This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa File: K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa (raw, json) Hash identifier: E6PkxgmlEPHIp7RJqxjFRK3yVCV/J1axsAqwnwUkt1s= Subject key identifier: 2B:76:1E:6B:FA:B4:97:58:EC:C8:4C:C1:F9:CD:E1:67:EA:B2:FE:BC Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F13715353B38988C6AA83E457C53A88 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200178 IP address blocks: 188.72.20.0/24 maxlen: 24 188.72.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:71:53:53:b3:89:88:c6:aa:83:e4:57:c5:3a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b761e6bfab49758ecc84cc1f9cde167eab2febc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:a2:ea:07:59:27:d1:46:76:4c:6e:39:c9: 15:c8:b6:be:96:c8:ce:b3:3e:2e:50:d9:79:ab:be: 46:16:b8:f3:ad:ca:56:99:26:3c:b0:89:8b:5b:51: e3:a6:57:e3:53:59:b2:95:53:89:c4:a8:e5:60:d4: 0b:a7:21:10:4d:cf:20:78:cd:71:5d:e2:b6:bf:f7: 40:5e:36:4c:5d:5b:f0:66:31:b0:4c:b5:61:d5:eb: 7c:79:73:44:f8:3c:92:a6:7a:6d:ac:a7:94:d6:a5: 4c:44:b8:78:8e:2b:cc:53:f4:27:8f:0c:d3:29:50: 66:1b:74:80:e8:28:cc:c5:e0:67:b9:46:4e:6c:26: 7e:61:b9:c8:f4:93:62:2a:d2:0f:ed:41:15:00:3e: d2:51:ee:26:1d:00:44:9d:66:12:f0:9a:f5:f3:dd: 6d:3e:1c:68:c7:a8:ea:7d:eb:16:00:2e:c4:51:07: ac:82:e9:f7:a8:b6:ae:19:7b:d8:8f:9f:74:f9:1c: 04:18:43:f8:b4:51:52:13:6c:6b:91:c3:07:3a:44: 7e:9a:67:98:f5:cf:55:90:7d:a4:74:b1:23:de:80: af:ed:5b:7e:6b:3f:04:73:30:5c:20:36:5b:06:c8: 5f:59:0a:fc:4b:a1:36:ea:f3:cc:95:c2:66:31:a4: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:76:1E:6B:FA:B4:97:58:EC:C8:4C:C1:F9:CD:E1:67:EA:B2:FE:BC X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/K3Yea_q0l1jsyEzB-c3hZ-qy_rw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.20.0/24 188.72.35.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:43:30:a4:b8:91:98:cd:ca:fa:27:77:61:65:05:78:e4:19: a3:62:23:5b:16:1a:f3:ae:57:50:f1:2c:92:15:b3:93:ca:ed: b4:06:84:c1:75:e7:9d:c0:e4:fa:47:f3:6a:e4:95:44:df:73: bc:51:8e:c6:e2:61:48:02:1d:17:af:08:3b:bd:fc:6e:58:4e: 1c:b4:71:70:64:93:b2:dc:5e:3c:d6:01:a4:0f:22:7a:5a:f0: 9a:43:c9:13:92:c3:30:a3:c2:f0:85:fa:0c:1e:69:c2:80:43: 30:4a:27:06:b3:ff:75:65:c7:0d:9f:b4:d9:19:88:99:e9:54: e6:09:98:97:20:ed:9c:44:aa:a5:81:25:4a:15:80:d0:31:40: 35:1b:63:c7:26:87:d3:2b:6e:7d:e4:e4:69:49:25:85:b0:d5: 9c:16:d6:87:35:a5:9a:35:98:18:f1:6c:3f:a4:0d:e4:8e:d9: 79:f1:ec:e0:89:1f:17:f8:63:fb:b0:20:e2:93:8a:15:cb:10: 0a:b2:a3:e5:5e:b0:b1:85:dd:98:a9:e6:70:1e:a9:44:c7:ce: cd:64:07:25:33:41:5f:bd:a2:9e:60:f4:aa:ee:d3:37:4f:0b: bb:fa:ce:8a:1b:3d:c4:f3:48:c9:83:fb:34:17:bb:5e:c0:3b: 43:11:b6:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3FTU7OJiMaqg+RXxTqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjc2MWU2YmZhYjQ5NzU4ZWNjODRjYzFmOWNkZTE2N2VhYjJmZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPqi6gdZJ9FGdkxuOckVyLa+lsjO sz4uUNl5q75GFrjzrcpWmSY8sImLW1HjplfjU1mylVOJxKjlYNQLpyEQTc8geM1x XeK2v/dAXjZMXVvwZjGwTLVh1et8eXNE+DySpnptrKeU1qVMRLh4jivMU/QnjwzT KVBmG3SA6CjMxeBnuUZObCZ+YbnI9JNiKtIP7UEVAD7SUe4mHQBEnWYS8Jr1891t Phxox6jqfesWAC7EUQesgun3qLauGXvYj590+RwEGEP4tFFSE2xrkcMHOkR+mmeY 9c9VkH2kdLEj3oCv7Vt+az8EczBcIDZbBshfWQr8S6E26vPMlcJmMaR9kQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCt2Hmv6tJdY7MhMwfnN4Wfqsv68MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvSzNZZWFfcTBsMWpzeUV6Qi1jM2haLXF5X3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEgUAwQA vEgjMA0GCSqGSIb3DQEBCwUAA4IBAQBfQzCkuJGYzcr6J3dhZQV45BmjYiNbFhrz rldQ8SySFbOTyu20BoTBdeedwOT6R/Nq5JVE33O8UY7G4mFIAh0Xrwg7vfxuWE4c tHFwZJOy3F481gGkDyJ6WvCaQ8kTksMwo8LwhfoMHmnCgEMwSicGs/91ZccNn7TZ GYiZ6VTmCZiXIO2cRKqlgSVKFYDQMUA1G2PHJofTK2595ORpSSWFsNWcFtaHNaWa NZgY8Ww/pA3kjtl58ezgiR8X+GP7sCDik4oVyxAKsqPlXrCxhd2YqeZwHqlEx87N ZAclM0FfvaKeYPSq7tM3Twu7+s6KGz3E80jJg/s0F7tewDtDEbYc -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:35 2026 by rpki-client