This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CCU2A6XfVvXnlEdEV21pQ5LswZo.roa File: CCU2A6XfVvXnlEdEV21pQ5LswZo.roa (raw, json) Hash identifier: ipRreHAI+PzyZocIM3Ro4ufJ8jnmEduzX5XTSzafOfE= Subject key identifier: 08:25:36:03:A5:DF:56:F5:E7:94:47:44:57:6D:69:43:92:EC:C1:9A Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019C282491F9B482058851D84DCB80AD7398 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CCU2A6XfVvXnlEdEV21pQ5LswZo.roa Signing time: Wed 04 Feb 2026 10:13:31 +0000 ROA not before: Wed 04 Feb 2026 10:13:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 185.218.20.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:24:91:f9:b4:82:05:88:51:d8:4d:cb:80:ad:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Feb 4 10:13:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08253603a5df56f5e7944744576d694392ecc19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:52:07:b9:97:51:89:57:ff:18:6f:c2:65: b8:c6:17:04:5e:40:86:2a:cc:d1:f1:e7:e0:10:96: fd:4e:95:49:32:f8:cc:65:86:b3:27:03:e3:0f:73: fb:db:a5:86:b3:33:0a:77:c0:64:bb:f6:38:1a:11: b8:fd:cd:0a:0f:89:82:9f:c1:49:85:c3:e8:e3:75: 9d:8a:2a:82:c8:a3:2a:84:17:6e:4a:7a:11:c5:06: 9b:76:e9:90:78:eb:c5:5f:8e:cd:43:60:13:70:14: b7:e3:aa:8d:f1:c8:bf:eb:ff:6b:56:3e:aa:8b:ad: 1d:0e:b1:40:ce:81:62:af:5e:5b:6e:b3:23:03:b6: 06:32:05:d7:01:7d:93:b3:df:9f:6d:43:b4:94:93: 47:83:36:f1:cf:46:ec:3e:73:e9:60:75:1e:ca:68: 46:9f:3c:5b:06:49:a3:ef:65:9c:0b:6a:1d:92:f8: c0:ba:30:96:13:56:74:36:39:1f:c6:bf:da:10:59: 40:34:ea:40:13:7a:57:d8:5c:71:db:32:34:11:c1: 0f:e9:f8:48:e5:5e:d7:8c:5a:24:83:5e:22:4b:b2: 3e:e5:88:d6:14:5e:62:88:6b:db:a8:d5:71:e5:3c: 25:7f:91:d5:0b:31:04:a7:ee:d6:69:0e:85:ca:0d: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:36:03:A5:DF:56:F5:E7:94:47:44:57:6D:69:43:92:EC:C1:9A X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CCU2A6XfVvXnlEdEV21pQ5LswZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.20.0/24 185.223.155.0/24 Signature Algorithm: sha256WithRSAEncryption 24:8f:87:0e:0f:98:f6:55:ca:2b:0d:0e:5b:a7:98:58:bf:46: 0c:29:d4:9e:2f:5c:58:71:e5:63:36:a4:87:34:da:2c:9d:4f: f7:21:d4:71:37:b3:01:42:d1:d1:e3:01:96:3f:d4:21:df:13: a9:2a:8b:e7:d5:eb:7a:95:4e:1c:f5:9b:a4:d3:df:86:b0:9a: 00:0c:90:b0:5b:4a:41:75:6f:72:95:9e:94:45:b6:3e:8b:b3: f5:88:56:b6:1e:72:83:8c:0b:23:e8:94:a1:17:ea:c1:e3:88: ba:79:63:49:d5:f0:4c:f7:74:3c:db:ce:61:a9:d1:bb:34:a5: 8f:4b:10:8e:b6:e9:4e:f7:74:e2:82:90:a0:78:a7:b1:76:44: 03:2f:4c:c5:c1:e1:74:a3:89:42:ce:f5:e2:83:de:ac:78:1f: 3a:3d:7e:3e:72:db:92:76:c8:96:50:01:d6:5e:57:9f:d4:49: 98:67:92:ef:5a:31:e2:98:15:d2:0b:a8:20:70:32:37:6d:e1: b9:e8:8c:6d:17:f4:89:50:59:6f:ae:ec:e2:79:a9:1a:39:4a: 24:9b:f6:c6:2a:0d:f0:11:b3:a8:e4:4c:ee:4f:88:35:34:93: 31:c5:1b:d8:f9:8f:3e:df:93:2c:ea:79:da:d5:29:83:a6:31: 9e:0a:5c:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwoJJH5tIIFiFHYTcuArXOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMjA0MTAxMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODI1MzYwM2E1ZGY1NmY1ZTc5NDQ3NDQ1NzZkNjk0MzkyZWNjMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DJSB7mXUYlX/xhvwmW4xhcEXkCG KszR8efgEJb9TpVJMvjMZYazJwPjD3P726WGszMKd8Bku/Y4GhG4/c0KD4mCn8FJ hcPo43WdiiqCyKMqhBduSnoRxQabdumQeOvFX47NQ2ATcBS346qN8ci/6/9rVj6q i60dDrFAzoFir15bbrMjA7YGMgXXAX2Ts9+fbUO0lJNHgzbxz0bsPnPpYHUeymhG nzxbBkmj72WcC2odkvjAujCWE1Z0Njkfxr/aEFlANOpAE3pX2Fxx2zI0EcEP6fhI 5V7XjFokg14iS7I+5YjWFF5iiGvbqNVx5Twlf5HVCzEEp+7WaQ6Fyg0wXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAglNgOl31b155RHRFdtaUOS7MGaMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQ0NVMkE2WGZWdlhubEVkRVYyMXBRNUxzd1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudoUAwQA ud+bMA0GCSqGSIb3DQEBCwUAA4IBAQAkj4cOD5j2VcorDQ5bp5hYv0YMKdSeL1xY ceVjNqSHNNosnU/3IdRxN7MBQtHR4wGWP9Qh3xOpKovn1et6lU4c9Zuk09+GsJoA DJCwW0pBdW9ylZ6URbY+i7P1iFa2HnKDjAsj6JShF+rB44i6eWNJ1fBM93Q8285h qdG7NKWPSxCOtulO93TigpCgeKexdkQDL0zFweF0o4lCzvXig96seB86PX4+ctuS dsiWUAHWXlef1EmYZ5LvWjHimBXSC6ggcDI3beG56IxtF/SJUFlvruzieakaOUok m/bGKg3wEbOo5EzuT4g1NJMxxRvY+Y8+35Ms6nna1SmDpjGeClzV -----END CERTIFICATE-----Generated at Thu Feb 5 02:34:58 2026 by rpki-client