This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ffSjroyzqFmTGGvAwWqAlu0UGW8.roa File: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (raw, json) Hash identifier: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE= Subject key identifier: 7D:F4:A3:AE:8C:B3:A8:59:93:18:6B:C0:C1:6A:80:96:ED:14:19:6F Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84D67DB2BD0F32C861378F2844ECC4 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ffSjroyzqFmTGGvAwWqAlu0UGW8.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 88.209.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d6:7d:b2:bd:0f:32:c8:61:37:8f:28:44:ec:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df4a3ae8cb3a85993186bc0c16a8096ed14196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e6:9d:96:75:26:6f:17:7a:05:38:86:ab:00: c3:b9:20:ab:84:b7:6c:80:1a:76:6c:2b:11:65:6c: 24:34:97:dc:36:e3:ab:9f:df:2a:17:2b:d6:46:aa: 6f:21:18:0c:b0:d9:51:d8:c3:d3:85:f8:f8:f8:77: 26:64:4a:04:9f:bc:f8:10:28:60:79:2f:c2:87:b3: fe:e2:0c:aa:24:fe:6f:a9:cb:c0:45:0f:4e:29:ea: 0c:05:e6:2f:b9:7f:f5:3f:d7:ac:8b:97:79:d4:b1: 2e:6e:e2:e9:2e:98:55:cc:ad:44:08:25:2c:9a:ec: 0d:14:f8:8e:a7:99:21:16:1e:49:fe:09:93:d7:8e: 13:dd:4c:ef:6e:ef:f7:40:92:fb:66:9d:7f:8e:d4: 57:06:b8:27:d8:d6:23:73:b9:92:76:ea:04:0c:f0: d8:6e:4c:39:40:11:c6:c0:60:fb:e7:0f:ec:bf:64: af:c2:ed:48:67:2e:46:63:84:6d:65:d3:d0:93:eb: ad:83:74:9d:cf:68:ab:a0:f2:2f:9f:f0:53:84:9a: 66:59:79:51:84:fe:cb:c1:a6:12:cb:14:97:4f:77: a8:b2:83:ce:14:7e:b1:1e:28:50:e0:fc:cf:1c:09: c1:d3:98:dd:f5:9d:10:59:14:1a:e8:b6:6d:e4:22: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F4:A3:AE:8C:B3:A8:59:93:18:6B:C0:C1:6A:80:96:ED:14:19:6F X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ffSjroyzqFmTGGvAwWqAlu0UGW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.240.0/22 Signature Algorithm: sha256WithRSAEncryption b3:dd:63:b1:90:86:1a:d5:86:bf:35:c4:e7:7c:c6:a4:a7:58: 6e:c5:4c:49:2c:cc:0f:4c:81:27:d5:31:d1:11:55:36:46:ed: 0f:94:61:03:61:22:6e:1e:35:9c:73:40:3a:ac:22:26:cb:51: df:97:3a:fa:5a:cc:d9:56:c5:f8:25:a8:a5:b8:ef:d0:ef:53: 55:72:c9:bd:da:38:0a:42:00:63:a0:df:cf:00:c9:db:54:f6: d0:d1:33:77:88:5a:9d:cf:34:59:de:c8:da:59:8d:27:f4:da: 7f:0a:7b:b1:c8:7f:da:a7:75:b0:18:35:9d:84:5a:3d:8e:7c: 8a:2b:d5:72:5d:b0:23:2e:4b:ef:29:1c:49:2f:b6:df:79:c0: d3:b8:96:3c:21:e0:c2:68:b8:f0:ca:dc:23:b8:85:48:27:dd: f2:64:0c:29:d2:4a:de:9b:69:25:d3:54:f9:8c:2a:2d:dd:e2: 6a:9a:fa:55:b8:ae:ee:6a:1f:bb:bb:9f:25:a7:b3:0e:68:a7: 1c:18:1b:fe:60:a6:53:d5:53:77:bd:99:4e:81:a9:92:ef:87: 3f:ac:32:d8:88:a5:3e:bd:e8:b4:02:87:fb:b3:0c:08:6a:8d: 53:bd:ed:b6:39:72:33:c8:43:a1:5b:6f:9d:b8:90:ce:ad:9b: ad:a7:7b:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNZ9sr0PMshhN48oROzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY0YTNhZThjYjNhODU5OTMxODZiYzBjMTZhODA5NmVkMTQxOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OadlnUmbxd6BTiGqwDDuSCrhLds gBp2bCsRZWwkNJfcNuOrn98qFyvWRqpvIRgMsNlR2MPThfj4+HcmZEoEn7z4EChg eS/Ch7P+4gyqJP5vqcvARQ9OKeoMBeYvuX/1P9esi5d51LEubuLpLphVzK1ECCUs muwNFPiOp5khFh5J/gmT144T3Uzvbu/3QJL7Zp1/jtRXBrgn2NYjc7mSduoEDPDY bkw5QBHGwGD75w/sv2Svwu1IZy5GY4RtZdPQk+utg3Sdz2iroPIvn/BThJpmWXlR hP7LwaYSyxSXT3eosoPOFH6xHihQ4PzPHAnB05jd9Z0QWRQa6LZt5CJeawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH30o66Ms6hZkxhrwMFqgJbtFBlvMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvZmZTanJveXpxRm1UR0d2QXdXcUFsdTBVR1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNHwMA0G CSqGSIb3DQEBCwUAA4IBAQCz3WOxkIYa1Ya/NcTnfMakp1huxUxJLMwPTIEn1THR EVU2Ru0PlGEDYSJuHjWcc0A6rCImy1Hflzr6WszZVsX4JailuO/Q71NVcsm92jgK QgBjoN/PAMnbVPbQ0TN3iFqdzzRZ3sjaWY0n9Np/CnuxyH/ap3WwGDWdhFo9jnyK K9VyXbAjLkvvKRxJL7bfecDTuJY8IeDCaLjwytwjuIVIJ93yZAwp0krem2kl01T5 jCot3eJqmvpVuK7uah+7u58lp7MOaKccGBv+YKZT1VN3vZlOgamS74c/rDLYiKU+ vei0Aof7swwIao1Tve22OXIzyEOhW2+duJDOrZutp3sJ -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:37 2026 by rpki-client