This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jA-2SVvwlcqsLBGYrac-BSVowZc.roa File: jA-2SVvwlcqsLBGYrac-BSVowZc.roa (raw, json) Hash identifier: y7zjTUEf90Eb5rbEUcML0C4DPOgecA1/r/BZ/qp0ekI= Subject key identifier: 8C:0F:B6:49:5B:F0:95:CA:AC:2C:11:98:AD:A7:3E:05:25:68:C1:97 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A0290AD15E4C43FA837715D9B58A Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jA-2SVvwlcqsLBGYrac-BSVowZc.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23013 IP address blocks: 88.216.130.0/24 maxlen: 24 88.216.132.0/24 maxlen: 24 88.216.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a0:29:0a:d1:5e:4c:43:fa:83:77:15:d9:b5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c0fb6495bf095caac2c1198ada73e052568c197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:49:b7:15:84:32:c2:bf:1d:da:62:e4:16: 96:cd:56:bd:1e:40:0e:22:a6:10:e8:cd:c3:b7:79: 31:b3:e4:99:30:1e:f6:56:39:cf:d8:2c:aa:89:11: cc:41:4f:c5:e4:a9:90:73:34:0b:77:1d:2c:24:71: 9e:91:4e:0f:a1:37:3d:50:43:bf:92:1f:73:7b:f9: c0:58:9a:2a:ca:ea:92:19:5a:57:40:02:dc:41:0d: 21:60:79:13:86:4d:25:19:c9:cc:4f:00:fd:a9:bf: 92:5c:36:e7:67:d9:50:23:d6:64:18:3e:09:ac:2b: 5e:fd:2f:31:39:55:83:8f:d1:8c:5c:d1:ff:02:8d: 22:bf:09:37:ce:e5:33:0b:23:dc:75:95:60:dd:77: 1e:44:f0:c4:5a:ff:28:b7:bc:e9:22:56:12:a3:1d: 8c:43:b9:c7:8e:f3:7c:d8:68:27:89:9f:c3:b6:1c: 6d:2d:64:65:7c:26:b7:79:c1:ac:6b:7b:1c:ea:1a: 65:03:2f:15:c5:c9:f6:a5:b9:c6:61:59:8a:b7:b6: 74:be:3b:d1:c5:c1:93:9c:19:04:34:03:62:e3:45: 63:d5:93:84:fe:88:77:bb:a1:c7:61:ea:74:e6:2d: 36:16:e1:1a:e5:cc:3e:7a:a7:d2:cf:45:b2:3a:57: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:B6:49:5B:F0:95:CA:AC:2C:11:98:AD:A7:3E:05:25:68:C1:97 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jA-2SVvwlcqsLBGYrac-BSVowZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.130.0/24 88.216.132.0/24 88.216.188.0/22 Signature Algorithm: sha256WithRSAEncryption 48:f4:64:21:f0:54:a2:08:95:06:70:44:1a:44:ab:17:b9:e9: b1:e0:8f:82:0c:ab:51:aa:3e:31:06:11:b0:b9:46:b3:0a:70: 6e:b6:76:7a:93:31:35:5f:93:ff:b5:ed:8a:54:7b:3b:e7:0b: 96:54:75:8d:1a:21:76:b0:81:31:a3:0c:ff:b6:a2:d2:27:7d: 68:fd:22:1f:87:02:fb:88:ba:e7:80:6d:f9:ee:77:be:2f:7e: 70:ac:9a:18:6d:21:a0:cd:36:a2:8c:6c:bf:e6:0a:c0:9f:2f: 53:cf:da:3f:0b:57:02:2d:7d:fc:3c:b6:aa:3c:b3:67:46:37: 3c:fb:75:30:d8:c6:16:76:2c:c1:a8:7a:f4:6c:0a:fa:fd:72: 96:98:c5:8f:34:c5:fa:c2:c2:7f:83:71:4d:68:6a:53:36:d5: 3c:9c:ac:32:36:e0:5f:06:cc:28:9b:36:85:7a:0d:82:4f:9b: 1b:71:fa:21:41:08:f9:ae:d8:eb:07:3e:bc:3f:ad:4c:de:cb: d1:2f:68:73:d9:71:25:a1:1e:04:df:44:4c:8b:a7:ba:fd:4d: fe:d2:af:21:3e:b6:31:2d:fd:67:54:2e:80:0b:0b:3f:6d:73: 70:0c:b1:47:65:23:cd:cc:97:ff:24:7c:81:c8:10:c5:10:0c: 13:91:e1:fc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gKApCtFeTEP6g3cV2bWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzBmYjY0OTViZjA5NWNhYWMyYzExOThhZGE3M2UwNTI1NjhjMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8xJtxWEMsK/Hdpi5BaWzVa9HkAO IqYQ6M3Dt3kxs+SZMB72VjnP2CyqiRHMQU/F5KmQczQLdx0sJHGekU4PoTc9UEO/ kh9ze/nAWJoqyuqSGVpXQALcQQ0hYHkThk0lGcnMTwD9qb+SXDbnZ9lQI9ZkGD4J rCte/S8xOVWDj9GMXNH/Ao0ivwk3zuUzCyPcdZVg3XceRPDEWv8ot7zpIlYSox2M Q7nHjvN82GgniZ/DthxtLWRlfCa3ecGsa3sc6hplAy8Vxcn2pbnGYVmKt7Z0vjvR xcGTnBkENANi40Vj1ZOE/oh3u6HHYep05i02FuEa5cw+eqfSz0WyOldkLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIwPtklb8JXKrCwRmK2nPgUlaMGXMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvakEtMlNWdndsY3FzTEJHWXJhYy1CU1Zvd1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNiCAwQA WNiEAwQCWNi8MA0GCSqGSIb3DQEBCwUAA4IBAQBI9GQh8FSiCJUGcEQaRKsXuemx 4I+CDKtRqj4xBhGwuUazCnButnZ6kzE1X5P/te2KVHs75wuWVHWNGiF2sIExowz/ tqLSJ31o/SIfhwL7iLrngG357ne+L35wrJoYbSGgzTaijGy/5grAny9Tz9o/C1cC LX38PLaqPLNnRjc8+3Uw2MYWdizBqHr0bAr6/XKWmMWPNMX6wsJ/g3FNaGpTNtU8 nKwyNuBfBswomzaFeg2CT5sbcfohQQj5rtjrBz68P61M3svRL2hz2XEloR4E30RM i6e6/U3+0q8hPrYxLf1nVC6ACws/bXNwDLFHZSPNzJf/JHyByBDFEAwTkeH8 -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:29 2026 by rpki-client