This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/16wi2kLfg0RhGr-HKdIKAmx8AHM.roa File: 16wi2kLfg0RhGr-HKdIKAmx8AHM.roa (raw, json) Hash identifier: W6kpne41yrWEdMGl057jFuk+UEhPb9wwPTubLQdgtBs= Subject key identifier: D7:AC:22:DA:42:DF:83:44:61:1A:BF:87:29:D2:0A:02:6C:7C:00:73 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F13708996960BFA4D7AFF55A5F9893C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/16wi2kLfg0RhGr-HKdIKAmx8AHM.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39216 IP address blocks: 185.72.252.0/24 maxlen: 24 185.72.253.0/24 maxlen: 24 188.72.1.0/24 maxlen: 24 188.72.4.0/24 maxlen: 24 188.72.5.0/24 maxlen: 24 188.72.6.0/24 maxlen: 24 188.72.7.0/24 maxlen: 24 188.72.34.0/24 maxlen: 24 188.72.35.0/24 maxlen: 24 188.72.56.0/24 maxlen: 24 188.72.59.0/24 maxlen: 24 188.72.60.0/24 maxlen: 24 188.72.61.0/24 maxlen: 24 188.72.62.0/24 maxlen: 24 188.72.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:70:89:96:96:0b:fa:4d:7a:ff:55:a5:f9:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ac22da42df8344611abf8729d20a026c7c0073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:b7:fd:71:b1:e6:f3:3a:55:ff:5f:60:70: 3f:80:4f:b6:11:22:48:a1:56:f8:c2:a9:a2:0b:6d: 6a:d8:2a:97:af:f3:cc:51:03:21:76:3b:e5:62:98: 73:5c:30:5d:7f:7d:ca:f2:b1:e6:b5:0f:23:8d:74: 70:b9:a4:4d:5a:cb:d0:2e:e9:c2:a4:4b:47:8b:e5: 6e:67:e1:ef:d7:1e:11:dd:c6:1f:88:f0:9a:4a:07: 9b:bb:14:a7:9a:df:10:02:c3:de:6e:0f:b9:08:c8: 04:f7:53:29:98:fa:b7:7a:bd:5d:4b:86:3f:8a:6c: ad:98:5c:c0:15:10:d9:76:9d:11:3d:71:61:a2:a8: f5:08:07:cb:a2:df:3d:8a:4b:8f:19:ce:65:32:1f: 59:5b:4b:e2:af:0a:b1:03:dd:14:42:36:78:54:2f: 9b:38:2c:a0:39:68:f1:a6:66:f5:e2:02:75:90:6c: 3f:17:11:b6:85:df:46:83:7e:1a:7e:39:76:87:b1: 7f:28:35:6e:07:9c:07:4f:0a:7f:99:2b:91:2a:bd: 76:92:a5:e3:a9:69:da:46:ee:2b:40:ef:b3:05:c2: a3:3e:58:b3:d9:ac:ea:e7:28:b4:36:4e:bb:d9:e0: ad:3d:68:72:9f:05:26:b7:1e:53:a3:cc:de:63:ed: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AC:22:DA:42:DF:83:44:61:1A:BF:87:29:D2:0A:02:6C:7C:00:73 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/16wi2kLfg0RhGr-HKdIKAmx8AHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.252.0/23 188.72.1.0/24 188.72.4.0/22 188.72.34.0/23 188.72.56.0/24 188.72.59.0-188.72.63.255 Signature Algorithm: sha256WithRSAEncryption 2b:ce:0e:be:74:43:44:4a:7b:d0:a2:1f:a8:77:3c:79:c9:95: af:8a:b5:c7:e5:3f:39:61:5d:44:5d:6f:fd:9f:ea:01:6b:fc: 90:57:5e:0e:b1:6b:53:fe:2e:16:9b:89:9f:bb:bf:b2:c3:ce: 2e:88:a9:0f:cf:a9:70:7d:27:31:78:35:8b:bf:b5:9f:bf:d7: 1e:53:da:02:1b:84:a8:28:6d:37:5b:df:be:65:06:66:94:f8: 7f:cc:92:de:d0:11:45:5c:8b:38:1d:9d:83:6b:57:df:53:55: 17:b8:4d:f9:e1:31:b4:2d:fc:8c:cd:b2:9c:a0:8a:2c:a4:b3: 46:6d:e4:a7:88:fa:0b:ca:63:c0:bb:71:27:3d:fa:11:71:8a: f1:3c:b7:48:1a:e2:41:64:1b:24:13:34:05:8c:fe:44:76:f0: de:bd:f1:d3:2a:d2:c0:27:33:17:a2:a7:c7:e8:db:04:8f:1b: 5a:fc:47:08:66:af:91:1a:6a:12:06:e0:a0:a5:ee:08:75:99: 62:9a:3d:f9:5c:69:2c:30:70:b1:6d:d5:64:b1:f0:19:7f:da: b3:41:3f:be:e7:37:e1:b7:57:14:09:65:79:99:5d:72:3f:70: 20:34:ec:d7:7f:7f:a7:b0:76:22:6f:0e:3a:e0:54:c3:eb:03: 32:12:7b:db -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/E3CJlpYL+k16/1Wl+Yk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2FjMjJkYTQyZGY4MzQ0NjExYWJmODcyOWQyMGEwMjZjN2MwMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKC3/XGx5vM6Vf9fYHA/gE+2ESJI oVb4wqmiC21q2CqXr/PMUQMhdjvlYphzXDBdf33K8rHmtQ8jjXRwuaRNWsvQLunC pEtHi+VuZ+Hv1x4R3cYfiPCaSgebuxSnmt8QAsPebg+5CMgE91MpmPq3er1dS4Y/ imytmFzAFRDZdp0RPXFhoqj1CAfLot89ikuPGc5lMh9ZW0virwqxA90UQjZ4VC+b OCygOWjxpmb14gJ1kGw/FxG2hd9Gg34afjl2h7F/KDVuB5wHTwp/mSuRKr12kqXj qWnaRu4rQO+zBcKjPliz2azq5yi0Nk672eCtPWhynwUmtx5To8zeY+1F5QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNesItpC34NEYRq/hynSCgJsfABzMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvMTZ3aTJrTGZnMFJoR3ItSEtkSUtBbXg4QUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBuUj8AwQA vEgBAwQCvEgEAwQBvEgiAwQAvEg4MAwDBAC8SDsDBAa8SAAwDQYJKoZIhvcNAQEL BQADggEBACvODr50Q0RKe9CiH6h3PHnJla+KtcflPzlhXURdb/2f6gFr/JBXXg6x a1P+LhabiZ+7v7LDzi6IqQ/PqXB9JzF4NYu/tZ+/1x5T2gIbhKgobTdb375lBmaU +H/Mkt7QEUVcizgdnYNrV99TVRe4TfnhMbQt/IzNspygiiyks0Zt5KeI+gvKY8C7 cSc9+hFxivE8t0ga4kFkGyQTNAWM/kR28N698dMq0sAnMxeip8fo2wSPG1r8Rwhm r5EaahIG4KCl7gh1mWKaPflcaSwwcLFt1WSx8Bl/2rNBP77nN+G3VxQJZXmZXXI/ cCA07Nd/f6ewdiJvDjrgVMPrAzISe9s= -----END CERTIFICATE-----Generated at Sun Jan 25 03:59:02 2026 by rpki-client