This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa File: 1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa (raw, json) Hash identifier: 5q6qg65y9JwUuOw3HEGI3kuvz/rp8QoSa+GfSi94XUM= Subject key identifier: F9:9F:3C:00:C5:26:3F:87:FD:8C:23:1C:AB:B5:BE:4F:E4:91:E7:2C Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Certificate serial: 019B797F1D1DBAE97F9B56BE73AE88ED3018 Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214005 IP address blocks: 80.85.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1d:1d:ba:e9:7f:9b:56:be:73:ae:88:ed:30:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f99f3c00c5263f87fd8c231cabb5be4fe491e72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:03:11:06:cc:25:68:2e:1c:df:56:d7:c0: 9f:18:81:ac:b4:24:cd:14:88:d3:e9:94:b0:01:69: 73:6c:44:3c:99:67:91:dc:fb:8b:71:51:59:3b:6e: f0:30:dd:32:8e:ab:a6:06:62:13:fc:7b:3d:99:92: 1c:27:17:15:2b:6d:59:69:8d:75:9f:80:e7:b6:14: ab:89:42:c2:d7:5b:2d:a7:6e:63:2b:27:3d:80:5f: 36:00:2e:f8:16:87:14:bc:59:a3:ad:8a:9b:4c:7d: c9:bf:34:a2:6d:59:37:8a:5b:69:bb:93:0b:2d:bc: 71:b1:8c:9c:2b:69:7f:55:60:ee:15:86:59:f8:c8: d5:0d:da:82:10:0d:fc:e6:2d:1a:66:08:b5:02:a0: 17:5d:09:9b:c4:ae:e6:f2:e1:8b:6b:fd:5a:54:b4: 5f:43:4e:8b:30:5c:df:cf:88:6e:1b:f1:21:d3:b0: fb:4b:a7:5f:0e:fe:e2:8f:8b:e9:9b:83:c4:c2:16: ce:92:ce:6d:79:b4:b3:16:58:b2:ef:d1:ee:58:30: 37:b1:7f:8d:85:ce:d6:66:57:56:5b:8d:e2:e6:5b: 5a:a5:ae:80:70:91:36:26:36:b1:0d:3a:d1:ae:81: a3:07:fb:2f:28:8f:b7:a8:45:7b:ce:76:bc:54:62: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9F:3C:00:C5:26:3F:87:FD:8C:23:1C:AB:B5:BE:4F:E4:91:E7:2C X509v3 Authority Key Identifier: keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/1-Z88AMUmP4f9jCMcq7W-T-SR5yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.208.0/24 Signature Algorithm: sha256WithRSAEncryption 74:97:bc:3a:5a:3a:66:e7:87:a1:54:7d:43:d8:e9:69:e0:2b: 06:cd:40:ef:ad:99:02:51:3a:45:61:69:53:48:22:92:f9:be: da:6f:c1:77:56:dd:84:ea:f9:30:d2:4b:de:c8:2c:54:d8:f2: 98:d6:a7:83:9e:8b:78:35:44:79:6e:30:be:30:0c:3d:f5:18: 50:2a:cb:13:bb:05:32:03:13:e6:9e:6a:d4:1f:d0:5e:25:33: 76:80:6b:56:5a:ed:a9:62:97:64:b2:ae:ec:ed:fd:f7:99:50: 45:8e:82:75:f9:cd:5e:51:1f:ba:27:86:8a:86:82:11:a0:52: f9:4f:63:b8:7b:2a:7f:34:f0:fb:bd:df:99:3b:f1:75:42:09: 35:6f:43:65:5e:b4:c0:f9:e9:9f:35:d2:7e:8f:12:34:e1:b6: b8:59:d8:b4:a1:59:0a:41:e9:ff:b9:09:8b:b9:88:cd:e7:14: 61:17:74:fd:3e:64:ed:c4:00:b3:d1:6e:64:77:3f:d0:3d:86: 14:e3:56:d8:c8:49:39:12:4a:cf:3e:61:6a:d1:dc:81:01:bc: ae:cd:f3:a3:c8:44:97:c7:00:d1:b2:26:d2:9b:e4:5b:6d:4c: 3a:21:1c:af:f8:9d:6e:ed:f9:91:56:2d:58:a9:83:d1:b4:58: 25:b0:e9:4f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fx0duul/m1a+c66I7TAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi ZDZlZGYwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTlmM2MwMGM1MjYzZjg3ZmQ4YzIzMWNhYmI1YmU0ZmU0OTFlNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmgDEQbMJWguHN9W18CfGIGstCTN FIjT6ZSwAWlzbEQ8mWeR3PuLcVFZO27wMN0yjqumBmIT/Hs9mZIcJxcVK21ZaY11 n4DnthSriULC11stp25jKyc9gF82AC74FocUvFmjrYqbTH3JvzSibVk3iltpu5ML LbxxsYycK2l/VWDuFYZZ+MjVDdqCEA385i0aZgi1AqAXXQmbxK7m8uGLa/1aVLRf Q06LMFzfz4huG/Eh07D7S6dfDv7ij4vpm4PEwhbOks5tebSzFliy79HuWDA3sX+N hc7WZldWW43i5ltapa6AcJE2JjaxDTrRroGjB/svKI+3qEV7zna8VGK3TQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmfPADFJj+H/YwjHKu1vk/kkecsMB8GA1UdIwQY MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt MGVmMWNhYzc0MThkLzEvMS1aODhBTVVtUDRmOWpDTWNxN1ctVC1TUjV5dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvMzdlMzYzLTg0ZDEtNDcwZS05NmEyLTBlZjFjYWM3NDE4 ZC8xL3c3UTFIZ3BKWENidjNHNUJYd3V4aWZ1OWJ0OC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBV0DAN BgkqhkiG9w0BAQsFAAOCAQEAdJe8Olo6ZueHoVR9Q9jpaeArBs1A762ZAlE6RWFp U0gikvm+2m/Bd1bdhOr5MNJL3sgsVNjymNang56LeDVEeW4wvjAMPfUYUCrLE7sF MgMT5p5q1B/QXiUzdoBrVlrtqWKXZLKu7O3995lQRY6CdfnNXlEfuieGioaCEaBS +U9juHsqfzTw+73fmTvxdUIJNW9DZV60wPnpnzXSfo8SNOG2uFnYtKFZCkHp/7kJ i7mIzecUYRd0/T5k7cQAs9FuZHc/0D2GFONW2MhJORJKzz5hatHcgQG8rs3zo8hE l8cA0bIm0pvkW21MOiEcr/idbu35kVYtWKmD0bRYJbDpTw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:21 2026 by rpki-client