This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1Yce3IrAhL8MSsHqz2qStuagq3Y.roa File: 1Yce3IrAhL8MSsHqz2qStuagq3Y.roa (raw, json) Hash identifier: JM0+fxICVJ+nXNSlLQoqhGRHKfQgePd1EoU0YBA3sak= Subject key identifier: D5:87:1E:DC:8A:C0:84:BF:0C:4A:C1:EA:CF:6A:92:B6:E6:A0:AB:76 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809CEBE15A9ABAC61B42F8250C43CE Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1Yce3IrAhL8MSsHqz2qStuagq3Y.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 88.216.57.0/24 maxlen: 24 88.216.181.0/24 maxlen: 24 88.216.228.0/22 maxlen: 24 88.216.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9c:eb:e1:5a:9a:ba:c6:1b:42:f8:25:0c:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5871edc8ac084bf0c4ac1eacf6a92b6e6a0ab76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:bc:5f:1c:3b:72:c5:06:b1:4f:0a:ad:2f: 43:27:fc:81:ac:84:cf:45:72:fb:ba:ec:16:37:20: aa:03:ae:82:6b:bd:0c:fc:cc:e7:33:83:32:ae:99: 9d:41:ef:59:21:51:4d:f5:15:31:22:f6:44:28:63: d8:42:58:85:78:91:9c:2c:1c:f1:13:16:2b:b0:25: 50:0a:55:fb:89:13:64:60:83:2d:7d:94:cd:f8:3f: f2:e9:c1:44:88:29:44:b2:5d:77:f1:ad:bc:e4:49: f8:47:cc:1d:e1:3e:70:d9:02:2f:56:1c:3d:6a:7f: cb:6d:d2:87:6f:c7:3e:6b:8a:3a:1a:6a:f4:51:a3: 3c:b0:22:ce:e2:f3:cf:c3:76:f8:99:69:96:1c:90: 0a:53:4c:56:f4:1d:7a:21:72:51:c6:42:86:7b:53: ff:f9:de:38:63:36:6d:08:9a:91:84:de:c3:0f:dd: b7:3c:f9:2b:c8:42:7c:aa:3f:6d:b9:aa:95:0e:c1: 9c:c0:ab:b6:06:4a:05:a5:46:d1:75:d9:c6:68:31: 64:56:8e:00:2c:b2:b9:30:aa:e0:4f:ff:93:96:5a: 73:01:a4:46:45:4b:80:b9:94:9b:bc:67:ef:01:6e: 23:22:18:ce:f9:5a:6c:d5:a2:23:f5:74:c4:ca:18: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:1E:DC:8A:C0:84:BF:0C:4A:C1:EA:CF:6A:92:B6:E6:A0:AB:76 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/1Yce3IrAhL8MSsHqz2qStuagq3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.57.0/24 88.216.181.0/24 88.216.228.0/22 88.216.236.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:2b:4f:f8:9c:f1:7b:21:8f:ed:d4:85:43:6e:78:84:d6:33: 2e:99:f1:86:81:40:9e:38:28:4f:22:b9:d3:c3:ae:4d:1b:96: 3f:f7:26:db:71:52:07:4f:da:a5:3f:f8:99:9b:e3:e8:7a:83: ae:01:20:f6:93:db:58:e4:58:7b:53:c8:26:fb:0c:76:57:fb: 03:84:b4:10:cc:9d:4b:df:09:e3:30:f4:01:44:5a:ea:ba:87: 95:d4:d0:58:99:e0:7a:b6:c1:bb:46:8f:b7:40:fa:05:09:3f: 77:5b:5b:07:5b:f3:c3:0b:3d:a6:57:d9:d6:71:f5:ae:ab:cb: 82:3f:d6:a7:ed:95:12:01:33:ca:24:7d:90:25:16:24:3f:66: e8:66:23:3a:45:f0:48:a8:c3:16:d0:1a:37:b1:5e:bb:b3:8b: 0b:04:70:25:e2:e2:9e:03:56:86:ce:47:49:57:a6:aa:e2:b8: 54:82:82:c1:ea:10:6b:0e:17:c2:e0:ab:48:c2:eb:7b:66:29: 96:0a:7e:84:09:d5:04:33:e9:04:6f:5c:1d:bb:2d:35:cd:22: 36:97:29:fc:cf:0a:49:0a:98:44:07:44:10:20:7e:0a:9e:41: 2e:79:70:ae:c4:0d:de:6b:1f:b3:c2:3e:aa:d6:e4:3e:c5:55: 78:50:a7:5b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gJzr4VqausYbQvglDEPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTg3MWVkYzhhYzA4NGJmMGM0YWMxZWFjZjZhOTJiNmU2YTBhYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNu8Xxw7csUGsU8KrS9DJ/yBrITP RXL7uuwWNyCqA66Ca70M/MznM4MyrpmdQe9ZIVFN9RUxIvZEKGPYQliFeJGcLBzx ExYrsCVQClX7iRNkYIMtfZTN+D/y6cFEiClEsl138a285En4R8wd4T5w2QIvVhw9 an/LbdKHb8c+a4o6Gmr0UaM8sCLO4vPPw3b4mWmWHJAKU0xW9B16IXJRxkKGe1P/ +d44YzZtCJqRhN7DD923PPkryEJ8qj9tuaqVDsGcwKu2BkoFpUbRddnGaDFkVo4A LLK5MKrgT/+TllpzAaRGRUuAuZSbvGfvAW4jIhjO+Vps1aIj9XTEyhgNVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNWHHtyKwIS/DErB6s9qkrbmoKt2MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMVljZTNJckFoTDhNU3NIcXoycVN0dWFncTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNg5AwQA WNi1AwQCWNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQCLK0/4nPF7IY/t1IVD bniE1jMumfGGgUCeOChPIrnTw65NG5Y/9ybbcVIHT9qlP/iZm+PoeoOuASD2k9tY 5Fh7U8gm+wx2V/sDhLQQzJ1L3wnjMPQBRFrquoeV1NBYmeB6tsG7Ro+3QPoFCT93 W1sHW/PDCz2mV9nWcfWuq8uCP9an7ZUSATPKJH2QJRYkP2boZiM6RfBIqMMW0Bo3 sV67s4sLBHAl4uKeA1aGzkdJV6aq4rhUgoLB6hBrDhfC4KtIwut7ZimWCn6ECdUE M+kEb1wduy01zSI2lyn8zwpJCphEB0QQIH4KnkEueXCuxA3eax+zwj6q1uQ+xVV4 UKdb -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client