This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/tsdEYosuda0mGshkl10-Ftg6W4Y.roa File: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (raw, json) Hash identifier: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM= Subject key identifier: B6:C7:44:62:8B:2E:75:AD:26:1A:C8:64:97:5D:3E:16:D8:3A:5B:86 Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Certificate serial: 019B77C7235FA3E0C13FBBF40E36058807C8 Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/tsdEYosuda0mGshkl10-Ftg6W4Y.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39841 IP address blocks: 185.88.4.0/24 maxlen: 24 185.88.5.0/24 maxlen: 24 185.88.6.0/24 maxlen: 24 185.88.7.0/24 maxlen: 24 2a03:7d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:23:5f:a3:e0:c1:3f:bb:f4:0e:36:05:88:07:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6c744628b2e75ad261ac864975d3e16d83a5b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:9a:4d:5d:bb:e8:26:eb:71:98:5c:a9:e4: fb:e8:20:30:c1:10:2d:f4:5d:db:64:ea:9f:e9:d4: 37:b5:5c:fe:3c:21:42:ae:01:e3:36:19:19:6a:5d: b0:79:32:39:6c:35:fe:b1:12:f8:b4:56:f0:f6:a8: 8c:97:7f:ae:55:6f:9e:d4:9d:c7:aa:d4:09:1f:f4: 30:9b:b8:fa:ff:8e:28:84:79:8d:36:e9:9a:2c:80: ef:41:62:f2:fd:2e:cc:9a:5b:c0:d7:10:98:e5:f1: 8f:e7:6c:63:08:56:ae:1f:ac:69:47:5c:2f:fc:44: f6:09:23:fc:1e:0e:45:fd:b3:00:f2:ab:8d:41:5d: 9f:03:50:78:e2:07:68:04:4c:52:8d:4f:0a:48:3e: 98:64:3d:54:9f:aa:9f:98:fe:3f:94:52:51:8d:2d: 37:d2:57:42:1c:d5:62:e1:51:fa:69:67:b5:0a:87: 2a:2a:e5:06:0d:29:9d:02:23:78:2b:81:76:b0:b7: b2:f1:36:8b:a5:b6:d5:e7:4d:c1:9a:a4:28:25:14: 65:b2:f1:22:b7:47:13:86:6e:1f:ef:1e:8a:f2:ee: 82:26:59:83:80:15:b7:05:e6:56:03:5d:c2:88:61: 30:33:4b:bb:f9:7f:89:d0:3b:f8:54:d7:5a:74:b5: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:44:62:8B:2E:75:AD:26:1A:C8:64:97:5D:3E:16:D8:3A:5B:86 X509v3 Authority Key Identifier: keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/tsdEYosuda0mGshkl10-Ftg6W4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.4.0/22 IPv6: 2a03:7d20::/32 Signature Algorithm: sha256WithRSAEncryption 3b:3d:d8:7d:50:24:e4:1b:03:9a:1d:75:cc:0d:2c:de:93:34: ec:1e:69:e7:fe:83:fd:5e:a9:14:f8:d1:3d:75:31:03:bb:9b: 8e:0f:08:f9:4a:a1:14:a1:a9:2f:1a:c1:04:83:58:5d:a0:80: eb:6f:a6:3b:30:44:dc:80:87:6b:8f:99:ec:e2:7f:08:3e:b7: b5:db:47:95:b4:5c:48:1d:e5:db:6e:da:87:73:a3:0f:22:38: f2:b3:26:08:e6:6d:52:24:b7:c4:64:5c:6a:a5:0b:ad:d4:86: 28:eb:85:25:b2:ba:8e:f8:27:83:25:dc:74:66:10:27:03:ac: 65:a4:31:09:e1:10:27:c8:c9:71:33:c1:d8:38:5e:a8:83:48: e8:98:15:de:6d:a0:0d:9d:2c:ce:6e:e2:d1:44:ac:2f:72:19: b0:d6:a9:c9:78:e4:29:40:c0:b4:50:cd:1c:e0:de:f1:c2:5f: 68:bd:f2:dd:c3:b5:1e:15:92:ac:fc:ce:6e:35:6e:10:58:ac: 1c:6c:55:73:5d:0b:bc:f0:b6:78:4f:e4:d6:f5:ca:fd:42:02: a2:65:c0:5d:01:4c:1c:94:d8:f1:ae:29:25:ef:cd:b5:06:8e: 92:a0:92:07:c0:e5:fa:ed:22:5e:58:9d:e2:87:9c:a0:ab:92: db:97:f6:da -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xyNfo+DBP7v0DjYFiAfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj ODg0ZTgwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmM3NDQ2MjhiMmU3NWFkMjYxYWM4NjQ5NzVkM2UxNmQ4M2E1Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5+aTV276CbrcZhcqeT76CAwwRAt 9F3bZOqf6dQ3tVz+PCFCrgHjNhkZal2weTI5bDX+sRL4tFbw9qiMl3+uVW+e1J3H qtQJH/Qwm7j6/44ohHmNNumaLIDvQWLy/S7MmlvA1xCY5fGP52xjCFauH6xpR1wv /ET2CSP8Hg5F/bMA8quNQV2fA1B44gdoBExSjU8KSD6YZD1Un6qfmP4/lFJRjS03 0ldCHNVi4VH6aWe1CocqKuUGDSmdAiN4K4F2sLey8TaLpbbV503BmqQoJRRlsvEi t0cThm4f7x6K8u6CJlmDgBW3BeZWA13CiGEwM0u7+X+J0Dv4VNdadLUDIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLbHRGKLLnWtJhrIZJddPhbYOluGMB8GA1UdIwQY MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt OGIzNmU5ZDA2M2ExLzEvdHNkRVlvc3VkYTBtR3Noa2wxMC1GdGc2VzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVgEMA0E AgACMAcDBQAqA30gMA0GCSqGSIb3DQEBCwUAA4IBAQA7Pdh9UCTkGwOaHXXMDSze kzTsHmnn/oP9XqkU+NE9dTEDu5uODwj5SqEUoakvGsEEg1hdoIDrb6Y7METcgIdr j5ns4n8IPre120eVtFxIHeXbbtqHc6MPIjjysyYI5m1SJLfEZFxqpQut1IYo64Ul srqO+CeDJdx0ZhAnA6xlpDEJ4RAnyMlxM8HYOF6og0jomBXebaANnSzObuLRRKwv chmw1qnJeOQpQMC0UM0c4N7xwl9ovfLdw7UeFZKs/M5uNW4QWKwcbFVzXQu88LZ4 T+TW9cr9QgKiZcBdAUwclNjxrikl7821Bo6SoJIHwOX67SJeWJ3ih5ygq5Lbl/ba -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:49 2026 by rpki-client