This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/ccVCCE-09Bej2Gq6m8lAS3MYNTM.roa File: ccVCCE-09Bej2Gq6m8lAS3MYNTM.roa (raw, json) Hash identifier: G1nOUyNgEshnz1+O8AziRbQPeNpDhZfrVVJ5+ypZjGA= Subject key identifier: 71:C5:42:08:4F:B4:F4:17:A3:D8:6A:BA:9B:C9:40:4B:73:18:35:33 Certificate issuer: /CN=0ba11a46c44eecf90c6231f8456cc702ae938076 Certificate serial: 019BA33B596C5FC5BAB332CA003457B1E69A Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/ccVCCE-09Bej2Gq6m8lAS3MYNTM.roa Signing time: Fri 09 Jan 2026 14:48:54 +0000 ROA not before: Fri 09 Jan 2026 14:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 185.55.81.0/24 maxlen: 24 2a13:bac0:113::/48 maxlen: 48 2a13:bac0:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:3b:59:6c:5f:c5:ba:b3:32:ca:00:34:57:b1:e6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076 Validity Not Before: Jan 9 14:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71c542084fb4f417a3d86aba9bc9404b73183533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:b4:35:87:bf:8e:6e:ff:ef:12:5b:51:9a: 1c:df:88:fd:11:fd:eb:01:12:37:6d:55:14:6f:d7: fa:b2:17:34:cb:73:f1:7b:a4:fd:91:af:7a:cb:35: ee:4b:92:c4:91:3e:75:52:c1:58:3c:c8:a3:95:75: 35:cd:45:38:ba:4e:11:fd:4f:70:90:e5:1d:b0:e0: 24:7b:fb:22:79:48:14:59:3f:71:cc:cb:57:4b:5e: fb:ec:7e:e3:2e:d2:a3:82:e9:d5:83:db:e7:2e:0e: f5:49:25:c2:05:9e:ab:ef:d0:6e:96:41:84:01:9b: ea:e4:29:ef:d8:33:83:77:a3:51:4e:e8:dc:4d:89: 15:27:db:07:51:60:75:7f:dd:4f:33:84:5d:35:d7: b3:51:bc:23:2f:f7:f8:40:76:d8:0e:18:b7:47:ca: 5e:13:fc:56:ae:0b:5d:4d:45:a7:de:c6:fa:51:f3: 12:e0:30:b9:81:76:c6:7c:db:36:9b:f7:7f:6d:ee: 1b:4a:0f:a0:7c:62:83:a0:ac:6e:31:fa:0d:ca:5b: f8:e0:fc:7c:54:e9:32:af:7d:42:53:a6:67:28:4f: 75:9a:a6:32:5e:58:14:8f:dc:9a:5e:b4:93:75:66: 76:60:1f:bd:25:a0:a7:b4:65:e1:70:28:66:e3:73: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C5:42:08:4F:B4:F4:17:A3:D8:6A:BA:9B:C9:40:4B:73:18:35:33 X509v3 Authority Key Identifier: keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/ccVCCE-09Bej2Gq6m8lAS3MYNTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.81.0/24 IPv6: 2a13:bac0:113::/48 2a13:bac0:161::/48 Signature Algorithm: sha256WithRSAEncryption 35:4e:e2:e0:5d:dc:1e:bc:b3:01:47:7f:80:85:1e:85:a7:5f: 6f:03:ab:7d:ec:bd:a8:28:42:ab:f6:88:7f:dd:13:35:17:8e: 7f:90:ce:0c:af:4d:e5:da:a3:36:73:97:f2:45:61:9e:c9:e6: 