This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cT02IY7adaUVPz4V8e5RlFxqhK0.roa File: cT02IY7adaUVPz4V8e5RlFxqhK0.roa (raw, json) Hash identifier: xlN+ALxnfT16I39GA28ld/SZObT/EUbBFR6U8Cqh9cY= Subject key identifier: 71:3D:36:21:8E:DA:75:A5:15:3F:3E:15:F1:EE:51:94:5C:6A:84:AD Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199 Certificate serial: 019B7FF1F1C5C89DD1868D158CF51A1D1874 Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cT02IY7adaUVPz4V8e5RlFxqhK0.roa Signing time: Fri 02 Jan 2026 18:22:00 +0000 ROA not before: Fri 02 Jan 2026 18:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201014 IP address blocks: 185.88.224.0/22 maxlen: 22 2a05:cf00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f1:c5:c8:9d:d1:86:8d:15:8c:f5:1a:1d:18:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199 Validity Not Before: Jan 2 18:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=713d36218eda75a5153f3e15f1ee51945c6a84ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:0a:93:bb:06:47:a8:39:04:62:f3:bb:9e: 18:f7:3c:b0:aa:21:78:70:ca:b0:25:dd:e0:c3:1e: f7:49:c7:f1:42:5f:33:93:61:6b:81:36:70:6f:9a: dd:26:46:3f:60:e2:92:6a:e2:70:19:17:c4:65:a6: ec:e2:86:ea:30:1f:2f:25:c5:ed:37:44:b7:0a:6a: 08:5d:d1:56:75:17:7b:a7:59:f1:c7:14:4d:7f:88: 98:dc:e3:54:86:77:fa:ec:aa:cd:d0:55:27:f7:24: cd:dd:a2:1f:0e:1a:11:27:a5:3d:6f:3d:25:e5:d6: 76:b6:48:0d:c2:4e:13:c5:89:30:ed:7c:b2:f6:46: 10:3f:83:50:a7:12:27:0d:7c:c1:52:52:1b:62:cc: 3a:8f:c9:31:77:ac:59:5c:35:25:23:bb:52:20:0c: 9d:11:3f:4a:02:aa:4e:15:0d:f7:29:9a:dc:78:17: 54:4c:b9:55:3e:00:47:05:24:e2:c6:a4:d4:6a:1a: 50:56:60:9b:02:5a:7f:dc:62:b9:19:19:43:ad:ae: 0e:bf:13:ac:76:ab:2c:e1:2c:e7:42:3d:d9:95:0a: c4:e3:fa:f1:2a:d1:33:25:00:91:d7:ce:d5:13:60: 1c:db:35:c2:93:57:e5:6b:77:fe:4f:4d:24:ec:dc: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:36:21:8E:DA:75:A5:15:3F:3E:15:F1:EE:51:94:5C:6A:84:AD X509v3 Authority Key Identifier: keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/cT02IY7adaUVPz4V8e5RlFxqhK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.224.0/22 IPv6: 2a05:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 00:5a:6c:14:d0:37:61:ed:a3:45:2d:ec:f1:73:94:34:07:5f: ff:6a:2a:d7:d0:dc:ad:d4:0d:d5:c7:0e:4e:86:d4:e6:fc:31: d8:a7:77:c8:dd:fe:28:1b:f3:ad:32:ca:d6:96:de:70:00:57: cb:c2:99:de:b1:50:40:c8:5f:d1:53:5f:0e:f8:72:08:85:2e: 41:cb:27:c4:01:e7:f3:48:34:75:f6:f8:b6:60:90:65:61:65: f3:5f:55:1e:18:3b:d4:af:12:70:87:97:90:c9:8a:25:23:59: 99:35:1c:71:8f:3e:8c:91:7e:e9:49:9b:a4:71:d8:61:7f:ea: 91:f2:2a:7e:9f:47:75:c4:32:d5:07:ee:d3:c8:d1:47:ee:5d: 14:cd:d3:90:f5:fb:0f:df:5a:1e:12:63:29:78:ed:74:f3:d8: 0f:66:11:84:0a:8a:85:0f:4a:7f:12:d7:b1:36:6f:c7:4c:e3: 90:0c:0b:68:1a:fc:96:b0:c2:cb:9b:17:aa:8a:28:0e:2f:a3: 98:13:64:b0:43:c5:04:c8:d5:d3:44:90:7a:1b:51:02:4d:f5: e5:ba:12:52:2b:56:37:31:58:1a:6f:41:0f:71:98:a3:38:c6: 61:ae:1a:29:63:48:17:0e:8e:d6:7c:e5:11:0b:96:30:ab:7b: c7:5e:25:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8fHFyJ3Rho0VjPUaHRh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTEyMjgzNzQ3NDJkZjU0NGFhOTMwNThjNWEzYmQzZDE2 NDIxOTkwHhcNMjYwMTAyMTgyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTNkMzYyMThlZGE3NWE1MTUzZjNlMTVmMWVlNTE5NDVjNmE4NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gKk7sGR6g5BGLzu54Y9zywqiF4 cMqwJd3gwx73ScfxQl8zk2FrgTZwb5rdJkY/YOKSauJwGRfEZabs4obqMB8vJcXt N0S3CmoIXdFWdRd7p1nxxxRNf4iY3ONUhnf67KrN0FUn9yTN3aIfDhoRJ6U9bz0l 5dZ2tkgNwk4TxYkw7Xyy9kYQP4NQpxInDXzBUlIbYsw6j8kxd6xZXDUlI7tSIAyd ET9KAqpOFQ33KZrceBdUTLlVPgBHBSTixqTUahpQVmCbAlp/3GK5GRlDra4OvxOs dqss4SznQj3ZlQrE4/rxKtEzJQCR187VE2Ac2zXCk1fla3f+T00k7NyIBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHE9NiGO2nWlFT8+FfHuUZRcaoStMB8GA1UdIwQY MBaAFH9RIoN0dC31RKqTBYxaO9PRZCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTIt MDFlYjAzNjg0ZjA5LzEvY1QwMklZN2FkYVVWUHo0VjhlNVJsRnhxaEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTItMDFlYjAzNjg0ZjA5 LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVjgMA0E AgACMAcDBQMqBc8AMA0GCSqGSIb3DQEBCwUAA4IBAQAAWmwU0Ddh7aNFLezxc5Q0 B1//airX0Nyt1A3Vxw5OhtTm/DHYp3fI3f4oG/OtMsrWlt5wAFfLwpnesVBAyF/R U18O+HIIhS5ByyfEAefzSDR19vi2YJBlYWXzX1UeGDvUrxJwh5eQyYolI1mZNRxx jz6MkX7pSZukcdhhf+qR8ip+n0d1xDLVB+7TyNFH7l0UzdOQ9fsP31oeEmMpeO10 89gPZhGECoqFD0p/EtexNm/HTOOQDAtoGvyWsMLLmxeqiigOL6OYE2SwQ8UEyNXT RJB6G1ECTfXluhJSK1Y3MVgab0EPcZijOMZhrhopY0gXDo7WfOURC5Ywq3vHXiUe -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client