This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Z5DUq42GbuvIUVjeQ08IGS5_CtY.roa File: Z5DUq42GbuvIUVjeQ08IGS5_CtY.roa (raw, json) Hash identifier: DDu3ezmXwVE0juxOz1FXQ7RIE4btS/zB+7ORFb3jL6k= Subject key identifier: 67:90:D4:AB:8D:86:6E:EB:C8:51:58:DE:43:4F:08:19:2E:7F:0A:D6 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAE910D690CD0FF48ACC56A2711912 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Z5DUq42GbuvIUVjeQ08IGS5_CtY.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18464 IP address blocks: 178.173.224.0/21 maxlen: 24 178.173.224.0/24 maxlen: 24 178.173.225.0/24 maxlen: 24 178.173.226.0/24 maxlen: 24 178.173.227.0/24 maxlen: 24 178.173.228.0/24 maxlen: 24 178.173.229.0/24 maxlen: 24 178.173.230.0/24 maxlen: 24 178.173.241.0/24 maxlen: 24 2001:16c0:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e9:10:d6:90:cd:0f:f4:8a:cc:56:a2:71:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6790d4ab8d866eebc85158de434f08192e7f0ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:83:e0:81:34:75:62:be:3d:22:db:8d:01: ef:9d:4b:cc:9a:12:b8:43:da:73:b3:f0:d7:ee:3d: 7c:0e:65:9a:61:8a:78:c0:5a:92:d6:45:1a:bb:18: 4c:6b:37:6a:ea:3c:83:41:ff:09:55:77:3b:9f:58: 13:b9:3b:d1:b2:ab:11:04:1c:35:2e:06:8a:d9:f9: 58:c3:b3:6f:d7:5f:18:bb:08:7f:3c:f9:21:86:20: 57:4a:5b:d8:be:e5:bc:2b:b8:5f:87:2b:b3:0a:80: 80:9c:af:5c:4c:27:8c:7f:ca:ce:a5:2f:a7:fb:ce: b0:32:f7:10:70:5a:c5:52:ec:17:6a:06:d5:90:51: 49:8d:5c:1f:33:c2:39:1d:17:cb:84:b8:f7:85:22: c0:f1:68:52:ef:c3:cc:78:98:a4:c4:16:69:d9:1e: 08:07:99:39:07:1b:d6:27:f7:b9:a1:81:8e:96:6c: 7c:37:b6:f0:4b:2d:b1:cd:2c:84:35:65:2d:3c:11: 00:ff:02:1e:e7:94:e5:f4:30:12:c6:20:ec:25:6a: 66:3d:3e:b7:ab:19:e2:76:5a:58:56:60:a9:1d:36: d9:f5:c1:c6:2a:ff:16:ce:ac:18:38:75:6e:14:3b: 1d:f0:a7:ef:40:67:11:bb:6a:73:ab:45:2f:e3:3b: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:D4:AB:8D:86:6E:EB:C8:51:58:DE:43:4F:08:19:2E:7F:0A:D6 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Z5DUq42GbuvIUVjeQ08IGS5_CtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.173.224.0/21 178.173.241.0/24 IPv6: 2001:16c0:16c0::/48 Signature Algorithm: sha256WithRSAEncryption 31:ec:ca:ce:34:f2:d2:ed:07:35:45:3f:b8:bf:ba:ed:8d:52: e2:0a:92:57:28:73:c3:e7:01:7f:0a:96:43:b7:e9:52:91:75: e5:1c:ce:80:1a:ef:43:f0:2a:c1:d5:b0:21:a2:05:55:96:2c: 5b:15:d1:7c:9f:f6:23:f3:22:90:d0:7e:8b:64:be:c3:18:d6: 27:79:b1:8d:1d:e2:52:e0:6d:0c:9a:20:2a:40:96:da:ed:be: 72:92:8f:88:a6:1b:33:4d:e5:06:8c:a6:37:15:af:69:51:aa: 18:32:43:80:c8:1f:bf:ca:be:09:26:8b:46:a3:37:d2:92:d5: 4d:f1:fa:4b:4d:1c:31:76:55:b5:d4:87:f1:ec:26:98:2b:71: 1e:2f:0f:56:c6:ed:5c:22:ce:29:ca:c7:ee:45:1e:12:12:df: 48:43:4b:a7:f8:ba:84:36:1c:90:b5:83:ec:5a:6c:55:9c:62: c1:4d:29:60:87:6e:e3:9e:20:83:98:89:dd:ee:52:1e:87:4b: f1:a4:47:ee:78:a2:bd:06:ae:f5:21:8d:88:06:86:2f:67:bb: 76:0b:74:b2:20:50:43:33:d5:38:b8:06:ae:7b:1f:4e:0f:3f: 7b:04:fb:6a:8f:06:62:58:a4:28:e2:37:30:1a:e0:cd:26:e3: c3:35:46:2a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26ukQ1pDND/SKzFaicRkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzkwZDRhYjhkODY2ZWViYzg1MTU4ZGU0MzRmMDgxOTJlN2YwYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXaD4IE0dWK+PSLbjQHvnUvMmhK4 Q9pzs/DX7j18DmWaYYp4wFqS1kUauxhMazdq6jyDQf8JVXc7n1gTuTvRsqsRBBw1 LgaK2flYw7Nv118Yuwh/PPkhhiBXSlvYvuW8K7hfhyuzCoCAnK9cTCeMf8rOpS+n +86wMvcQcFrFUuwXagbVkFFJjVwfM8I5HRfLhLj3hSLA8WhS78PMeJikxBZp2R4I B5k5BxvWJ/e5oYGOlmx8N7bwSy2xzSyENWUtPBEA/wIe55Tl9DASxiDsJWpmPT63 qxnidlpYVmCpHTbZ9cHGKv8WzqwYOHVuFDsd8KfvQGcRu2pzq0Uv4ztTMwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGeQ1KuNhm7ryFFY3kNPCBkufwrWMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvWjVEVXE0MkdidXZJVVZqZVEwOElHUzVfQ3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDsq3gAwQA sq3xMA8EAgACMAkDBwAgARbAFsAwDQYJKoZIhvcNAQELBQADggEBADHsys408tLt BzVFP7i/uu2NUuIKklcoc8PnAX8KlkO36VKRdeUczoAa70PwKsHVsCGiBVWWLFsV 0Xyf9iPzIpDQfotkvsMY1id5sY0d4lLgbQyaICpAltrtvnKSj4imGzNN5QaMpjcV r2lRqhgyQ4DIH7/Kvgkmi0ajN9KS1U3x+ktNHDF2VbXUh/HsJpgrcR4vD1bG7Vwi zinKx+5FHhIS30hDS6f4uoQ2HJC1g+xabFWcYsFNKWCHbuOeIIOYid3uUh6HS/Gk R+54or0GrvUhjYgGhi9nu3YLdLIgUEMz1Ti4Bq57H04PP3sE+2qPBmJYpCjiNzAa 4M0m48M1Rio= -----END CERTIFICATE-----Generated at Fri Jan 23 14:14:11 2026 by rpki-client