This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/DOB4w0PiblQ1hPPcpPtCJ0ylFtA.roa File: DOB4w0PiblQ1hPPcpPtCJ0ylFtA.roa (raw, json) Hash identifier: J3gVLaQ8T+JyfVDMvVNSI4YmA17e8VToyVnvtp/xyK4= Subject key identifier: 0C:E0:78:C3:43:E2:6E:54:35:84:F3:DC:A4:FB:42:27:4C:A5:16:D0 Certificate issuer: /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c Certificate serial: 019B7A5B88D60A553E3F9CB52A71607773D4 Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/DOB4w0PiblQ1hPPcpPtCJ0ylFtA.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205891 IP address blocks: 5.182.68.0/22 maxlen: 22 185.55.212.0/22 maxlen: 22 2a02:4e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:d6:0a:55:3e:3f:9c:b5:2a:71:60:77:73:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce078c343e26e543584f3dca4fb42274ca516d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:20:97:ec:ec:01:28:ba:95:08:a9:92:9f: da:cf:29:f5:fb:59:cb:e4:c4:68:39:5c:81:46:93: b6:e5:97:2a:6f:89:be:ee:ee:6c:42:25:21:82:bc: 44:7c:18:1c:d8:8b:22:67:0e:ed:b2:be:b0:7c:79: cc:e8:c4:d0:1f:e1:7f:a1:3a:5c:12:59:cb:db:d5: 85:2c:37:de:b1:a9:58:a2:77:de:f5:7a:d3:f4:40: ba:ed:29:13:90:57:07:51:4a:86:9e:79:4e:f3:d2: 45:f2:b8:dc:fc:9e:ff:a1:a8:16:d6:f2:8f:68:1f: c9:07:3d:88:d5:ce:3c:a3:ba:7b:23:c0:2f:98:28: 16:f7:39:47:e3:dd:44:0d:55:01:37:e2:00:de:66: e4:23:7b:7b:a0:01:53:6e:23:c0:3a:ee:f3:48:cf: 7d:d0:6b:b6:5d:dd:17:66:6e:67:d8:dd:f6:54:65: bc:f3:a5:36:97:19:95:bf:a3:72:50:61:18:05:ae: e2:13:75:c4:99:b7:37:92:91:17:db:59:1b:3e:2d: de:0a:12:9b:23:b1:4a:53:ed:f8:5a:21:70:9c:a6: 6b:14:cc:2c:fe:e6:e4:b4:bb:0c:a8:26:ab:8f:c8: 37:d7:36:5e:f9:fc:57:f7:25:7c:76:b3:14:33:e0: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:78:C3:43:E2:6E:54:35:84:F3:DC:A4:FB:42:27:4C:A5:16:D0 X509v3 Authority Key Identifier: keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/DOB4w0PiblQ1hPPcpPtCJ0ylFtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.68.0/22 185.55.212.0/22 IPv6: 2a02:4e20::/32 Signature Algorithm: sha256WithRSAEncryption b5:38:d7:7e:60:ec:87:78:8c:10:a7:b6:0f:b2:0d:74:cc:1d: 15:45:3f:1c:f0:ae:20:2e:2b:03:e3:a3:65:b9:4b:75:6b:78: 8d:eb:65:1d:31:7b:b6:89:07:13:fe:20:60:35:3c:33:08:1c: 70:9b:3f:f9:98:93:22:96:19:af:59:f3:12:89:7f:14:8d:c7: 08:91:d0:66:a2:f0:1c:ab:21:69:95:49:d3:81:15:98:ec:dd: f6:d3:db:78:14:6c:d7:a4:f1:6c:8b:58:23:db:bf:65:03:20: 27:59:64:47:65:b1:c7:75:2c:8b:32:18:5b:54:6b:b3:c9:7c: e0:60:30:7e:16:ef:52:7c:73:7c:eb:55:df:43:e0:81:28:84: b8:d9:de:5d:12:9b:a7:00:dd:e8:20:b2:fa:92:fd:d0:dd:80: c1:d5:f4:0e:b3:19:d0:8b:3f:ab:80:72:96:fc:77:90:e4:6a: c7:39:51:8b:6e:1e:12:ba:dc:1d:1d:06:dd:fb:ce:9b:56:f5: 2e:3e:f8:95:6e:d7:cf:15:e8:e3:1e:5f:3f:0d:71:33:5d:fd: 75:4d:2e:0a:3d:61:03:44:a3:28:02:42:a1:2d:81:c4:98:9c: a7:2a:d2:bc:d4:50:6b:77:9e:17:1b:c4:83:95:8a:8c:ec:cf: 00:7d:df:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W4jWClU+P5y1KnFgd3PUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTMwYmEwZWNjNmU2OTE4OTQ2MzU2MWQ0ZWE1NGMyM2Qx MzhmM2MwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2UwNzhjMzQzZTI2ZTU0MzU4NGYzZGNhNGZiNDIyNzRjYTUxNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWogl+zsASi6lQipkp/azyn1+1nL 5MRoOVyBRpO25Zcqb4m+7u5sQiUhgrxEfBgc2IsiZw7tsr6wfHnM6MTQH+F/oTpc ElnL29WFLDfesalYonfe9XrT9EC67SkTkFcHUUqGnnlO89JF8rjc/J7/oagW1vKP aB/JBz2I1c48o7p7I8AvmCgW9zlH491EDVUBN+IA3mbkI3t7oAFTbiPAOu7zSM99 0Gu2Xd0XZm5n2N32VGW886U2lxmVv6NyUGEYBa7iE3XEmbc3kpEX21kbPi3eChKb I7FKU+34WiFwnKZrFMws/ubktLsMqCarj8g31zZe+fxX9yV8drMUM+A80wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAzgeMND4m5UNYTz3KT7QidMpRbQMB8GA1UdIwQY MBaAFFXjC6DsxuaRiUY1YdTqVMI9E488MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgt ZjgxYWM1NmNjM2RjLzEvRE9CNHcwUGlibFExaFBQY3BQdENKMHlsRnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgtZjgxYWM1NmNjM2Rj LzEvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBbZEAwQC uTfUMA0EAgACMAcDBQAqAk4gMA0GCSqGSIb3DQEBCwUAA4IBAQC1ONd+YOyHeIwQ p7YPsg10zB0VRT8c8K4gLisD46NluUt1a3iN62UdMXu2iQcT/iBgNTwzCBxwmz/5 mJMilhmvWfMSiX8UjccIkdBmovAcqyFplUnTgRWY7N3209t4FGzXpPFsi1gj279l AyAnWWRHZbHHdSyLMhhbVGuzyXzgYDB+Fu9SfHN861XfQ+CBKIS42d5dEpunAN3o ILL6kv3Q3YDB1fQOsxnQiz+rgHKW/HeQ5GrHOVGLbh4SutwdHQbd+86bVvUuPviV btfPFejjHl8/DXEzXf11TS4KPWEDRKMoAkKhLYHEmJynKtK81FBrd54XG8SDlYqM 7M8Afd/c -----END CERTIFICATE-----Generated at Tue Feb 10 04:50:18 2026 by rpki-client