This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/3yet6OLm1oHDO_-IOvMcHQPqsrk.roa File: 3yet6OLm1oHDO_-IOvMcHQPqsrk.roa (raw, json) Hash identifier: HznYgTI1D/8kvBEv06zfQm+jldONz66G+ScI9DLqruo= Subject key identifier: DF:27:AD:E8:E2:E6:D6:81:C3:3B:FF:88:3A:F3:1C:1D:03:EA:B2:B9 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1370C351B4EC934C7AC435368B74C0 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/3yet6OLm1oHDO_-IOvMcHQPqsrk.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49571 IP address blocks: 185.72.254.0/24 maxlen: 24 188.72.9.0/24 maxlen: 24 188.72.23.0/24 maxlen: 24 188.72.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:70:c3:51:b4:ec:93:4c:7a:c4:35:36:8b:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df27ade8e2e6d681c33bff883af31c1d03eab2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:cc:eb:e3:cf:2e:79:f9:0d:c2:db:ba:cc: 61:ca:7e:1b:e7:59:3d:1f:98:3e:0d:64:9e:f8:2c: a4:aa:83:48:9c:4e:bc:02:c4:e0:d0:50:48:3b:ad: 1f:a4:fb:0e:69:71:52:ee:cf:eb:9d:e7:6d:0b:44: ee:3f:19:65:8d:61:16:bf:1c:18:cd:22:b2:59:a9: cd:40:5c:46:be:98:09:cd:e0:8c:2f:5f:04:ee:0e: 21:79:41:a9:f6:78:c2:9b:69:a4:bd:da:49:f3:ed: b8:37:16:ec:f2:cd:1e:d7:a1:c1:86:de:12:30:dc: ab:dc:5f:48:40:b4:e8:63:46:20:36:03:f7:5b:19: c7:35:f3:13:53:5e:d1:35:0e:82:56:a0:ee:a9:28: 29:6c:f4:b8:97:db:01:98:84:37:60:af:d7:de:f9: 62:5a:f1:9a:45:8d:b7:c3:a7:3e:d9:9f:10:8e:e4: c3:98:b1:4c:d7:c5:05:da:7e:be:00:7b:46:5f:bf: 9c:a3:c9:48:64:03:ef:ac:64:b3:89:12:8d:61:17: d8:b6:66:e5:d0:11:e9:74:38:68:8a:d2:52:1b:e7: f5:62:56:51:a5:b7:53:9c:5d:4a:9e:bd:75:d3:60: 72:8d:11:ba:5f:f6:37:14:30:c7:2b:41:89:f5:ee: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:AD:E8:E2:E6:D6:81:C3:3B:FF:88:3A:F3:1C:1D:03:EA:B2:B9 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/3yet6OLm1oHDO_-IOvMcHQPqsrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.254.0/24 188.72.9.0/24 188.72.23.0/24 188.72.29.0/24 Signature Algorithm: sha256WithRSAEncryption b7:99:d5:9c:b9:c6:55:aa:e4:0c:01:73:ed:a5:df:c5:5e:cb: d6:c3:00:cc:74:13:15:aa:09:24:72:6c:19:01:43:ee:67:21: eb:a4:11:eb:6b:e9:f4:46:17:b7:8b:9b:a3:0e:f3:52:5a:fe: 45:3b:89:6c:93:59:c8:cf:87:4d:f6:b7:a5:93:07:fa:cc:f1: 69:e1:d7:15:22:91:7b:96:dc:ed:53:00:4e:b1:e6:74:97:eb: 04:73:0d:c8:07:d0:50:0a:aa:6e:83:4b:7d:91:57:30:41:32: cd:a7:d5:bd:e8:aa:ce:74:83:9e:17:77:79:f6:c9:d8:72:3d: 2a:e0:f4:db:dc:2c:6b:73:2a:35:a9:98:af:7d:af:66:ad:f1: d1:34:fb:4a:31:f2:8e:13:70:64:cc:24:fe:a1:0f:0d:a7:90: 6a:39:f9:cb:09:dc:85:f4:de:b6:2a:97:a1:bd:63:b9:51:8d: 53:0d:76:58:f0:7b:6e:ff:50:8e:97:32:f6:51:44:42:6b:2d: 52:9c:dd:d4:1d:9a:58:5f:03:5b:cf:9c:6f:6e:cb:3f:e4:6c: 3d:b1:28:0a:2c:bd:da:05:fa:f2:6a:9b:cb:04:59:c0:f8:da: c5:66:f9:7a:d9:57:01:0f:67:0c:54:07:72:83:9e:94:a5:07: 05:97:81:2d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/E3DDUbTsk0x6xDU2i3TAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI3YWRlOGUyZTZkNjgxYzMzYmZmODgzYWYzMWMxZDAzZWFiMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZbM6+PPLnn5DcLbusxhyn4b51k9 H5g+DWSe+CykqoNInE68AsTg0FBIO60fpPsOaXFS7s/rnedtC0TuPxlljWEWvxwY zSKyWanNQFxGvpgJzeCML18E7g4heUGp9njCm2mkvdpJ8+24Nxbs8s0e16HBht4S MNyr3F9IQLToY0YgNgP3WxnHNfMTU17RNQ6CVqDuqSgpbPS4l9sBmIQ3YK/X3vli WvGaRY23w6c+2Z8QjuTDmLFM18UF2n6+AHtGX7+co8lIZAPvrGSziRKNYRfYtmbl 0BHpdDhoitJSG+f1YlZRpbdTnF1Knr1102ByjRG6X/Y3FDDHK0GJ9e6VXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN8nreji5taBwzv/iDrzHB0D6rK5MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvM3lldDZPTG0xb0hET18tSU92TWNIUVBxc3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUj+AwQA vEgJAwQAvEgXAwQAvEgdMA0GCSqGSIb3DQEBCwUAA4IBAQC3mdWcucZVquQMAXPt pd/FXsvWwwDMdBMVqgkkcmwZAUPuZyHrpBHra+n0Rhe3i5ujDvNSWv5FO4lsk1nI z4dN9relkwf6zPFp4dcVIpF7ltztUwBOseZ0l+sEcw3IB9BQCqpug0t9kVcwQTLN p9W96KrOdIOeF3d59snYcj0q4PTb3Cxrcyo1qZivfa9mrfHRNPtKMfKOE3BkzCT+ oQ8Np5BqOfnLCdyF9N62KpehvWO5UY1TDXZY8Htu/1COlzL2UURCay1SnN3UHZpY XwNbz5xvbss/5Gw9sSgKLL3aBfryapvLBFnA+NrFZvl62VcBD2cMVAdyg56UpQcF l4Et -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:46 2026 by rpki-client