This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/ZpN0yijt2wpkL7emNcxN7NHQv5U.roa File: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (raw, json) Hash identifier: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w= Subject key identifier: 66:93:74:CA:28:ED:DB:0A:64:2F:B7:A6:35:CC:4D:EC:D1:D0:BF:95 Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d Certificate serial: 019B79105668EDA2DA367441287AF57E743F Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/ZpN0yijt2wpkL7emNcxN7NHQv5U.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59962 IP address blocks: 178.173.152.0/24 maxlen: 24 178.173.153.0/24 maxlen: 24 178.173.154.0/24 maxlen: 24 178.173.155.0/24 maxlen: 24 178.173.156.0/24 maxlen: 24 178.173.157.0/24 maxlen: 24 178.173.158.0/24 maxlen: 24 178.173.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:56:68:ed:a2:da:36:74:41:28:7a:f5:7e:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669374ca28eddb0a642fb7a635cc4decd1d0bf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:1a:86:09:02:eb:02:72:2a:69:01:18:ff: b5:97:ba:79:35:7f:43:9a:c9:7b:b0:af:81:87:42: f4:c9:8d:56:c3:b6:b6:a4:87:e8:6c:cc:9a:c0:97: f3:f2:18:b3:5e:6b:fb:d9:45:98:9c:06:16:aa:35: 85:ea:04:09:18:e1:d4:33:bb:00:7e:61:a2:87:7e: 98:e4:9c:b0:44:b8:8b:50:2d:b5:35:33:e1:61:e9: 61:11:37:06:e9:d3:d3:71:ec:2e:b7:4f:bc:0f:ed: d5:23:fc:37:66:78:fa:ca:03:03:31:58:fe:24:4a: 7a:64:4d:27:09:56:5d:9d:0f:d0:dc:8f:a3:86:ff: c5:8a:8e:89:1f:fd:e2:6e:db:b9:9d:1a:05:10:d5: 45:5b:68:33:ed:bd:cb:b7:1d:b7:bd:af:3a:3e:22: 83:dc:25:ce:cd:5e:a7:51:4e:b3:5d:16:4d:ba:7d: 75:56:ac:0f:7a:94:49:d4:35:fe:63:15:df:b0:2c: 3a:96:dc:da:bf:27:2a:aa:78:40:fc:d9:9c:98:e2: c4:1f:6e:1a:b9:ae:0a:4e:9d:b3:c5:03:da:62:10: 1d:26:36:f8:32:d4:08:bb:aa:93:47:32:bd:85:55: 17:f5:b2:da:d7:28:26:f8:e2:9d:fa:65:47:27:5e: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:74:CA:28:ED:DB:0A:64:2F:B7:A6:35:CC:4D:EC:D1:D0:BF:95 X509v3 Authority Key Identifier: keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/ZpN0yijt2wpkL7emNcxN7NHQv5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.173.152.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:db:23:54:55:fb:a1:6d:58:3b:1c:19:e4:e9:81:e7:ac:6b: 06:c8:52:88:78:aa:5c:e9:27:02:8a:be:d0:03:49:1c:76:3e: b3:c3:bb:69:dd:dd:3c:d1:f6:22:32:74:10:f6:f7:11:3f:f4: 71:73:2a:bd:c4:8b:64:ec:d5:2a:93:b0:bc:78:4d:0b:b4:fc: ee:17:12:ac:35:55:8c:ee:0c:16:9a:fb:d7:27:37:e6:c1:a4: 3c:bd:9e:4b:92:94:bb:26:21:90:a1:b8:b1:be:2e:42:f8:4c: 31:8f:bd:d7:17:87:2e:ed:ec:b4:a0:2a:0f:47:4b:a8:f5:ba: 71:29:d6:2c:11:f1:28:46:5f:ef:73:a4:b4:ad:79:80:5c:f5: 7a:99:3e:68:33:bf:53:42:17:98:d5:1d:08:37:e9:3f:a8:63: 94:3e:bd:0e:25:eb:a3:b3:16:87:ae:a8:e3:a7:7b:13:ce:34: b8:33:31:f5:7d:22:82:1c:fe:c2:71:1d:a7:b1:4b:6b:2e:1b: 0c:fd:92:89:8c:a8:76:75:6d:74:7c:11:39:d5:9f:74:ff:78: 3b:ca:7b:1a:52:a9:c5:c3:c0:40:0f:cd:9a:64:01:a1:a8:b9: d3:9e:21:46:4a:d0:50:3e:fc:98:a6:94:1d:92:74:1c:b4:d5: 07:d0:fb:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFZo7aLaNnRBKHr1fnQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm MTU4N2QwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjkzNzRjYTI4ZWRkYjBhNjQyZmI3YTYzNWNjNGRlY2QxZDBiZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A0ahgkC6wJyKmkBGP+1l7p5NX9D msl7sK+Bh0L0yY1Ww7a2pIfobMyawJfz8hizXmv72UWYnAYWqjWF6gQJGOHUM7sA fmGih36Y5JywRLiLUC21NTPhYelhETcG6dPTcewut0+8D+3VI/w3Znj6ygMDMVj+ JEp6ZE0nCVZdnQ/Q3I+jhv/Fio6JH/3ibtu5nRoFENVFW2gz7b3Ltx23va86PiKD 3CXOzV6nUU6zXRZNun11VqwPepRJ1DX+YxXfsCw6ltzavycqqnhA/NmcmOLEH24a ua4KTp2zxQPaYhAdJjb4MtQIu6qTRzK9hVUX9bLa1ygm+OKd+mVHJ16EpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaTdMoo7dsKZC+3pjXMTezR0L+VMB8GA1UdIwQY MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt MDk5MGNlNzQ4MWU3LzEvWnBOMHlpanQyd3BrTDdlbU5jeE43TkhRdjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3 LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsq2YMA0G CSqGSIb3DQEBCwUAA4IBAQAL2yNUVfuhbVg7HBnk6YHnrGsGyFKIeKpc6ScCir7Q A0kcdj6zw7tp3d080fYiMnQQ9vcRP/Rxcyq9xItk7NUqk7C8eE0LtPzuFxKsNVWM 7gwWmvvXJzfmwaQ8vZ5LkpS7JiGQobixvi5C+Ewxj73XF4cu7ey0oCoPR0uo9bpx KdYsEfEoRl/vc6S0rXmAXPV6mT5oM79TQheY1R0IN+k/qGOUPr0OJeujsxaHrqjj p3sTzjS4MzH1fSKCHP7CcR2nsUtrLhsM/ZKJjKh2dW10fBE51Z90/3g7ynsaUqnF w8BAD82aZAGhqLnTniFGStBQPvyYppQdknQctNUH0Pti -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:32 2026 by rpki-client