This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/kkCJJ0SH14_d9-CmXruhI-FOLmk.roa File: kkCJJ0SH14_d9-CmXruhI-FOLmk.roa (raw, json) Hash identifier: bpGunjQT0l0K3XMZBxYtL1Yq7WVeskhcW7dDmRtZSTE= Subject key identifier: 92:40:89:27:44:87:D7:8F:DD:F7:E0:A6:5E:BB:A1:23:E1:4E:2E:69 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F1374E2ADE4D6D297C5CBAE23A6F464 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/kkCJJ0SH14_d9-CmXruhI-FOLmk.roa Signing time: Fri 02 Jan 2026 14:19:00 +0000 ROA not before: Fri 02 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211970 IP address blocks: 185.234.245.0/24 maxlen: 24 188.72.0.0/24 maxlen: 24 188.72.2.0/24 maxlen: 24 188.72.3.0/24 maxlen: 24 188.72.51.0/24 maxlen: 24 188.72.52.0/24 maxlen: 24 188.72.56.0/24 maxlen: 24 188.72.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:74:e2:ad:e4:d6:d2:97:c5:cb:ae:23:a6:f4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=924089274487d78fddf7e0a65ebba123e14e2e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:1b:eb:8f:18:19:0f:9e:87:2b:b5:7d:3e: ee:d3:e9:2f:49:56:af:ad:e2:f9:25:e8:5d:0b:f7: 8e:d9:c0:73:90:45:1c:11:d2:5f:0f:47:9b:2e:d6: 4d:b4:4e:29:dc:75:ff:4b:e2:b3:cb:e8:2c:05:50: 4b:ba:00:66:8a:e4:d9:53:70:ea:a6:63:92:b1:36: 1c:7a:04:06:36:12:d9:ab:07:91:4b:06:d4:52:f3: 8d:04:fb:89:a4:ab:a2:dc:5b:66:2e:b9:f0:4a:bd: 69:42:d5:5d:3e:76:47:8b:4a:1a:8c:94:76:82:f9: 72:6a:b2:e1:71:31:12:ed:14:b5:97:f4:fa:1b:00: cf:d4:dd:e9:8c:e5:63:cf:13:ae:65:d7:aa:de:e3: 4c:fa:75:57:3b:0b:ad:85:fc:d9:41:75:ad:bb:09: 93:88:d6:ab:68:a8:7d:6b:c2:3a:a3:ec:28:20:74: 51:98:a9:19:61:e4:9e:46:3d:cb:ca:96:a1:18:5a: 7f:ab:1e:20:49:ff:5c:54:d7:fe:f3:78:4b:32:e7: 5d:56:ac:bf:7c:04:11:3b:ba:65:29:ca:50:44:d4: 4c:3e:d4:df:8a:03:a3:81:49:9f:4a:69:cd:52:9b: b7:1a:5e:b8:95:50:b9:8d:f2:a1:29:68:39:67:9f: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:89:27:44:87:D7:8F:DD:F7:E0:A6:5E:BB:A1:23:E1:4E:2E:69 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/kkCJJ0SH14_d9-CmXruhI-FOLmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.245.0/24 188.72.0.0/24 188.72.2.0/23 188.72.51.0-188.72.52.255 188.72.56.0/23 Signature Algorithm: sha256WithRSAEncryption b3:1a:64:ba:3d:03:46:41:0f:8a:c7:37:81:88:be:35:23:c1: d6:9a:05:2a:3b:0e:ea:72:98:97:5a:da:2c:2d:f1:ce:e5:88: 1a:32:56:d9:4b:53:21:f2:9b:b2:7c:22:fc:14:63:92:64:54: a6:be:75:f9:ce:5d:69:b6:3b:87:a6:3c:bb:04:28:47:cf:bd: dd:ee:58:27:93:1a:9a:e7:03:82:fa:c5:e8:77:ec:48:00:44: be:54:6b:84:7e:d8:04:db:08:7b:a2:a0:dc:6d:23:d8:dd:d2: e4:ae:34:7e:b0:51:f8:92:52:b8:8f:f1:d6:a2:1e:9c:18:34: be:27:45:cc:63:c3:ac:aa:87:e4:03:3d:2f:12:2b:be:82:fa: ac:80:0f:77:7f:4e:b7:ce:ec:cc:7e:e8:96:82:f4:15:d7:75: ac:e5:12:bc:b5:75:02:c7:9b:ba:20:52:69:c7:c5:5b:ec:f0: c3:3a:3d:f9:f3:cb:3c:37:ba:2f:9f:dd:05:14:31:81:52:86: 49:a4:e5:a4:a1:5c:95:1d:bd:db:13:f8:2f:44:aa:89:46:da: 1c:e1:85:a7:46:2e:86:6f:a3:eb:1b:9e:f9:55:ff:23:bd:09: 8f:7d:84:bf:cd:49:99:39:b2:5a:13:2e:1d:b4:17:51:17:12: e4:7f:1e:15 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/E3TireTW0pfFy64jpvRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjQwODkyNzQ0ODdkNzhmZGRmN2UwYTY1ZWJiYTEyM2UxNGUyZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniob648YGQ+ehyu1fT7u0+kvSVav reL5JehdC/eO2cBzkEUcEdJfD0ebLtZNtE4p3HX/S+Kzy+gsBVBLugBmiuTZU3Dq pmOSsTYcegQGNhLZqweRSwbUUvONBPuJpKui3FtmLrnwSr1pQtVdPnZHi0oajJR2 gvlyarLhcTES7RS1l/T6GwDP1N3pjOVjzxOuZdeq3uNM+nVXOwuthfzZQXWtuwmT iNaraKh9a8I6o+woIHRRmKkZYeSeRj3LypahGFp/qx4gSf9cVNf+83hLMuddVqy/ fAQRO7plKcpQRNRMPtTfigOjgUmfSmnNUpu3Gl64lVC5jfKhKWg5Z58Z4wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFJJAiSdEh9eP3ffgpl67oSPhTi5pMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEva2tDSkowU0gxNF9kOS1DbVhydWhJLUZPTG1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAuer1AwQA vEgAAwQBvEgCMAwDBAC8SDMDBAC8SDQDBAG8SDgwDQYJKoZIhvcNAQELBQADggEB ALMaZLo9A0ZBD4rHN4GIvjUjwdaaBSo7DupymJda2iwt8c7liBoyVtlLUyHym7J8 IvwUY5JkVKa+dfnOXWm2O4emPLsEKEfPvd3uWCeTGprnA4L6xeh37EgARL5Ua4R+ 2ATbCHuioNxtI9jd0uSuNH6wUfiSUriP8daiHpwYNL4nRcxjw6yqh+QDPS8SK76C +qyAD3d/TrfO7Mx+6JaC9BXXdazlEry1dQLHm7ogUmnHxVvs8MM6Pfnzyzw3ui+f 3QUUMYFShkmk5aShXJUdvdsT+C9EqolG2hzhhadGLoZvo+sbnvlV/yO9CY99hL/N SZk5sloTLh20F1EXEuR/HhU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:04 2026 by rpki-client