This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/R6vwQVt5o7H6FYuAgnAKLLEvyhk.roa File: R6vwQVt5o7H6FYuAgnAKLLEvyhk.roa (raw, json) Hash identifier: C3sLR6IuP4BV9OnLqSSa7piKIrL6slOh9DWFZOXM1Rc= Subject key identifier: 47:AB:F0:41:5B:79:A3:B1:FA:15:8B:80:82:70:0A:2C:B1:2F:CA:19 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1373BBEB0CC8834DDA911261E6CE0F Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/R6vwQVt5o7H6FYuAgnAKLLEvyhk.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210016 IP address blocks: 188.72.9.0/24 maxlen: 24 188.72.10.0/24 maxlen: 24 188.72.11.0/24 maxlen: 24 188.72.13.0/24 maxlen: 24 188.72.14.0/24 maxlen: 24 188.72.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:bb:eb:0c:c8:83:4d:da:91:12:61:e6:ce:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47abf0415b79a3b1fa158b8082700a2cb12fca19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:93:9c:7f:eb:80:ba:3f:3a:c2:a2:b4:ce: 97:7b:77:37:ab:16:55:80:9e:ed:bb:55:66:d4:0b: d9:d2:b5:aa:c0:9d:9d:92:7d:f6:a1:5e:44:59:61: ef:67:3a:df:a1:19:d7:64:fb:a8:f3:6a:9f:c3:99: 9f:8a:ca:65:87:60:ec:2d:62:14:64:b9:95:bc:cd: 8f:ce:10:63:91:0a:8c:4d:5a:ca:d1:35:72:a4:40: ac:33:8f:81:6f:64:2d:96:d2:07:7d:0c:3b:1a:2c: 79:d9:a3:f7:ae:e5:f7:d7:e0:50:76:2d:e2:75:a3: da:b0:1f:22:c2:8b:cb:f1:2f:15:9c:a8:06:1c:f1: 26:65:9b:41:e7:6a:75:76:37:ac:a6:cc:09:22:94: ea:c5:c9:90:82:b8:c3:7b:82:ed:98:0b:4a:25:da: 61:27:8b:2e:0f:a2:db:51:76:33:70:60:36:43:b2: af:25:ab:4a:e2:a5:5c:3e:b2:df:a2:3a:07:ac:f5: 66:10:da:81:c1:23:68:0e:2d:f4:57:4d:36:91:d9: af:df:c4:0d:fb:b1:56:38:56:2f:22:22:7e:df:d8: c9:99:cb:14:78:f8:71:8a:24:68:80:3f:82:02:fa: 78:bc:1b:4a:a7:d9:78:13:6e:70:e0:e6:9c:3b:52: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:F0:41:5B:79:A3:B1:FA:15:8B:80:82:70:0A:2C:B1:2F:CA:19 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/R6vwQVt5o7H6FYuAgnAKLLEvyhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.9.0-188.72.11.255 188.72.13.0-188.72.14.255 188.72.35.0/24 Signature Algorithm: sha256WithRSAEncryption dd:c4:5f:90:1f:3f:1c:ba:9a:d1:a2:89:f8:1a:46:4f:6d:79: 3c:bd:54:71:7a:08:2f:88:b9:d7:a7:c7:d1:d0:7b:4c:2d:60: ce:0f:7f:8e:24:fe:76:a4:1e:cd:c1:f0:2a:d2:4b:5e:1b:28: c5:bf:2f:d2:25:ca:b4:e4:a6:8a:8f:21:39:32:1c:96:41:18: d3:df:09:f7:b5:19:09:b3:47:83:27:ca:94:5a:37:d4:05:0c: 58:26:95:0e:0a:07:44:1f:bb:13:ad:4b:23:3c:79:5e:44:e6: 20:52:03:c7:f8:6e:68:0e:7c:2a:27:bf:2d:6b:6d:ec:cb:aa: 8e:6a:3d:69:a0:3e:f6:67:e7:6a:55:74:a8:15:f1:77:ef:fa: d7:4e:9a:06:71:fe:8b:7c:5d:f0:ef:9c:40:81:10:fe:ef:6e: 16:10:76:f2:b2:29:50:b6:df:1d:e6:c4:9a:70:b5:66:b5:8a: 1f:47:45:56:db:f1:a0:05:fd:30:84:ca:79:c6:3c:dc:fb:a9: ee:03:6d:9c:10:62:ca:16:1b:09:5f:b4:6d:03:98:20:24:54: 35:6f:eb:7a:aa:49:80:ab:50:f8:c6:fd:b6:14:8f:4a:50:8a: 46:ad:13:56:61:f3:e8:66:4e:5d:e8:0f:a4:00:b0:7b:55:85: 15:02:94:16 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/E3O76wzIg03akRJh5s4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2FiZjA0MTViNzlhM2IxZmExNThiODA4MjcwMGEyY2IxMmZjYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBKTnH/rgLo/OsKitM6Xe3c3qxZV gJ7tu1Vm1AvZ0rWqwJ2dkn32oV5EWWHvZzrfoRnXZPuo82qfw5mfisplh2DsLWIU ZLmVvM2PzhBjkQqMTVrK0TVypECsM4+Bb2QtltIHfQw7Gix52aP3ruX31+BQdi3i daPasB8iwovL8S8VnKgGHPEmZZtB52p1djespswJIpTqxcmQgrjDe4LtmAtKJdph J4suD6LbUXYzcGA2Q7KvJatK4qVcPrLfojoHrPVmENqBwSNoDi30V002kdmv38QN +7FWOFYvIiJ+39jJmcsUePhxiiRogD+CAvp4vBtKp9l4E25w4OacO1JyTQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEer8EFbeaOx+hWLgIJwCiyxL8oZMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvUjZ2d1FWdDVvN0g2Rll1QWduQUtMTEV2eWhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAC8SAkD BAK8SAgwDAMEALxIDQMEALxIDgMEALxIIzANBgkqhkiG9w0BAQsFAAOCAQEA3cRf kB8/HLqa0aKJ+BpGT215PL1UcXoIL4i516fH0dB7TC1gzg9/jiT+dqQezcHwKtJL Xhsoxb8v0iXKtOSmio8hOTIclkEY098J97UZCbNHgyfKlFo31AUMWCaVDgoHRB+7 E61LIzx5XkTmIFIDx/huaA58Kie/LWtt7Muqjmo9aaA+9mfnalV0qBXxd+/6106a BnH+i3xd8O+cQIEQ/u9uFhB28rIpULbfHebEmnC1ZrWKH0dFVtvxoAX9MITKecY8 3Pup7gNtnBBiyhYbCV+0bQOYICRUNW/reqpJgKtQ+Mb9thSPSlCKRq0TVmHz6GZO XegPpACwe1WFFQKUFg== -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:15 2026 by rpki-client