This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/55_ifAwTrqSRB0aOLB49nTVctSI.roa File: 55_ifAwTrqSRB0aOLB49nTVctSI.roa (raw, json) Hash identifier: 4G0y1MW280JpB4GB7lc4Qiad6u1T/uOmjGofSaEn2fo= Subject key identifier: E7:9F:E2:7C:0C:13:AE:A4:91:07:46:8E:2C:1E:3D:9D:35:5C:B5:22 Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Certificate serial: 019B79EC3B4DB324D253C7FE686D5040C900 Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/55_ifAwTrqSRB0aOLB49nTVctSI.roa Signing time: Thu 01 Jan 2026 14:18:03 +0000 ROA not before: Thu 01 Jan 2026 14:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203556 IP address blocks: 185.130.180.0/22 maxlen: 22 185.130.180.0/24 maxlen: 24 185.130.181.0/24 maxlen: 24 185.130.182.0/24 maxlen: 24 185.130.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3b:4d:b3:24:d2:53:c7:fe:68:6d:50:40:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e79fe27c0c13aea49107468e2c1e3d9d355cb522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:14:34:6d:bb:15:fa:b0:38:62:69:eb:15: 4f:90:be:33:55:80:f0:46:25:39:35:72:95:94:71: 9e:fd:34:0a:ad:8e:de:c1:44:c7:39:b6:f1:bb:ac: 37:12:7f:9a:37:11:4e:a3:4a:fd:63:57:bc:34:f2: 20:83:52:d2:de:33:0e:d2:a5:63:c4:6e:74:8b:83: a8:7d:04:9b:93:79:ba:f0:47:35:78:39:6d:4c:3d: cd:82:53:fc:36:fa:5f:34:33:66:3e:2e:cd:14:9b: f1:0d:83:a7:74:09:61:02:63:2b:3f:ab:80:61:b6: 8d:35:50:31:d6:ab:3c:68:d0:bb:9b:63:f3:65:a8: c4:ee:2a:de:4f:56:c6:fd:98:d3:5a:96:6a:b6:81: 2c:97:70:11:ad:7c:bf:c0:e6:60:b7:2e:9a:08:c0: 28:a5:14:5a:7c:63:ac:6f:8a:94:25:61:89:5e:a0: 0b:a6:53:2b:04:36:e1:94:dc:3e:6c:56:74:f6:d1: 36:e1:ec:4e:eb:80:b2:dd:da:c6:c7:0a:84:5b:f4: 1c:fe:df:76:e4:c8:0f:97:3f:1a:6d:5d:61:f9:84: 47:3e:4e:e4:f4:a9:86:dd:5c:af:5e:49:3e:18:6c: c2:3d:a2:d1:d2:59:ae:31:98:c9:77:9f:84:7e:34: d6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9F:E2:7C:0C:13:AE:A4:91:07:46:8E:2C:1E:3D:9D:35:5C:B5:22 X509v3 Authority Key Identifier: keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/55_ifAwTrqSRB0aOLB49nTVctSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.180.0/22 Signature Algorithm: sha256WithRSAEncryption 14:59:94:17:31:ba:4f:4d:a2:ff:88:2a:ad:9b:af:63:34:60: 93:a1:45:df:bc:26:af:82:db:bf:00:0e:f4:8e:21:e1:43:0b: f6:62:68:29:32:76:d3:da:98:65:fc:3b:91:30:8e:79:85:fa: 20:97:5b:bc:a3:45:6e:f2:e7:03:47:cc:99:ca:9a:fd:38:09: 82:b0:96:47:a0:ec:23:d8:7a:86:eb:88:16:ed:b5:a4:fb:7b: 71:51:e2:2b:8b:99:3d:e1:fd:0e:9b:a7:0c:6e:6a:e8:71:c6: 88:1b:65:d6:ec:e6:ed:25:df:6e:04:a0:65:7d:9e:18:09:7b: 32:49:c3:96:87:ac:40:16:cc:61:cc:23:39:62:8f:70:88:09: 49:24:72:53:da:77:ca:69:c3:42:4e:3f:3a:65:a6:e9:4a:18: 8f:48:8f:af:44:51:3a:91:ea:26:cc:9b:9e:90:8f:1a:2a:df: 27:5c:fd:21:96:0d:8e:59:28:61:10:cc:98:9d:0d:d9:4c:99: 6f:3e:3c:d9:a6:da:4a:54:6e:53:9d:fe:13:45:24:fc:af:fc: 37:86:dd:2f:eb:92:41:ae:61:d1:4d:c2:61:06:7c:d5:ea:78: 65:89:a8:6a:45:5a:6b:fb:e3:72:b8:df:8e:f2:4a:0c:ad:b0: 7d:a8:9a:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57DtNsyTSU8f+aG1QQMkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4 MDc1ZDcwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzlmZTI3YzBjMTNhZWE0OTEwNzQ2OGUyYzFlM2Q5ZDM1NWNiNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWIUNG27FfqwOGJp6xVPkL4zVYDw RiU5NXKVlHGe/TQKrY7ewUTHObbxu6w3En+aNxFOo0r9Y1e8NPIgg1LS3jMO0qVj xG50i4OofQSbk3m68Ec1eDltTD3NglP8NvpfNDNmPi7NFJvxDYOndAlhAmMrP6uA YbaNNVAx1qs8aNC7m2PzZajE7ireT1bG/ZjTWpZqtoEsl3ARrXy/wOZgty6aCMAo pRRafGOsb4qUJWGJXqALplMrBDbhlNw+bFZ09tE24exO64Cy3drGxwqEW/Qc/t92 5MgPlz8abV1h+YRHPk7k9KmG3VyvXkk+GGzCPaLR0lmuMZjJd5+EfjTWUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOef4nwME66kkQdGjiwePZ01XLUiMB8GA1UdIwQY MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt ZjY1Njc1NTI2MDVlLzEvNTVfaWZBd1RycVNSQjBhT0xCNDluVFZjdFNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYK0MA0G CSqGSIb3DQEBCwUAA4IBAQAUWZQXMbpPTaL/iCqtm69jNGCToUXfvCavgtu/AA70 jiHhQwv2YmgpMnbT2phl/DuRMI55hfogl1u8o0Vu8ucDR8yZypr9OAmCsJZHoOwj 2HqG64gW7bWk+3txUeIri5k94f0Om6cMbmroccaIG2XW7ObtJd9uBKBlfZ4YCXsy ScOWh6xAFsxhzCM5Yo9wiAlJJHJT2nfKacNCTj86ZabpShiPSI+vRFE6keomzJue kI8aKt8nXP0hlg2OWShhEMyYnQ3ZTJlvPjzZptpKVG5Tnf4TRST8r/w3ht0v65JB rmHRTcJhBnzV6nhliahqRVpr++NyuN+O8koMrbB9qJr2 -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:23 2026 by rpki-client