This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa File: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (raw, json) Hash identifier: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk= Subject key identifier: 71:CE:17:58:86:8A:51:7E:06:ED:0F:C6:8E:D0:51:97:99:7D:25:91 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019B7D5C6B7AB653966A56B6E6172329F494 Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa Signing time: Fri 02 Jan 2026 06:19:27 +0000 ROA not before: Fri 02 Jan 2026 06:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 185.121.224.0/24 maxlen: 24 185.188.141.0/24 maxlen: 24 185.188.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6b:7a:b6:53:96:6a:56:b6:e6:17:23:29:f4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71ce1758868a517e06ed0fc68ed05197997d2591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:e3:21:6b:79:f6:c7:6a:84:ad:72:40:c6: ea:d0:54:ec:30:50:fd:db:77:e4:2a:9e:18:2c:08: b7:33:b0:a7:61:03:3c:33:7b:40:fd:6d:6d:05:93: 94:9d:53:87:25:6a:fc:6a:35:cb:82:5e:28:13:4e: 91:ea:c5:9e:59:b1:5f:9a:36:f8:5e:f0:e8:7c:7a: af:f8:8d:82:1f:ba:7b:cd:52:a4:9e:4d:b9:03:2d: ac:df:29:ca:a6:de:23:5a:c8:ea:11:c1:37:33:77: b7:09:e1:76:78:28:33:68:ad:14:0a:87:61:e1:81: 98:71:d3:e4:d1:66:c2:89:8e:f7:24:7d:fd:e2:72: d3:5a:bb:15:f0:19:dc:3f:cb:29:cf:f9:bb:fe:0c: 99:01:b7:45:13:e9:fe:da:ce:74:73:68:cd:13:80: ee:a3:9a:74:a8:22:40:42:8c:a5:af:45:dd:f7:d0: ad:8c:5f:43:53:cd:d9:88:58:33:b7:f8:b4:38:38: c2:b0:96:82:6c:b1:bd:5e:3a:9d:ac:67:1c:90:38: 8d:44:9e:e4:8e:48:e8:62:08:e6:3d:a3:c5:28:0e: 47:4f:b4:18:42:74:48:6a:0c:1b:1c:c9:fb:24:31: a9:b2:23:c9:da:5e:8a:0e:f7:b1:00:81:78:1d:00: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:17:58:86:8A:51:7E:06:ED:0F:C6:8E:D0:51:97:99:7D:25:91 X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.224.0/24 185.188.141.0-185.188.142.255 Signature Algorithm: sha256WithRSAEncryption 95:96:77:d4:61:a9:37:b7:b6:19:f6:7e:76:c4:ba:8c:fa:4c: c0:54:2a:ac:75:11:7b:d3:0a:d0:a5:4a:bd:80:10:1b:7f:2f: 43:05:3b:56:6c:ef:30:62:85:c4:6f:ab:13:44:8c:af:ef:3d: a9:9c:2f:a9:b7:4a:35:72:0e:3c:1d:7a:46:86:a1:e9:17:54: b8:79:82:f1:4f:ec:32:60:ec:7b:73:d3:09:31:ad:01:38:a6: f9:88:d9:b2:23:42:0a:48:77:5c:0e:88:ac:01:2e:24:9a:e9: 59:4c:7f:66:d9:71:a8:f9:37:d2:3f:52:7d:92:7a:39:39:18: af:4c:b3:7e:3c:da:7d:a9:33:94:19:40:a3:bf:37:d9:be:02: 59:67:d8:54:f3:cf:54:a7:aa:d0:98:45:8c:d8:f9:53:91:6c: a5:f7:59:eb:59:1e:f8:7d:6e:c9:1a:b5:ad:3a:a1:35:cb:c4: 49:4f:89:4b:13:35:46:da:37:d5:53:6b:8b:a8:6c:ae:c2:1a: e6:c9:9f:3b:fb:6b:ef:6a:47:7f:b9:e2:91:61:a0:43:47:14: 7b:99:89:53:22:d1:b7:d9:d7:be:03:10:fb:63:08:a0:0d:72: 59:9a:01:77:ea:b7:19:9e:c4:cd:9f:59:35:65:4a:e0:53:5b: 8f:f9:15:5e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XGt6tlOWala25hcjKfSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWNlMTc1ODg2OGE1MTdlMDZlZDBmYzY4ZWQwNTE5Nzk5N2QyNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjjIWt59sdqhK1yQMbq0FTsMFD9 23fkKp4YLAi3M7CnYQM8M3tA/W1tBZOUnVOHJWr8ajXLgl4oE06R6sWeWbFfmjb4 XvDofHqv+I2CH7p7zVKknk25Ay2s3ynKpt4jWsjqEcE3M3e3CeF2eCgzaK0UCodh 4YGYcdPk0WbCiY73JH394nLTWrsV8BncP8spz/m7/gyZAbdFE+n+2s50c2jNE4Du o5p0qCJAQoylr0Xd99CtjF9DU83ZiFgzt/i0ODjCsJaCbLG9XjqdrGcckDiNRJ7k jkjoYgjmPaPFKA5HT7QYQnRIagwbHMn7JDGpsiPJ2l6KDvexAIF4HQCkJwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHHOF1iGilF+Bu0Pxo7QUZeZfSWRMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvY2M0WFdJYUtVWDRHN1FfR2p0QlJsNWw5SlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuXngMAwD BAC5vI0DBAC5vI4wDQYJKoZIhvcNAQELBQADggEBAJWWd9RhqTe3thn2fnbEuoz6 TMBUKqx1EXvTCtClSr2AEBt/L0MFO1Zs7zBihcRvqxNEjK/vPamcL6m3SjVyDjwd ekaGoekXVLh5gvFP7DJg7Htz0wkxrQE4pvmI2bIjQgpId1wOiKwBLiSa6VlMf2bZ caj5N9I/Un2Sejk5GK9Ms3482n2pM5QZQKO/N9m+Alln2FTzz1SnqtCYRYzY+VOR bKX3WetZHvh9bskata06oTXLxElPiUsTNUbaN9VTa4uobK7CGubJnzv7a+9qR3+5 4pFhoENHFHuZiVMi0bfZ174DEPtjCKANclmaAXfqtxmexM2fWTVlSuBTW4/5FV4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:52 2026 by rpki-client