This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/CDtNseOhTSyvHnBtVtY8_yl_mqo.roa File: CDtNseOhTSyvHnBtVtY8_yl_mqo.roa (raw, json) Hash identifier: QVByv0+71qydMndfr8rOHWUwhEqYjIZJsdGpilbLsSU= Subject key identifier: 08:3B:4D:B1:E3:A1:4D:2C:AF:1E:70:6D:56:D6:3C:FF:29:7F:9A:AA Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621 Certificate serial: 019B7F15DA92637C58655301395F13772147 Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/CDtNseOhTSyvHnBtVtY8_yl_mqo.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200911 IP address blocks: 185.88.120.0/22 maxlen: 22 185.88.120.0/23 maxlen: 23 185.88.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:da:92:63:7c:58:65:53:01:39:5f:13:77:21:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083b4db1e3a14d2caf1e706d56d63cff297f9aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:ed:52:7f:72:3b:36:5a:26:32:fa:30:48: 07:f5:ff:db:f3:72:99:e8:21:d3:e4:fb:a3:a1:3b: cf:88:3b:cf:3f:a8:f6:ce:f9:af:53:17:1c:44:d2: 81:5b:bf:e1:b1:02:84:3e:ee:d5:d1:d4:90:01:8d: c0:0a:9e:9b:4e:7a:8e:77:45:12:2a:cd:8f:5e:c7: dc:a7:a4:2d:53:92:9a:ce:b5:1b:ec:0c:46:dd:ce: 16:b4:02:c2:28:88:12:2f:ab:79:fd:e1:b4:75:ec: a4:7f:d0:df:ab:cb:b6:71:02:39:14:cc:a8:1c:6f: 32:b2:10:02:0e:6e:6c:45:16:63:92:28:39:59:6d: c8:66:58:5a:b3:6a:85:8f:26:e8:90:c4:32:82:38: 3c:71:69:5b:41:18:89:18:45:0c:0b:96:84:24:1f: fb:b9:e4:87:cb:4b:6f:b1:07:e0:6b:99:9e:e0:96: 18:93:4b:1b:23:37:e2:28:ee:fa:db:c5:86:40:a5: cb:f7:c3:36:07:8d:03:50:c6:7e:0f:3f:81:a9:fe: 2b:dc:d2:05:59:ce:3b:98:3a:bf:b4:5b:8a:f6:48: 08:12:ba:d4:66:8c:0e:69:d3:9d:70:4f:5b:b4:c4: c5:3b:bc:60:54:a4:b5:86:91:9d:fe:a8:c3:4d:42: b6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:4D:B1:E3:A1:4D:2C:AF:1E:70:6D:56:D6:3C:FF:29:7F:9A:AA X509v3 Authority Key Identifier: keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/CDtNseOhTSyvHnBtVtY8_yl_mqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.120.0/22 Signature Algorithm: sha256WithRSAEncryption 64:2f:f6:0c:0f:29:08:0e:1f:31:dd:df:ec:eb:4e:1b:1d:48: 66:3a:00:2a:55:94:19:29:d4:46:a7:9e:ae:ba:bc:dd:0d:ec: 3f:bb:4b:4e:25:71:02:95:8f:d7:db:a9:74:d6:bf:7b:9f:dc: 0d:e5:54:2e:06:ba:fc:be:5e:52:69:7f:31:f9:53:ce:d4:88: 25:29:66:21:e7:d0:84:f1:8b:c1:09:50:78:8b:ec:e4:22:3f: 57:4c:d0:be:65:6c:ee:fb:66:9c:fb:72:97:50:c8:2c:d4:76: 57:37:3e:b3:27:4c:60:62:37:9a:d8:02:5a:36:fe:39:95:69: f4:3a:93:98:28:e7:d0:da:a7:7a:0b:2e:69:c0:c4:e3:96:ab: 20:9d:d1:e6:a4:86:4d:4c:cd:81:68:b5:da:9f:cb:17:91:bb: 4a:d4:18:a5:d2:f8:40:2d:37:07:66:14:c9:9f:3a:ba:dc:d5: bd:97:d1:e8:b1:16:66:7b:36:33:00:15:2f:6f:1a:da:fe:39: 75:17:94:ba:7a:57:52:da:7e:5e:9c:7a:9c:9a:61:f1:8f:b5: 3a:0d:da:a1:f1:ca:82:13:80:7d:c5:ce:90:55:9a:75:b5:37: ca:74:ab:af:b5:92:af:ed:1a:8a:8f:95:fd:6f:5c:6e:33:26: 0d:be:f4:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdqSY3xYZVMBOV8TdyFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDE3NzI0NTdlMGY4MjdiOWU5MjBiMDBjZDExNDgyNGE1 ZmE2MjEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNiNGRiMWUzYTE0ZDJjYWYxZTcwNmQ1NmQ2M2NmZjI5N2Y5YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlontUn9yOzZaJjL6MEgH9f/b83KZ 6CHT5PujoTvPiDvPP6j2zvmvUxccRNKBW7/hsQKEPu7V0dSQAY3ACp6bTnqOd0US Ks2PXsfcp6QtU5KazrUb7AxG3c4WtALCKIgSL6t5/eG0deykf9Dfq8u2cQI5FMyo HG8yshACDm5sRRZjkig5WW3IZlhas2qFjybokMQygjg8cWlbQRiJGEUMC5aEJB/7 ueSHy0tvsQfga5me4JYYk0sbIzfiKO7628WGQKXL98M2B40DUMZ+Dz+Bqf4r3NIF Wc47mDq/tFuK9kgIErrUZowOadOdcE9btMTFO7xgVKS1hpGd/qjDTUK2QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg7TbHjoU0srx5wbVbWPP8pf5qqMB8GA1UdIwQY MBaAFDUBdyRX4PgnuekgsAzRFIJKX6YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQt OWRkODI3MzVkYTNkLzEvQ0R0TnNlT2hUU3l2SG5CdFZ0WThfeWxfbXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQtOWRkODI3MzVkYTNk LzEvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVh4MA0G CSqGSIb3DQEBCwUAA4IBAQBkL/YMDykIDh8x3d/s604bHUhmOgAqVZQZKdRGp56u urzdDew/u0tOJXEClY/X26l01r97n9wN5VQuBrr8vl5SaX8x+VPO1IglKWYh59CE 8YvBCVB4i+zkIj9XTNC+ZWzu+2ac+3KXUMgs1HZXNz6zJ0xgYjea2AJaNv45lWn0 OpOYKOfQ2qd6Cy5pwMTjlqsgndHmpIZNTM2BaLXan8sXkbtK1Bil0vhALTcHZhTJ nzq63NW9l9HosRZmezYzABUvbxra/jl1F5S6eldS2n5enHqcmmHxj7U6Ddqh8cqC E4B9xc6QVZp1tTfKdKuvtZKv7RqKj5X9b1xuMyYNvvQU -----END CERTIFICATE-----Generated at Mon Feb 9 22:30:46 2026 by rpki-client