This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa File: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (raw, json) Hash identifier: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw= Subject key identifier: 2D:C3:3D:D1:53:67:BE:F5:7E:0A:6D:4E:68:8B:2B:10:78:50:6B:C8 Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c Certificate serial: 019B7C11AEEC7736B60279D9F913E311A42B Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204814 IP address blocks: 88.218.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ae:ec:77:36:b6:02:79:d9:f9:13:e3:11:a4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dc33dd15367bef57e0a6d4e688b2b1078506bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:1d:7a:04:8b:e4:e4:0e:a4:6a:ed:56:50: 90:ad:85:50:54:ae:25:b1:f2:75:0d:9d:00:73:84: 5b:06:5c:09:a6:a3:ec:1d:e3:2d:8f:a3:e9:ed:84: 37:6b:a3:d3:4e:57:6d:d8:52:5b:0b:97:b5:c6:2d: b9:ae:c7:aa:4b:5c:03:d4:dc:a1:98:b6:b3:55:81: 6e:87:93:58:b8:4b:16:ef:54:ed:e5:94:4c:9c:fc: 71:9b:9c:22:d3:59:12:c6:98:53:79:28:ca:07:9d: 47:ca:58:ee:70:11:a7:f8:76:2e:01:e8:83:86:c5: 13:d0:2b:37:72:cc:b9:89:85:2f:92:e0:5c:dc:d4: 05:db:f1:9e:d7:e1:00:e0:ff:8a:26:e4:dd:54:95: 8e:ce:ef:80:86:1d:b9:bd:d3:ab:c5:a7:b8:10:8e: 7d:26:bd:a4:e1:d3:7a:0d:18:1e:78:89:61:6d:6d: 64:b0:7a:77:18:97:70:4e:e8:c7:c7:0c:62:b2:2f: 97:10:74:23:4f:64:36:50:c9:8d:ac:33:54:a8:8b: 14:21:f4:ac:8c:c4:2e:92:60:33:30:2f:d0:d5:0b: b7:ae:e8:56:a7:b7:6a:3b:b8:53:99:4d:6c:86:4c: f3:50:a9:f6:87:22:3b:c4:21:4e:bd:04:39:a4:7b: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:3D:D1:53:67:BE:F5:7E:0A:6D:4E:68:8B:2B:10:78:50:6B:C8 X509v3 Authority Key Identifier: keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.223.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:72:f3:01:3a:63:a6:71:4d:ac:57:10:3f:a3:61:b5:3b:47: f7:18:c4:3c:38:9a:b4:0c:de:7a:a1:df:d4:a7:f4:8d:36:f3: 23:a2:d5:16:c6:0a:2b:a7:dd:52:d8:e3:e0:33:46:9c:9c:30: 6e:66:4f:5e:ba:17:76:90:49:39:7b:c6:3f:f3:e9:53:a6:13: af:27:4d:c3:56:4f:96:dc:d7:26:b0:79:c3:19:d3:84:3f:f2: 62:a3:b6:aa:32:ed:fe:34:93:26:90:9d:49:fe:2f:2e:41:55: 8a:c6:0d:bf:31:cf:1c:2b:36:31:98:41:df:0f:1a:9e:fc:23: 09:0f:99:ef:13:8f:02:2f:70:dc:6d:b8:1d:5d:95:1f:6c:61: cb:3c:30:91:f2:fa:50:e5:6c:f4:fa:43:c6:70:e3:a9:aa:6c: 12:2e:23:a8:e1:d2:d7:94:fc:7d:da:9c:88:26:02:13:5c:8c: a4:44:dd:38:59:c7:84:2e:3b:ea:47:4e:d2:84:09:01:0a:83: 94:06:eb:2d:34:db:8f:b4:54:d9:6a:77:9d:23:70:98:d7:14: c8:e2:b4:d1:9c:85:df:4f:13:7e:91:3e:f9:69:74:30:25:f9: 10:23:34:8d:cc:be:e9:ca:97:60:f5:d1:b3:c7:ca:03:02:56: 26:9f:20:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ea7sdza2AnnZ+RPjEaQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm YzA3MGMwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGMzM2RkMTUzNjdiZWY1N2UwYTZkNGU2ODhiMmIxMDc4NTA2YmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y8degSL5OQOpGrtVlCQrYVQVK4l sfJ1DZ0Ac4RbBlwJpqPsHeMtj6Pp7YQ3a6PTTldt2FJbC5e1xi25rseqS1wD1Nyh mLazVYFuh5NYuEsW71Tt5ZRMnPxxm5wi01kSxphTeSjKB51HyljucBGn+HYuAeiD hsUT0Cs3csy5iYUvkuBc3NQF2/Ge1+EA4P+KJuTdVJWOzu+Ahh25vdOrxae4EI59 Jr2k4dN6DRgeeIlhbW1ksHp3GJdwTujHxwxisi+XEHQjT2Q2UMmNrDNUqIsUIfSs jMQukmAzMC/Q1Qu3ruhWp7dqO7hTmU1shkzzUKn2hyI7xCFOvQQ5pHs9uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3DPdFTZ771fgptTmiLKxB4UGvIMB8GA1UdIwQY MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct ZTU3NDQwMjYwYmUwLzEvTGNNOTBWTm52dlYtQ20xT2FJc3JFSGhRYThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNrfMA0G CSqGSIb3DQEBCwUAA4IBAQAPcvMBOmOmcU2sVxA/o2G1O0f3GMQ8OJq0DN56od/U p/SNNvMjotUWxgorp91S2OPgM0acnDBuZk9euhd2kEk5e8Y/8+lTphOvJ03DVk+W 3NcmsHnDGdOEP/Jio7aqMu3+NJMmkJ1J/i8uQVWKxg2/Mc8cKzYxmEHfDxqe/CMJ D5nvE48CL3DcbbgdXZUfbGHLPDCR8vpQ5Wz0+kPGcOOpqmwSLiOo4dLXlPx92pyI JgITXIykRN04WceELjvqR07ShAkBCoOUBustNNuPtFTZanedI3CY1xTI4rTRnIXf TxN+kT75aXQwJfkQIzSNzL7pypdg9dGzx8oDAlYmnyDD -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client