This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/IDC6oBiyoOmqWKoupYEHrToEWJ0.roa File: IDC6oBiyoOmqWKoupYEHrToEWJ0.roa (raw, json) Hash identifier: P+sIHqKmPZPeZmABVBnF51jErpgACaNnVr6b4m3JBoY= Subject key identifier: 20:30:BA:A0:18:B2:A0:E9:AA:58:AA:2E:A5:81:07:AD:3A:04:58:9D Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1373498862F5455FCCA7BC65CC810C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/IDC6oBiyoOmqWKoupYEHrToEWJ0.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207598 IP address blocks: 188.72.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:49:88:62:f5:45:5f:cc:a7:bc:65:cc:81:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2030baa018b2a0e9aa58aa2ea58107ad3a04589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:a8:15:05:b9:3e:2f:56:51:90:c7:ba:26: 97:32:07:5b:ec:fe:73:29:dc:42:7d:bb:54:98:0d: d4:bc:44:87:8b:5c:9a:af:01:4b:4f:ce:70:5c:8a: 1d:3a:18:2b:b8:99:a7:e6:23:5b:d9:80:fb:d4:9f: a4:85:12:a7:04:b8:15:c7:2d:9d:b3:7f:dc:b1:65: 5a:9e:08:ea:e6:0f:5f:96:8d:d5:f0:3c:e5:48:2f: 15:9e:91:b5:8d:5c:31:53:77:7c:42:b7:e7:4c:10: 7c:3c:24:a2:05:bb:59:7b:4f:24:77:8e:2f:81:db: da:b1:2f:34:d8:19:33:8d:ff:d6:f2:c5:64:a5:f9: 33:d1:7e:a2:a8:07:13:1b:2b:d2:7f:62:0f:f4:f2: 46:4c:00:1a:3e:39:24:95:1e:5f:20:da:ae:78:91: 59:94:00:bd:2b:63:db:e0:68:88:ba:3d:5c:b1:ec: 02:02:35:ce:fc:53:0a:a1:fb:55:e3:68:e4:35:8e: be:2e:28:66:e8:05:e5:28:f3:ac:f0:3e:2c:6e:91: d6:cb:76:d5:f5:c7:4e:6a:90:61:29:1f:36:94:2e: 57:a0:ad:de:33:a8:69:8a:43:10:2b:a1:1d:25:6e: 33:a4:fc:ec:23:b1:44:7b:60:c1:73:2d:1e:15:cb: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:BA:A0:18:B2:A0:E9:AA:58:AA:2E:A5:81:07:AD:3A:04:58:9D X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/IDC6oBiyoOmqWKoupYEHrToEWJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.2.0/24 Signature Algorithm: sha256WithRSAEncryption d0:3f:07:b8:15:2a:0f:e5:fe:29:43:3d:8a:e5:17:a0:e5:fe: 0f:72:f0:9d:7a:f3:58:dc:a4:bd:b4:07:3a:84:65:1d:ef:fd: 90:15:2f:47:c4:f9:b0:52:c5:fd:fe:64:9c:a5:48:50:a2:96: 5d:e8:94:9a:a4:89:9c:7b:f3:84:56:8f:08:28:34:c9:4b:3d: 90:79:49:4f:dd:0b:35:1b:00:fc:d3:6d:bf:eb:f9:9d:2c:c1: 6c:a1:8f:75:3b:f0:81:81:83:0f:6a:4e:2f:6f:db:db:90:90: c3:d1:ab:0f:3b:84:59:16:a5:b1:7e:6c:15:fb:ae:4b:21:f2: 86:e8:cb:71:f6:e1:8e:41:ed:54:49:16:f3:60:95:b5:1f:f0: 88:bf:5c:57:25:af:9d:43:23:48:19:0c:de:2f:a0:13:00:b4: 15:8d:b1:02:e8:43:11:5c:f1:82:ab:26:30:b2:45:12:c3:9d: 02:e7:bf:a9:03:6b:6d:9b:68:78:1c:40:4b:e0:43:8c:45:ba: 6e:b4:48:78:a1:b6:17:91:af:bd:be:ad:1e:41:af:b7:94:ef: c8:97:3d:c1:fd:f7:40:a1:95:56:74:5d:25:31:9c:a3:88:dc: fe:ec:0c:93:31:09:bf:b9:d8:7a:bd:ff:15:ba:a5:e4:ca:3a: 16:d6:8b:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3NJiGL1RV/Mp7xlzIEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDMwYmFhMDE4YjJhMGU5YWE1OGFhMmVhNTgxMDdhZDNhMDQ1ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fGoFQW5Pi9WUZDHuiaXMgdb7P5z KdxCfbtUmA3UvESHi1yarwFLT85wXIodOhgruJmn5iNb2YD71J+khRKnBLgVxy2d s3/csWVangjq5g9flo3V8DzlSC8VnpG1jVwxU3d8QrfnTBB8PCSiBbtZe08kd44v gdvasS802Bkzjf/W8sVkpfkz0X6iqAcTGyvSf2IP9PJGTAAaPjkklR5fINqueJFZ lAC9K2Pb4GiIuj1csewCAjXO/FMKoftV42jkNY6+Lihm6AXlKPOs8D4sbpHWy3bV 9cdOapBhKR82lC5XoK3eM6hpikMQK6EdJW4zpPzsI7FEe2DBcy0eFcv/bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAwuqAYsqDpqliqLqWBB606BFidMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvSURDNm9CaXlvT21xV0tvdXBZRUhyVG9FV0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgCMA0G CSqGSIb3DQEBCwUAA4IBAQDQPwe4FSoP5f4pQz2K5Reg5f4PcvCdevNY3KS9tAc6 hGUd7/2QFS9HxPmwUsX9/mScpUhQopZd6JSapImce/OEVo8IKDTJSz2QeUlP3Qs1 GwD8022/6/mdLMFsoY91O/CBgYMPak4vb9vbkJDD0asPO4RZFqWxfmwV+65LIfKG 6Mtx9uGOQe1USRbzYJW1H/CIv1xXJa+dQyNIGQzeL6ATALQVjbEC6EMRXPGCqyYw skUSw50C57+pA2ttm2h4HEBL4EOMRbputEh4obYXka+9vq0eQa+3lO/Ilz3B/fdA oZVWdF0lMZyjiNz+7AyTMQm/udh6vf8VuqXkyjoW1ovy -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:20 2026 by rpki-client