This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/x5tgECJAP6fckf75oremz0-3QKM.roa File: x5tgECJAP6fckf75oremz0-3QKM.roa (raw, json) Hash identifier: HEVb3Ub0oIq5xOKjyrV77VxFtUue3E7fb6XdS69sJHM= Subject key identifier: C7:9B:60:10:22:40:3F:A7:DC:91:FE:F9:A2:B7:A6:CF:4F:B7:40:A3 Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Certificate serial: 019B7F155450251EF589E3C8237D601272B0 Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/x5tgECJAP6fckf75oremz0-3QKM.roa Signing time: Fri 02 Jan 2026 14:21:02 +0000 ROA not before: Fri 02 Jan 2026 14:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60051 IP address blocks: 185.71.204.0/24 maxlen: 24 185.71.205.0/24 maxlen: 24 185.71.206.0/24 maxlen: 24 185.71.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:54:50:25:1e:f5:89:e3:c8:23:7d:60:12:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Validity Not Before: Jan 2 14:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c79b601022403fa7dc91fef9a2b7a6cf4fb740a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:52:14:eb:0b:bf:0e:0e:59:52:1e:fc:c5: e1:bd:09:9e:44:ac:96:3a:53:dd:a4:bd:d6:b6:36: 86:2f:d0:4b:e7:1b:ec:dd:9d:2e:30:8b:af:2a:8e: d4:af:9c:db:84:c5:28:bd:2b:6e:5c:3d:7b:27:1e: 39:ed:63:9e:13:14:76:59:13:fe:e9:7e:72:ce:70: 12:41:cf:24:f1:e5:39:85:9f:43:39:cf:df:ce:0c: 8d:3b:7b:03:0b:d3:17:04:91:5e:ff:5b:62:00:67: a5:05:88:aa:c8:c6:5d:ab:b4:23:cd:5b:16:e9:04: 76:65:d6:4c:c1:16:a9:ad:51:ff:35:cc:84:fe:4d: 34:59:2b:87:64:ef:b7:89:a1:9a:ac:94:69:4e:c7: 4c:d6:a3:fc:3f:44:f3:e5:44:79:99:2e:83:59:36: 8f:e6:96:a0:94:33:fc:3b:12:c0:79:d5:4e:14:30: 4c:7d:f9:9c:d6:ce:8e:7c:48:dc:21:a8:c7:ad:d7: df:66:67:d6:73:15:8d:ac:ed:7b:ed:e7:51:e7:13: a2:6a:48:77:b9:bb:37:1d:77:68:6d:04:5a:6e:89: 8a:4c:4f:dc:4e:90:5e:fa:a0:79:77:1b:49:b1:5f: d7:74:2a:fa:a8:45:aa:48:14:e9:97:db:6d:2f:b5: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:60:10:22:40:3F:A7:DC:91:FE:F9:A2:B7:A6:CF:4F:B7:40:A3 X509v3 Authority Key Identifier: keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/x5tgECJAP6fckf75oremz0-3QKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.204.0/22 Signature Algorithm: sha256WithRSAEncryption d2:55:de:27:da:25:d0:d1:c5:95:c9:f8:d2:a8:4b:ec:1e:93: df:b8:60:a5:66:89:6f:f4:7f:f4:de:2b:9d:4f:3c:c1:5b:e6: b8:c2:4a:73:bc:e3:90:96:31:ea:b9:0d:dd:d2:82:47:d6:f5: 47:31:a6:06:d7:77:23:29:40:e5:bd:6d:9d:53:0a:4b:84:47: 22:40:9d:45:ab:ee:16:a2:93:9b:d0:7e:0e:28:b0:00:bc:58: b9:61:f4:52:a7:c0:ce:f6:71:c8:c3:87:56:8c:bc:47:76:f4: a8:36:83:66:97:3e:db:61:09:19:4d:5d:a0:06:7c:22:23:34: c2:2f:83:7b:1a:02:92:7b:cc:f9:09:57:2d:7a:b3:09:f9:f0: c7:6e:56:77:15:76:5e:7d:c8:b2:24:17:a2:17:2d:c2:df:38: f8:6a:16:be:f7:3e:dd:bb:e6:4a:fb:6d:73:79:5e:55:10:31: 9f:52:ab:fb:e0:88:15:6c:37:a0:bd:93:7d:a9:74:16:5e:ce: 79:a7:12:d9:1e:b8:40:e2:27:98:4a:bb:de:c4:3d:fa:a3:48: 42:ff:8e:35:48:cd:69:b0:c9:86:e6:8b:b0:ba:20:49:cf:91: 09:5e:51:04:af:81:35:f6:b3:e9:72:08:f2:27:78:8d:8f:98: 0a:d5:d7:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVRQJR71iePII31gEnKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx NTVjZGMwHhcNMjYwMTAyMTQyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzliNjAxMDIyNDAzZmE3ZGM5MWZlZjlhMmI3YTZjZjRmYjc0MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53NSFOsLvw4OWVIe/MXhvQmeRKyW OlPdpL3WtjaGL9BL5xvs3Z0uMIuvKo7Ur5zbhMUovStuXD17Jx457WOeExR2WRP+ 6X5yznASQc8k8eU5hZ9DOc/fzgyNO3sDC9MXBJFe/1tiAGelBYiqyMZdq7QjzVsW 6QR2ZdZMwRaprVH/NcyE/k00WSuHZO+3iaGarJRpTsdM1qP8P0Tz5UR5mS6DWTaP 5paglDP8OxLAedVOFDBMffmc1s6OfEjcIajHrdffZmfWcxWNrO177edR5xOiakh3 ubs3HXdobQRabomKTE/cTpBe+qB5dxtJsV/XdCr6qEWqSBTpl9ttL7WtnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMebYBAiQD+n3JH++aK3ps9Pt0CjMB8GA1UdIwQY MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt ZDAxMmNhOWVjMTk3LzEveDV0Z0VDSkFQNmZja2Y3NW9yZW16MC0zUUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3 LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUfMMA0G CSqGSIb3DQEBCwUAA4IBAQDSVd4n2iXQ0cWVyfjSqEvsHpPfuGClZolv9H/03iud TzzBW+a4wkpzvOOQljHquQ3d0oJH1vVHMaYG13cjKUDlvW2dUwpLhEciQJ1Fq+4W opOb0H4OKLAAvFi5YfRSp8DO9nHIw4dWjLxHdvSoNoNmlz7bYQkZTV2gBnwiIzTC L4N7GgKSe8z5CVcterMJ+fDHblZ3FXZefciyJBeiFy3C3zj4aha+9z7du+ZK+21z eV5VEDGfUqv74IgVbDegvZN9qXQWXs55pxLZHrhA4ieYSrvexD36o0hC/441SM1p sMmG5ouwuiBJz5EJXlEEr4E19rPpcgjyJ3iNj5gK1de/ -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:58 2026 by rpki-client