This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa File: XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa (raw, json) Hash identifier: 6TxyH33fwOfgUCjl+Sn1brncH5bUGWp3wCrTIDvw7FU= Subject key identifier: 5D:1A:7E:D9:47:61:27:A7:C9:AA:BD:B2:68:2D:CE:7D:09:C5:86:3F Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1373873987153E7EE700DD5E5E163C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 188.72.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:73:87:39:87:15:3e:7e:e7:00:dd:5e:5e:16:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d1a7ed9476127a7c9aabdb2682dce7d09c5863f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:fc:1b:f1:9c:52:8a:37:71:13:5f:ab:4f: 2a:94:37:82:5d:a8:cd:3b:15:62:58:f6:70:f8:e2: b5:c8:48:d1:82:b1:89:f4:48:79:8a:bb:df:a0:34: 54:95:bb:64:e5:f6:ae:b6:74:a2:17:fd:13:a9:4b: 76:97:69:08:0e:37:34:7e:ca:14:f7:c6:a7:bb:60: c4:c7:7a:4c:b4:a1:70:54:a8:5b:e4:71:5f:34:2f: 9d:aa:74:90:d9:c8:4c:a6:e3:e0:77:7e:cf:a4:b9: d3:38:3b:c7:ad:90:c1:42:1e:8b:75:42:ef:02:49: c2:7b:62:1b:b9:e8:06:b9:de:c4:ae:7c:2f:ed:47: 88:fc:4e:83:ef:18:3a:6a:21:27:a1:84:86:e7:ba: a5:da:f6:ae:56:13:d5:8b:14:44:80:3a:b0:46:bf: 41:ab:79:20:3c:0d:2f:7d:3e:82:75:27:03:07:60: 49:fd:a4:0e:15:be:36:52:cc:e4:2c:1c:0c:c1:0f: 9a:87:d5:a3:5d:1b:b4:bc:d7:8b:18:95:29:f0:02: c1:e3:6d:e1:7b:a2:25:96:4b:40:65:b3:49:bc:af: fd:e8:88:55:4d:a8:53:b0:7d:1d:b9:08:6a:8c:b8: 65:d9:ab:30:83:75:f9:d5:35:ff:b6:cb:5d:03:cf: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:7E:D9:47:61:27:A7:C9:AA:BD:B2:68:2D:CE:7D:09:C5:86:3F X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/XRp-2UdhJ6fJqr2yaC3OfQnFhj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.44.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:07:4e:e9:84:bb:87:53:73:fe:32:ba:8e:9f:2b:6c:48:75: e0:28:cc:56:86:aa:e5:ce:8f:fb:96:01:50:68:25:91:18:bf: 95:bb:9b:78:65:68:27:2a:ef:28:b2:6c:f1:d7:4a:61:2c:05: 1f:35:e9:4e:98:8c:65:04:2c:64:66:4b:4b:26:74:6b:49:b4: b2:9c:ab:09:3a:45:df:ee:9b:b4:05:77:92:4a:ed:78:60:52: bd:09:7f:5f:4e:44:fa:14:5e:1b:1a:6c:85:02:89:e2:a0:2c: 01:d7:2c:1c:cc:5a:21:21:46:df:98:e9:3d:3a:80:5d:c6:2a: 9c:fd:c7:c5:a8:5f:53:fe:98:9a:c0:cb:42:85:64:0c:3b:ce: 78:7e:4c:18:ce:62:d8:64:bf:e5:65:21:49:e2:85:10:07:b1: f9:59:ae:cd:d5:18:dd:c5:96:7b:70:cd:21:1b:93:a1:43:e3: 04:c3:53:6b:9f:03:19:48:65:8d:02:cf:b1:e3:f8:0f:ef:55: 94:22:5e:09:f7:35:b5:83:26:ad:2f:be:10:fd:99:06:69:8e: 68:6a:f6:8e:04:bb:6f:82:41:a6:29:a6:62:f1:54:93:39:7b: 64:7b:3e:53:b9:6b:25:db:31:97:2d:ae:fa:7f:63:e1:a1:0a: 5f:ee:c5:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3OHOYcVPn7nAN1eXhY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDFhN2VkOTQ3NjEyN2E3YzlhYWJkYjI2ODJkY2U3ZDA5YzU4NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q38G/GcUoo3cRNfq08qlDeCXajN OxViWPZw+OK1yEjRgrGJ9Eh5irvfoDRUlbtk5fautnSiF/0TqUt2l2kIDjc0fsoU 98anu2DEx3pMtKFwVKhb5HFfNC+dqnSQ2chMpuPgd37PpLnTODvHrZDBQh6LdULv AknCe2IbuegGud7Ernwv7UeI/E6D7xg6aiEnoYSG57ql2vauVhPVixREgDqwRr9B q3kgPA0vfT6CdScDB2BJ/aQOFb42UszkLBwMwQ+ah9WjXRu0vNeLGJUp8ALB423h e6IllktAZbNJvK/96IhVTahTsH0duQhqjLhl2aswg3X51TX/tstdA897yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0aftlHYSenyaq9smgtzn0JxYY/MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvWFJwLTJVZGhKNmZKcXIyeWFDM09mUW5GaGo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgsMA0G CSqGSIb3DQEBCwUAA4IBAQBPB07phLuHU3P+MrqOnytsSHXgKMxWhqrlzo/7lgFQ aCWRGL+Vu5t4ZWgnKu8osmzx10phLAUfNelOmIxlBCxkZktLJnRrSbSynKsJOkXf 7pu0BXeSSu14YFK9CX9fTkT6FF4bGmyFAonioCwB1ywczFohIUbfmOk9OoBdxiqc /cfFqF9T/piawMtChWQMO854fkwYzmLYZL/lZSFJ4oUQB7H5Wa7N1RjdxZZ7cM0h G5OhQ+MEw1NrnwMZSGWNAs+x4/gP71WUIl4J9zW1gyatL74Q/ZkGaY5oavaOBLtv gkGmKaZi8VSTOXtkez5TuWsl2zGXLa76f2PhoQpf7sVj -----END CERTIFICATE-----Generated at Sun Jan 25 19:10:31 2026 by rpki-client