54:86:2d:29:2b:1e:d3:b9:82:de:98:d0:ee:d4:68:33:f4:ec: bd:d8:59:65:a1:3d:2f:4f:9d:17:c9:ab:4a:b5:36:59:7e:31: c6:91:ed:9f:8c:20:db:17:7c:45:01:d0:a1:c9:52:0d:09:90: 7a:a8:44:ac:10:71:da:52:91:15:80:17:b0:8b:b8:d0:c7:22: c9:8d:b1:0e:48:87:c2:7a:8a:4f:4c:30:16:ba:bc:d4:13:7d: 53:07:c4:fc:21:2b:d9:4f:87:85:61:c0:e9:c4:2b:37:32:c9: c8:3e:60:1c:91:00:a9:e0:d3:19:7e:3a:92:38:9d:31:fa:58: 08:d2:e0:f6:63:b0:a7:25:50:6a:74:ba:48:1c:d0:0f:ce:d5: ad:2b:66:8b:03:09:eb:b5:aa:4f:2b:b6:b2:07:51:b5:17:d3: ab:10:83:a3:b6:23:69:45:dd:9e:44:4e:2b:29:c6:fc:bb:27: 6f:98:97:37:b7:12:e7:d8:dc:a7:ba:34:7b:b0:17:00:85:5a: b6:88:c0:58 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZujO1lsX8W6szLKADRXseaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYTExYTQ2YzQ0ZWVjZjkwYzYyMzFmODQ1NmNjNzAyYWU5 MzgwNzYwHhcNMjYwMTA5MTQ0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWM1NDIwODRmYjRmNDE3YTNkODZhYmE5YmM5NDA0YjczMTgzNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT20NYe/jm7/7xJbUZoc34j9Ef3r ARI3bVUUb9f6shc0y3Pxe6T9ka96yzXuS5LEkT51UsFYPMijlXU1zUU4uk4R/U9w kOUdsOAke/sieUgUWT9xzMtXS1777H7jLtKjgunVg9vnLg71SSXCBZ6r79BulkGE AZvq5Cnv2DODd6NRTujcTYkVJ9sHUWB1f91PM4RdNdezUbwjL/f4QHbYDhi3R8pe E/xWrgtdTUWn3sb6UfMS4DC5gXbGfNs2m/d/be4bSg+gfGKDoKxuMfoNylv44Px8 VOkyr31CU6ZnKE91mqYyXlgUj9yaXrSTdWZ2YB+9JaCntGXhcChm43PTwQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHHFQghPtPQXo9hqupvJQEtzGDUzMB8GA1UdIwQY MBaAFAuhGkbETuz5DGIx+EVsxwKuk4B2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZFYVJzUk83UGtNWWpINFJXekhBcTZUZ0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODVlOGUtMWQxOS00YjQwLTlkY2Et Mjc0Y2ZiMDk2ZWQyLzEvY2NWQ0NFLTA5QmVqMkdxNm04bEFTM01ZTlRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODVlOGUtMWQxOS00YjQwLTlkY2EtMjc0Y2ZiMDk2ZWQy LzEvQzZFYVJzUk83UGtNWWpINFJXekhBcTZUZ0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuTdRMBgE AgACMBIDBwAqE7rAARMDBwAqE7rAAWEwDQYJKoZIhvcNAQELBQADggEBADVO4uBd 3B68swFHf4CFHoWnX28Dq33svagoQqv2iH/dEzUXjn+QzgyvTeXaozZzl/JFYZ7J 5lSGLSkrHtO5gt6Y0O7UaDP07L3YWWWhPS9PnRfJq0q1Nll+McaR7Z+MINsXfEUB 0KHJUg0JkHqoRKwQcdpSkRWAF7CLuNDHIsmNsQ5Ih8J6ik9MMBa6vNQTfVMHxPwh K9lPh4VhwOnEKzcyycg+YByRAKng0xl+OpI4nTH6WAjS4PZjsKclUGp0ukgc0A/O 1a0rZosDCeu1qk8rtrIHUbUX06sQg6O2I2lF3Z5ETispxvy7J2+Ylze3EufY3Ke6 NHuwFwCFWraIwFg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:47 2026 by rpki-client