This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/bbXWGNkALy-ajnXnVwsq6VcslC8.roa File: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (raw, json) Hash identifier: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE= Subject key identifier: 6D:B5:D6:18:D9:00:2F:2F:9A:8E:75:E7:57:0B:2A:E9:57:2C:94:2F Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35CBD2AA167ED4816EE41A5BD77717 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/bbXWGNkALy-ajnXnVwsq6VcslC8.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 264617 IP address blocks: 88.218.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:d2:aa:16:7e:d4:81:6e:e4:1a:5b:d7:77:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db5d618d9002f2f9a8e75e7570b2ae9572c942f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:a2:f7:b3:13:d2:79:cd:c9:8c:8d:31:28: be:de:5a:bd:76:c8:f4:68:74:e3:65:7f:7f:db:da: d3:60:5b:75:4f:c8:5a:e0:d3:2a:1a:2b:51:16:53: b6:8e:ab:0f:78:89:cd:4b:ed:f4:15:4b:51:84:7d: f6:67:c9:8d:2a:b9:79:ec:c4:ae:94:c1:02:39:d2: 90:b0:63:94:7d:be:51:4b:90:68:d5:af:48:53:65: 7e:1e:2a:ba:c7:ea:59:61:ce:94:57:67:7c:25:4b: e2:db:ab:6b:8b:a2:a2:3a:55:fe:7e:94:3b:8c:13: 0e:6a:62:a9:3d:50:bd:ff:a7:3f:a1:b9:95:e2:fc: b2:9a:74:6d:8c:d0:e7:d4:5a:c8:87:49:ee:8c:a5: e8:a5:27:3c:55:2d:60:79:17:6a:47:c9:27:6d:5c: 98:cb:4e:fe:de:51:0e:c0:7b:f9:7d:b5:a6:17:f5: 8f:5c:f5:cb:5c:d3:ff:1d:2e:b1:4b:be:ba:77:86: 9c:5e:ec:36:67:b0:fd:f3:69:e0:ff:44:6b:6c:74: 2c:3b:d5:c3:ea:01:46:c3:57:23:bb:e7:25:93:5c: a4:3a:9e:1c:dd:b1:53:4a:93:1e:01:82:9f:a6:7a: 81:97:51:2b:44:9c:2f:7f:fa:2b:45:c7:39:5a:f7: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B5:D6:18:D9:00:2F:2F:9A:8E:75:E7:57:0B:2A:E9:57:2C:94:2F X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/bbXWGNkALy-ajnXnVwsq6VcslC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.105.0/24 Signature Algorithm: sha256WithRSAEncryption ac:5d:e9:6e:f4:0f:56:4f:b6:f5:71:bf:db:1f:26:21:a4:d9: 6c:d8:cb:5b:82:3b:26:5a:6d:42:99:d7:f3:74:95:a0:b1:1e: 19:d7:4b:da:4f:91:d0:b1:0e:1f:61:eb:37:58:dc:2e:51:d1: 27:72:98:65:dc:86:e8:77:03:b6:c4:00:4c:be:8a:4c:e3:80: 6c:2d:5b:03:b9:06:05:0b:80:4f:c3:ef:e7:51:63:26:46:c5: d9:d0:78:4c:b3:2f:91:c1:c0:ac:cb:59:09:f1:a3:db:f8:fe: 7f:0f:69:ab:31:f0:9d:7d:d5:4f:b1:3e:8b:1b:72:d6:95:a0: 6a:4c:62:0a:f1:ad:3f:99:65:c9:3e:e5:f2:83:8d:4d:37:eb: 18:77:ec:f7:93:cd:d4:ef:15:23:7e:9a:80:a5:58:a5:24:11: a8:e0:4e:b8:13:c8:2a:00:fa:fb:22:f9:60:82:48:a9:9e:5f: ec:3c:f5:f0:c7:59:78:37:d3:18:14:d8:b2:27:3b:23:2d:6b: 65:07:8a:49:5a:a2:58:6c:cb:d7:ee:0e:a5:b5:90:53:99:f5: 35:1d:6e:f1:f9:d0:2d:03:4a:c3:cd:8c:58:eb:e3:9f:3c:6d: a2:51:87:8c:ac:f4:28:bd:b6:2c:f4:91:76:bc:bd:ae:e7:9f: e7:8b:ea:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcvSqhZ+1IFu5Bpb13cXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI1ZDYxOGQ5MDAyZjJmOWE4ZTc1ZTc1NzBiMmFlOTU3MmM5NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfWi97MT0nnNyYyNMSi+3lq9dsj0 aHTjZX9/29rTYFt1T8ha4NMqGitRFlO2jqsPeInNS+30FUtRhH32Z8mNKrl57MSu lMECOdKQsGOUfb5RS5Bo1a9IU2V+Hiq6x+pZYc6UV2d8JUvi26tri6KiOlX+fpQ7 jBMOamKpPVC9/6c/obmV4vyymnRtjNDn1FrIh0nujKXopSc8VS1geRdqR8knbVyY y07+3lEOwHv5fbWmF/WPXPXLXNP/HS6xS766d4acXuw2Z7D982ng/0RrbHQsO9XD 6gFGw1cju+clk1ykOp4c3bFTSpMeAYKfpnqBl1ErRJwvf/orRcc5WvezZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG211hjZAC8vmo5151cLKulXLJQvMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvYmJYV0dOa0FMeS1ham5YblZ3c3E2VmNzbEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNppMA0G CSqGSIb3DQEBCwUAA4IBAQCsXelu9A9WT7b1cb/bHyYhpNls2MtbgjsmWm1Cmdfz dJWgsR4Z10vaT5HQsQ4fYes3WNwuUdEncphl3IbodwO2xABMvopM44BsLVsDuQYF C4BPw+/nUWMmRsXZ0HhMsy+RwcCsy1kJ8aPb+P5/D2mrMfCdfdVPsT6LG3LWlaBq TGIK8a0/mWXJPuXyg41NN+sYd+z3k83U7xUjfpqApVilJBGo4E64E8gqAPr7Ivlg gkipnl/sPPXwx1l4N9MYFNiyJzsjLWtlB4pJWqJYbMvX7g6ltZBTmfU1HW7x+dAt A0rDzYxY6+OfPG2iUYeMrPQovbYs9JF2vL2u55/ni+r9 -----END CERTIFICATE-----Generated at Wed Jan 21 04:09:21 2026 by rpki-client