This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/i88AXjkXzlj40akB1G-HmIFf15s.roa File: i88AXjkXzlj40akB1G-HmIFf15s.roa (raw, json) Hash identifier: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw= Subject key identifier: 8B:CF:00:5E:39:17:CE:58:F8:D1:A9:01:D4:6F:87:98:81:5F:D7:9B Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Certificate serial: 019B7F136CB6300A1E007873EAA67E78D425 Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/i88AXjkXzlj40akB1G-HmIFf15s.roa Signing time: Fri 02 Jan 2026 14:18:58 +0000 ROA not before: Fri 02 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.233.61.0/24 maxlen: 24 185.179.176.0/24 maxlen: 24 213.5.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6c:b6:30:0a:1e:00:78:73:ea:a6:7e:78:d4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bcf005e3917ce58f8d1a901d46f8798815fd79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:ec:1c:37:83:8e:2e:04:7c:09:10:2a:61: eb:28:ca:64:75:ed:97:d4:79:79:01:7b:a1:5b:ac: ea:58:e1:cd:da:77:76:46:de:97:63:2e:7a:88:34: b8:6f:ab:4f:67:1f:4c:32:9a:6d:83:e6:4f:70:ee: 3f:ac:a7:c5:a7:ac:31:2d:99:90:21:94:f9:b8:c0: f7:ee:65:a7:e0:78:a7:f3:46:9a:c1:83:e9:f5:0a: 4e:31:de:d5:07:3a:8b:4f:25:ff:ee:5d:cc:24:e6: 5f:9e:89:01:73:81:10:b5:07:3c:b1:69:cc:ad:e9: e5:16:e8:27:45:a0:ad:d6:53:dd:b0:d3:47:fd:08: 89:40:e2:bd:ff:9a:d6:e4:eb:aa:47:c3:48:fe:d9: 44:b2:d4:dd:18:ae:c4:a2:2c:a8:18:7f:d6:80:e3: db:ef:40:a0:d7:49:69:c4:2f:91:45:59:a5:99:15: 97:ad:df:2d:38:a5:f3:97:27:09:a7:88:e8:54:75: 18:e5:81:4e:7a:29:e9:83:0b:e5:50:f6:c2:f0:a5: 81:e2:c8:89:4e:b6:83:0f:af:c0:68:5d:15:2c:b3: 86:a6:30:b2:a0:b8:4f:1f:e7:d6:1b:d8:e0:c9:ff: f2:0e:19:73:93:79:fd:09:57:5d:78:f1:c4:5a:14: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:00:5E:39:17:CE:58:F8:D1:A9:01:D4:6F:87:98:81:5F:D7:9B X509v3 Authority Key Identifier: keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/i88AXjkXzlj40akB1G-HmIFf15s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.61.0/24 185.179.176.0/24 213.5.226.0/24 Signature Algorithm: sha256WithRSAEncryption 30:79:a6:2f:80:1b:65:09:74:ca:7c:f9:56:c8:4f:28:26:d2: 8a:aa:97:78:4f:4d:44:75:b6:49:16:6f:a3:47:ba:2d:1b:44: 8f:80:38:43:1d:5b:fb:a2:9b:11:aa:23:90:72:09:f3:76:b3: 9e:c1:ed:d9:6d:0d:5f:63:74:e1:41:6f:ba:8b:66:4e:d3:5d: 8e:cb:80:05:5b:85:fe:e1:b1:16:9d:41:37:3a:ce:73:67:12: 49:e5:bf:33:8d:ac:37:1b:49:01:06:31:98:6e:aa:f4:35:5d: 5d:a3:b6:bb:7e:fb:68:84:b2:aa:e3:b6:cc:8c:cd:f4:3a:f9: 61:8f:c8:0e:e1:02:19:72:ef:b9:76:61:6b:24:0f:9d:b4:88: d8:9d:f9:7b:05:66:3d:33:89:55:fb:fd:53:50:cd:27:2d:89: 79:df:9e:42:28:b4:3b:96:a0:20:23:45:b5:79:78:e0:63:72: 80:67:6b:db:9b:52:e0:16:33:c6:43:f2:18:35:aa:2e:c3:36: 54:ef:1b:31:f6:6c:c7:9f:de:3f:ed:49:82:a2:a3:cc:89:a9: c7:f0:36:8c:61:fe:9e:c1:b5:3b:f7:3d:ba:50:ab:f6:48:e5: 68:8c:7a:c0:3b:78:67:bd:2c:92:79:13:e6:b9:1a:6c:42:99: cd:38:8a:62 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E2y2MAoeAHhz6qZ+eNQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz YmUyNjcwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNmMDA1ZTM5MTdjZTU4ZjhkMWE5MDFkNDZmODc5ODgxNWZkNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoHsHDeDji4EfAkQKmHrKMpkde2X 1Hl5AXuhW6zqWOHN2nd2Rt6XYy56iDS4b6tPZx9MMpptg+ZPcO4/rKfFp6wxLZmQ IZT5uMD37mWn4Hin80aawYPp9QpOMd7VBzqLTyX/7l3MJOZfnokBc4EQtQc8sWnM renlFugnRaCt1lPdsNNH/QiJQOK9/5rW5OuqR8NI/tlEstTdGK7EoiyoGH/WgOPb 70Cg10lpxC+RRVmlmRWXrd8tOKXzlycJp4joVHUY5YFOeinpgwvlUPbC8KWB4siJ TraDD6/AaF0VLLOGpjCyoLhPH+fWG9jgyf/yDhlzk3n9CVddePHEWhRT+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIvPAF45F85Y+NGpAdRvh5iBX9ebMB8GA1UdIwQY MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt MjQ1MTVhMTRjNDU2LzEvaTg4QVhqa1h6bGo0MGFrQjFHLUhtSUZmMTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2 LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+k9AwQA ubOwAwQA1QXiMA0GCSqGSIb3DQEBCwUAA4IBAQAweaYvgBtlCXTKfPlWyE8oJtKK qpd4T01EdbZJFm+jR7otG0SPgDhDHVv7opsRqiOQcgnzdrOewe3ZbQ1fY3ThQW+6 i2ZO012Oy4AFW4X+4bEWnUE3Os5zZxJJ5b8zjaw3G0kBBjGYbqr0NV1do7a7fvto hLKq47bMjM30Ovlhj8gO4QIZcu+5dmFrJA+dtIjYnfl7BWY9M4lV+/1TUM0nLYl5 355CKLQ7lqAgI0W1eXjgY3KAZ2vbm1LgFjPGQ/IYNaouwzZU7xsx9mzHn94/7UmC oqPMianH8DaMYf6ewbU79z26UKv2SOVojHrAO3hnvSySeRPmuRpsQpnNOIpi -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:22 2026 by rpki-client