This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/cP554_mw0i_-2i5ondqs4ybL7Sk.roa File: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (raw, json) Hash identifier: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A= Subject key identifier: 70:FE:79:E3:F9:B0:D2:2F:FE:DA:2E:68:9D:DA:AC:E3:26:CB:ED:29 Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac Certificate serial: 019B7834B8CA9110005A0CC391F2C10B5061 Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/cP554_mw0i_-2i5ondqs4ybL7Sk.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 188.208.143.0/24 maxlen: 24 188.241.60.0/24 maxlen: 24 188.241.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b8:ca:91:10:00:5a:0c:c3:91:f2:c1:0b:50:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70fe79e3f9b0d22ffeda2e689ddaace326cbed29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:45:d9:e0:d5:a8:5a:8d:a1:9b:88:bf:f5: 8e:f8:1b:c2:15:f7:c4:4e:a3:ea:b8:4d:de:e5:9f: 8a:69:2e:c2:2d:40:a4:dc:49:3b:04:b8:9e:e6:df: 49:8c:1f:70:44:52:f7:46:ed:b2:50:0f:15:7b:d8: c9:ed:6c:ba:95:9b:f8:32:c3:b4:93:8e:9f:bb:e4: 47:a7:28:e4:0e:2d:ec:24:89:05:b8:bb:a3:28:e3: 26:10:af:9a:fa:39:b0:ef:ab:bd:05:e7:9c:2a:7a: 9b:9e:c6:2a:fe:66:65:06:49:29:4e:91:d7:e5:ed: 8f:8d:11:6d:5c:6d:88:73:e4:fe:11:ac:7e:b1:13: 48:3e:fd:7a:0d:b0:3f:4f:0e:8b:46:3c:e7:37:27: 74:06:1b:68:7a:1a:12:ab:34:20:4a:2c:3e:0b:64: 43:aa:95:34:ca:c7:2f:5b:ac:ed:d3:9e:54:75:57: c9:72:8c:79:62:3b:16:27:38:c5:6d:4c:3e:4c:d3: c8:46:fe:66:df:82:45:49:f1:a2:f8:9e:c0:63:fe: c5:c2:55:f7:79:05:69:c5:5c:03:e9:4f:bc:7a:fe: 75:b4:c7:25:91:5d:a0:c5:9b:d6:9d:93:a0:9d:95: a1:88:c4:ab:66:a5:da:b8:ae:4c:e9:f6:62:80:8d: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:79:E3:F9:B0:D2:2F:FE:DA:2E:68:9D:DA:AC:E3:26:CB:ED:29 X509v3 Authority Key Identifier: keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/cP554_mw0i_-2i5ondqs4ybL7Sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.208.143.0/24 188.241.60.0/23 Signature Algorithm: sha256WithRSAEncryption 81:04:44:fa:fe:c7:f0:ec:ba:7d:e9:91:51:f8:fb:03:bd:ee: ec:23:3c:4a:ee:cf:80:26:84:b4:18:a5:2a:fa:76:83:be:87: ea:67:88:d8:4a:ae:8d:2f:66:ff:3f:95:e1:bb:41:4f:08:80: 0c:e3:33:9f:df:2f:d1:a0:91:ff:93:a5:1f:f3:6a:0b:1d:e9: 3e:f8:0b:95:9d:91:80:28:9a:02:ff:57:2f:66:a9:1e:bc:1d: a2:8c:ef:c3:8d:3e:7f:8a:21:42:21:7f:3d:f7:05:e6:34:de: 9e:7c:f0:41:ae:81:52:4c:fc:ea:34:0d:65:a0:46:a1:d0:87: eb:3d:0f:3e:f2:d9:cb:39:13:0d:a7:3c:a9:a9:f2:58:80:fb: e9:68:5e:b3:54:2f:ca:01:39:19:bd:36:fc:7f:fd:f2:2f:96: 66:0a:8a:59:dd:9e:59:d1:ec:b4:f5:67:dc:13:a6:ff:00:a0: 48:56:56:ba:3d:0e:3a:21:ba:e1:a5:e9:b1:29:f1:b9:57:00: f8:4e:8c:f9:7f:7e:8a:76:d7:d3:ec:52:7f:36:4d:ac:d6:5b: 7c:e9:49:b4:60:ae:d9:bd:f7:10:8e:9d:d8:02:6c:7f:60:70: 15:cd:55:cc:36:4f:24:c4:ec:6b:28:12:cd:64:79:6d:3a:05: 36:43:56:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NLjKkRAAWgzDkfLBC1BhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk MTdiYWMwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGZlNzllM2Y5YjBkMjJmZmVkYTJlNjg5ZGRhYWNlMzI2Y2JlZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo9F2eDVqFqNoZuIv/WO+BvCFffE TqPquE3e5Z+KaS7CLUCk3Ek7BLie5t9JjB9wRFL3Ru2yUA8Ve9jJ7Wy6lZv4MsO0 k46fu+RHpyjkDi3sJIkFuLujKOMmEK+a+jmw76u9BeecKnqbnsYq/mZlBkkpTpHX 5e2PjRFtXG2Ic+T+Eax+sRNIPv16DbA/Tw6LRjznNyd0BhtoehoSqzQgSiw+C2RD qpU0yscvW6zt055UdVfJcox5YjsWJzjFbUw+TNPIRv5m34JFSfGi+J7AY/7FwlX3 eQVpxVwD6U+8ev51tMclkV2gxZvWnZOgnZWhiMSrZqXauK5M6fZigI1a+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHD+eeP5sNIv/touaJ3arOMmy+0pMB8GA1UdIwQY MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt N2Y0MzViZjU1MDFjLzEvY1A1NTRfbXcwaV8tMmk1b25kcXM0eWJMN1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvNCPAwQB vPE8MA0GCSqGSIb3DQEBCwUAA4IBAQCBBET6/sfw7Lp96ZFR+PsDve7sIzxK7s+A JoS0GKUq+naDvofqZ4jYSq6NL2b/P5Xhu0FPCIAM4zOf3y/RoJH/k6Uf82oLHek+ +AuVnZGAKJoC/1cvZqkevB2ijO/DjT5/iiFCIX899wXmNN6efPBBroFSTPzqNA1l oEah0IfrPQ8+8tnLORMNpzypqfJYgPvpaF6zVC/KATkZvTb8f/3yL5ZmCopZ3Z5Z 0ey09WfcE6b/AKBIVla6PQ46IbrhpemxKfG5VwD4Toz5f36KdtfT7FJ/Nk2s1lt8 6Um0YK7ZvfcQjp3YAmx/YHAVzVXMNk8kxOxrKBLNZHltOgU2Q1YR -----END CERTIFICATE-----Generated at Sun Jan 18 10:46:40 2026 by rpki-client