This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa File: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (raw, json) Hash identifier: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc= Subject key identifier: 70:C3:30:4C:F5:7D:85:37:11:F8:B5:B7:08:23:68:34:D2:3B:82:15 Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Certificate serial: 019B7D5BC4AA531B69EF07D776DE547D2275 Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa Signing time: Fri 02 Jan 2026 06:18:44 +0000 ROA not before: Fri 02 Jan 2026 06:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29644 IP address blocks: 31.193.216.0/21 maxlen: 24 77.75.96.0/21 maxlen: 24 178.250.112.0/21 maxlen: 24 185.51.104.0/22 maxlen: 24 2a03:5f00::/32 maxlen: 32 2a03:5f00:102::/48 maxlen: 48 2a03:5f00:103::/48 maxlen: 48 2a03:5f00:104::/48 maxlen: 48 2a03:5f00:105::/48 maxlen: 48 2a03:5f00:107::/48 maxlen: 48 2a03:5f00:108::/48 maxlen: 48 2a03:5f00:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c4:aa:53:1b:69:ef:07:d7:76:de:54:7d:22:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44 Validity Not Before: Jan 2 06:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c3304cf57d853711f8b5b708236834d23b8215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:f6:9c:c4:3f:72:09:40:c6:60:14:7b:83: 0e:08:0c:60:5b:bf:28:71:a7:b4:61:a8:80:dd:ae: fa:c6:2d:fa:ad:7b:95:8a:70:cf:4e:81:a2:b7:af: 6e:10:af:73:7b:ac:2a:6e:bd:84:5e:ed:46:f1:59: ef:a5:dc:e2:1a:08:42:e0:31:ef:bd:29:b6:29:bf: e7:ae:97:18:23:51:1e:2f:59:24:1f:58:f3:b3:ac: c9:e6:dd:6e:07:65:ff:3a:34:31:9f:76:41:76:fb: 1e:e3:bd:72:d2:97:61:da:e5:16:43:ed:f0:74:16: fc:5e:c5:96:a9:5c:b1:d7:b2:5f:18:6c:ee:b8:62: ba:de:69:ed:6f:16:7e:e6:7c:8b:49:7e:fe:db:47: aa:9c:78:2b:78:aa:02:4d:4c:ad:35:d4:43:a2:a3: 65:1e:cd:76:74:08:54:ca:b5:e1:97:52:f6:29:ff: 58:65:d7:27:2f:29:ea:6f:43:5e:e0:46:1d:9e:a6: b4:51:cd:f2:96:81:68:c1:2d:e4:29:47:2a:32:97: b8:f3:cd:88:be:19:96:29:95:16:b2:69:88:93:de: eb:09:fa:f1:19:fc:02:52:2c:05:55:f2:09:9d:ab: d9:5e:28:ea:3e:57:01:7b:ce:27:87:a0:20:c1:95: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:30:4C:F5:7D:85:37:11:F8:B5:B7:08:23:68:34:D2:3B:82:15 X509v3 Authority Key Identifier: keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.216.0/21 77.75.96.0/21 178.250.112.0/21 185.51.104.0/22 IPv6: 2a03:5f00::/32 Signature Algorithm: sha256WithRSAEncryption 5e:1d:ba:60:09:34:e6:58:4f:df:de:1b:99:65:7a:58:65:68: f1:a2:88:91:7b:63:1b:6c:21:e9:08:0e:55:d6:11:76:5c:b2: a1:c4:33:95:f7:09:67:a4:f1:0f:c4:91:93:f7:1d:40:9f:b8: 1a:a1:e8:7e:2e:e9:ff:a8:51:26:8b:b0:b2:9f:8b:10:f6:be: 25:f2:fb:49:2e:0c:3a:7a:45:ad:f2:dd:db:af:19:75:ed:e1: e2:2e:f5:3a:51:78:14:88:7a:54:3b:5d:3c:87:1b:4e:f1:97: bb:48:ea:e2:ca:49:64:80:6e:0b:20:86:d8:9d:d0:68:aa:cd: 7c:37:81:05:63:4e:af:c2:d4:d8:52:da:13:3d:57:fd:7c:7d: ae:d7:ef:f2:94:d7:5d:0d:52:92:55:cf:a0:a6:39:fe:83:8a: 13:86:fe:90:19:f6:22:b0:8f:1e:44:2f:1d:6c:55:22:e6:b7: ae:b3:cb:3c:5c:81:ed:48:86:7c:0a:a0:09:d6:1d:5b:b8:c8: bd:99:92:10:b3:b8:a0:97:a5:00:11:35:51:a1:da:08:65:c0: 39:38:b3:74:f8:65:43:41:06:a1:ae:59:af:04:9c:3a:e7:20: d1:61:a4:e4:02:a8:1e:d5:a5:9d:4b:4f:08:b5:31:45:b7:44: b7:82:d7:27 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9W8SqUxtp7wfXdt5UfSJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj NTlkNDQwHhcNMjYwMTAyMDYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGMzMzA0Y2Y1N2Q4NTM3MTFmOGI1YjcwODIzNjgzNGQyM2I4MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBf2nMQ/cglAxmAUe4MOCAxgW78o cae0YaiA3a76xi36rXuVinDPToGit69uEK9ze6wqbr2EXu1G8VnvpdziGghC4DHv vSm2Kb/nrpcYI1EeL1kkH1jzs6zJ5t1uB2X/OjQxn3ZBdvse471y0pdh2uUWQ+3w dBb8XsWWqVyx17JfGGzuuGK63mntbxZ+5nyLSX7+20eqnHgreKoCTUytNdRDoqNl Hs12dAhUyrXhl1L2Kf9YZdcnLynqb0Ne4EYdnqa0Uc3yloFowS3kKUcqMpe4882I vhmWKZUWsmmIk97rCfrxGfwCUiwFVfIJnavZXijqPlcBe84nh6AgwZXntQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHDDMEz1fYU3Efi1twgjaDTSO4IVMB8GA1UdIwQY MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt M2ZjMzk0ODc4MDdjLzEvY01Nd1RQVjloVGNSLUxXM0NDTm9OTkk3Z2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDH8HYAwQD TUtgAwQDsvpwAwQCuTNoMA0EAgACMAcDBQAqA18AMA0GCSqGSIb3DQEBCwUAA4IB AQBeHbpgCTTmWE/f3huZZXpYZWjxooiRe2MbbCHpCA5V1hF2XLKhxDOV9wlnpPEP xJGT9x1An7gaoeh+Lun/qFEmi7Cyn4sQ9r4l8vtJLgw6ekWt8t3brxl17eHiLvU6 UXgUiHpUO108hxtO8Ze7SOriyklkgG4LIIbYndBoqs18N4EFY06vwtTYUtoTPVf9 fH2u1+/ylNddDVKSVc+gpjn+g4oThv6QGfYisI8eRC8dbFUi5reus8s8XIHtSIZ8 CqAJ1h1buMi9mZIQs7igl6UAETVRodoIZcA5OLN0+GVDQQahrlmvBJw65yDRYaTk Aqge1aWdS08ItTFFt0S3gtcn -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:06 2026 by rpki-client