This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/0CMMHlXSsBn1V8duZO8dQ6KWNlw.roa File: 0CMMHlXSsBn1V8duZO8dQ6KWNlw.roa (raw, json) Hash identifier: vYH058LPTeBTxYtXXv1wPcT5G9aSUIWfSPrADEYL1Lo= Subject key identifier: D0:23:0C:1E:55:D2:B0:19:F5:57:C7:6E:64:EF:1D:43:A2:96:36:5C Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019BDA777986ACE16EEFFEBFA88AA1C3401D Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/0CMMHlXSsBn1V8duZO8dQ6KWNlw.roa Signing time: Tue 20 Jan 2026 08:13:41 +0000 ROA not before: Tue 20 Jan 2026 08:13:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 185.222.120.0/24 maxlen: 24 185.222.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:77:79:86:ac:e1:6e:ef:fe:bf:a8:8a:a1:c3:40:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Jan 20 08:13:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0230c1e55d2b019f557c76e64ef1d43a296365c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:88:90:d2:a6:33:0d:03:8c:e8:3a:3f:7f: c6:f4:d4:0e:6e:b5:81:aa:42:ba:4f:7d:d2:5b:ae: 4e:fd:63:c6:b5:4f:f1:5f:cd:41:0c:9f:b4:20:09: 0e:4e:ff:95:5a:d4:fa:99:a1:2b:03:b1:c7:39:27: 79:5d:09:9c:93:e4:56:3d:3a:c0:9b:16:73:5c:51: 23:51:6f:c2:38:92:b1:6e:68:f6:f3:b3:3f:bd:f5: af:48:ed:7e:10:98:22:3a:5f:6e:02:b7:ce:c4:71: a9:83:44:56:51:49:e5:22:54:49:c9:c6:33:c5:42: e0:0e:a6:46:a9:c5:a0:aa:00:7d:8a:60:58:3f:36: 3f:41:e0:b2:38:3e:f2:22:71:ba:dc:ee:12:9a:39: 22:a3:ec:9a:33:07:3e:f6:b9:f2:8d:f1:47:4f:9c: 2a:35:00:c5:97:65:81:94:99:71:34:5c:f0:0a:40: ee:39:21:4c:63:4b:8f:cc:93:27:9d:5c:1a:75:f4: 52:bc:25:83:ae:38:f5:ef:ca:da:15:80:24:c6:76: 2c:62:d8:00:72:a7:2b:80:cb:10:80:40:4b:3a:1e: b9:9a:06:24:44:17:a9:be:95:ff:43:74:f1:d7:1e: 90:f3:d5:1a:28:49:2a:33:d1:07:80:a5:66:69:9b: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:0C:1E:55:D2:B0:19:F5:57:C7:6E:64:EF:1D:43:A2:96:36:5C X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/0CMMHlXSsBn1V8duZO8dQ6KWNlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.120.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:57:4a:65:36:29:34:8b:cc:c0:8b:e7:5c:71:66:4a:b2:6f: 57:86:58:11:f7:38:04:d7:e2:2b:d7:ba:ae:72:4c:72:7e:28: f1:8f:ef:1a:35:12:1d:c0:02:b0:0d:12:ce:d8:13:b6:26:93: 94:ff:c3:96:b5:4a:a7:cc:e9:e0:cd:c5:c0:b2:4e:83:58:45: 8e:85:cd:b7:89:57:95:6f:2a:bc:75:7e:82:18:7f:d0:a8:9b: 90:a1:8b:5c:84:27:cd:35:04:74:e2:ab:7e:82:74:59:12:1f: f9:8f:e7:ce:a7:15:3f:35:d5:bb:09:46:da:88:8a:1c:b9:b4: cf:72:ed:b4:6a:91:35:92:d4:e4:df:08:a6:79:22:db:95:c7: 48:8a:2b:89:5c:1e:c3:a5:8b:98:f9:87:e9:bd:38:4a:26:fb: af:4b:23:a8:56:4b:ea:f9:ea:45:e0:8f:fa:f6:f5:dc:43:84: 51:dc:b9:9b:12:77:45:9d:ac:87:f5:af:1a:27:ab:e6:e9:a5: 23:6d:33:16:10:c3:67:27:5d:5b:6e:81:a5:34:47:c3:3a:85: 0c:19:08:f1:ee:03:a3:5c:68:7e:07:6a:de:54:9d:60:d8:05: 87:14:aa:8a:b6:a9:35:72:75:b2:ef:3f:43:e4:f5:58:90:90: 0d:91:5b:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvad3mGrOFu7/6/qIqhw0AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjYwMTIwMDgxMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDIzMGMxZTU1ZDJiMDE5ZjU1N2M3NmU2NGVmMWQ0M2EyOTYzNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBuIkNKmMw0DjOg6P3/G9NQObrWB qkK6T33SW65O/WPGtU/xX81BDJ+0IAkOTv+VWtT6maErA7HHOSd5XQmck+RWPTrA mxZzXFEjUW/COJKxbmj287M/vfWvSO1+EJgiOl9uArfOxHGpg0RWUUnlIlRJycYz xULgDqZGqcWgqgB9imBYPzY/QeCyOD7yInG63O4Smjkio+yaMwc+9rnyjfFHT5wq NQDFl2WBlJlxNFzwCkDuOSFMY0uPzJMnnVwadfRSvCWDrjj178raFYAkxnYsYtgA cqcrgMsQgEBLOh65mgYkRBepvpX/Q3Tx1x6Q89UaKEkqM9EHgKVmaZvcpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNAjDB5V0rAZ9VfHbmTvHUOiljZcMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvMENNTUhsWFNzQm4xVjhkdVpPOGRRNktXTmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBud54MA0G CSqGSIb3DQEBCwUAA4IBAQBuV0plNik0i8zAi+dccWZKsm9XhlgR9zgE1+Ir17qu ckxyfijxj+8aNRIdwAKwDRLO2BO2JpOU/8OWtUqnzOngzcXAsk6DWEWOhc23iVeV byq8dX6CGH/QqJuQoYtchCfNNQR04qt+gnRZEh/5j+fOpxU/NdW7CUbaiIocubTP cu20apE1ktTk3wimeSLblcdIiiuJXB7DpYuY+YfpvThKJvuvSyOoVkvq+epF4I/6 9vXcQ4RR3LmbEndFnayH9a8aJ6vm6aUjbTMWEMNnJ11bboGlNEfDOoUMGQjx7gOj XGh+B2reVJ1g2AWHFKqKtqk1cnWy7z9D5PVYkJANkVvv -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:56 2026 by rpki-client