This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2tTdzmiKAnOe2RH4LPjbXF-PIoM.roa File: 2tTdzmiKAnOe2RH4LPjbXF-PIoM.roa (raw, json) Hash identifier: MfVk3PpHjlzhYYi4JjgzesppaBKUuIiOVg3m4/KazJc= Subject key identifier: DA:D4:DD:CE:68:8A:02:73:9E:D9:11:F8:2C:F8:DB:5C:5F:8F:22:83 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80BC61724551796149E4B783AA513A Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2tTdzmiKAnOe2RH4LPjbXF-PIoM.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 88.216.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bc:61:72:45:51:79:61:49:e4:b7:83:aa:51:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dad4ddce688a02739ed911f82cf8db5c5f8f2283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:fb:50:83:89:ef:3b:69:48:8e:2b:08:c1: cf:d0:e9:1b:9e:e5:9d:ef:8e:cf:4f:6b:42:9d:be: e1:ba:c0:be:3e:b8:56:11:4a:46:3b:98:6f:21:48: bf:c7:14:88:00:dc:bc:35:1c:e5:f0:ce:ea:d5:c4: c8:e3:e4:8c:36:8c:69:0d:22:ac:5b:78:34:1f:9d: cd:bc:e5:ba:5d:62:71:6e:83:da:cf:5c:3f:be:7f: 63:98:df:3e:79:9b:ca:f7:c9:09:91:01:ad:27:cb: 9b:04:3d:b7:47:cf:77:bc:a3:4f:ed:bc:10:82:9f: 1f:c7:0f:85:b9:3f:2d:b3:82:bd:c3:32:d5:99:22: 18:ca:8f:3d:b7:8f:19:dc:4d:31:7f:32:98:be:44: 17:4a:20:a6:03:42:97:82:c6:79:c9:d0:be:9a:60: b8:e9:9b:e6:af:73:20:17:c0:a3:d3:49:f6:07:6d: 1f:dc:73:42:38:89:3a:75:24:e2:83:30:ef:14:fd: aa:b1:52:92:ac:5b:0a:fb:d1:ea:3b:55:a6:2e:bb: 72:dd:dc:2a:52:5e:2e:07:20:9a:2b:98:f8:9b:0e: ef:6b:33:67:92:56:61:c4:d6:1c:dc:6f:2e:7f:51: bc:52:7a:f2:ba:1e:94:27:43:84:8c:11:21:fc:e2: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D4:DD:CE:68:8A:02:73:9E:D9:11:F8:2C:F8:DB:5C:5F:8F:22:83 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2tTdzmiKAnOe2RH4LPjbXF-PIoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.182.0/23 Signature Algorithm: sha256WithRSAEncryption 13:e3:04:ba:ed:7c:52:b4:7e:9a:fe:9c:28:f6:66:60:3a:43: 77:4e:48:dc:d0:1e:6d:dc:1e:98:80:8d:66:ba:bd:2d:f0:c2: 1d:51:79:80:1d:81:a8:68:ad:35:34:0e:ef:88:bd:f7:51:ba: b4:27:84:8b:f8:c5:ba:fd:e1:83:3d:ee:87:0d:50:e8:34:fb: ac:bf:ae:26:ee:42:50:1b:47:48:2e:14:e6:7c:27:9c:9c:ec: 41:0b:c6:64:13:58:de:73:85:d1:e4:7b:ae:ca:f6:aa:f7:9a: 59:4a:86:8b:f2:b1:c5:f3:f5:bd:f4:af:a2:09:58:a4:c0:76: d7:5f:04:33:44:97:09:a5:08:1b:d7:61:6a:55:50:40:e0:96: 19:38:40:49:b5:9c:22:33:8f:b0:3b:a6:9a:df:82:0b:3d:48: 72:8b:4d:d4:27:41:83:b7:2b:53:9e:02:b4:12:e2:61:d5:b8: 58:77:6f:c3:40:87:7f:89:15:16:23:5e:b5:41:9a:84:77:95: 55:49:23:7b:de:0f:24:c5:97:cd:b4:d8:1e:86:2d:ea:7a:08: f9:56:80:34:3c:ec:17:96:93:27:81:f2:e8:35:3b:2b:ad:2d: b0:39:82:67:f5:4d:fd:8d:7b:47:aa:eb:08:a1:a0:fc:41:2e: 46:8b:6f:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLxhckVReWFJ5LeDqlE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWQ0ZGRjZTY4OGEwMjczOWVkOTExZjgyY2Y4ZGI1YzVmOGYyMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lD7UIOJ7ztpSI4rCMHP0OkbnuWd 747PT2tCnb7husC+PrhWEUpGO5hvIUi/xxSIANy8NRzl8M7q1cTI4+SMNoxpDSKs W3g0H53NvOW6XWJxboPaz1w/vn9jmN8+eZvK98kJkQGtJ8ubBD23R893vKNP7bwQ gp8fxw+FuT8ts4K9wzLVmSIYyo89t48Z3E0xfzKYvkQXSiCmA0KXgsZ5ydC+mmC4 6Zvmr3MgF8Cj00n2B20f3HNCOIk6dSTigzDvFP2qsVKSrFsK+9HqO1WmLrty3dwq Ul4uByCaK5j4mw7vazNnklZhxNYc3G8uf1G8Unryuh6UJ0OEjBEh/OIUhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNrU3c5oigJzntkR+Cz421xfjyKDMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMnRUZHptaUtBbk9lMlJINExQamJYRi1QSW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNi2MA0G CSqGSIb3DQEBCwUAA4IBAQAT4wS67XxStH6a/pwo9mZgOkN3Tkjc0B5t3B6YgI1m ur0t8MIdUXmAHYGoaK01NA7viL33Ubq0J4SL+MW6/eGDPe6HDVDoNPusv64m7kJQ G0dILhTmfCecnOxBC8ZkE1jec4XR5Huuyvaq95pZSoaL8rHF8/W99K+iCVikwHbX XwQzRJcJpQgb12FqVVBA4JYZOEBJtZwiM4+wO6aa34ILPUhyi03UJ0GDtytTngK0 EuJh1bhYd2/DQId/iRUWI161QZqEd5VVSSN73g8kxZfNtNgehi3qegj5VoA0POwX lpMngfLoNTsrrS2wOYJn9U39jXtHqusIoaD8QS5Gi2+A -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:41 2026 by rpki-client