This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/CCOsqAacrS8dBTl4tQBwpoCnadM.roa File: CCOsqAacrS8dBTl4tQBwpoCnadM.roa (raw, json) Hash identifier: YYtqMm75d9ZnPheKTmSgCCjQh+tr4ThzJq28f22P15I= Subject key identifier: 08:23:AC:A8:06:9C:AD:2F:1D:05:39:78:B5:00:70:A6:80:A7:69:D3 Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d Certificate serial: 019B797EC1347E8AE8B6E9620D6A1C7402BF Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/CCOsqAacrS8dBTl4tQBwpoCnadM.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204198 IP address blocks: 185.111.84.0/24 maxlen: 24 185.111.85.0/24 maxlen: 24 185.111.86.0/24 maxlen: 24 185.111.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:34:7e:8a:e8:b6:e9:62:0d:6a:1c:74:02:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0823aca8069cad2f1d053978b50070a680a769d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:c7:b8:da:bf:7b:fd:70:34:32:31:1c:ae: 6a:d6:9a:2c:ef:1f:cd:94:da:09:24:40:6d:e3:2e: d9:37:2b:70:81:94:85:47:c3:96:e9:0f:db:69:9b: 80:6d:93:23:0c:39:79:55:c1:eb:ba:8e:5f:95:b6: 25:c3:dc:14:f0:07:28:60:89:f8:90:fd:5c:e4:1f: 2d:96:29:d4:d6:61:9a:6e:66:0a:18:1c:b3:d3:f3: fe:64:c6:0b:64:1a:60:39:f7:fc:b9:21:fa:45:65: a4:e3:63:a7:53:74:c4:d5:0b:9e:76:91:29:cd:db: 5b:24:20:cf:ac:52:91:cd:8a:5d:97:ad:9a:7f:6e: 9a:ba:44:0b:ce:89:67:5d:3d:c8:14:fc:28:f0:c2: 73:41:97:64:5b:54:42:79:75:74:79:88:a5:10:87: 94:5c:3f:c4:c8:e4:7a:14:11:28:87:87:43:67:33: 11:92:16:57:1c:36:13:96:b1:98:5d:8d:54:24:29: 99:71:dc:4b:1c:49:16:0b:1a:c5:26:7d:28:5f:07: 40:83:bc:c8:12:65:e5:83:b7:93:dc:8c:10:69:60: 16:47:14:cd:fb:75:9b:76:2c:fa:2e:7e:48:f3:22: 7f:bc:df:9b:ee:af:8d:43:cf:89:83:00:8d:12:16: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:23:AC:A8:06:9C:AD:2F:1D:05:39:78:B5:00:70:A6:80:A7:69:D3 X509v3 Authority Key Identifier: keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/CCOsqAacrS8dBTl4tQBwpoCnadM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.84.0/22 Signature Algorithm: sha256WithRSAEncryption 61:12:ff:90:a8:7b:a5:9e:36:05:37:1f:40:e6:00:ea:6e:9a: 8c:04:d2:47:58:f3:16:0c:ca:b8:0c:09:55:0a:f5:00:9e:a5: 57:2c:1a:6c:6c:f1:3d:ec:74:13:2a:3e:16:5d:c5:4c:fd:ac: a3:39:61:2a:8f:b1:97:20:95:b0:aa:f7:71:c5:94:a2:f2:d4: 37:02:18:47:25:d4:f0:70:37:89:de:e0:d1:c8:b7:43:0f:21: 65:5d:b8:d3:6b:bf:3d:b6:20:98:fd:3c:91:d6:b5:ec:17:9d: 8a:33:92:9a:83:fc:c8:e3:ed:8c:f9:e3:67:7e:bd:2e:95:80: 1b:7e:4e:19:82:27:b6:1b:8b:19:f9:e8:50:bd:7b:a8:1a:ec: f4:f1:b2:ba:43:f9:c5:4b:1f:46:1f:fb:bd:25:9c:34:85:c7: 1b:06:f4:e2:37:4f:61:aa:6d:21:70:10:4c:b5:5a:30:71:a1: 51:ea:98:1c:a6:df:33:43:23:71:1d:63:7e:84:62:b8:c8:ff: e4:ff:9d:81:37:2d:bb:ad:75:05:66:bb:d0:c2:ff:6b:e3:af: 9f:7c:d1:0d:ce:b1:c6:8c:d3:c4:a3:bd:be:5e:c8:3a:f4:df: f8:e8:78:0d:4a:8a:a1:bb:9c:02:a8:05:f0:ec:a4:44:e9:3d: be:10:64:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsE0forotuliDWocdAK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0 MGUxNGQwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODIzYWNhODA2OWNhZDJmMWQwNTM5NzhiNTAwNzBhNjgwYTc2OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfHHuNq/e/1wNDIxHK5q1pos7x/N lNoJJEBt4y7ZNytwgZSFR8OW6Q/baZuAbZMjDDl5VcHruo5flbYlw9wU8AcoYIn4 kP1c5B8tlinU1mGabmYKGByz0/P+ZMYLZBpgOff8uSH6RWWk42OnU3TE1QuedpEp zdtbJCDPrFKRzYpdl62af26aukQLzolnXT3IFPwo8MJzQZdkW1RCeXV0eYilEIeU XD/EyOR6FBEoh4dDZzMRkhZXHDYTlrGYXY1UJCmZcdxLHEkWCxrFJn0oXwdAg7zI EmXlg7eT3IwQaWAWRxTN+3Wbdiz6Ln5I8yJ/vN+b7q+NQ8+JgwCNEhacLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgjrKgGnK0vHQU5eLUAcKaAp2nTMB8GA1UdIwQY MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct MTM2NTg3NWM3ZTg1LzEvQ0NPc3FBYWNyUzhkQlRsNHRRQndwb0NuYWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1 LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW9UMA0G CSqGSIb3DQEBCwUAA4IBAQBhEv+QqHulnjYFNx9A5gDqbpqMBNJHWPMWDMq4DAlV CvUAnqVXLBpsbPE97HQTKj4WXcVM/ayjOWEqj7GXIJWwqvdxxZSi8tQ3AhhHJdTw cDeJ3uDRyLdDDyFlXbjTa789tiCY/TyR1rXsF52KM5Kag/zI4+2M+eNnfr0ulYAb fk4Zgie2G4sZ+ehQvXuoGuz08bK6Q/nFSx9GH/u9JZw0hccbBvTiN09hqm0hcBBM tVowcaFR6pgcpt8zQyNxHWN+hGK4yP/k/52BNy27rXUFZrvQwv9r46+ffNENzrHG jNPEo72+Xsg69N/46HgNSoqhu5wCqAXw7KRE6T2+EGTG -----END CERTIFICATE-----Generated at Sun Jan 11 22:08:54 2026 by rpki-client