This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/88YTg6sDSizFLg8YdNuuGxB3K3Y.roa File: 88YTg6sDSizFLg8YdNuuGxB3K3Y.roa (raw, json) Hash identifier: PDA8dfcGU/zoS5FlYimySA9zEuU2OVtCzFfbF2DEvYY= Subject key identifier: F3:C6:13:83:AB:03:4A:2C:C5:2E:0F:18:74:DB:AE:1B:10:77:2B:76 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70858FB4A658B8A67EB683EBA8A63 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/88YTg6sDSizFLg8YdNuuGxB3K3Y.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213768 IP address blocks: 2a0c:9a40:8ad0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:08:58:fb:4a:65:8b:8a:67:eb:68:3e:ba:8a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c61383ab034a2cc52e0f1874dbae1b10772b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:13:de:47:bb:d0:82:27:c8:5f:15:9d:d8: 67:45:1c:af:40:e1:13:58:9b:0d:67:31:d3:37:ba: 5e:ea:1c:ef:b5:e1:83:b2:13:0a:d6:88:b5:87:e0: 0f:0d:c9:ba:b0:29:7f:4e:86:ca:a2:d5:b4:6f:3e: 84:94:ef:ae:b4:02:09:8d:66:1d:41:35:3f:11:c9: 4c:86:db:ee:e5:98:57:45:7a:61:65:a0:7b:20:f7: 90:84:03:37:5b:f5:33:27:90:dc:91:15:4d:f2:ae: c1:b5:9c:b8:a8:4c:3d:23:39:30:98:4e:df:75:bf: 9a:cc:fc:f1:86:7c:70:28:a3:c0:0f:88:ec:a7:ba: bf:80:7a:d3:ab:43:57:0d:af:2d:8a:f2:60:cf:05: 4a:32:42:44:f6:0f:5b:28:5f:f5:ef:dd:08:af:7b: 88:47:e7:b8:1b:84:ec:d9:f1:66:e5:88:e5:b6:b3: 79:f5:fa:f1:dd:98:f6:eb:42:82:4d:2d:b8:ad:18: 47:79:e2:b7:78:db:65:7d:bb:2c:59:f7:11:0c:19: 32:05:70:be:2b:fc:11:06:53:70:65:3f:f3:a8:d3: d2:ad:37:97:3e:0a:2a:05:45:5f:c9:af:f5:f0:e6: a5:13:ba:72:a6:e7:44:82:22:0b:7c:ef:e0:d3:6c: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:13:83:AB:03:4A:2C:C5:2E:0F:18:74:DB:AE:1B:10:77:2B:76 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/88YTg6sDSizFLg8YdNuuGxB3K3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8ad0::/44 Signature Algorithm: sha256WithRSAEncryption 1d:d9:4d:92:e7:e6:d4:06:22:e3:b7:88:cb:4b:43:96:47:15: 5c:f0:a0:29:bb:83:5a:aa:90:0b:00:ef:77:73:83:ed:b5:41: 9b:13:0a:84:c9:aa:4b:2d:86:40:27:0b:60:d7:f1:f2:bd:99: c1:5a:ff:85:d9:2b:79:97:7e:51:ec:66:6c:44:46:4c:2d:9b: 6a:2a:41:7e:e6:27:76:f5:f4:56:93:98:2e:24:1a:09:45:79: 81:97:94:5b:68:bc:b0:16:e5:73:06:8c:e7:8a:7c:e5:b7:9a: f9:60:cd:7a:af:4f:35:e5:0b:68:9b:47:64:32:ca:b7:c9:10: ba:d6:51:15:fb:1d:29:2f:d3:e2:b4:72:e5:ec:ef:c8:15:9f: 92:a2:bc:b3:f7:00:ef:bc:00:43:08:a8:23:e3:f2:ce:37:1b: a7:31:27:7d:b6:44:ea:17:95:8e:10:7f:54:24:f2:71:27:f2: c5:d4:71:b6:be:9e:33:59:b6:91:f8:07:a8:91:bc:93:dc:9d: 04:05:5e:ff:cc:ac:12:0c:5e:7b:09:3d:68:e3:f1:73:90:58: fe:5a:95:8f:97:12:21:66:4a:9a:b3:ca:32:41:49:f6:fe:d3: be:b4:8d:ec:10:31:a4:49:29:2b:84:5b:51:31:14:b8:0a:a1: 3d:1c:7b:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwhY+0pli4pn62g+uopjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2M2MTM4M2FiMDM0YTJjYzUyZTBmMTg3NGRiYWUxYjEwNzcyYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmooT3ke70IInyF8VndhnRRyvQOET WJsNZzHTN7pe6hzvteGDshMK1oi1h+APDcm6sCl/TobKotW0bz6ElO+utAIJjWYd QTU/EclMhtvu5ZhXRXphZaB7IPeQhAM3W/UzJ5DckRVN8q7BtZy4qEw9IzkwmE7f db+azPzxhnxwKKPAD4jsp7q/gHrTq0NXDa8tivJgzwVKMkJE9g9bKF/1790Ir3uI R+e4G4Ts2fFm5YjltrN59frx3Zj260KCTS24rRhHeeK3eNtlfbssWfcRDBkyBXC+ K/wRBlNwZT/zqNPSrTeXPgoqBUVfya/18OalE7pypudEgiILfO/g02wMsQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPPGE4OrA0osxS4PGHTbrhsQdyt2MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvODhZVGc2c0RTaXpGTGc4WWROdXVHeEIzSzNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIrQ MA0GCSqGSIb3DQEBCwUAA4IBAQAd2U2S5+bUBiLjt4jLS0OWRxVc8KApu4NaqpAL AO93c4PttUGbEwqEyapLLYZAJwtg1/HyvZnBWv+F2St5l35R7GZsREZMLZtqKkF+ 5id29fRWk5guJBoJRXmBl5RbaLywFuVzBozninzlt5r5YM16r0815Qtom0dkMsq3 yRC61lEV+x0pL9PitHLl7O/IFZ+Soryz9wDvvABDCKgj4/LONxunMSd9tkTqF5WO EH9UJPJxJ/LF1HG2vp4zWbaR+AeokbyT3J0EBV7/zKwSDF57CT1o4/FzkFj+WpWP lxIhZkqas8oyQUn2/tO+tI3sEDGkSSkrhFtRMRS4CqE9HHtk -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:51 2026 by rpki-client