This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/cCcoJczTWU7z14x2e422NZsz480.roa File: cCcoJczTWU7z14x2e422NZsz480.roa (raw, json) Hash identifier: bBa0oWEppS8B1jHvMKDUcr46ilH8W6XeewKjKspDnPQ= Subject key identifier: 70:27:28:25:CC:D3:59:4E:F3:D7:8C:76:7B:8D:B6:35:9B:33:E3:CD Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80C05B0B4B4416E93F5A2BDA0D1BC8 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/cCcoJczTWU7z14x2e422NZsz480.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60441 IP address blocks: 95.169.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c0:5b:0b:4b:44:16:e9:3f:5a:2b:da:0d:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70272825ccd3594ef3d78c767b8db6359b33e3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:44:fd:79:38:c8:0a:7e:a8:26:31:ee:99: 95:40:8f:d6:dd:f9:27:b3:14:13:25:db:0f:48:08: 9c:ed:75:cb:aa:df:5e:71:78:58:41:c2:32:36:f4: d0:bc:ba:f3:a3:96:9e:23:bf:8e:5f:96:66:43:fe: d2:e8:80:73:e1:8d:3d:01:c4:91:57:49:e4:ea:cd: f3:d5:d6:6e:31:05:40:a3:c1:09:77:70:70:3c:8d: ab:a2:3a:fd:e6:54:51:1d:0f:c3:e4:45:40:3b:7c: 35:ff:e1:d5:02:1b:9a:0a:49:b4:72:70:18:09:61: 44:73:35:ce:83:1f:5f:93:d0:75:6e:32:50:cf:3c: 05:32:fd:0e:db:92:11:0a:7b:4a:87:f5:6d:7a:25: cc:a7:a9:ca:66:4c:7c:80:e8:e7:fd:39:75:af:f8: 20:23:dc:98:d6:c0:d9:f3:a0:db:92:f7:82:8e:1c: 24:92:cd:50:86:ba:7d:f7:28:20:2e:e5:89:ae:a1: ab:68:51:ec:c1:5f:0b:d5:8b:e0:b5:e3:89:a0:25: b2:80:97:06:f4:0c:bc:58:84:e7:5e:6b:6a:dd:80: 02:97:cd:cf:27:49:be:e3:4d:3c:a1:eb:dd:1c:2b: b3:50:c0:64:a0:4a:49:b2:5a:a1:49:fe:65:2c:9e: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:28:25:CC:D3:59:4E:F3:D7:8C:76:7B:8D:B6:35:9B:33:E3:CD X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/cCcoJczTWU7z14x2e422NZsz480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.208.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7a:88:6d:0b:24:d8:8c:96:6b:5e:20:39:11:22:32:24:5a: 59:a0:4f:dc:c2:4c:17:20:63:c3:5d:5c:2e:5b:90:a8:43:ec: 30:5c:ad:b9:9c:f5:94:d9:0a:ba:a7:f8:94:62:f4:eb:fd:e3: 91:fa:9a:57:9f:24:a4:00:6a:59:a4:2f:03:af:a9:01:f2:c9: ec:25:46:24:43:be:62:95:6f:1e:f4:fe:b2:82:8a:6f:69:c2: 50:81:72:e7:b0:5d:c5:03:b0:5e:38:9b:d6:53:0d:5b:0f:b0: d6:51:a3:d5:b2:ed:d7:9d:61:c4:62:67:59:32:83:82:78:39: 3c:28:1f:07:d6:56:43:20:c1:18:82:90:ea:94:f4:1c:c8:dc: 6f:7b:30:c6:69:8b:d1:36:aa:60:da:aa:fe:f8:06:67:51:a7: 6d:13:2f:7f:d8:0b:15:ee:d6:da:5c:09:fb:cf:f9:fa:36:93: 0b:b4:84:69:05:a2:e9:98:e7:23:68:56:7f:4b:48:fd:44:5d: 53:52:7f:53:bb:ad:a3:78:ba:52:b2:90:a7:e9:3e:10:da:62: c7:ca:67:e8:a3:1f:d2:18:bf:51:d8:9c:01:da:b3:87:de:e9: 0c:9e:b9:e3:af:d2:0e:34:0c:ee:9a:2f:29:27:b6:e8:0f:43: 72:2f:fe:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMBbC0tEFuk/WivaDRvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI3MjgyNWNjZDM1OTRlZjNkNzhjNzY3YjhkYjYzNTliMzNlM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ9E/Xk4yAp+qCYx7pmVQI/W3fkn sxQTJdsPSAic7XXLqt9ecXhYQcIyNvTQvLrzo5aeI7+OX5ZmQ/7S6IBz4Y09AcSR V0nk6s3z1dZuMQVAo8EJd3BwPI2rojr95lRRHQ/D5EVAO3w1/+HVAhuaCkm0cnAY CWFEczXOgx9fk9B1bjJQzzwFMv0O25IRCntKh/VteiXMp6nKZkx8gOjn/Tl1r/gg I9yY1sDZ86DbkveCjhwkks1Qhrp99yggLuWJrqGraFHswV8L1YvgteOJoCWygJcG 9Ay8WITnXmtq3YACl83PJ0m+4008oevdHCuzUMBkoEpJslqhSf5lLJ5QRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAnKCXM01lO89eMdnuNtjWbM+PNMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvY0Njb0pjelRXVTd6MTR4MmU0MjJOWnN6NDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6nQMA0G CSqGSIb3DQEBCwUAA4IBAQAreohtCyTYjJZrXiA5ESIyJFpZoE/cwkwXIGPDXVwu W5CoQ+wwXK25nPWU2Qq6p/iUYvTr/eOR+ppXnySkAGpZpC8Dr6kB8snsJUYkQ75i lW8e9P6ygopvacJQgXLnsF3FA7BeOJvWUw1bD7DWUaPVsu3XnWHEYmdZMoOCeDk8 KB8H1lZDIMEYgpDqlPQcyNxvezDGaYvRNqpg2qr++AZnUadtEy9/2AsV7tbaXAn7 z/n6NpMLtIRpBaLpmOcjaFZ/S0j9RF1TUn9Tu62jeLpSspCn6T4Q2mLHymfoox/S GL9R2JwB2rOH3ukMnrnjr9IONAzumi8pJ7boD0NyL/6g -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:16 2026 by rpki-client