This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/j83JngEGhal0kT3zsRIrsplye2w.roa File: j83JngEGhal0kT3zsRIrsplye2w.roa (raw, json) Hash identifier: 3+lxYIc+4d3MRrQOOl21+S6JmKca/g8zdNiVTuIPE7I= Subject key identifier: 8F:CD:C9:9E:01:06:85:A9:74:91:3D:F3:B1:12:2B:B2:99:72:7B:6C Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F13748EBCF059497FF923C506A47B2F Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/j83JngEGhal0kT3zsRIrsplye2w.roa Signing time: Fri 02 Jan 2026 14:18:59 +0000 ROA not before: Fri 02 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211888 IP address blocks: 188.72.56.0/24 maxlen: 24 188.72.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:74:8e:bc:f0:59:49:7f:f9:23:c5:06:a4:7b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fcdc99e010685a974913df3b1122bb299727b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:ec:8f:4e:d0:7e:c3:80:86:24:8f:3e:46: ac:49:41:2c:2c:c9:c1:8a:9d:e0:6e:65:60:4e:39: 54:9e:43:02:7c:34:62:a3:f2:00:24:0c:81:42:34: fa:3c:b7:17:f7:7b:56:b0:d4:89:af:07:54:cc:d1: f4:f7:20:c5:c3:fb:ea:dc:13:b1:47:2b:f4:36:e2: 72:3f:ca:f5:47:cb:27:39:61:06:93:c7:56:c7:f1: 8f:5d:17:72:6f:41:d8:44:72:33:68:8b:3a:60:0a: 58:e4:bb:bc:e5:97:8d:93:a4:6c:8f:b2:96:f6:75: 98:66:c2:46:96:a9:a9:61:0b:ab:91:e5:a5:ef:b7: ab:e3:19:64:7b:c5:cc:b9:6b:a6:b3:1d:f6:4c:c2: 5c:fc:48:4e:14:a4:5b:c8:b4:8e:a5:a2:92:50:e8: 3c:e7:0c:ff:c8:eb:11:f6:1a:58:42:73:d5:1d:63: 03:85:68:c6:90:56:a3:d3:8f:73:ec:b7:99:c5:dc: db:51:2a:32:02:28:02:9b:c6:7f:bf:20:e9:fe:6f: bf:02:cf:86:f3:97:9f:53:4a:82:84:9d:f3:22:b7: f8:6f:33:85:ca:05:54:6c:f4:cb:b7:39:8f:d1:a0: a6:04:dc:f7:f8:5e:33:92:53:0f:5c:34:69:b7:20: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CD:C9:9E:01:06:85:A9:74:91:3D:F3:B1:12:2B:B2:99:72:7B:6C X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/j83JngEGhal0kT3zsRIrsplye2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.56.0/23 Signature Algorithm: sha256WithRSAEncryption d2:e5:15:9a:25:ea:90:52:77:e3:66:39:99:37:9f:b1:fe:41: f3:e3:36:0b:09:5d:6e:b7:19:1b:52:6d:c1:9b:21:38:ba:ea: 9e:28:20:95:47:f9:36:81:84:6c:17:e1:87:b6:94:57:2d:5d: 3d:77:63:cb:37:f9:34:84:64:c8:45:53:9c:5d:1e:b2:3d:c6: b4:ac:46:fc:65:2a:5d:ae:e1:2b:35:f6:eb:f7:d5:1b:90:e4: 1c:0e:05:3e:da:37:5f:db:c4:ff:f8:36:07:07:63:63:58:19: 7d:30:39:5f:68:6c:4f:d8:f9:4c:f6:04:67:39:1b:0d:70:f6: 22:f5:ef:1f:91:04:59:03:e7:e3:72:98:81:16:8f:5b:0c:6e: b0:9d:42:2c:e2:57:30:b3:c4:09:e1:4d:60:42:d4:67:40:de: c3:fb:fc:82:12:7c:e8:fe:d1:d8:4e:12:d0:9b:c2:1f:52:0a: 52:cc:cc:e0:17:db:a7:fb:02:89:6f:93:c0:9a:e9:d2:77:38: ba:c7:11:c7:15:84:69:34:2b:38:c5:ac:98:21:7e:a5:c5:f1: e3:ad:14:cc:f8:41:fd:3b:6b:4a:78:4a:e6:63:e9:ec:e0:91: 9a:de:69:0b:5e:33:28:a9:20:c9:fc:02:aa:ef:bc:c3:21:38: e6:9c:9b:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E3SOvPBZSX/5I8UGpHsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmNkYzk5ZTAxMDY4NWE5NzQ5MTNkZjNiMTEyMmJiMjk5NzI3YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bsj07QfsOAhiSPPkasSUEsLMnB ip3gbmVgTjlUnkMCfDRio/IAJAyBQjT6PLcX93tWsNSJrwdUzNH09yDFw/vq3BOx Ryv0NuJyP8r1R8snOWEGk8dWx/GPXRdyb0HYRHIzaIs6YApY5Lu85ZeNk6Rsj7KW 9nWYZsJGlqmpYQurkeWl77er4xlke8XMuWumsx32TMJc/EhOFKRbyLSOpaKSUOg8 5wz/yOsR9hpYQnPVHWMDhWjGkFaj049z7LeZxdzbUSoyAigCm8Z/vyDp/m+/As+G 85efU0qChJ3zIrf4bzOFygVUbPTLtzmP0aCmBNz3+F4zklMPXDRptyCEIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/NyZ4BBoWpdJE987ESK7KZcntsMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvajgzSm5nRUdoYWwwa1QzenNSSXJzcGx5ZTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvEg4MA0G CSqGSIb3DQEBCwUAA4IBAQDS5RWaJeqQUnfjZjmZN5+x/kHz4zYLCV1utxkbUm3B myE4uuqeKCCVR/k2gYRsF+GHtpRXLV09d2PLN/k0hGTIRVOcXR6yPca0rEb8ZSpd ruErNfbr99UbkOQcDgU+2jdf28T/+DYHB2NjWBl9MDlfaGxP2PlM9gRnORsNcPYi 9e8fkQRZA+fjcpiBFo9bDG6wnUIs4lcws8QJ4U1gQtRnQN7D+/yCEnzo/tHYThLQ m8IfUgpSzMzgF9un+wKJb5PAmunSdzi6xxHHFYRpNCs4xayYIX6lxfHjrRTM+EH9 O2tKeErmY+ns4JGa3mkLXjMoqSDJ/AKq77zDITjmnJva -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:56 2026 by rpki-client