This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/COcuQD28TY4ZqHPvGBIq2LU3DXk.roa File: COcuQD28TY4ZqHPvGBIq2LU3DXk.roa (raw, json) Hash identifier: sGBU4PQ1UIgFaLuANN/BNFi8JnXaw9XHPOkCM2vz3ZQ= Subject key identifier: 08:E7:2E:40:3D:BC:4D:8E:19:A8:73:EF:18:12:2A:D8:B5:37:0D:79 Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Certificate serial: 019B7CECD28AE295F283B268D1814126352E Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/COcuQD28TY4ZqHPvGBIq2LU3DXk.roa Signing time: Fri 02 Jan 2026 04:17:33 +0000 ROA not before: Fri 02 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39095 IP address blocks: 185.80.136.0/22 maxlen: 24 195.142.200.0/22 maxlen: 24 195.142.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d2:8a:e2:95:f2:83:b2:68:d1:81:41:26:35:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e72e403dbc4d8e19a873ef18122ad8b5370d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:8a:e7:0c:a4:25:aa:60:4d:19:41:ec:17: ec:69:d5:92:9d:26:80:26:ef:d0:64:57:12:4e:8e: 5a:c6:0c:18:65:8c:51:c6:11:75:7b:fa:66:f0:e1: 02:a5:9c:b7:17:85:4b:8c:e1:15:64:88:96:b1:de: b8:1d:62:06:1e:7e:b7:86:6a:e5:3e:62:74:21:5d: f6:a8:61:e8:6a:0b:01:84:4e:24:64:ac:47:77:e1: 44:75:4c:66:7c:e0:cb:4c:ab:77:f2:5c:9d:fe:8c: 33:4a:68:24:c3:b4:73:84:03:c0:b7:87:ea:d4:fd: 08:ce:3c:48:da:4d:31:99:23:3a:a9:e8:cf:72:db: 52:da:e9:b6:8a:46:c5:35:67:cb:19:9b:a7:80:65: 95:89:aa:84:ef:b0:2b:1a:b5:17:66:ff:41:b8:0d: e8:3b:4e:5d:2c:a2:e0:d6:c4:20:0f:5a:e5:84:38: f7:44:f2:36:59:26:2e:1f:eb:ef:66:79:c3:6e:61: 9f:9f:6f:ec:f2:fb:ed:3c:b6:ed:27:cb:61:50:a1: 9d:8a:5a:63:11:f4:c2:a9:c7:51:08:3d:d4:da:a4: 71:ab:18:23:1b:25:f6:b2:2a:4f:b8:ec:fa:59:f0: 6b:cf:f5:9c:32:93:2f:87:5f:a2:8f:7a:65:df:d3: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:2E:40:3D:BC:4D:8E:19:A8:73:EF:18:12:2A:D8:B5:37:0D:79 X509v3 Authority Key Identifier: keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/COcuQD28TY4ZqHPvGBIq2LU3DXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.136.0/22 195.142.200.0/22 195.142.244.0/22 Signature Algorithm: sha256WithRSAEncryption 65:47:4d:56:e9:c6:fb:0a:45:40:f6:c9:ad:c6:3c:b5:e8:2a: 24:5c:0e:62:38:fa:9a:9d:cf:e7:cc:83:60:77:29:1d:31:17: af:a2:27:95:00:f7:ab:d1:dd:8f:32:83:58:98:2f:61:03:e2: bb:50:ac:d5:ff:2a:06:fb:c6:4c:a4:51:8e:6f:8f:5a:a7:25: 8d:05:a3:b3:c5:a8:b9:25:71:8f:93:98:81:69:2a:83:a5:51: c9:ba:71:9d:d9:03:cf:47:60:b3:d5:24:ec:32:89:2e:33:1a: 97:b7:2f:57:24:9c:54:e6:3b:c7:50:7e:47:0b:47:08:2b:2e: b4:2b:8a:35:86:a4:1c:a9:bd:8f:18:af:9f:1e:8c:27:13:f3: 39:c8:87:b2:f0:06:15:ff:bf:9f:a5:3b:3e:82:ea:94:23:b6: f2:86:3e:07:ec:35:f5:38:10:1e:aa:4f:7a:ce:be:27:5d:f0: 21:56:4b:a4:51:de:23:da:fd:b5:54:ac:e4:8d:0f:8d:bc:d5: 52:33:91:a6:32:75:0d:f8:0f:72:3b:4e:d6:18:c3:60:48:1d: 49:a3:7e:12:c1:c0:ae:13:6e:de:ba:67:41:37:c3:d2:68:31: 29:20:f3:5c:b8:5f:f8:c4:a5:6b:26:e9:bd:99:e9:af:78:4b: b2:e6:13:92 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87NKK4pXyg7Jo0YFBJjUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw YzRjNTIwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU3MmU0MDNkYmM0ZDhlMTlhODczZWYxODEyMmFkOGI1MzcwZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3OK5wykJapgTRlB7BfsadWSnSaA Ju/QZFcSTo5axgwYZYxRxhF1e/pm8OECpZy3F4VLjOEVZIiWsd64HWIGHn63hmrl PmJ0IV32qGHoagsBhE4kZKxHd+FEdUxmfODLTKt38lyd/owzSmgkw7RzhAPAt4fq 1P0IzjxI2k0xmSM6qejPcttS2um2ikbFNWfLGZungGWViaqE77ArGrUXZv9BuA3o O05dLKLg1sQgD1rlhDj3RPI2WSYuH+vvZnnDbmGfn2/s8vvtPLbtJ8thUKGdilpj EfTCqcdRCD3U2qRxqxgjGyX2sipPuOz6WfBrz/WcMpMvh1+ij3pl39M7jQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAjnLkA9vE2OGahz7xgSKti1Nw15MB8GA1UdIwQY MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt NDljOTVlZWFjODEyLzEvQ09jdVFEMjhUWTRacUhQdkdCSXEyTFUzRFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuVCIAwQC w47IAwQCw470MA0GCSqGSIb3DQEBCwUAA4IBAQBlR01W6cb7CkVA9smtxjy16Cok XA5iOPqanc/nzINgdykdMRevoieVAPer0d2PMoNYmC9hA+K7UKzV/yoG+8ZMpFGO b49apyWNBaOzxai5JXGPk5iBaSqDpVHJunGd2QPPR2Cz1STsMokuMxqXty9XJJxU 5jvHUH5HC0cIKy60K4o1hqQcqb2PGK+fHownE/M5yIey8AYV/7+fpTs+guqUI7by hj4H7DX1OBAeqk96zr4nXfAhVkukUd4j2v21VKzkjQ+NvNVSM5GmMnUN+A9yO07W GMNgSB1Jo34SwcCuE27eumdBN8PSaDEpIPNcuF/4xKVrJum9memveEuy5hOS -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:25 2026 by rpki-client