This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/88gFNkOA6YSy9sI2fn99ElsovkA.roa File: 88gFNkOA6YSy9sI2fn99ElsovkA.roa (raw, json) Hash identifier: ZANWqy+P9xDPBfLrgrp1V9zYbn8HdUcCqaqE8ef86gU= Subject key identifier: F3:C8:05:36:43:80:E9:84:B2:F6:C2:36:7E:7F:7D:12:5B:28:BE:40 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019BC2694BBB98C06D7439683930F7D26B44 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/88gFNkOA6YSy9sI2fn99ElsovkA.roa Signing time: Thu 15 Jan 2026 16:07:19 +0000 ROA not before: Thu 15 Jan 2026 16:07:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 195.211.190.0/24 maxlen: 24 2a01:7120:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:69:4b:bb:98:c0:6d:74:39:68:39:30:f7:d2:6b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 15 16:07:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c805364380e984b2f6c2367e7f7d125b28be40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:2e:e9:1c:15:10:04:3c:92:4a:6f:a3:32: 9e:d5:3b:09:5b:87:ac:c8:2a:9e:40:13:ff:81:5c: 93:00:39:7d:30:a1:f1:32:6d:6a:d4:2a:21:a2:59: 64:1b:ed:f2:d4:13:0d:e1:67:b7:3b:4d:d0:f7:30: a8:c5:16:9e:e5:6d:c7:79:e1:e0:5b:05:8c:a7:50: a0:80:85:54:84:ac:0b:74:13:a2:39:31:f5:c4:dc: 23:a4:bb:a3:75:70:85:95:b4:aa:71:13:cc:fe:ad: 25:07:0d:71:87:66:f8:08:a3:e7:1a:94:ed:28:22: 15:67:85:12:a3:69:8e:b0:54:62:4a:f5:46:ed:3a: 27:1f:ff:a0:70:87:5a:c1:55:28:5f:26:03:f2:5c: 21:ae:84:2c:f4:cc:21:da:f2:4c:4b:83:a2:9b:58: 66:74:6b:2d:8a:67:85:1a:e6:01:1b:25:fd:34:49: f0:85:dd:80:3d:f8:3f:1d:cb:92:8c:3f:ac:5d:6e: bf:45:06:91:c3:0a:8b:f5:50:32:e4:02:51:9a:57: 23:91:0a:a3:d5:75:8f:2b:fa:b4:60:ec:a6:4c:1d: 83:52:6d:47:dd:65:65:ef:66:53:a7:5f:7e:f4:43: c1:4b:30:38:5c:4b:0e:39:0c:1e:f4:a7:8b:8b:fe: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:05:36:43:80:E9:84:B2:F6:C2:36:7E:7F:7D:12:5B:28:BE:40 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/88gFNkOA6YSy9sI2fn99ElsovkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.190.0/24 IPv6: 2a01:7120:7::/48 Signature Algorithm: sha256WithRSAEncryption 25:9c:96:d0:7b:8c:95:e6:87:e0:85:bb:36:aa:ba:98:09:4d: 7c:0b:65:47:b7:b5:e4:90:eb:b0:65:d6:80:23:9c:58:3a:60: 16:d6:b8:58:c1:21:aa:76:69:9d:96:96:79:b6:ee:5b:22:00: 9f:f9:18:57:f3:e5:e3:bf:61:8a:97:b9:03:2a:8b:8d:57:9f: 0e:42:fe:f1:08:10:1e:56:b6:75:03:7c:3b:40:f6:a1:25:88: fb:ff:97:f6:60:34:e3:69:54:ca:a9:39:4d:b8:02:fe:e2:b2: 5f:85:b4:13:91:3a:4d:16:00:c9:7c:8c:32:9f:30:6c:2f:7d: ff:e9:cf:b5:7d:41:dd:63:0a:10:a0:49:4e:fd:c2:c6:0e:4e: a7:4f:b1:72:5f:26:24:ba:4a:48:d9:81:70:54:89:ef:bf:af: d2:72:4b:95:c2:91:11:fc:e2:99:62:7c:ea:1b:2d:77:9d:fc: da:70:ee:b2:d8:73:d1:0a:65:61:d8:52:39:dd:50:44:68:ae: ed:c5:c6:a6:1c:83:68:b4:2a:72:6f:66:fc:6b:ec:23:0d:e0: cf:a4:7d:62:03:3f:52:67:c4:ac:44:75:37:4f:ea:34:be:a5: 40:b2:20:c1:ad:31:04:e1:cc:f4:d1:e6:cd:be:36:43:0d:a1: ed:e1:c2:05 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZvCaUu7mMBtdDloOTD30mtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTE1MTYwNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2M4MDUzNjQzODBlOTg0YjJmNmMyMzY3ZTdmN2QxMjViMjhiZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo0u6RwVEAQ8kkpvozKe1TsJW4es yCqeQBP/gVyTADl9MKHxMm1q1CohollkG+3y1BMN4We3O03Q9zCoxRae5W3HeeHg WwWMp1CggIVUhKwLdBOiOTH1xNwjpLujdXCFlbSqcRPM/q0lBw1xh2b4CKPnGpTt KCIVZ4USo2mOsFRiSvVG7TonH/+gcIdawVUoXyYD8lwhroQs9Mwh2vJMS4Oim1hm dGstimeFGuYBGyX9NEnwhd2APfg/HcuSjD+sXW6/RQaRwwqL9VAy5AJRmlcjkQqj 1XWPK/q0YOymTB2DUm1H3WVl72ZTp19+9EPBSzA4XEsOOQwe9KeLi/4ygwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPPIBTZDgOmEsvbCNn5/fRJbKL5AMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvODhnRk5rT0E2WVN5OXNJMmZuOTlFbHNvdmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw9O+MA8E AgACMAkDBwAqAXEgAAcwDQYJKoZIhvcNAQELBQADggEBACWcltB7jJXmh+CFuzaq upgJTXwLZUe3teSQ67Bl1oAjnFg6YBbWuFjBIap2aZ2Wlnm27lsiAJ/5GFfz5eO/ YYqXuQMqi41Xnw5C/vEIEB5WtnUDfDtA9qEliPv/l/ZgNONpVMqpOU24Av7isl+F tBOROk0WAMl8jDKfMGwvff/pz7V9Qd1jChCgSU79wsYOTqdPsXJfJiS6SkjZgXBU ie+/r9JyS5XCkRH84plifOobLXed/Npw7rLYc9EKZWHYUjndUERoru3FxqYcg2i0 KnJvZvxr7CMN4M+kfWIDP1JnxKxEdTdP6jS+pUCyIMGtMQThzPTR5s2+NkMNoe3h wgU= -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:32 2026 by rpki-client