY MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt OGQxNTU2OWI1YmZlLzEvZDVaaHAxY0FfZnFEWjFGelU5NTlUQTY2YWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstVwMA0G CSqGSIb3DQEBCwUAA4IBAQAMnJSEgbcnWKrOup5drDRfhd4ibeEr+kv1ei9kN+iq 3q8TYUM0Z/iIHbOc1zflYfyvqFeu55ttu7hB6Dtzg6uAPIhejYzRXg/DFvB6J1z5 Zr4qTMZj92WPFTvWHg0Qcp6XW0JUfUdiOBc6mjtb6RD1HCLsSp4F4T+VxrTdFyVF /z6T9HRZ82TMPpZZeu10jMj2jdb5QcKnKWDECAlzblfBXiQ5QkwFYIN+g8zz4LDC WXxVyd1mNLait8Baq/4BkIR4wuA+d4DXqAVEdDn0BmF/zIQ+ZypwTsqmUs7aKSVv ygK1XyYaq8wmWJtLZ4XR4F7VxuRCL9mHQjBDy3ZTOF4u -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:35 2026 by rpki-client