This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mybaTpr7NbhNMgXW_987PwGViaE.roa File: mybaTpr7NbhNMgXW_987PwGViaE.roa (raw, json) Hash identifier: fGk5EAZ6m7iFFFmiY5r5YGwRHTdRMK5zl0PVHKZgFvY= Subject key identifier: 9B:26:DA:4E:9A:FB:35:B8:4D:32:05:D6:FF:DF:3B:3F:01:95:89:A1 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C809B5E925352E20F6B4D41AEF2D336 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mybaTpr7NbhNMgXW_987PwGViaE.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 88.216.57.0/24 maxlen: 24 88.216.181.0/24 maxlen: 24 88.216.228.0/22 maxlen: 24 88.216.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9b:5e:92:53:52:e2:0f:6b:4d:41:ae:f2:d3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b26da4e9afb35b84d3205d6ffdf3b3f019589a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:eb:40:73:57:7b:fa:e7:8e:d1:c7:68:fb: e6:d6:3b:a3:88:9f:88:c3:93:90:5b:9c:cd:8e:1c: b9:6b:57:0e:a7:ca:ca:a7:ca:61:32:cd:a3:55:e8: a7:39:7c:f4:7d:25:57:7b:55:21:91:d8:1e:30:4e: 61:25:c3:12:8f:bf:36:08:f5:42:9f:c0:7c:2f:87: 6d:e5:c8:4e:c9:ed:82:1b:d3:79:11:6a:e3:b3:5f: c4:58:4a:fa:a2:25:3b:63:59:e2:9b:aa:28:12:54: b3:2e:92:11:f9:97:c7:5c:30:2a:84:24:f8:04:3e: 3e:08:e0:a1:f4:51:71:5a:4d:42:34:ab:a2:c5:57: 89:b2:c4:f6:fb:c1:5d:cb:35:fb:c9:fb:d6:7b:40: ea:c7:3b:c6:a5:05:fa:ca:da:94:00:c0:71:04:7b: ed:1b:a2:95:59:77:1d:35:83:d6:63:7a:f2:e0:34: d1:c1:1f:91:6e:93:8f:2d:79:6d:ca:76:bf:1a:ce: 15:7f:e8:a4:70:ca:b7:c9:6d:2e:c3:c8:6f:27:5d: ed:9f:d3:87:5a:71:84:ff:da:d7:28:29:5d:c2:fb: 23:63:dd:3c:2e:73:55:c3:36:43:a5:b0:b2:c6:f2: 95:e7:ca:20:2d:4a:be:8f:dc:cb:84:01:a9:03:f4: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:DA:4E:9A:FB:35:B8:4D:32:05:D6:FF:DF:3B:3F:01:95:89:A1 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mybaTpr7NbhNMgXW_987PwGViaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.57.0/24 88.216.181.0/24 88.216.228.0/22 88.216.236.0/22 Signature Algorithm: sha256WithRSAEncryption 88:3b:0f:e0:43:c0:67:fb:76:10:87:54:c2:d3:cb:bf:b3:37: 38:d0:11:5b:33:74:a7:ca:75:1d:68:16:1e:10:e1:d9:14:88: 89:68:b5:00:e0:37:0c:35:22:11:92:5c:a8:5a:e4:cf:48:32: 5f:31:b8:db:d6:37:aa:ae:06:05:bf:01:3f:0a:96:17:72:91: 8d:13:7b:e7:02:aa:b8:47:b9:3d:49:ed:7e:07:55:c6:59:c9: 37:48:56:89:70:d3:bf:d5:87:db:02:73:0f:ab:a3:29:52:f4: 58:ab:fa:4c:0a:55:0c:6a:cc:70:22:45:f4:59:f1:ba:6d:65: 0b:bd:0c:17:ce:e2:4b:fc:a8:ec:a2:27:9e:41:b2:33:14:7b: 4f:bd:7f:6b:a2:ff:04:c7:30:20:fc:11:3c:2f:05:2e:9b:b8: d5:d0:89:9d:bd:29:c6:e7:f8:b3:b8:18:4b:e6:be:f6:8d:78: 0b:4d:73:63:01:b5:16:a2:72:d8:d5:44:01:1e:b6:16:61:b5: 9c:cf:17:70:56:1f:04:aa:c0:b5:aa:4d:01:d3:2b:8a:b5:5c: aa:67:d2:84:ef:48:aa:6a:15:51:be:fa:a6:38:80:74:d4:7d: de:84:16:f5:c9:5b:a5:28:65:97:23:2a:83:81:8e:56:ca:f4: 1b:2f:dd:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gJteklNS4g9rTUGu8tM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjI2ZGE0ZTlhZmIzNWI4NGQzMjA1ZDZmZmRmM2IzZjAxOTU4OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3HrQHNXe/rnjtHHaPvm1jujiJ+I w5OQW5zNjhy5a1cOp8rKp8phMs2jVeinOXz0fSVXe1UhkdgeME5hJcMSj782CPVC n8B8L4dt5chOye2CG9N5EWrjs1/EWEr6oiU7Y1nim6ooElSzLpIR+ZfHXDAqhCT4 BD4+COCh9FFxWk1CNKuixVeJssT2+8FdyzX7yfvWe0DqxzvGpQX6ytqUAMBxBHvt G6KVWXcdNYPWY3ry4DTRwR+RbpOPLXltyna/Gs4Vf+ikcMq3yW0uw8hvJ13tn9OH WnGE/9rXKCldwvsjY908LnNVwzZDpbCyxvKV58ogLUq+j9zLhAGpA/SoYQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJsm2k6a+zW4TTIF1v/fOz8BlYmhMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbXliYVRwcjdOYmhOTWdYV185ODdQd0dWaWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNg5AwQA WNi1AwQCWNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQCIOw/gQ8Bn+3YQh1TC 08u/szc40BFbM3SnynUdaBYeEOHZFIiJaLUA4DcMNSIRklyoWuTPSDJfMbjb1jeq rgYFvwE/CpYXcpGNE3vnAqq4R7k9Se1+B1XGWck3SFaJcNO/1YfbAnMPq6MpUvRY q/pMClUMasxwIkX0WfG6bWULvQwXzuJL/KjsoieeQbIzFHtPvX9rov8ExzAg/BE8 LwUum7jV0ImdvSnG5/izuBhL5r72jXgLTXNjAbUWonLY1UQBHrYWYbWczxdwVh8E qsC1qk0B0yuKtVyqZ9KE70iqahVRvvqmOIB01H3ehBb1yVulKGWXIyqDgY5WyvQb L91P -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client