This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa File: HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa (raw, json) Hash identifier: 4+WFRaf3quOrSbbOtWfgVn8XJoUmdVkEE73WEnPVAjI= Subject key identifier: 1E:85:6C:17:A9:50:A0:F2:74:84:3E:4E:5E:62:0A:B6:4B:D8:25:56 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019B7F136FF3E82849644744EDC3963CE544 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 188.72.40.0/24 maxlen: 24 188.72.41.0/24 maxlen: 24 188.72.45.0/24 maxlen: 24 188.72.46.0/24 maxlen: 24 188.72.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6f:f3:e8:28:49:64:47:44:ed:c3:96:3c:e5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e856c17a950a0f274843e4e5e620ab64bd82556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:5a:fe:48:6f:c9:6b:fa:c8:fc:73:35:1d: a5:04:52:e8:2f:8b:b8:36:c3:b8:63:a7:44:13:19: 6d:7a:86:8c:54:40:78:0d:9d:6a:a9:82:b6:7c:54: 01:36:4a:86:45:2e:bd:bc:54:2a:01:37:d7:b2:f1: 54:8e:67:99:23:3a:78:66:c7:6f:94:19:24:fe:88: 17:9c:44:91:5f:35:59:a6:44:58:ae:c6:40:b9:de: 24:89:f3:de:1f:b2:0a:06:e9:ed:fd:98:3c:58:50: 80:b1:df:fa:b3:a9:52:51:14:56:a8:4d:99:53:99: af:b7:0f:b0:0d:81:61:13:9e:f8:aa:b1:74:52:b6: 50:99:70:ae:e4:80:7a:4a:5d:35:f7:93:83:79:ac: 2d:9d:8e:3d:f7:b0:16:e7:e3:4c:6d:8a:52:ee:1a: 6d:3d:08:af:bc:4b:08:c5:9f:9a:8e:2f:11:b0:e3: 17:5e:5b:e1:74:71:08:bb:89:cc:53:45:f7:a6:4f: 3a:44:d1:e6:06:8c:15:1f:ff:b5:f6:bd:a1:8f:f0: 17:fd:fe:7e:64:97:93:89:fc:4b:a6:9c:71:ed:81: fb:23:bc:e2:fb:54:61:8b:ec:9f:9c:4f:ea:31:dc: 56:70:3b:7e:83:67:05:7a:b0:de:d6:67:db:8f:b4: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:6C:17:A9:50:A0:F2:74:84:3E:4E:5E:62:0A:B6:4B:D8:25:56 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/HoVsF6lQoPJ0hD5OXmIKtkvYJVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.40.0/23 188.72.45.0-188.72.46.255 188.72.49.0/24 Signature Algorithm: sha256WithRSAEncryption 86:78:e1:4b:52:24:0c:f9:67:95:28:ce:22:43:af:b8:31:c6: 22:94:87:5a:c8:46:06:bc:9d:b9:d6:e4:dc:2a:c5:0f:a9:a0: 37:25:5d:1d:42:3f:06:8c:20:19:d3:8b:12:e9:43:4d:aa:33: ec:af:c8:42:e8:de:2d:af:bc:bd:aa:2e:f7:67:d8:8a:68:2e: 5d:2b:21:c9:82:2f:f8:cf:11:c3:8b:95:11:01:21:40:57:57: 28:62:34:e8:ac:90:67:47:63:9e:bc:f6:39:03:46:60:42:09: 12:ac:30:66:99:c1:a0:18:4d:b6:d7:cb:e2:53:0a:95:26:94: 14:c0:11:06:5c:dd:83:fa:38:b8:71:9f:2b:bc:a1:63:b2:39: a0:52:86:37:8e:f9:5e:44:ea:d8:64:53:33:a2:33:f9:ad:c2: fd:07:c2:91:19:c8:0c:ac:2d:d7:b4:02:e2:c1:07:76:c8:31: 0a:4b:6d:e9:4f:09:02:df:6e:cd:ff:2c:ba:54:2a:ab:27:1a: 2c:d9:2d:9f:11:3c:0f:cc:21:f1:b7:5d:a1:00:a4:46:fc:66: c9:ca:7e:30:07:19:c0:5e:63:62:47:87:18:14:b1:4a:07:15: 64:39:d9:2a:c4:5f:29:3d:20:c1:5d:8a:0e:e2:80:5d:e8:22: 91:75:ac:c2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/E2/z6ChJZEdE7cOWPOVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTg1NmMxN2E5NTBhMGYyNzQ4NDNlNGU1ZTYyMGFiNjRiZDgyNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLZa/khvyWv6yPxzNR2lBFLoL4u4 NsO4Y6dEExlteoaMVEB4DZ1qqYK2fFQBNkqGRS69vFQqATfXsvFUjmeZIzp4Zsdv lBkk/ogXnESRXzVZpkRYrsZAud4kifPeH7IKBunt/Zg8WFCAsd/6s6lSURRWqE2Z U5mvtw+wDYFhE574qrF0UrZQmXCu5IB6Sl0195ODeawtnY4997AW5+NMbYpS7hpt PQivvEsIxZ+aji8RsOMXXlvhdHEIu4nMU0X3pk86RNHmBowVH/+19r2hj/AX/f5+ ZJeTifxLppxx7YH7I7zi+1Rhi+yfnE/qMdxWcDt+g2cFerDe1mfbj7TbhQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFB6FbBepUKDydIQ+Tl5iCrZL2CVWMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvSG9Wc0Y2bFFvUEowaEQ1T1htSUt0a3ZZSlZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBvEgoMAwD BAC8SC0DBAC8SC4DBAC8SDEwDQYJKoZIhvcNAQELBQADggEBAIZ44UtSJAz5Z5Uo ziJDr7gxxiKUh1rIRga8nbnW5NwqxQ+poDclXR1CPwaMIBnTixLpQ02qM+yvyELo 3i2vvL2qLvdn2IpoLl0rIcmCL/jPEcOLlREBIUBXVyhiNOiskGdHY5689jkDRmBC CRKsMGaZwaAYTbbXy+JTCpUmlBTAEQZc3YP6OLhxnyu8oWOyOaBShjeO+V5E6thk UzOiM/mtwv0HwpEZyAysLde0AuLBB3bIMQpLbelPCQLfbs3/LLpUKqsnGizZLZ8R PA/MIfG3XaEApEb8ZsnKfjAHGcBeY2JHhxgUsUoHFWQ52SrEXyk9IMFdig7igF3o IpF1rMI= -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client