This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/KF1QnSjEpUta2wvJecIhvvyRYVs.roa File: KF1QnSjEpUta2wvJecIhvvyRYVs.roa (raw, json) Hash identifier: q2BIUpgst9sxdnPTF2svsnUdtnvUrRCyElVv80z8oEU= Subject key identifier: 28:5D:50:9D:28:C4:A5:4B:5A:DB:0B:C9:79:C2:21:BE:FC:91:61:5B Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F13755760655F504F7E645D81035215 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/KF1QnSjEpUta2wvJecIhvvyRYVs.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212330 IP address blocks: 188.72.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:75:57:60:65:5f:50:4f:7e:64:5d:81:03:52:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=285d509d28c4a54b5adb0bc979c221befc91615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:2c:e3:86:9b:73:1d:5a:43:4b:8a:e6:75: f6:2a:89:6e:20:78:dd:9c:81:fe:b6:c3:a2:35:d9: 32:23:3a:43:4a:a9:bb:ba:6b:cc:8f:42:15:a7:9c: 7d:1b:33:e9:01:64:dd:d8:19:d0:51:b3:f8:94:62: 52:56:67:16:72:c1:14:4f:ae:b3:7b:7f:8e:7a:f8: 16:46:a1:ca:56:2f:09:9c:14:d6:70:98:91:7b:f3: 2f:9d:c9:5c:27:4a:ce:38:32:f4:1b:45:d2:9a:9b: 2d:24:e5:07:50:d5:de:38:a7:db:2b:4d:78:47:cc: af:b1:10:8e:78:16:e6:b5:a8:35:fc:6f:10:74:d1: a3:e0:b4:20:d5:a0:63:55:97:ce:04:0d:f0:f3:0c: f7:28:e1:e6:d7:eb:f0:c7:19:8e:bf:ad:0c:83:4a: 96:2f:d6:a7:09:5f:e3:f8:49:c9:e2:71:5e:1e:40: 45:dc:c1:5e:54:1a:96:78:f3:cd:38:df:7f:37:f9: d6:15:fd:e2:04:fe:35:52:cd:54:a0:42:22:97:ed: bd:66:1f:fc:a3:35:25:6a:6b:51:8b:48:58:8c:6f: e6:9c:67:19:fb:93:e6:e4:6d:d1:d6:c3:e3:3c:e6: 51:27:3a:5f:0a:db:3b:4e:44:a3:69:9a:7a:ee:a7: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5D:50:9D:28:C4:A5:4B:5A:DB:0B:C9:79:C2:21:BE:FC:91:61:5B X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/KF1QnSjEpUta2wvJecIhvvyRYVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:57:e6:b0:2b:a6:5a:33:e4:8e:c1:cb:69:f5:b6:09:2f:2d: b9:e9:a1:2c:03:56:08:33:b1:d2:82:ea:69:74:d1:e9:d8:96: f6:11:07:6e:5f:97:76:71:56:37:e3:63:e6:59:f9:c1:cb:58: f6:91:46:9b:1f:1c:68:2e:f0:3f:6e:91:70:ea:19:d2:69:a7: 9e:72:93:f8:9c:2e:64:80:8a:7a:5d:0a:7b:a3:a7:e3:63:dd: 2d:f3:ee:52:2c:e8:a4:cc:e2:91:09:14:5c:1b:eb:52:c0:0d: 24:4f:b0:3a:83:8e:a1:92:2e:9b:fc:c1:03:6d:e5:80:bf:75: 53:6b:e5:5c:d4:41:e2:bc:34:bb:c9:6b:75:de:42:bb:95:d7: e4:27:ba:a2:b3:c5:9b:23:2e:93:3a:77:29:69:68:cf:e1:25: d1:dd:a4:92:f1:47:54:e4:81:6a:fa:9d:d2:93:7e:60:ff:f9: 7d:b9:f7:cd:6d:3a:a7:cc:aa:06:89:a6:e4:c1:81:ce:0c:37: 6e:4f:7e:49:58:ec:31:fb:5f:98:67:34:5c:ea:91:be:ed:8d: d9:65:81:10:e2:58:62:63:4d:cf:7f:ac:ef:29:a0:95:04:d5: 40:85:2f:f4:67:9e:ab:19:98:6e:43:2a:be:93:c8:bf:5a:9d: b0:b6:a5:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3VXYGVfUE9+ZF2BA1IVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODVkNTA5ZDI4YzRhNTRiNWFkYjBiYzk3OWMyMjFiZWZjOTE2MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCYs44abcx1aQ0uK5nX2KoluIHjd nIH+tsOiNdkyIzpDSqm7umvMj0IVp5x9GzPpAWTd2BnQUbP4lGJSVmcWcsEUT66z e3+OevgWRqHKVi8JnBTWcJiRe/MvnclcJ0rOODL0G0XSmpstJOUHUNXeOKfbK014 R8yvsRCOeBbmtag1/G8QdNGj4LQg1aBjVZfOBA3w8wz3KOHm1+vwxxmOv60Mg0qW L9anCV/j+EnJ4nFeHkBF3MFeVBqWePPNON9/N/nWFf3iBP41Us1UoEIil+29Zh/8 ozUlamtRi0hYjG/mnGcZ+5Pm5G3R1sPjPOZRJzpfCts7TkSjaZp67qdn5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFChdUJ0oxKVLWtsLyXnCIb78kWFbMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvS0YxUW5TakVwVXRhMnd2SmVjSWh2dnlSWVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgBMA0G CSqGSIb3DQEBCwUAA4IBAQAcV+awK6ZaM+SOwctp9bYJLy256aEsA1YIM7HSgupp dNHp2Jb2EQduX5d2cVY342PmWfnBy1j2kUabHxxoLvA/bpFw6hnSaaeecpP4nC5k gIp6XQp7o6fjY90t8+5SLOikzOKRCRRcG+tSwA0kT7A6g46hki6b/MEDbeWAv3VT a+Vc1EHivDS7yWt13kK7ldfkJ7qis8WbIy6TOncpaWjP4SXR3aSS8UdU5IFq+p3S k35g//l9uffNbTqnzKoGiabkwYHODDduT35JWOwx+1+YZzRc6pG+7Y3ZZYEQ4lhi Y03Pf6zvKaCVBNVAhS/0Z56rGZhuQyq+k8i/Wp2wtqW0 -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:30 2026 by rpki-client