This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/iDjssrdC0F5mx4tgjWxfoS4pCmA.roa File: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (raw, json) Hash identifier: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE= Subject key identifier: 88:38:EC:B2:B7:42:D0:5E:66:C7:8B:60:8D:6C:5F:A1:2E:29:0A:60 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA65D41B62F05622003C85B864EA398 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/iDjssrdC0F5mx4tgjWxfoS4pCmA.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198651 IP address blocks: 185.220.176.0/24 maxlen: 24 185.220.177.0/24 maxlen: 24 185.220.178.0/24 maxlen: 24 185.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5d:41:b6:2f:05:62:20:03:c8:5b:86:4e:a3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8838ecb2b742d05e66c78b608d6c5fa12e290a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:9c:d5:b8:6b:14:5b:fc:61:d5:10:de:77: b4:c1:86:2b:6e:8c:dc:8a:e0:66:68:ef:99:cd:2a: b8:3d:48:fa:e5:14:1b:61:46:64:23:5f:64:05:12: 5f:51:15:27:36:0a:01:65:90:38:91:a1:5d:3f:d1: 8d:04:03:b3:fc:b9:e2:42:cd:72:15:c8:87:87:d2: e4:46:65:c3:db:d9:32:5d:b6:25:c8:d0:66:06:69: 7b:53:b5:2a:2b:a1:b9:0f:83:83:63:d0:75:0a:d4: 64:3c:52:1a:8f:1b:e2:be:9d:0f:a0:58:95:85:ef: 0b:7e:90:a8:14:2e:15:28:58:d3:c7:ee:ec:46:32: 76:aa:f6:cc:e0:42:35:87:32:f7:2f:07:47:be:cc: 3d:59:1c:53:1e:4e:95:79:e2:b3:d4:8d:ab:68:2b: 78:63:d2:41:5f:11:28:74:24:0f:40:0b:ef:6b:92: f0:5e:8c:92:cb:3b:fb:61:c7:88:95:b2:ea:8d:c4: ab:ff:05:33:1f:92:d2:02:e1:75:3e:3b:42:0c:fa: 22:33:80:de:82:37:69:5d:34:bf:94:12:70:f9:5c: d0:00:0e:8a:d0:99:ea:61:7d:9c:7e:58:85:62:26: b7:6b:aa:63:d1:88:96:5c:3c:40:36:47:26:65:15: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:EC:B2:B7:42:D0:5E:66:C7:8B:60:8D:6C:5F:A1:2E:29:0A:60 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/iDjssrdC0F5mx4tgjWxfoS4pCmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:01:0a:29:45:a6:1c:74:2d:62:67:0c:73:80:7a:13:64:14: c9:36:f8:fa:40:27:97:04:12:b5:f0:7b:01:08:a9:be:ac:22: bc:41:af:dd:ad:df:c3:89:90:b2:e6:44:5f:47:56:c5:2e:3e: 9c:11:53:2c:31:e5:40:49:9e:13:be:c4:77:f7:4d:45:ab:c3: e1:80:92:03:80:1a:a1:27:0f:58:cd:04:b0:5a:cb:88:e7:68: 62:2d:05:c4:ea:63:ed:b2:6a:37:c1:2c:82:91:03:39:0a:5e: 57:b5:2f:75:b9:f8:ca:d0:5b:fb:b3:21:f8:40:d9:db:bb:01: 14:05:e3:01:fe:cc:85:44:e6:6e:41:78:4b:24:1b:a6:6b:0f: e4:a3:a3:f0:0b:87:29:3b:68:6b:62:ae:09:d7:99:80:9c:c0: ee:5f:54:3b:e2:91:cb:ff:03:bb:f5:ff:b9:8d:6c:18:6d:85: c4:0f:f5:e4:31:60:64:ee:bd:0d:62:a5:6e:9f:05:a4:98:8f: 51:3b:09:0e:44:6d:29:6a:21:64:f0:db:49:a5:d5:ff:75:96: 27:a8:b1:9e:2e:50:26:10:e1:63:e2:12:f1:bd:6c:86:36:88: d8:e2:9f:c4:61:f5:26:33:3c:82:2b:ba:0a:6c:e0:85:49:50: fc:ce:94:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pl1Bti8FYiADyFuGTqOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODM4ZWNiMmI3NDJkMDVlNjZjNzhiNjA4ZDZjNWZhMTJlMjkwYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ec1bhrFFv8YdUQ3ne0wYYrbozc iuBmaO+ZzSq4PUj65RQbYUZkI19kBRJfURUnNgoBZZA4kaFdP9GNBAOz/LniQs1y FciHh9LkRmXD29kyXbYlyNBmBml7U7UqK6G5D4ODY9B1CtRkPFIajxvivp0PoFiV he8LfpCoFC4VKFjTx+7sRjJ2qvbM4EI1hzL3LwdHvsw9WRxTHk6VeeKz1I2raCt4 Y9JBXxEodCQPQAvva5LwXoySyzv7YceIlbLqjcSr/wUzH5LSAuF1PjtCDPoiM4De gjdpXTS/lBJw+VzQAA6K0JnqYX2cfliFYia3a6pj0YiWXDxANkcmZRX8RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIg47LK3QtBeZseLYI1sX6EuKQpgMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvaURqc3NyZEMwRjVteDR0Z2pXeGZvUzRwQ21BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudywMA0G CSqGSIb3DQEBCwUAA4IBAQA7AQopRaYcdC1iZwxzgHoTZBTJNvj6QCeXBBK18HsB CKm+rCK8Qa/drd/DiZCy5kRfR1bFLj6cEVMsMeVASZ4TvsR3901Fq8PhgJIDgBqh Jw9YzQSwWsuI52hiLQXE6mPtsmo3wSyCkQM5Cl5XtS91ufjK0Fv7syH4QNnbuwEU BeMB/syFROZuQXhLJBumaw/ko6PwC4cpO2hrYq4J15mAnMDuX1Q74pHL/wO79f+5 jWwYbYXED/XkMWBk7r0NYqVunwWkmI9ROwkORG0paiFk8NtJpdX/dZYnqLGeLlAm EOFj4hLxvWyGNojY4p/EYfUmMzyCK7oKbOCFSVD8zpTu -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:08 2026 by rpki-client