This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/H77dlB4nYinMK1S3sS0W_EnBdlQ.roa File: H77dlB4nYinMK1S3sS0W_EnBdlQ.roa (raw, json) Hash identifier: xJpkNKbvUeK8vd4NXW1BScRDcoc93mDMoyPq1ifHcHM= Subject key identifier: 1F:BE:DD:94:1E:27:62:29:CC:2B:54:B7:B1:2D:16:FC:49:C1:76:54 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F137187B8346C3379416169CD1B6628 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/H77dlB4nYinMK1S3sS0W_EnBdlQ.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200200 IP address blocks: 188.72.41.0/24 maxlen: 24 188.72.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:71:87:b8:34:6c:33:79:41:61:69:cd:1b:66:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fbedd941e276229cc2b54b7b12d16fc49c17654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:93:41:db:24:fb:5c:24:ca:5c:7e:25:6a: 5e:67:0f:c5:1c:61:db:2b:82:ae:69:14:af:1c:9a: cf:3c:a2:3c:77:ce:bd:94:24:f6:23:c8:c3:48:52: f5:cf:66:f3:82:59:64:78:71:8d:2f:9f:db:52:5d: 79:11:a9:ee:e4:7e:82:bc:93:d6:d4:a8:24:b3:cc: 24:2e:20:2b:9f:f4:1e:bc:f0:15:95:00:3c:a1:55: 1a:d6:89:10:b6:f2:7e:35:a5:42:c9:f2:37:c9:ae: d8:4f:29:ff:8f:f8:a6:27:7c:67:f9:4b:08:d5:4a: dc:be:53:9d:52:10:1f:79:c5:f6:5e:59:a0:4b:a1: 88:96:7e:6a:87:0b:26:74:05:f8:87:16:a3:ba:5b: f3:16:03:02:fb:b0:f1:e3:80:41:c7:be:63:5d:30: 7a:e5:5f:e6:d2:2c:1a:41:d2:ac:d3:d7:39:b7:6b: 76:fc:ba:ec:ac:ca:e5:1c:ae:ea:8b:41:b0:5b:c4: e0:61:14:d3:64:a5:d0:2c:cd:50:a8:e1:5e:bc:cb: a2:6f:89:3f:d8:73:6b:c3:be:67:63:b8:21:00:dc: 72:53:98:14:72:b0:a3:ff:e5:84:68:62:17:3d:9c: e2:15:e5:00:60:93:9f:25:13:0f:99:1e:65:66:05: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:DD:94:1E:27:62:29:CC:2B:54:B7:B1:2D:16:FC:49:C1:76:54 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/H77dlB4nYinMK1S3sS0W_EnBdlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.41.0/24 188.72.45.0/24 Signature Algorithm: sha256WithRSAEncryption 48:4a:40:24:20:25:fb:2d:87:4e:b0:56:f4:6a:9a:ec:7f:82: 53:bd:fd:1a:af:f0:b0:10:a2:25:dc:21:5d:d9:db:67:35:67: c2:a4:81:60:5c:4a:65:72:b1:53:20:ab:c3:f8:fb:ea:8f:d0: 58:5e:78:26:b2:d4:2b:af:21:c9:a3:be:de:e0:0c:f7:2c:73: 82:56:f4:c0:df:86:7c:da:ca:e2:3e:23:96:5b:0d:97:f7:df: 36:4e:4c:2a:3e:6e:62:b6:6d:12:db:f1:3e:6f:af:7b:19:c3: f2:2b:ee:6b:84:49:1e:b7:f0:86:27:2c:d2:74:6d:1e:ee:b6: fa:e0:11:48:4b:1a:b0:46:41:3b:1c:00:6b:d4:64:e8:70:d2: 94:1f:3b:df:4f:07:2d:3b:2b:07:90:52:1a:40:47:0d:c9:7f: 07:d3:83:cc:9c:a7:bc:37:81:75:a8:c4:32:e1:f2:81:0b:92: b2:77:bc:1a:b9:59:11:67:bb:c4:7b:48:93:21:79:a9:a4:f1: fa:42:4b:93:7c:1a:d8:cb:14:3b:51:b6:24:dd:3f:94:23:ff: 19:4e:04:4a:90:2a:32:62:59:2e:fd:c4:ed:3f:9f:da:17:8f: 53:77:c7:20:c7:2a:b3:01:ee:72:4c:a1:46:19:e6:1e:65:ad: 0f:a5:50:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3GHuDRsM3lBYWnNG2YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmJlZGQ5NDFlMjc2MjI5Y2MyYjU0YjdiMTJkMTZmYzQ5YzE3NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkqTQdsk+1wkylx+JWpeZw/FHGHb K4KuaRSvHJrPPKI8d869lCT2I8jDSFL1z2bzgllkeHGNL5/bUl15Eanu5H6CvJPW 1Kgks8wkLiArn/QevPAVlQA8oVUa1okQtvJ+NaVCyfI3ya7YTyn/j/imJ3xn+UsI 1UrcvlOdUhAfecX2XlmgS6GIln5qhwsmdAX4hxajulvzFgMC+7Dx44BBx75jXTB6 5V/m0iwaQdKs09c5t2t2/LrsrMrlHK7qi0GwW8TgYRTTZKXQLM1QqOFevMuib4k/ 2HNrw75nY7ghANxyU5gUcrCj/+WEaGIXPZziFeUAYJOfJRMPmR5lZgUNXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB++3ZQeJ2IpzCtUt7EtFvxJwXZUMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvSDc3ZGxCNG5ZaW5NSzFTM3NTMFdfRW5CZGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEgpAwQA vEgtMA0GCSqGSIb3DQEBCwUAA4IBAQBISkAkICX7LYdOsFb0aprsf4JTvf0ar/Cw EKIl3CFd2dtnNWfCpIFgXEplcrFTIKvD+Pvqj9BYXngmstQrryHJo77e4Az3LHOC VvTA34Z82sriPiOWWw2X9982TkwqPm5itm0S2/E+b697GcPyK+5rhEket/CGJyzS dG0e7rb64BFISxqwRkE7HABr1GTocNKUHzvfTwctOysHkFIaQEcNyX8H04PMnKe8 N4F1qMQy4fKBC5Kyd7wauVkRZ7vEe0iTIXmppPH6QkuTfBrYyxQ7UbYk3T+UI/8Z TgRKkCoyYlku/cTtP5/aF49Td8cgxyqzAe5yTKFGGeYeZa0PpVAJ -----END CERTIFICATE-----Generated at Sun Jan 25 10:09:09 2026 by rpki-client