This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9Lpb8AsKT4-qTffHZf0P6gHylWk.roa File: 9Lpb8AsKT4-qTffHZf0P6gHylWk.roa (raw, json) Hash identifier: EWiaUGHHMc3RBeKy2KpXbcSlC/59V/00enMdQkdMnyg= Subject key identifier: F4:BA:5B:F0:0B:0A:4F:8F:AA:4D:F7:C7:65:FD:0F:EA:01:F2:95:69 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC134CA70F32DC60D37016AA01C42 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9Lpb8AsKT4-qTffHZf0P6gHylWk.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51374 IP address blocks: 88.203.187.0/24 maxlen: 24 88.203.188.0/24 maxlen: 24 88.203.189.0/24 maxlen: 24 88.203.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:34:ca:70:f3:2d:c6:0d:37:01:6a:a0:1c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4ba5bf00b0a4f8faa4df7c765fd0fea01f29569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:5f:50:b7:92:12:25:cf:6a:7b:1a:87:d5: 7f:27:d1:8a:ea:9a:88:51:2c:c5:7e:eb:68:1b:7b: ab:5e:1c:ed:0d:9c:d4:b3:ba:65:6b:1b:c6:2b:40: 82:4f:78:4b:43:3e:32:4e:b3:79:8f:7f:4a:66:4c: 1c:ec:1c:95:5f:a7:54:db:c2:b0:de:a2:aa:40:af: 04:ce:58:f4:7a:ef:fe:46:5f:82:bb:09:51:44:50: 6f:de:b1:0b:0f:89:1e:bb:05:43:1a:d4:e9:fc:68: fb:17:71:9b:52:9d:20:ec:ab:9a:4a:68:b8:aa:07: 75:5f:19:43:1f:ae:f1:22:df:de:62:d9:34:ea:e6: 59:11:f2:5e:eb:eb:17:44:13:90:bf:3a:5c:1a:70: 3a:b2:20:f9:a9:a4:0e:49:69:c7:bd:e3:92:02:30: 51:fc:cd:b5:fb:19:99:81:e8:30:b7:1e:aa:93:a4: 1a:6c:76:c3:65:42:9a:66:48:fc:13:05:f0:e2:13: 1e:58:88:5f:8b:ee:09:f9:24:ba:f2:df:bc:63:03: e5:ec:4f:35:95:c3:52:9c:f7:7b:a3:78:ca:f4:c5: 2c:df:f1:ac:a2:49:ca:e4:6a:ed:ab:19:ac:5b:dd: bc:24:4f:d9:f4:a4:78:0f:c1:4c:a4:0f:ff:f0:c1: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:5B:F0:0B:0A:4F:8F:AA:4D:F7:C7:65:FD:0F:EA:01:F2:95:69 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9Lpb8AsKT4-qTffHZf0P6gHylWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.203.187.0-88.203.190.255 Signature Algorithm: sha256WithRSAEncryption 34:bc:c8:76:6e:42:47:83:6a:1d:5c:66:34:f0:0f:8c:8d:4d: 58:a6:dc:c0:08:db:d8:49:7c:29:08:f3:dd:06:97:1e:27:6d: e2:dc:13:59:64:54:ea:46:51:39:e2:e6:94:f7:fb:97:01:ea: 9e:c8:b2:9d:4f:73:0f:fa:9e:a1:4c:df:22:0b:2f:9d:27:0a: dd:24:59:66:9b:10:71:67:38:09:51:7d:61:82:8b:d4:f0:d6: 07:03:ba:f4:ba:ce:33:83:86:28:3f:1f:59:5c:30:cd:f3:ac: 15:14:8f:9f:bb:b9:87:cb:70:03:0a:41:04:f1:fc:38:cf:fe: d6:a3:6c:a8:3a:8e:30:f2:79:16:cf:7e:2b:9b:d8:22:6a:b0: bd:17:0a:22:5b:cf:47:52:ed:fd:99:47:77:08:5d:9a:85:68: 50:14:8f:a0:ea:0d:90:06:d4:10:23:53:2b:28:ab:3f:46:9a: 11:93:a3:32:9e:52:02:8d:c9:a2:b1:d9:26:be:90:77:94:20: 8f:4a:c3:cb:bb:72:04:6b:36:d3:17:f8:8b:85:ac:12:2c:81: 97:08:e0:e3:75:24:3c:16:ff:c2:f6:b9:2d:38:d6:c1:29:34: ee:2a:54:bd:b7:36:94:53:bd:8d:e0:8e:6e:a9:85:05:a4:b3: d4:56:a8:9c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fsE0ynDzLcYNNwFqoBxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGJhNWJmMDBiMGE0ZjhmYWE0ZGY3Yzc2NWZkMGZlYTAxZjI5NTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfFfULeSEiXPansah9V/J9GK6pqI USzFfutoG3urXhztDZzUs7plaxvGK0CCT3hLQz4yTrN5j39KZkwc7ByVX6dU28Kw 3qKqQK8Ezlj0eu/+Rl+CuwlRRFBv3rELD4keuwVDGtTp/Gj7F3GbUp0g7KuaSmi4 qgd1XxlDH67xIt/eYtk06uZZEfJe6+sXRBOQvzpcGnA6siD5qaQOSWnHveOSAjBR /M21+xmZgegwtx6qk6QabHbDZUKaZkj8EwXw4hMeWIhfi+4J+SS68t+8YwPl7E81 lcNSnPd7o3jK9MUs3/GsoknK5GrtqxmsW928JE/Z9KR4D8FMpA//8MGvdwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPS6W/ALCk+Pqk33x2X9D+oB8pVpMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvOUxwYjhBc0tUNC1xVGZmSFpmMFA2Z0h5bFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABYy7sD BABYy74wDQYJKoZIhvcNAQELBQADggEBADS8yHZuQkeDah1cZjTwD4yNTVim3MAI 29hJfCkI890Glx4nbeLcE1lkVOpGUTni5pT3+5cB6p7Isp1Pcw/6nqFM3yILL50n Ct0kWWabEHFnOAlRfWGCi9Tw1gcDuvS6zjODhig/H1lcMM3zrBUUj5+7uYfLcAMK QQTx/DjP/tajbKg6jjDyeRbPfiub2CJqsL0XCiJbz0dS7f2ZR3cIXZqFaFAUj6Dq DZAG1BAjUysoqz9GmhGTozKeUgKNyaKx2Sa+kHeUII9Kw8u7cgRrNtMX+IuFrBIs gZcI4ON1JDwW/8L2uS041sEpNO4qVL23NpRTvY3gjm6phQWks9RWqJw= -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:24 2026 by rpki-client