This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/ERzn62B5dYEPxu7KHY3hiO-jSSA.roa File: ERzn62B5dYEPxu7KHY3hiO-jSSA.roa (raw, json) Hash identifier: bxWjkThkkMI0LG+sL2lWtHw/SuStONE33GoZCV4Bk74= Subject key identifier: 11:1C:E7:EB:60:79:75:81:0F:C6:EE:CA:1D:8D:E1:88:EF:A3:49:20 Certificate issuer: /CN=e57168772df74c27999d533895e1abedce97263c Certificate serial: 019B7B35423BF230B63B4F205E68C57A2DC5 Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/ERzn62B5dYEPxu7KHY3hiO-jSSA.roa Signing time: Thu 01 Jan 2026 20:17:26 +0000 ROA not before: Thu 01 Jan 2026 20:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216461 IP address blocks: 178.210.228.0/22 maxlen: 22 178.210.228.0/24 maxlen: 24 178.210.229.0/24 maxlen: 24 178.210.230.0/24 maxlen: 24 178.210.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:42:3b:f2:30:b6:3b:4f:20:5e:68:c5:7a:2d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57168772df74c27999d533895e1abedce97263c Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111ce7eb607975810fc6eeca1d8de188efa34920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:6b:7e:89:b8:c6:31:e1:6e:62:40:f2:74: 15:fb:27:24:7f:0b:d2:b3:8c:5f:74:90:20:17:91: 24:59:53:8e:2e:92:66:11:4e:34:86:60:a2:85:d2: 7f:b1:0b:ea:df:9b:f9:fe:9d:1b:b2:13:4f:bf:5f: dc:96:ce:26:4e:82:b4:a5:cd:70:67:73:57:91:35: b4:21:3d:f8:f4:34:78:f2:4f:27:6a:b2:3d:9c:90: ee:f9:18:a1:87:c9:6c:b2:28:80:8e:48:65:dd:60: 46:aa:bb:4d:2b:1b:0b:64:75:fc:72:76:92:26:2f: 08:16:fd:17:c4:f3:ba:c5:fa:56:61:0e:3e:14:8c: 93:08:82:79:8e:01:d7:b5:87:2d:55:98:17:83:15: 99:ed:a8:c7:da:a9:77:46:1a:64:ae:55:d3:ea:63: 45:93:0b:a2:07:1c:df:92:73:6b:ec:54:8a:0d:b5: 9f:0e:97:3c:f1:d4:4e:fc:54:3a:17:8c:c8:05:6b: 70:bb:3e:a3:a0:44:99:83:be:f8:b8:67:58:1b:42: 11:89:e4:57:d3:4d:39:12:ee:12:f3:a2:4b:fc:f1: 43:e0:80:6d:43:20:28:4f:c2:be:58:f4:4b:9b:34: d9:f5:6f:df:5a:36:71:cb:a1:48:5a:60:1a:29:7e: b1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1C:E7:EB:60:79:75:81:0F:C6:EE:CA:1D:8D:E1:88:EF:A3:49:20 X509v3 Authority Key Identifier: keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/ERzn62B5dYEPxu7KHY3hiO-jSSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.228.0/22 Signature Algorithm: sha256WithRSAEncryption 63:7a:3d:7e:ac:b3:a7:68:bb:07:63:50:fa:1f:14:b2:dd:08: d8:51:8a:d2:7b:09:93:6c:f8:0b:f1:e5:db:69:b4:a1:c5:f5: 64:7f:c1:d0:ac:4c:73:73:47:55:f2:be:48:62:51:68:c3:37: 8a:44:aa:fa:d6:46:b2:dc:a4:fe:ff:2b:58:e1:fb:da:2d:11: 0d:43:3d:47:e0:f4:49:43:d8:fa:35:ad:cc:e0:52:a5:c9:c8: 49:f8:45:66:b2:cd:47:a4:9c:53:d7:ae:9f:d7:d6:c8:12:4b: ee:da:5b:9a:38:72:0d:10:81:c8:c4:ff:b2:03:08:e3:cf:d4: d3:da:57:8b:25:ad:ff:a0:3d:bb:b3:f3:0d:16:50:d9:17:32: 53:f0:f4:71:21:69:67:1e:51:54:be:64:ee:a3:a7:28:5c:a8: fb:70:8f:aa:59:16:35:84:2b:4e:bf:f9:4a:9b:9e:f6:80:6b: 95:f4:38:e5:c0:15:14:8e:39:a8:1f:4e:28:79:98:2a:fb:70: 11:bc:2f:8b:d8:d3:b9:3a:56:83:a4:01:5d:49:69:c9:68:e3: b3:c3:93:69:b5:e5:23:18:24:f0:51:ce:59:f1:43:57:84:1f: aa:85:ae:a3:c5:4b:f7:b0:b3:bd:85:07:ec:9b:df:b6:b7:f4: df:9b:44:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUI78jC2O08gXmjFei3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzE2ODc3MmRmNzRjMjc5OTlkNTMzODk1ZTFhYmVkY2U5 NzI2M2MwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTFjZTdlYjYwNzk3NTgxMGZjNmVlY2ExZDhkZTE4OGVmYTM0OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO9rfom4xjHhbmJA8nQV+yckfwvS s4xfdJAgF5EkWVOOLpJmEU40hmCihdJ/sQvq35v5/p0bshNPv1/cls4mToK0pc1w Z3NXkTW0IT349DR48k8narI9nJDu+Rihh8lssiiAjkhl3WBGqrtNKxsLZHX8cnaS Ji8IFv0XxPO6xfpWYQ4+FIyTCIJ5jgHXtYctVZgXgxWZ7ajH2ql3RhpkrlXT6mNF kwuiBxzfknNr7FSKDbWfDpc88dRO/FQ6F4zIBWtwuz6joESZg774uGdYG0IRieRX 0005Eu4S86JL/PFD4IBtQyAoT8K+WPRLmzTZ9W/fWjZxy6FIWmAaKX6xwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEc5+tgeXWBD8buyh2N4Yjvo0kgMB8GA1UdIwQY MBaAFOVxaHct90wnmZ1TOJXhq+3OlyY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWIt YjNkZmYzYTkxMTAyLzEvRVJ6bjYyQjVkWUVQeHU3S0hZM2hpTy1qU1NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWItYjNkZmYzYTkxMTAy LzEvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCstLkMA0G CSqGSIb3DQEBCwUAA4IBAQBjej1+rLOnaLsHY1D6HxSy3QjYUYrSewmTbPgL8eXb abShxfVkf8HQrExzc0dV8r5IYlFowzeKRKr61kay3KT+/ytY4fvaLRENQz1H4PRJ Q9j6Na3M4FKlychJ+EVmss1HpJxT166f19bIEkvu2luaOHINEIHIxP+yAwjjz9TT 2leLJa3/oD27s/MNFlDZFzJT8PRxIWlnHlFUvmTuo6coXKj7cI+qWRY1hCtOv/lK m572gGuV9DjlwBUUjjmoH04oeZgq+3ARvC+L2NO5OlaDpAFdSWnJaOOzw5NpteUj GCTwUc5Z8UNXhB+qha6jxUv3sLO9hQfsm9+2t/Tfm0TO -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:24 2026 by rpki-client