This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa File: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (raw, json) Hash identifier: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg= Subject key identifier: 73:4F:BE:82:C0:5A:D2:24:76:06:AE:32:5E:85:B7:C2:C4:F5:65:05 Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B7EA7473E6EDCAD6983207C2048E1B1A7 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62007 IP address blocks: 37.221.96.0/22 maxlen: 24 84.246.144.0/21 maxlen: 24 84.246.148.0/22 maxlen: 24 185.36.52.0/22 maxlen: 24 185.67.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:47:3e:6e:dc:ad:69:83:20:7c:20:48:e1:b1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734fbe82c05ad2247606ae325e85b7c2c4f56505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:ba:a3:1f:4e:04:09:1d:05:64:55:6b:01: 09:a5:cd:3e:2d:1f:ec:17:51:26:28:84:e3:0d:15: 5c:54:af:38:1e:d7:7a:b4:84:b3:35:67:14:b9:c8: 5b:d2:2e:4f:e2:f6:11:ed:64:a2:b4:bc:58:0b:21: a4:f6:a6:55:ec:06:04:eb:16:67:c4:5d:30:18:fc: 22:44:04:e8:e6:27:97:17:ca:f0:51:74:db:92:e4: 1c:68:b3:36:b7:07:7a:c7:af:17:82:32:2a:eb:a1: 73:1d:72:a8:25:02:e1:9a:db:d7:90:c8:35:8a:44: 53:a8:64:39:7c:6a:0d:56:f7:72:ee:c1:74:9c:64: 0d:07:de:25:bf:b7:6d:57:71:32:d7:37:7b:5a:4c: f9:31:bf:42:ff:57:da:4c:92:42:04:b5:12:68:d1: 1d:40:2a:d5:5b:9d:89:ec:b0:63:73:08:2d:08:45: 8c:a7:8d:77:07:02:56:24:24:c8:ba:ca:22:7c:b6: d3:94:48:7a:c7:55:51:a9:62:ad:b0:04:e7:8b:08: c9:0a:80:44:77:26:cb:f7:72:1f:a4:1d:59:27:55: a2:f3:95:a1:f5:86:4a:fa:27:54:e6:cb:52:c2:74: 5e:42:ff:f9:51:a2:92:21:1b:90:95:61:92:45:61: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4F:BE:82:C0:5A:D2:24:76:06:AE:32:5E:85:B7:C2:C4:F5:65:05 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.96.0/22 84.246.144.0/21 185.36.52.0/22 185.67.236.0/22 Signature Algorithm: sha256WithRSAEncryption 50:28:d1:e8:d2:8e:fd:d0:d5:7b:71:7c:02:67:d7:59:59:46: b0:b2:07:76:ce:bc:f2:03:73:f7:99:00:6d:16:0d:9a:3f:94: e4:5e:91:3b:33:d2:0c:5b:30:2f:a1:51:c6:4b:60:28:31:a2: 73:7f:ae:e8:15:0d:bf:0b:63:49:41:7c:44:b1:3d:a6:ab:ac: 66:7f:4f:86:8b:f7:42:41:17:9c:42:9a:fd:af:d4:e9:06:75: 67:84:16:94:d7:ce:5a:87:67:2c:32:af:42:b6:a5:a4:b0:7f: 0a:ff:84:1b:de:8a:d6:ed:15:07:e5:6a:e3:b2:42:f1:9a:3c: 23:57:47:ae:68:33:cc:41:db:2c:9f:53:12:7f:bf:91:64:eb: fe:76:9f:95:a9:81:d4:cf:05:ea:22:fb:d7:16:b0:dc:56:a1: a8:17:08:8b:b1:c0:87:4e:29:cf:d3:f1:d8:57:5f:5f:c5:05: 8c:53:ec:0e:d7:9b:5e:d5:9f:cf:a9:4e:c4:96:dc:32:bb:05: b8:6d:25:80:79:3d:56:ee:a7:ae:16:3e:df:c1:e5:19:01:00: 4f:51:e9:bd:e4:7f:7b:6a:53:1b:38:d2:d8:29:ea:e4:0a:5c: 3b:61:65:0c:89:15:3a:a5:7e:ac:2d:f0:b2:75:7d:f9:0c:de: 9f:67:74:02 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p0c+btytaYMgfCBI4bGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRmYmU4MmMwNWFkMjI0NzYwNmFlMzI1ZTg1YjdjMmM0ZjU2NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw626ox9OBAkdBWRVawEJpc0+LR/s F1EmKITjDRVcVK84Htd6tISzNWcUuchb0i5P4vYR7WSitLxYCyGk9qZV7AYE6xZn xF0wGPwiRATo5ieXF8rwUXTbkuQcaLM2twd6x68XgjIq66FzHXKoJQLhmtvXkMg1 ikRTqGQ5fGoNVvdy7sF0nGQNB94lv7dtV3Ey1zd7Wkz5Mb9C/1faTJJCBLUSaNEd QCrVW52J7LBjcwgtCEWMp413BwJWJCTIusoifLbTlEh6x1VRqWKtsATniwjJCoBE dybL93IfpB1ZJ1Wi85Wh9YZK+idU5stSwnReQv/5UaKSIRuQlWGSRWFRCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHNPvoLAWtIkdgauMl6Ft8LE9WUFMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvYzAtLWdzQmEwaVIyQnE0eVhvVzN3c1QxWlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJd1gAwQD VPaQAwQCuSQ0AwQCuUPsMA0GCSqGSIb3DQEBCwUAA4IBAQBQKNHo0o790NV7cXwC Z9dZWUawsgd2zrzyA3P3mQBtFg2aP5TkXpE7M9IMWzAvoVHGS2AoMaJzf67oFQ2/ C2NJQXxEsT2mq6xmf0+Gi/dCQRecQpr9r9TpBnVnhBaU185ah2csMq9CtqWksH8K /4Qb3orW7RUH5WrjskLxmjwjV0euaDPMQdssn1MSf7+RZOv+dp+VqYHUzwXqIvvX FrDcVqGoFwiLscCHTinP0/HYV19fxQWMU+wO15te1Z/PqU7EltwyuwW4bSWAeT1W 7qeuFj7fweUZAQBPUem95H97alMbONLYKerkClw7YWUMiRU6pX6sLfCydX35DN6f Z3QC -----END CERTIFICATE-----Generated at Mon Jan 26 11:45:05 2026 by rpki-client