This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/NEgKW_finEZme1CsPFfQq7C_nGU.roa File: NEgKW_finEZme1CsPFfQq7C_nGU.roa (raw, json) Hash identifier: J4C2irFO5IM5E9DO1XtuKYl7eUu9IpW0Z/KaKK+AdyQ= Subject key identifier: 34:48:0A:5B:F7:E2:9C:46:66:7B:50:AC:3C:57:D0:AB:B0:BF:9C:65 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019BFA224D18921B3876E631C9449D918E90 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/NEgKW_finEZme1CsPFfQq7C_nGU.roa Signing time: Mon 26 Jan 2026 11:48:30 +0000 ROA not before: Mon 26 Jan 2026 11:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210016 IP address blocks: 188.72.9.0/24 maxlen: 24 188.72.10.0/24 maxlen: 24 188.72.11.0/24 maxlen: 24 188.72.13.0/24 maxlen: 24 188.72.14.0/24 maxlen: 24 188.72.23.0/24 maxlen: 24 188.72.24.0/24 maxlen: 24 188.72.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:22:4d:18:92:1b:38:76:e6:31:c9:44:9d:91:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jan 26 11:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34480a5bf7e29c46667b50ac3c57d0abb0bf9c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c7:6d:68:7e:2d:d2:ba:62:ef:a0:13:73:ea: 03:d1:9e:b2:ae:3a:0b:59:26:02:f9:6f:46:93:fb: 29:7f:ba:c8:8f:42:2b:62:26:c3:5f:c8:c4:9c:0d: c3:0d:36:fa:21:b2:03:a2:f2:79:1f:57:20:0e:25: f8:d7:22:2d:33:44:17:16:62:0d:a5:fc:9b:f5:35: de:d3:db:d2:e1:c5:47:de:84:dd:c2:5d:06:2e:08: a7:6e:ab:19:fd:fe:3f:54:10:4a:82:b4:4f:b7:5c: dc:90:c9:8d:43:72:ea:aa:52:0a:ab:89:cc:5e:a3: e2:ad:d9:66:6e:3d:10:8b:7b:b7:a6:aa:da:e5:30: 90:f6:ef:56:99:93:cf:1a:0d:52:f2:67:0a:ef:43: c1:ba:48:46:6f:d6:8e:c3:08:e1:64:82:c4:fe:fa: 6a:03:5d:7e:13:09:60:11:f1:ad:85:01:eb:17:0a: 89:fd:69:a6:5e:f9:db:7e:4b:d6:af:56:b2:56:b0: f7:85:cc:10:ae:39:8e:17:c7:bb:3f:cb:19:cb:2a: 8f:3a:8e:12:6d:d4:9b:a4:cd:cf:59:18:e7:8e:3e: 42:54:69:1d:66:37:22:8d:f5:76:f3:93:23:c9:eb: 1d:9a:5d:52:6e:f6:54:59:c1:b8:a2:b4:ba:4b:8f: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:48:0A:5B:F7:E2:9C:46:66:7B:50:AC:3C:57:D0:AB:B0:BF:9C:65 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/NEgKW_finEZme1CsPFfQq7C_nGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.9.0-188.72.11.255 188.72.13.0-188.72.14.255 188.72.23.0-188.72.24.255 188.72.35.0/24 Signature Algorithm: sha256WithRSAEncryption 88:56:ef:9b:2b:12:04:b2:7a:6f:82:b6:b2:8d:38:db:f4:5d: ec:2a:40:16:8f:da:a3:a9:86:a7:0b:e7:81:13:5c:40:ff:8a: 22:e1:83:55:6b:95:4b:37:0e:bb:e1:22:0a:63:0d:99:7d:2a: 3e:58:b1:7d:ee:18:b8:b4:42:18:f1:8c:c9:e5:b3:0e:3a:8c: 66:fb:e8:b0:c0:a7:ef:69:d1:15:19:a7:8c:10:21:c8:dd:c2: 6c:09:22:7f:68:0b:39:2e:96:51:61:fd:f2:e8:91:0d:2e:e2: 99:b2:ba:13:b3:47:c0:9a:e5:76:02:3d:82:5a:a9:cb:3b:ee: 8c:e2:4f:9d:56:a8:c3:bb:c6:ae:67:72:a7:45:7d:65:8e:93: cc:f6:73:c4:f4:01:02:65:dc:17:c6:0f:81:34:ec:b5:6f:81: f2:26:1a:75:7a:dd:14:9c:8f:5a:57:81:04:8c:54:0b:32:b1: 01:62:5e:9e:41:25:ab:ac:93:0c:b3:a8:6d:9b:76:33:bc:d0: 3b:eb:df:36:66:7a:54:2c:a1:05:8c:94:e9:cc:55:77:70:10: 16:25:2b:fc:10:1e:ed:04:b4:26:56:c5:76:7a:54:f8:50:5a: 13:cd:b7:a4:d0:07:be:7a:ca:04:d8:77:4d:4e:5c:8d:44:0c: fa:0e:9d:f0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZv6Ik0Ykhs4duYxyUSdkY6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjYwMTI2MTE0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDQ4MGE1YmY3ZTI5YzQ2NjY3YjUwYWMzYzU3ZDBhYmIwYmY5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cdtaH4t0rpi76ATc+oD0Z6yrjoL WSYC+W9Gk/spf7rIj0IrYibDX8jEnA3DDTb6IbIDovJ5H1cgDiX41yItM0QXFmIN pfyb9TXe09vS4cVH3oTdwl0GLginbqsZ/f4/VBBKgrRPt1zckMmNQ3LqqlIKq4nM XqPirdlmbj0Qi3u3pqra5TCQ9u9WmZPPGg1S8mcK70PBukhGb9aOwwjhZILE/vpq A11+EwlgEfGthQHrFwqJ/WmmXvnbfkvWr1ayVrD3hcwQrjmOF8e7P8sZyyqPOo4S bdSbpM3PWRjnjj5CVGkdZjcijfV285Mjyesdml1SbvZUWcG4orS6S4/izwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDRIClv34pxGZntQrDxX0Kuwv5xlMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvTkVnS1dfZmluRVptZTFDc1BGZlFxN0NfbkdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAC8SAkD BAK8SAgwDAMEALxIDQMEALxIDjAMAwQAvEgXAwQAvEgYAwQAvEgjMA0GCSqGSIb3 DQEBCwUAA4IBAQCIVu+bKxIEsnpvgrayjTjb9F3sKkAWj9qjqYanC+eBE1xA/4oi 4YNVa5VLNw674SIKYw2ZfSo+WLF97hi4tEIY8YzJ5bMOOoxm++iwwKfvadEVGaeM ECHI3cJsCSJ/aAs5LpZRYf3y6JENLuKZsroTs0fAmuV2Aj2CWqnLO+6M4k+dVqjD u8auZ3KnRX1ljpPM9nPE9AECZdwXxg+BNOy1b4HyJhp1et0UnI9aV4EEjFQLMrEB Yl6eQSWrrJMMs6htm3YzvNA76982ZnpULKEFjJTpzFV3cBAWJSv8EB7tBLQmVsV2 elT4UFoTzbek0Ae+esoE2HdNTlyNRAz6Dp3w -----END CERTIFICATE-----Generated at Thu Jan 29 03:11:14 2026 by rpki-client