This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7Fo-8UE-EoOxltj_GfkZL8YgCE.roa File: n7Fo-8UE-EoOxltj_GfkZL8YgCE.roa (raw, json) Hash identifier: Nc5uPB8zfPR/MPccdzNnTlV1xeZqxeNNBi5BC/lQeGM= Subject key identifier: 9F:B1:68:FB:C5:04:F8:4A:0E:C6:5B:63:FC:67:E4:64:BF:18:80:21 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80AEFDD9BC322F3FD239734614F58A Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7Fo-8UE-EoOxltj_GfkZL8YgCE.roa Signing time: Fri 02 Jan 2026 02:19:26 +0000 ROA not before: Fri 02 Jan 2026 02:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200088 IP address blocks: 88.216.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ae:fd:d9:bc:32:2f:3f:d2:39:73:46:14:f5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fb168fbc504f84a0ec65b63fc67e464bf188021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:c1:a8:92:fa:cf:6d:47:d7:20:4e:c6:f7: 8a:79:d7:7d:58:67:d4:1d:d1:a8:c8:dc:99:3b:ba: ad:8e:ae:66:9e:a6:63:5d:50:4b:aa:d8:a4:3d:ab: 80:4d:bd:01:46:56:22:74:3a:9a:04:cb:5b:39:d4: 42:cf:94:95:7c:e4:13:16:13:6f:d3:0b:07:84:47: 75:0d:03:1a:fd:ac:8e:9d:83:d7:69:09:cd:90:4f: 27:3f:c5:5d:b6:71:fd:20:03:2a:4c:79:36:63:d1: cc:b5:81:96:3c:af:2d:a7:e2:75:ef:f0:62:7d:4e: 54:89:2a:fd:6e:a9:69:08:f9:b6:4e:d7:23:c9:e4: bd:4d:f6:8a:44:34:2a:08:dc:97:5b:05:7c:0e:a8: 78:46:83:9c:8f:f6:f1:38:a9:cd:85:13:77:89:22: 8d:db:10:8b:67:7f:20:39:58:45:b7:c5:f0:13:f7: 02:ca:a7:f2:eb:ae:3e:4f:ab:1a:3f:39:4e:01:d7: 38:5a:02:98:66:2b:6b:9c:e6:21:bc:bf:62:19:33: 26:d3:df:6c:21:ad:42:cb:0c:67:2e:fc:d6:2c:2c: e1:f1:00:af:f5:40:46:b9:5e:62:6e:25:14:b0:70: 52:e5:f6:02:be:b4:2b:a5:ac:31:32:0f:eb:8a:3f: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:68:FB:C5:04:F8:4A:0E:C6:5B:63:FC:67:E4:64:BF:18:80:21 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n7Fo-8UE-EoOxltj_GfkZL8YgCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.19.0/24 Signature Algorithm: sha256WithRSAEncryption 88:7a:be:d1:f2:eb:73:2c:71:13:9c:2e:36:6e:18:8f:35:82: 5b:d2:b1:31:1d:4a:07:d1:03:a2:65:5a:ba:2a:05:25:28:c6: e5:ac:19:81:ad:7f:90:a9:f3:91:33:67:10:21:9c:6d:29:06: 36:3d:ce:7c:aa:ee:35:e3:a6:c8:f2:5c:b7:cb:d5:56:a6:66: 50:7e:2a:a9:d6:a4:3a:50:a2:07:a0:ff:2d:f1:8b:a1:4b:1c: d6:eb:07:74:57:ac:a9:2d:05:61:50:16:6c:92:42:53:49:52: c0:ec:bf:09:e4:f9:e3:79:ee:46:e3:e0:c5:fb:82:a5:ff:99: 45:c4:db:69:94:e8:84:a7:54:0d:73:08:60:01:7b:d7:b3:46: 1b:61:82:b7:9f:a0:7f:97:eb:59:af:9c:4b:30:af:2d:ee:ab: fc:2f:e6:bb:6e:39:d1:20:21:cb:56:b9:04:d2:ec:08:7c:c7: 16:77:1f:46:a6:31:a6:c3:91:da:3d:37:c3:20:5f:0b:ab:de: e7:8f:c5:64:5b:e2:55:0b:10:92:cb:fd:6a:0f:43:6d:28:d9: 5e:f6:35:8a:a0:05:c6:83:cd:b3:c0:11:f2:88:10:54:9d:26: 44:1b:90:f0:bd:c9:85:eb:3e:3e:18:cb:46:af:a8:d1:2d:6c: 55:0a:f6:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gK792bwyLz/SOXNGFPWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmIxNjhmYmM1MDRmODRhMGVjNjViNjNmYzY3ZTQ2NGJmMTg4MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttDBqJL6z21H1yBOxveKedd9WGfU HdGoyNyZO7qtjq5mnqZjXVBLqtikPauATb0BRlYidDqaBMtbOdRCz5SVfOQTFhNv 0wsHhEd1DQMa/ayOnYPXaQnNkE8nP8VdtnH9IAMqTHk2Y9HMtYGWPK8tp+J17/Bi fU5UiSr9bqlpCPm2TtcjyeS9TfaKRDQqCNyXWwV8Dqh4RoOcj/bxOKnNhRN3iSKN 2xCLZ38gOVhFt8XwE/cCyqfy664+T6saPzlOAdc4WgKYZitrnOYhvL9iGTMm099s Ia1CywxnLvzWLCzh8QCv9UBGuV5ibiUUsHBS5fYCvrQrpawxMg/rij95YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+xaPvFBPhKDsZbY/xn5GS/GIAhMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvbjdGby04VUUtRW9PeGx0al9HZmtaTDhZZ0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgTMA0G CSqGSIb3DQEBCwUAA4IBAQCIer7R8utzLHETnC42bhiPNYJb0rExHUoH0QOiZVq6 KgUlKMblrBmBrX+QqfORM2cQIZxtKQY2Pc58qu4146bI8ly3y9VWpmZQfiqp1qQ6 UKIHoP8t8YuhSxzW6wd0V6ypLQVhUBZskkJTSVLA7L8J5Pnjee5G4+DF+4Kl/5lF xNtplOiEp1QNcwhgAXvXs0YbYYK3n6B/l+tZr5xLMK8t7qv8L+a7bjnRICHLVrkE 0uwIfMcWdx9GpjGmw5HaPTfDIF8Lq97nj8VkW+JVCxCSy/1qD0NtKNle9jWKoAXG g82zwBHyiBBUnSZEG5DwvcmF6z4+GMtGr6jRLWxVCvZ4 -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:23 2026 by rpki-client