This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/87ELvGR-tVd6OIalv11-VasMdI0.roa File: 87ELvGR-tVd6OIalv11-VasMdI0.roa (raw, json) Hash identifier: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM= Subject key identifier: F3:B1:0B:BC:64:7E:B5:57:7A:38:86:A5:BF:5D:7E:55:AB:0C:74:8D Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B7DCAECD90299A9409B71B8F232769F19 Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/87ELvGR-tVd6OIalv11-VasMdI0.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20568 IP address blocks: 45.88.204.0/22 maxlen: 22 45.88.204.0/24 maxlen: 24 45.88.205.0/24 maxlen: 24 45.88.206.0/24 maxlen: 24 45.88.207.0/24 maxlen: 24 91.144.100.0/24 maxlen: 24 2a03:9900:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ec:d9:02:99:a9:40:9b:71:b8:f2:32:76:9f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3b10bbc647eb5577a3886a5bf5d7e55ab0c748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:ac:ba:74:e6:8a:e0:3f:de:d6:12:35:81: a4:3c:2d:b9:0b:2e:fc:65:07:40:03:f7:42:94:1b: da:74:df:c3:4e:69:54:e2:93:4a:f1:fa:33:58:29: 97:c8:9f:d9:77:1e:75:e3:15:6e:b5:e9:9b:a0:01: 76:74:8a:77:43:77:b6:6e:77:69:e9:29:db:1e:b6: 7b:53:97:ab:46:1d:79:6a:a6:ce:ee:a9:59:9d:48: f8:08:a2:62:8d:70:9e:53:f5:78:4b:26:84:c3:82: 6b:1c:23:b0:16:42:8e:c9:55:f8:25:33:a4:6b:9a: 65:e1:6d:84:9a:c9:89:c3:c1:30:49:14:ae:54:73: 3e:ea:0a:61:69:62:14:29:19:a5:86:ba:1b:6e:d8: 29:c4:cf:bc:2e:55:ad:fa:89:9e:d5:45:13:c9:b8: 80:a8:10:76:af:fe:9c:93:96:f2:1a:9c:ee:ab:32: bb:89:e1:5d:b0:5d:37:99:cf:fb:29:9f:19:05:bd: 11:37:14:36:99:4e:76:5d:04:ec:f8:80:79:32:f8: 43:8f:c6:ef:23:67:87:ed:67:6a:38:19:11:f8:d4: c6:c6:03:2f:00:05:e3:8a:a0:3f:d6:14:98:e6:e0: 20:c3:7f:60:d8:e6:f2:94:d8:c9:66:f1:45:f6:72: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B1:0B:BC:64:7E:B5:57:7A:38:86:A5:BF:5D:7E:55:AB:0C:74:8D X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/87ELvGR-tVd6OIalv11-VasMdI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.204.0/22 91.144.100.0/24 IPv6: 2a03:9900:100::/48 Signature Algorithm: sha256WithRSAEncryption 0e:4b:36:95:b4:bc:21:65:5f:79:20:cc:16:4f:e3:43:61:d8: 4c:43:6d:ed:c2:58:0c:f8:2f:f2:55:d2:b1:4c:01:c4:88:3d: 6d:d7:f4:38:ad:6b:2c:4b:0b:9e:0f:94:93:90:8e:35:68:c3: f5:a6:26:07:e0:c2:d0:82:8a:2a:ef:80:08:88:6e:1b:9f:14: 37:a6:76:2d:f1:30:ea:05:eb:c1:36:b8:6d:3a:2f:1e:1c:18: 61:66:6f:30:ad:d2:93:ac:58:79:51:e7:36:52:33:95:cc:02: e9:8e:b1:53:45:68:fa:93:e5:4a:6f:45:dd:63:c3:51:6a:9d: 8c:7a:e9:35:77:be:7c:bb:91:9b:11:5d:8c:f7:b6:46:ff:dc: 77:db:1b:09:67:51:84:9f:07:56:57:7a:23:f6:4c:3d:2c:1d: 2b:f5:60:fd:e9:09:62:30:e3:16:fc:15:ee:7c:4f:45:f7:ee: 1d:f5:40:5a:cd:95:ff:62:82:35:6c:75:4d:58:3a:ca:b7:6b: 95:e3:dc:f6:e6:ab:b5:c5:99:60:50:53:2c:c2:ec:d0:9b:28: f2:72:07:a6:83:63:c1:88:e3:9a:c6:d8:df:f6:2e:45:f8:9e: 1a:ea:92:07:56:7a:f8:ef:4d:42:19:5b:91:ea:ca:c7:37:9d: b6:8f:83:44 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9yuzZApmpQJtxuPIydp8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2IxMGJiYzY0N2ViNTU3N2EzODg2YTViZjVkN2U1NWFiMGM3NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlesunTmiuA/3tYSNYGkPC25Cy78 ZQdAA/dClBvadN/DTmlU4pNK8fozWCmXyJ/Zdx514xVutemboAF2dIp3Q3e2bndp 6SnbHrZ7U5erRh15aqbO7qlZnUj4CKJijXCeU/V4SyaEw4JrHCOwFkKOyVX4JTOk a5pl4W2EmsmJw8EwSRSuVHM+6gphaWIUKRmlhrobbtgpxM+8LlWt+ome1UUTybiA qBB2r/6ck5byGpzuqzK7ieFdsF03mc/7KZ8ZBb0RNxQ2mU52XQTs+IB5MvhDj8bv I2eH7WdqOBkR+NTGxgMvAAXjiqA/1hSY5uAgw39g2ObylNjJZvFF9nIRaQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFPOxC7xkfrVXejiGpb9dflWrDHSNMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvODdFTHZHUi10VmQ2T0lhbHYxMS1WYXNNZEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLVjMAwQA W5BkMA8EAgACMAkDBwAqA5kAAQAwDQYJKoZIhvcNAQELBQADggEBAA5LNpW0vCFl X3kgzBZP40Nh2ExDbe3CWAz4L/JV0rFMAcSIPW3X9DitayxLC54PlJOQjjVow/Wm JgfgwtCCiirvgAiIbhufFDemdi3xMOoF68E2uG06Lx4cGGFmbzCt0pOsWHlR5zZS M5XMAumOsVNFaPqT5UpvRd1jw1FqnYx66TV3vny7kZsRXYz3tkb/3HfbGwlnUYSf B1ZXeiP2TD0sHSv1YP3pCWIw4xb8Fe58T0X37h31QFrNlf9igjVsdU1YOsq3a5Xj 3Pbmq7XFmWBQUyzC7NCbKPJyB6aDY8GI45rG2N/2LkX4nhrqkgdWevjvTUIZW5Hq ysc3nbaPg0Q= -----END CERTIFICATE-----Generated at Tue Feb 3 00:01:26 2026 by rpki-client