This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/cCc9EoKWn1mq3UkIpDhniuHoz_0.roa File: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (raw, json) Hash identifier: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68= Subject key identifier: 70:27:3D:12:82:96:9F:59:AA:DD:49:08:A4:38:67:8A:E1:E8:CF:FD Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Certificate serial: 019B7C1292DE6111B24AD7C041AB1BBE59DC Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/cCc9EoKWn1mq3UkIpDhniuHoz_0.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49972 IP address blocks: 185.129.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:92:de:61:11:b2:4a:d7:c0:41:ab:1b:be:59:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70273d1282969f59aadd4908a438678ae1e8cffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:18:e9:e1:82:c1:7a:49:02:bd:7a:ad:b5: 6b:9b:d8:c2:9c:07:d6:be:5b:55:d2:13:b2:a7:f4: 1b:de:50:46:ca:48:dd:76:c8:43:76:22:55:48:03: 43:31:ca:37:5d:77:cf:90:81:aa:00:33:b9:23:a5: 57:53:a8:65:b2:11:4a:44:fa:27:ce:02:2e:28:c5: ab:d9:dd:91:c8:3b:af:b1:f2:b5:51:c5:94:b3:73: 56:f3:97:ba:25:41:2d:e8:10:60:71:1a:87:dc:8f: f0:33:2a:cf:c2:1f:63:2b:42:f1:31:cc:fb:5c:1c: 93:04:a8:e7:69:a4:46:06:c2:2f:1f:e2:9b:5a:86: e5:67:eb:7c:f2:d9:27:c0:2d:d1:d0:e7:bc:b1:c2: be:07:07:43:9d:da:1e:28:eb:40:2d:be:d6:92:c4: 8f:f6:85:6c:aa:e5:ca:f7:c4:f6:8d:46:11:39:e5: 3a:85:28:59:9d:ab:16:07:20:56:50:c0:43:d9:f8: 08:69:47:5d:6e:35:4a:c2:f0:c4:58:7f:0e:f3:0d: f4:5a:22:81:14:2b:c5:ad:81:c8:59:1d:15:cd:43: be:14:ec:dd:07:46:72:d4:04:0c:2e:cd:4f:fe:df: aa:df:bd:d8:e1:e8:7c:a5:6e:f2:8b:ff:2e:e9:ae: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:3D:12:82:96:9F:59:AA:DD:49:08:A4:38:67:8A:E1:E8:CF:FD X509v3 Authority Key Identifier: keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/cCc9EoKWn1mq3UkIpDhniuHoz_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.168.0/24 Signature Algorithm: sha256WithRSAEncryption 47:58:b3:24:f1:e7:a0:1e:b1:74:cb:bb:6a:7c:d7:45:11:ab: 9b:58:0d:2a:bb:2a:4c:90:1a:38:c1:ad:63:28:65:32:5c:da: ec:75:7f:ad:d0:bf:19:0c:77:3e:70:35:8e:f1:2e:99:05:f7: 0f:00:47:fb:59:b9:e9:c7:10:74:e0:b7:d4:f6:ef:92:6a:2e: 5b:90:7d:96:97:2e:20:a5:4a:56:35:4a:4f:6f:04:cb:fc:e4: 56:5c:f1:56:46:62:9f:54:96:42:67:da:35:d5:1b:ab:91:c5: 46:ff:e4:d7:db:21:1f:36:c3:7a:89:93:e9:d9:38:c4:0e:3b: ff:01:1c:31:a3:0e:83:34:be:aa:09:f7:ad:5b:38:d8:19:99: 45:1b:60:61:c9:62:40:9e:12:26:9c:fd:f4:12:67:2b:3e:bd: ae:68:36:0a:64:70:70:d9:7c:93:5d:d6:c9:cd:5f:58:2e:58: 5a:42:6d:1c:4f:64:f5:bc:b9:cc:2a:4e:d2:e2:10:39:b2:da: 08:ad:25:b9:45:a1:e3:16:25:ef:a2:60:9b:7d:f0:8d:cd:a8: 8a:19:16:5f:25:99:ec:76:78:30:21:2c:b3:f5:ac:54:4e:52: f3:05:10:fc:26:ac:62:a3:f8:72:ee:cb:e1:cd:76:0a:ee:6b: dc:8f:71:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpLeYRGyStfAQasbvlncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjM2UxYzAzZWZhMmYyZDlmZmY5ZGJlYzMzMjViYzZjMzc2 OTQyNTAwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI3M2QxMjgyOTY5ZjU5YWFkZDQ5MDhhNDM4Njc4YWUxZThjZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE4Y6eGCwXpJAr16rbVrm9jCnAfW vltV0hOyp/Qb3lBGykjddshDdiJVSANDMco3XXfPkIGqADO5I6VXU6hlshFKRPon zgIuKMWr2d2RyDuvsfK1UcWUs3NW85e6JUEt6BBgcRqH3I/wMyrPwh9jK0LxMcz7 XByTBKjnaaRGBsIvH+KbWoblZ+t88tknwC3R0Oe8scK+BwdDndoeKOtALb7WksSP 9oVsquXK98T2jUYROeU6hShZnasWByBWUMBD2fgIaUddbjVKwvDEWH8O8w30WiKB FCvFrYHIWR0VzUO+FOzdB0Zy1AQMLs1P/t+q373Y4eh8pW7yi/8u6a5N9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAnPRKClp9Zqt1JCKQ4Z4rh6M/9MB8GA1UdIwQY MBaAFCw+HAPvovLZ//nb7DMlvGw3aUJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQt YmYyODg3NWFiMjYxLzEvY0NjOUVvS1duMW1xM1VrSXBEaG5pdUhvel8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kY2JkM2EtNzUyOC00OTllLWEzYmQtYmYyODg3NWFiMjYx LzEvTEQ0Y0EtLWk4dG5fLWR2c015VzhiRGRwUWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYGoMA0G CSqGSIb3DQEBCwUAA4IBAQBHWLMk8eegHrF0y7tqfNdFEaubWA0quypMkBo4wa1j KGUyXNrsdX+t0L8ZDHc+cDWO8S6ZBfcPAEf7WbnpxxB04LfU9u+Sai5bkH2Wly4g pUpWNUpPbwTL/ORWXPFWRmKfVJZCZ9o11RurkcVG/+TX2yEfNsN6iZPp2TjEDjv/ ARwxow6DNL6qCfetWzjYGZlFG2BhyWJAnhImnP30EmcrPr2uaDYKZHBw2XyTXdbJ zV9YLlhaQm0cT2T1vLnMKk7S4hA5stoIrSW5RaHjFiXvomCbffCNzaiKGRZfJZns dngwISyz9axUTlLzBRD8Jqxio/hy7svhzXYK7mvcj3Fw -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:48 2026 by rpki-client