This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/pX1sCsdBvOf1DYSG2Hc1Gk_UAhE.roa File: pX1sCsdBvOf1DYSG2Hc1Gk_UAhE.roa (raw, json) Hash identifier: OlL9IE16KIgOlg8PLo6l6wM/j0zMgy8iF5tK7N5oXY0= Subject key identifier: A5:7D:6C:0A:C7:41:BC:E7:F5:0D:84:86:D8:77:35:1A:4F:D4:02:11 Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af Certificate serial: 019B783515C7E8D768B8DE7C4159C07E5D3D Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/pX1sCsdBvOf1DYSG2Hc1Gk_UAhE.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210264 IP address blocks: 188.66.52.0/24 maxlen: 24 188.66.53.0/24 maxlen: 24 188.66.54.0/23 maxlen: 23 188.66.54.0/24 maxlen: 24 188.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:15:c7:e8:d7:68:b8:de:7c:41:59:c0:7e:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57d6c0ac741bce7f50d8486d877351a4fd40211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:1e:dd:82:72:59:36:b8:f3:80:c4:0f:d2: 61:a2:4f:1a:72:65:c7:61:ac:3a:ff:72:bf:bb:b2: 8d:97:d7:3a:ae:0b:b3:8d:c8:1c:c8:ff:73:33:f7: d0:d7:b8:c6:c4:fe:7c:0b:47:1c:24:9c:d3:a6:74: fd:0e:e2:09:f5:86:d3:89:73:65:c2:12:0e:88:a9: 4f:cc:d6:8a:a4:34:c2:b7:bb:64:7c:3d:63:c8:a0: 59:2f:e7:12:d8:b2:f1:bc:37:3c:d1:64:f5:6c:7d: 33:e6:e1:16:76:f3:e5:b0:7d:63:5d:14:20:57:d9: 0e:58:7b:d5:df:a9:f5:75:79:68:7e:1f:9b:d8:9d: 50:51:7f:08:73:48:f9:ad:54:d1:e8:fa:40:9a:7f: 25:69:2f:e7:c7:fa:83:13:a5:f3:eb:ee:5a:37:28: c5:86:d9:9b:d6:d9:1e:a4:2f:c5:57:eb:f9:b1:b7: 1d:22:e3:c6:dc:1d:f8:ab:68:db:97:21:ed:3f:d9: 60:07:dc:bc:53:41:da:55:5f:7f:43:e1:f9:3d:a8: 26:9f:68:70:1a:79:ab:8d:12:6d:e5:c1:c9:65:a7: f0:cd:6d:c9:a8:71:d1:71:f4:47:d3:c7:96:21:d7: 80:ed:6e:63:bd:d9:2f:75:87:1b:83:4e:2c:2e:32: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7D:6C:0A:C7:41:BC:E7:F5:0D:84:86:D8:77:35:1A:4F:D4:02:11 X509v3 Authority Key Identifier: keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/pX1sCsdBvOf1DYSG2Hc1Gk_UAhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.66.52.0/22 Signature Algorithm: sha256WithRSAEncryption 85:5e:b6:98:b9:1c:05:b0:60:07:63:82:67:ec:92:49:f7:fe: ea:16:5e:f3:40:55:26:0e:10:d4:01:fa:bd:22:d6:3e:ae:49: 2c:bd:86:52:e5:de:10:0f:65:d8:69:8e:0c:6c:48:35:e0:27: 06:ec:6d:63:21:0e:d7:74:d0:8c:47:44:b5:97:85:73:69:6a: 87:d0:ce:bb:75:91:6c:d8:f0:cf:73:6f:ae:0f:c2:ff:a1:5d: 5d:30:08:54:6d:ce:ec:c2:d1:d6:81:bf:88:24:bc:58:29:42: c8:e1:27:35:88:cd:51:88:ba:b2:f3:6b:eb:2c:33:f7:fe:f3: 2e:2e:3f:61:4d:a3:55:ef:5d:35:31:3e:2d:85:c6:9a:da:2f: 7a:8e:02:a9:7e:b1:e4:ac:cc:19:d9:f9:b4:83:fa:70:93:07: 19:59:7a:95:73:37:fb:4c:9a:6e:78:7c:30:04:67:f3:b1:ac: 33:4a:44:8b:36:f5:a3:e1:30:ed:7a:d7:37:f2:1c:3f:db:92: c9:ee:c4:77:9d:ff:65:ab:3e:af:62:a2:5d:92:c0:4f:31:f1: c1:ab:d5:f0:70:66:d8:68:1c:51:c2:b9:c3:8a:71:72:5a:0d: 56:5d:e4:e7:70:36:71:76:fe:72:69:8d:98:96:d0:3e:c7:90: 5c:71:c5:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRXH6NdouN58QVnAfl09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMTMxYzk0Mzk3N2VhMGE5M2VmY2VlY2QzNGQxZDVkMWNi MTgyYWYwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdkNmMwYWM3NDFiY2U3ZjUwZDg0ODZkODc3MzUxYTRmZDQwMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrIe3YJyWTa484DED9Jhok8acmXH Yaw6/3K/u7KNl9c6rguzjcgcyP9zM/fQ17jGxP58C0ccJJzTpnT9DuIJ9YbTiXNl whIOiKlPzNaKpDTCt7tkfD1jyKBZL+cS2LLxvDc80WT1bH0z5uEWdvPlsH1jXRQg V9kOWHvV36n1dXlofh+b2J1QUX8Ic0j5rVTR6PpAmn8laS/nx/qDE6Xz6+5aNyjF htmb1tkepC/FV+v5sbcdIuPG3B34q2jblyHtP9lgB9y8U0HaVV9/Q+H5Pagmn2hw GnmrjRJt5cHJZafwzW3JqHHRcfRH08eWIdeA7W5jvdkvdYcbg04sLjL5hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKV9bArHQbzn9Q2Ehth3NRpP1AIRMB8GA1UdIwQY MBaAFEATHJQ5d+oKk+/O7NNNHV0csYKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEt MmI2NDlkNWViYWYzLzEvcFgxc0NzZEJ2T2YxRFlTRzJIYzFHa19VQWhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEtMmI2NDlkNWViYWYz LzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEI0MA0G CSqGSIb3DQEBCwUAA4IBAQCFXraYuRwFsGAHY4Jn7JJJ9/7qFl7zQFUmDhDUAfq9 ItY+rkksvYZS5d4QD2XYaY4MbEg14CcG7G1jIQ7XdNCMR0S1l4VzaWqH0M67dZFs 2PDPc2+uD8L/oV1dMAhUbc7swtHWgb+IJLxYKULI4Sc1iM1RiLqy82vrLDP3/vMu Lj9hTaNV7101MT4thcaa2i96jgKpfrHkrMwZ2fm0g/pwkwcZWXqVczf7TJpueHww BGfzsawzSkSLNvWj4TDtetc38hw/25LJ7sR3nf9lqz6vYqJdksBPMfHBq9XwcGbY aBxRwrnDinFyWg1WXeTncDZxdv5yaY2YltA+x5BcccWm -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:38 2026 by rpki-client