This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dRXyGMiQFGG12jyasY9nYu_Onng.roa File: dRXyGMiQFGG12jyasY9nYu_Onng.roa (raw, json) Hash identifier: Cpzjm0Eu5iX0Rs7n3jgDNFXXArcnaJnHiLDZdJCAhdE= Subject key identifier: 75:15:F2:18:C8:90:14:61:B5:DA:3C:9A:B1:8F:67:62:EF:CE:9E:78 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B4D101666B2BABD9E9FC814F130B Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dRXyGMiQFGG12jyasY9nYu_Onng.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 88.216.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b4:d1:01:66:6b:2b:ab:d9:e9:fc:81:4f:13:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7515f218c8901461b5da3c9ab18f6762efce9e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:50:2c:f7:01:f3:3c:48:df:45:7a:dd:f0: ba:60:44:5e:31:08:63:66:99:f6:40:18:ff:b0:70: 0f:9c:56:bd:9a:b3:29:2d:15:e3:49:ab:a8:26:72: 03:d6:ee:6e:26:5b:01:af:c9:7c:b1:75:1b:92:a9: 95:32:df:5f:e6:71:a3:b0:6a:7e:f1:2a:53:63:2d: f1:a4:f2:92:a5:b1:6a:28:35:31:0d:5f:b5:3e:21: fe:62:c7:d0:23:79:93:72:c4:81:4f:26:84:3d:c1: 45:bb:50:d8:70:4e:3f:f0:1e:2e:59:92:20:b3:d4: 5f:41:44:5f:ce:c0:c8:91:39:ca:df:fe:ea:40:c9: 46:9e:27:b8:32:21:b3:3d:b8:b7:43:77:ed:e3:e3: 2b:6a:08:8e:81:54:78:9e:40:2a:aa:66:e0:7f:86: 1c:c2:08:e8:1f:eb:05:d9:d9:21:f0:24:36:7a:ea: 15:83:33:a8:6b:8f:19:48:72:d2:ff:db:8a:38:82: 69:70:59:79:dd:e1:23:65:14:63:cc:4f:31:7f:3c: 6e:ce:37:f5:27:0e:4b:df:4d:e2:8b:ac:48:f1:3e: 36:7e:9d:01:de:8f:d7:6e:24:13:9e:14:8e:93:c0: 05:db:fb:3e:98:d1:9f:88:ce:12:64:f3:4f:2d:15: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:15:F2:18:C8:90:14:61:B5:DA:3C:9A:B1:8F:67:62:EF:CE:9E:78 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dRXyGMiQFGG12jyasY9nYu_Onng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.180.0/24 Signature Algorithm: sha256WithRSAEncryption 71:37:7d:21:72:08:45:9f:5f:41:65:0b:dd:a0:fe:41:5c:c8: c0:85:20:ce:ef:f0:4c:dd:c3:4e:60:93:32:01:69:79:99:25: 25:d6:6d:9e:37:89:11:a9:1c:74:e1:33:ce:10:c2:cd:ac:d0: 06:aa:ac:42:00:47:60:2c:db:9c:c0:5e:55:b3:fb:74:76:24: ac:8e:71:bd:af:b4:fd:ca:68:d3:e8:76:30:99:62:9d:b4:ab: cc:0f:92:be:58:0d:a5:a2:c0:ca:c3:d6:45:f2:f8:11:f1:dc: 2b:a8:8b:ab:8b:e8:01:48:69:95:67:ee:8f:23:37:e8:cd:7d: 97:be:00:6b:87:a7:f8:b4:68:88:73:42:40:eb:29:de:be:e7: 60:32:7f:df:5c:43:a6:e8:be:41:df:55:18:e6:e1:45:9f:07: 5d:1f:a7:ee:f6:d8:e7:73:3b:c2:bc:52:fe:5c:6b:81:6b:03: 4d:ea:79:66:3b:8e:15:0f:ff:e6:3c:71:cf:25:a6:07:29:f8: df:be:a4:ea:4c:bd:90:40:2d:d1:e6:18:ac:c4:f9:b8:45:b1: 5b:29:52:70:b3:56:7b:47:13:8a:94:86:57:4d:b3:ca:5c:a7: 95:98:36:a1:ea:70:91:6b:94:7a:db:0d:55:c5:64:0c:be:93: 51:c7:27:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLTRAWZrK6vZ6fyBTxMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTE1ZjIxOGM4OTAxNDYxYjVkYTNjOWFiMThmNjc2MmVmY2U5ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz1QLPcB8zxI30V63fC6YEReMQhj Zpn2QBj/sHAPnFa9mrMpLRXjSauoJnID1u5uJlsBr8l8sXUbkqmVMt9f5nGjsGp+ 8SpTYy3xpPKSpbFqKDUxDV+1PiH+YsfQI3mTcsSBTyaEPcFFu1DYcE4/8B4uWZIg s9RfQURfzsDIkTnK3/7qQMlGnie4MiGzPbi3Q3ft4+MragiOgVR4nkAqqmbgf4Yc wgjoH+sF2dkh8CQ2euoVgzOoa48ZSHLS/9uKOIJpcFl53eEjZRRjzE8xfzxuzjf1 Jw5L303ii6xI8T42fp0B3o/XbiQTnhSOk8AF2/s+mNGfiM4SZPNPLRVRqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUV8hjIkBRhtdo8mrGPZ2Lvzp54MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvZFJYeUdNaVFGR0cxMmp5YXNZOW5ZdV9Pbm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi0MA0G CSqGSIb3DQEBCwUAA4IBAQBxN30hcghFn19BZQvdoP5BXMjAhSDO7/BM3cNOYJMy AWl5mSUl1m2eN4kRqRx04TPOEMLNrNAGqqxCAEdgLNucwF5Vs/t0diSsjnG9r7T9 ymjT6HYwmWKdtKvMD5K+WA2losDKw9ZF8vgR8dwrqIuri+gBSGmVZ+6PIzfozX2X vgBrh6f4tGiIc0JA6ynevudgMn/fXEOm6L5B31UY5uFFnwddH6fu9tjnczvCvFL+ XGuBawNN6nlmO44VD//mPHHPJaYHKfjfvqTqTL2QQC3R5hisxPm4RbFbKVJws1Z7 RxOKlIZXTbPKXKeVmDah6nCRa5R62w1VxWQMvpNRxyck -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:04 2026 by rpki-client