This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/75_VQ_LVgKD0jEii7r0znBFHJII.roa File: 75_VQ_LVgKD0jEii7r0znBFHJII.roa (raw, json) Hash identifier: gLZ065AWXvZc5nDJeYddMpQLr8Cmq9MmzbfacE2mikw= Subject key identifier: EF:9F:D5:43:F2:D5:80:A0:F4:8C:48:A2:EE:BD:33:9C:11:47:24:82 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1373047E3FD8AFD822FF1DBC986BC4 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/75_VQ_LVgKD0jEii7r0znBFHJII.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205800 IP address blocks: 188.72.40.0/24 maxlen: 24 188.72.41.0/24 maxlen: 24 188.72.46.0/24 maxlen: 24 188.72.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:04:7e:3f:d8:af:d8:22:ff:1d:bc:98:6b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9fd543f2d580a0f48c48a2eebd339c11472482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:bc:c2:c9:2f:d7:f2:0a:52:33:0f:95:7b: 06:9c:a4:5c:f0:64:4a:9f:0f:6c:29:8b:77:dc:7a: ec:bb:b0:90:8c:0a:54:e1:82:ac:c5:d8:59:2b:c0: 79:6a:25:06:08:5d:c0:7d:0c:2a:88:5d:1a:d5:53: 17:d1:2a:2d:e0:ac:17:0c:6e:e3:56:3d:61:62:e6: 0b:93:9d:c0:16:6f:15:17:fd:87:5d:6a:47:f4:08: f8:35:16:84:86:18:95:ea:f9:8f:ed:a5:f1:bd:0a: fe:ac:8c:dc:7f:45:ec:b8:07:e7:24:21:50:b4:0c: 7f:8e:72:f3:e8:84:46:cb:b2:42:97:98:fe:c1:79: 13:57:b5:c6:8c:59:9b:8a:d7:4a:b9:ec:7f:57:17: b6:f9:77:c2:c0:7e:7b:8b:c7:45:f4:5d:bf:39:14: cd:e3:3e:4a:93:68:11:61:04:69:21:95:76:0b:fd: 0b:a0:ec:29:89:a2:ec:b3:18:23:a7:7e:40:0a:22: 7d:d2:a6:59:bb:c6:c9:9c:6b:fb:43:54:89:a5:f1: 5a:b8:f0:95:0d:4f:5d:96:4d:4d:d2:12:1a:75:b9: 3f:f4:c2:db:a9:59:61:46:ff:23:1d:42:67:88:78: 30:23:61:6a:99:b1:bb:50:e3:d8:e9:14:50:81:21: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:D5:43:F2:D5:80:A0:F4:8C:48:A2:EE:BD:33:9C:11:47:24:82 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/75_VQ_LVgKD0jEii7r0znBFHJII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.40.0/23 188.72.46.0/24 188.72.49.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:80:dd:30:68:24:55:2b:ee:e5:06:67:95:02:cd:ef:0b:5a: e3:87:9e:62:dd:76:57:ed:db:87:93:a1:e6:b2:1a:39:af:7d: a0:95:6d:27:ed:ee:fa:16:fd:34:34:b5:f5:c8:7a:03:3a:d9: e8:8c:9b:2a:6a:a9:99:92:bb:98:1f:46:c7:36:40:86:0e:13: 1c:da:94:f1:3d:1a:90:88:11:9a:ac:12:2f:3d:05:7d:2e:37: cd:fa:92:f3:5d:b2:82:f2:e8:4a:1a:02:a8:44:45:2c:30:15: 7c:e9:d2:69:55:47:da:e1:55:0d:32:0c:0f:43:ff:3f:a9:5d: f2:99:84:d7:21:a3:44:81:0c:95:60:a0:53:bc:9c:14:25:f4: 88:74:c8:78:b6:3f:a2:c3:75:ac:69:f0:60:06:c6:90:4d:cb: 6b:d3:82:db:50:4a:8a:61:64:aa:3f:b0:91:6a:a1:a6:51:f7: 2b:b6:86:2e:db:55:1c:e5:2f:4b:0b:0a:98:51:98:8b:94:48: 74:b1:2b:b8:43:b3:2f:7f:31:c3:8f:36:c6:a6:d3:fe:c8:b9: 8d:03:e4:0a:24:6f:31:83:f9:4d:d0:cb:ed:59:11:96:10:9d: 2e:22:65:55:94:3a:e9:e6:bd:b6:3e:09:e8:3f:44:b1:3c:00: 27:8e:02:08 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E3MEfj/Yr9gi/x28mGvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjlmZDU0M2YyZDU4MGEwZjQ4YzQ4YTJlZWJkMzM5YzExNDcyNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1O8wskv1/IKUjMPlXsGnKRc8GRK nw9sKYt33Hrsu7CQjApU4YKsxdhZK8B5aiUGCF3AfQwqiF0a1VMX0Sot4KwXDG7j Vj1hYuYLk53AFm8VF/2HXWpH9Aj4NRaEhhiV6vmP7aXxvQr+rIzcf0XsuAfnJCFQ tAx/jnLz6IRGy7JCl5j+wXkTV7XGjFmbitdKuex/Vxe2+XfCwH57i8dF9F2/ORTN 4z5Kk2gRYQRpIZV2C/0LoOwpiaLssxgjp35ACiJ90qZZu8bJnGv7Q1SJpfFauPCV DU9dlk1N0hIadbk/9MLbqVlhRv8jHUJniHgwI2FqmbG7UOPY6RRQgSHegQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO+f1UPy1YCg9IxIou69M5wRRySCMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvNzVfVlFfTFZnS0QwakVpaTdyMHpuQkZISklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBvEgoAwQA vEguAwQAvEgxMA0GCSqGSIb3DQEBCwUAA4IBAQA/gN0waCRVK+7lBmeVAs3vC1rj h55i3XZX7duHk6Hmsho5r32glW0n7e76Fv00NLX1yHoDOtnojJsqaqmZkruYH0bH NkCGDhMc2pTxPRqQiBGarBIvPQV9LjfN+pLzXbKC8uhKGgKoREUsMBV86dJpVUfa 4VUNMgwPQ/8/qV3ymYTXIaNEgQyVYKBTvJwUJfSIdMh4tj+iw3WsafBgBsaQTctr 04LbUEqKYWSqP7CRaqGmUfcrtoYu21Uc5S9LCwqYUZiLlEh0sSu4Q7MvfzHDjzbG ptP+yLmNA+QKJG8xg/lN0MvtWRGWEJ0uImVVlDrp5r22PgnoP0SxPAAnjgII -----END CERTIFICATE-----Generated at Sun Jan 25 10:09:11 2026 by rpki-client