This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/h_smV6gsLkLSD6Q6fF9sfU2F-u8.roa File: h_smV6gsLkLSD6Q6fF9sfU2F-u8.roa (raw, json) Hash identifier: WMbb+VYYD5my9KDPrrb9zJEv0LdMFm0p4R1p1pMLPg8= Subject key identifier: 87:FB:26:57:A8:2C:2E:42:D2:0F:A4:3A:7C:5F:6C:7D:4D:85:FA:EF Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6A031F3788F8A87F2B0C474ECFF97 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/h_smV6gsLkLSD6Q6fF9sfU2F-u8.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401783 IP address blocks: 88.148.35.0/24 maxlen: 24 88.148.40.0/23 maxlen: 23 88.148.44.0/24 maxlen: 24 88.148.45.0/24 maxlen: 24 88.148.55.0/24 maxlen: 24 88.148.95.0/24 maxlen: 24 88.148.109.0/24 maxlen: 24 88.148.117.0/24 maxlen: 24 94.76.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:31:f3:78:8f:8a:87:f2:b0:c4:74:ec:ff:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87fb2657a82c2e42d20fa43a7c5f6c7d4d85faef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:c2:be:2c:a8:40:ea:5b:ac:0a:30:03:45: 59:f3:b0:57:aa:65:f6:93:e0:5a:18:fe:93:67:f5: 4e:13:36:e2:8e:8c:17:25:59:47:3a:32:6c:64:43: 5a:41:4c:4e:68:73:37:1c:a0:fe:1d:1d:f0:56:0f: 97:87:1c:78:4e:fa:0c:32:89:6c:b9:99:78:55:b5: b7:80:60:f8:73:76:06:32:6e:fa:d7:de:e3:16:b0: 18:e3:6d:a7:85:07:ef:b0:01:7f:ea:ca:08:d6:03: 6c:ec:9c:65:0b:a9:fb:a5:50:d5:63:e0:9f:e9:60: 3b:46:29:43:c8:83:c0:62:4c:a6:c0:1a:e5:d3:b3: bd:05:9a:05:31:e4:ff:cc:52:bc:53:6c:38:5e:1a: 70:5e:6c:d4:9d:73:03:07:48:d9:ae:da:19:39:de: 07:c8:40:41:3b:43:15:5e:d4:fe:31:e0:85:f4:dc: 0a:7f:60:2b:f1:ec:b7:7b:17:c6:a0:18:84:aa:5a: ad:cb:28:14:33:97:e9:3f:1c:5d:24:69:78:eb:da: 0d:59:1b:04:cb:0c:ef:07:fc:ad:4b:99:84:0c:b8: 62:7b:72:2d:37:f7:32:93:b9:5b:77:80:dd:f8:26: 42:c1:ce:11:ef:5d:36:33:1b:8d:22:de:d5:f1:fd: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:26:57:A8:2C:2E:42:D2:0F:A4:3A:7C:5F:6C:7D:4D:85:FA:EF X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/h_smV6gsLkLSD6Q6fF9sfU2F-u8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.35.0/24 88.148.40.0/23 88.148.44.0/23 88.148.55.0/24 88.148.95.0/24 88.148.109.0/24 88.148.117.0/24 94.76.158.0/24 Signature Algorithm: sha256WithRSAEncryption cf:39:01:51:fd:ab:4c:6c:01:b5:87:8c:65:99:5c:64:a3:18: c2:b0:ee:b7:f9:8b:f3:c1:bc:cf:5b:73:6d:98:1e:88:e4:d0: 31:e0:bd:e0:a2:56:24:11:52:c3:d6:42:01:cc:60:47:78:74: 81:ce:75:ed:0c:f1:88:8d:8e:94:64:a2:95:47:4b:e6:52:16: 3c:18:3c:ef:5d:2d:a5:f1:5a:e8:a8:a2:9b:7c:32:d8:c8:64: 01:bd:95:37:c9:c8:09:de:5e:98:a0:bf:54:38:b1:8d:6f:16: 04:b0:74:cf:5b:39:57:fb:1c:e0:34:1f:c6:bf:2e:08:6e:21: 20:68:db:a3:20:73:65:04:f3:0b:d9:84:6d:b3:6c:f2:77:1b: 85:ac:c7:20:d8:e5:d3:90:e1:bf:24:79:3d:48:f8:73:c8:27: 52:42:36:ec:e8:ce:94:62:75:e8:38:94:1f:90:1e:00:1a:18: 44:73:04:4f:47:9b:8a:38:df:bd:55:a9:f4:a9:f9:e0:4c:e9: 28:fc:85:76:4b:27:31:48:61:43:90:d5:1a:fa:30:ed:28:c2: 5a:4c:c6:bd:07:38:31:ba:0d:3c:e5:4f:b0:bb:2e:c1:15:73: c6:1d:c4:be:cc:4c:15:6f:ef:89:ac:07:da:7d:66:5f:ce:a6: 12:40:e2:87 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3xqAx83iPiofysMR07P+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2ZiMjY1N2E4MmMyZTQyZDIwZmE0M2E3YzVmNmM3ZDRkODVmYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SLCviyoQOpbrAowA0VZ87BXqmX2 k+BaGP6TZ/VOEzbijowXJVlHOjJsZENaQUxOaHM3HKD+HR3wVg+Xhxx4TvoMMols uZl4VbW3gGD4c3YGMm76197jFrAY422nhQfvsAF/6soI1gNs7JxlC6n7pVDVY+Cf 6WA7RilDyIPAYkymwBrl07O9BZoFMeT/zFK8U2w4XhpwXmzUnXMDB0jZrtoZOd4H yEBBO0MVXtT+MeCF9NwKf2Ar8ey3exfGoBiEqlqtyygUM5fpPxxdJGl469oNWRsE ywzvB/ytS5mEDLhie3ItN/cyk7lbd4Dd+CZCwc4R7102MxuNIt7V8f3DhQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFIf7JleoLC5C0g+kOnxfbH1NhfrvMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvaF9zbVY2Z3NMa0xTRDZRNmZGOXNmVTJGLXU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAWJQjAwQB WJQoAwQBWJQsAwQAWJQ3AwQAWJRfAwQAWJRtAwQAWJR1AwQAXkyeMA0GCSqGSIb3 DQEBCwUAA4IBAQDPOQFR/atMbAG1h4xlmVxkoxjCsO63+YvzwbzPW3NtmB6I5NAx 4L3golYkEVLD1kIBzGBHeHSBznXtDPGIjY6UZKKVR0vmUhY8GDzvXS2l8VroqKKb fDLYyGQBvZU3ycgJ3l6YoL9UOLGNbxYEsHTPWzlX+xzgNB/Gvy4IbiEgaNujIHNl BPML2YRts2zydxuFrMcg2OXTkOG/JHk9SPhzyCdSQjbs6M6UYnXoOJQfkB4AGhhE cwRPR5uKON+9Van0qfngTOko/IV2SycxSGFDkNUa+jDtKMJaTMa9Bzgxug085U+w uy7BFXPGHcS+zEwVb++JrAfafWZfzqYSQOKH -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:52 2026 by rpki-client