This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/17w582sEct7_1m5VzeQVwhUkYjY.roa File: 17w582sEct7_1m5VzeQVwhUkYjY.roa (raw, json) Hash identifier: zQc8DRQ6okVYJwGKDzFlYEpSzjW2Wl9TrSYPdN52tFo= Subject key identifier: D7:BC:39:F3:6B:04:72:DE:FF:D6:6E:55:CD:E4:15:C2:15:24:62:36 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F13726D1C499EB42A020FC63C031647 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/17w582sEct7_1m5VzeQVwhUkYjY.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205473 IP address blocks: 188.72.0.0/24 maxlen: 24 188.72.1.0/24 maxlen: 24 188.72.20.0/24 maxlen: 24 188.72.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:72:6d:1c:49:9e:b4:2a:02:0f:c6:3c:03:16:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7bc39f36b0472deffd66e55cde415c215246236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:40:29:d3:86:cc:7f:52:10:4b:68:b5:f2: 31:19:66:4e:85:6f:9d:a8:b4:0b:12:38:29:2f:e6: 65:28:22:7f:c2:48:6f:71:6d:6e:5b:c7:07:c2:27: 49:58:51:77:2a:d9:16:32:96:71:1c:67:76:97:d0: a7:19:43:49:5d:a2:c9:3e:b5:60:92:66:57:e8:5c: 1c:02:99:d9:c3:b7:fc:54:ec:5c:70:ba:80:9e:90: 68:2a:6b:25:56:26:56:86:1e:9f:76:e7:ba:64:c3: 5a:88:4c:40:fb:36:36:af:eb:43:31:57:99:ad:63: 10:ed:d7:bb:94:5e:bf:2a:48:b5:9a:29:68:13:02: a8:27:c3:8f:cd:05:ae:de:e9:de:f4:05:73:1b:b0: 18:6e:a8:51:a9:73:58:a2:5b:cb:e6:83:8a:62:e8: 93:d6:7b:43:0d:cf:f1:3a:53:98:1f:55:c4:cb:a2: 63:48:74:02:f8:c6:63:02:8c:7a:75:44:78:ea:62: ab:86:ef:53:b2:20:e7:2e:5e:f1:db:87:79:d3:25: f5:84:25:f8:48:06:63:b9:b7:9f:7e:23:35:d8:41: d1:45:34:d7:74:76:79:83:97:66:67:c3:8e:09:b2: f0:a1:ff:c4:d9:d2:d3:f8:d4:e8:fc:08:74:eb:89: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BC:39:F3:6B:04:72:DE:FF:D6:6E:55:CD:E4:15:C2:15:24:62:36 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/17w582sEct7_1m5VzeQVwhUkYjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.0.0/23 188.72.20.0/24 188.72.51.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:1e:ea:0a:ce:5c:f7:55:6e:1e:94:7a:df:bb:bf:07:6e:22: 14:6b:e9:12:79:e2:cf:29:4b:07:2e:3e:7d:09:a3:76:7c:12: 11:9f:93:58:8e:bc:65:8e:5f:b1:eb:64:b0:74:6c:94:d0:42: 7c:e6:51:cd:17:18:8b:5e:e7:cd:13:cd:13:ce:e3:47:1e:05: f2:07:c3:7c:39:80:63:51:d3:77:ac:8f:11:3d:6c:ed:1d:11: 92:a3:1c:f1:d6:e4:1a:bc:96:25:bf:a7:23:26:31:e1:5f:ef: 48:00:ea:cd:d6:20:07:55:6e:32:f9:ae:41:93:d8:ad:ce:a3: 8c:3c:9c:11:7f:a0:de:8e:21:ba:c5:c2:03:50:08:15:ae:a3: ab:df:a5:42:23:40:fe:6c:e2:90:3c:0c:90:67:c2:26:58:28: ef:5a:84:13:0e:a9:f5:e1:e8:82:84:0f:e3:87:d3:9d:83:6f: ed:7e:12:be:f3:1f:db:e8:b7:c0:3a:6a:c3:da:54:74:9f:59: ed:6e:22:97:eb:95:86:62:d6:0a:38:79:26:78:f8:4f:37:e2: 55:08:4d:45:8b:3d:c7:d0:d0:8b:04:76:95:7f:c0:87:91:f8: 1b:38:96:5a:3c:38:20:3b:2e:56:11:d9:2b:5c:b5:6a:a0:d8: 67:94:55:62 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E3JtHEmetCoCD8Y8AxZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2JjMzlmMzZiMDQ3MmRlZmZkNjZlNTVjZGU0MTVjMjE1MjQ2MjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZxAKdOGzH9SEEtotfIxGWZOhW+d qLQLEjgpL+ZlKCJ/wkhvcW1uW8cHwidJWFF3KtkWMpZxHGd2l9CnGUNJXaLJPrVg kmZX6FwcApnZw7f8VOxccLqAnpBoKmslViZWhh6fdue6ZMNaiExA+zY2r+tDMVeZ rWMQ7de7lF6/Kki1miloEwKoJ8OPzQWu3une9AVzG7AYbqhRqXNYolvL5oOKYuiT 1ntDDc/xOlOYH1XEy6JjSHQC+MZjAox6dUR46mKrhu9TsiDnLl7x24d50yX1hCX4 SAZjubeffiM12EHRRTTXdHZ5g5dmZ8OOCbLwof/E2dLT+NTo/Ah064lKIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNe8OfNrBHLe/9ZuVc3kFcIVJGI2MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvMTd3NTgyc0VjdDdfMW01VnplUVZ3aFVrWWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBvEgAAwQA vEgUAwQAvEgzMA0GCSqGSIb3DQEBCwUAA4IBAQAPHuoKzlz3VW4elHrfu78HbiIU a+kSeeLPKUsHLj59CaN2fBIRn5NYjrxljl+x62SwdGyU0EJ85lHNFxiLXufNE80T zuNHHgXyB8N8OYBjUdN3rI8RPWztHRGSoxzx1uQavJYlv6cjJjHhX+9IAOrN1iAH VW4y+a5Bk9itzqOMPJwRf6DejiG6xcIDUAgVrqOr36VCI0D+bOKQPAyQZ8ImWCjv WoQTDqn14eiChA/jh9Odg2/tfhK+8x/b6LfAOmrD2lR0n1ntbiKX65WGYtYKOHkm ePhPN+JVCE1Fiz3H0NCLBHaVf8CHkfgbOJZaPDggOy5WEdkrXLVqoNhnlFVi -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:02 2026 by rpki-client