This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/cu3LpBG8kS_4KP69qmFhIuC6yn0.roa File: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (raw, json) Hash identifier: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c= Subject key identifier: 72:ED:CB:A4:11:BC:91:2F:F8:28:FE:BD:AA:61:61:22:E0:BA:CA:7D Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Certificate serial: 019B7834E689FE108F5C36301987B758F19D Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/cu3LpBG8kS_4KP69qmFhIuC6yn0.roa Signing time: Thu 01 Jan 2026 06:18:11 +0000 ROA not before: Thu 01 Jan 2026 06:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50289 IP address blocks: 88.84.193.0/24 maxlen: 24 88.84.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e6:89:fe:10:8f:5c:36:30:19:87:b7:58:f1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72edcba411bc912ff828febdaa616122e0baca7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:25:79:59:56:ff:5e:99:8d:07:39:99:fd: 7c:fa:4a:4d:c7:e0:3f:c6:96:1e:61:bb:7f:e6:6c: 48:fd:1c:da:b5:3c:d8:6f:fd:b8:86:3a:38:88:ba: 58:cd:24:d3:b8:99:44:da:8c:0b:f0:2d:11:36:ac: bb:b8:95:9d:bd:cd:b7:dc:0c:91:f7:86:f9:71:32: 78:c1:ed:fc:3b:e2:97:a4:6a:a0:10:0d:36:6d:cb: 03:9a:ee:0d:c3:29:ba:59:8e:2d:c6:f2:70:be:8c: 03:80:c4:70:05:15:ba:8e:73:8e:5d:1e:78:3a:6a: ab:69:5e:c2:dc:be:df:0b:a3:2e:05:39:a9:52:04: 47:33:c0:23:60:da:1e:fe:02:cd:1c:37:b9:93:3c: 3c:c7:68:13:77:81:8f:82:bb:21:c4:52:86:e4:e6: 7e:98:c0:d7:f9:95:63:f1:b8:35:da:74:98:09:af: 36:d2:e9:76:91:c3:bc:f1:c8:09:20:42:f0:c8:99: ea:64:43:fe:8a:e1:39:20:81:9f:ab:98:41:27:a4: 20:eb:57:a5:73:91:ad:73:66:0f:00:e2:5b:63:b4: 32:64:d9:77:03:2f:ac:7d:5b:b4:45:f0:c2:5a:79: d3:cb:0b:34:c9:fc:25:c4:57:32:10:32:49:fe:34: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:CB:A4:11:BC:91:2F:F8:28:FE:BD:AA:61:61:22:E0:BA:CA:7D X509v3 Authority Key Identifier: keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/cu3LpBG8kS_4KP69qmFhIuC6yn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.84.193.0/24 88.84.208.0/24 Signature Algorithm: sha256WithRSAEncryption 09:11:6b:83:10:0c:ae:c6:e9:6c:0c:a1:52:2c:35:3f:7f:d4: 43:46:c8:83:2a:23:05:79:05:33:cf:c8:a4:2a:f9:72:96:a5: 3f:dd:a5:db:6d:e2:f6:a4:b9:74:c6:3d:05:f7:e0:61:83:52: e9:83:89:d3:43:fb:c7:aa:15:47:22:d7:d9:a7:5d:eb:86:77: 20:87:a3:3d:18:96:6e:4e:bd:54:7d:d9:3f:44:61:26:1c:f8: 35:b8:bf:1a:8a:c9:37:cd:7e:2d:6f:e4:70:b7:b9:de:a1:16: 01:2e:f3:39:1e:01:fc:61:17:47:ea:f6:5e:e5:9a:54:75:d2: 7b:d4:9b:b8:94:88:49:3b:b3:a2:05:13:64:4a:a1:0a:c4:98: 52:71:eb:c8:fd:40:fd:b9:18:00:ae:14:92:85:10:b8:dc:cf: d6:41:76:b5:65:4e:76:f3:61:b0:9b:a3:2d:d7:cc:66:e6:2d: c6:ca:5e:a1:76:7a:dc:48:23:09:f5:87:46:62:0b:ac:e0:e9: 2b:8f:77:e3:d1:c3:d1:18:e6:c8:6d:28:7e:b0:6d:68:6d:39: e6:ae:80:c0:a7:e3:c4:80:2c:02:b6:f8:8f:18:ed:09:8b:fd: 56:84:a8:34:6b:b5:3d:4b:11:73:a4:24:43:66:a0:59:c0:d2: 32:52:42:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NOaJ/hCPXDYwGYe3WPGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh NGVhZmEwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVkY2JhNDExYmM5MTJmZjgyOGZlYmRhYTYxNjEyMmUwYmFjYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWsleVlW/16ZjQc5mf18+kpNx+A/ xpYeYbt/5mxI/RzatTzYb/24hjo4iLpYzSTTuJlE2owL8C0RNqy7uJWdvc233AyR 94b5cTJ4we38O+KXpGqgEA02bcsDmu4Nwym6WY4txvJwvowDgMRwBRW6jnOOXR54 OmqraV7C3L7fC6MuBTmpUgRHM8AjYNoe/gLNHDe5kzw8x2gTd4GPgrshxFKG5OZ+ mMDX+ZVj8bg12nSYCa820ul2kcO88cgJIELwyJnqZEP+iuE5IIGfq5hBJ6Qg61el c5Gtc2YPAOJbY7QyZNl3Ay+sfVu0RfDCWnnTyws0yfwlxFcyEDJJ/jTSEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHLty6QRvJEv+Cj+vaphYSLgusp9MB8GA1UdIwQY MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt NzM1MWY4NjliNDJiLzEvY3UzTHBCRzhrU180S1A2OXFtRmhJdUM2eW4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWFTBAwQA WFTQMA0GCSqGSIb3DQEBCwUAA4IBAQAJEWuDEAyuxulsDKFSLDU/f9RDRsiDKiMF eQUzz8ikKvlylqU/3aXbbeL2pLl0xj0F9+Bhg1Lpg4nTQ/vHqhVHItfZp13rhncg h6M9GJZuTr1Ufdk/RGEmHPg1uL8aisk3zX4tb+Rwt7neoRYBLvM5HgH8YRdH6vZe 5ZpUddJ71Ju4lIhJO7OiBRNkSqEKxJhScevI/UD9uRgArhSShRC43M/WQXa1ZU52 82Gwm6Mt18xm5i3Gyl6hdnrcSCMJ9YdGYgus4Okrj3fj0cPRGObIbSh+sG1obTnm roDAp+PEgCwCtviPGO0Ji/1WhKg0a7U9SxFzpCRDZqBZwNIyUkJ3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:42 2026 by rpki-client