This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yTbWJofSyiKQEjmA1Y_A5dpeSV0.roa File: yTbWJofSyiKQEjmA1Y_A5dpeSV0.roa (raw, json) Hash identifier: puAY+L/lfI6nnFsF4UKe5Eepf6Q/WDOadRvqVEwYncc= Subject key identifier: C9:36:D6:26:87:D2:CA:22:90:12:39:80:D5:8F:C0:E5:DA:5E:49:5D Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C8099BBC64068C2A2DF88B10F2FFCB4 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yTbWJofSyiKQEjmA1Y_A5dpeSV0.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8764 IP address blocks: 88.216.138.0/24 maxlen: 24 88.216.139.0/24 maxlen: 24 88.216.140.0/24 maxlen: 24 88.216.141.0/24 maxlen: 24 88.216.142.0/24 maxlen: 24 88.216.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:99:bb:c6:40:68:c2:a2:df:88:b1:0f:2f:fc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c936d62687d2ca2290123980d58fc0e5da5e495d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:fb:c8:17:6b:dc:e7:19:05:c4:e0:16:74: 4e:f9:6b:1e:13:71:fe:b8:c8:f8:44:c7:59:f4:af: f5:ae:d9:6a:fb:ff:10:a2:95:12:66:b4:19:33:fb: ed:92:dc:d0:7e:0c:60:02:29:2e:83:d3:5e:fd:47: 8d:d2:94:4f:2a:8e:c1:a4:3c:b4:09:ae:35:05:6d: ef:64:a4:38:e9:d9:14:29:18:2f:6f:cd:cd:e2:7e: 44:de:2c:ca:05:46:96:32:87:fe:4e:e8:89:23:e1: 99:4c:87:b3:d6:76:96:e6:50:f0:5b:04:18:4f:a7: d9:39:53:b1:47:ec:c2:4d:89:af:66:82:6b:73:19: aa:17:b5:64:4f:9d:d9:64:b8:88:dd:5f:d5:59:55: 86:23:e7:eb:42:36:a9:aa:b5:b6:97:a9:b0:ae:e4: d4:78:4e:0d:a2:6b:d7:08:b9:cd:cd:7c:e9:9b:cf: 1c:bf:5d:84:3d:41:6a:9c:df:12:c2:63:53:fe:4e: 54:52:7b:82:0c:14:8d:83:25:db:e5:a8:5b:6a:ff: 99:72:86:ca:73:36:23:37:2f:31:1e:e1:9b:b1:d6: 88:19:e4:19:9c:0e:f3:3e:6a:68:4a:ee:21:f2:2f: e5:67:5b:9f:ee:41:20:52:83:2f:c3:23:10:f8:7a: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:36:D6:26:87:D2:CA:22:90:12:39:80:D5:8F:C0:E5:DA:5E:49:5D X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/yTbWJofSyiKQEjmA1Y_A5dpeSV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.138.0-88.216.143.255 Signature Algorithm: sha256WithRSAEncryption 91:bd:56:aa:0c:50:87:04:b8:b7:ad:ac:d4:d1:c4:02:4b:8f: 80:76:e7:bf:ae:95:6a:14:9d:07:4a:5e:bc:48:22:04:47:58: 17:69:fc:d9:d5:36:b0:91:ee:a4:02:25:8d:30:9d:53:c1:b9: 79:b3:5a:63:1a:3e:e5:6d:1c:65:15:e4:55:fe:bb:d4:e4:32: 38:38:f9:55:29:99:42:26:07:70:d2:6c:cd:95:87:59:e4:4c: 25:fc:ca:4a:16:15:64:21:65:cf:33:12:27:e8:8c:4d:10:bb: 15:4d:5c:fc:1c:c2:dd:74:dc:25:b7:73:d0:c9:da:ed:f2:95: 84:a5:e3:d0:c8:15:5a:21:8d:6e:06:85:41:c9:fd:09:2e:ca: 39:16:5c:0e:6e:d2:b1:6f:9e:2b:0e:c6:2f:d8:de:9e:64:88: c3:c4:63:92:97:47:ab:44:0d:00:83:c3:14:d9:b8:bc:bc:72: 04:7c:d8:ba:39:e4:cc:86:b9:40:b7:65:51:8e:36:41:1b:c5: 95:00:6b:b5:34:b5:71:06:be:c2:e1:c4:f3:ac:b5:21:06:4f: ee:f9:bb:bd:d8:cf:3d:e6:4d:d9:f3:1c:a9:7c:e2:2c:03:fe: fb:50:44:ea:20:18:dd:e1:c7:34:8d:4d:71:54:c8:47:bc:e0: 7f:b6:ab:75 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gJm7xkBowqLfiLEPL/y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTM2ZDYyNjg3ZDJjYTIyOTAxMjM5ODBkNThmYzBlNWRhNWU0OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Or7yBdr3OcZBcTgFnRO+WseE3H+ uMj4RMdZ9K/1rtlq+/8QopUSZrQZM/vtktzQfgxgAikug9Ne/UeN0pRPKo7BpDy0 Ca41BW3vZKQ46dkUKRgvb83N4n5E3izKBUaWMof+TuiJI+GZTIez1naW5lDwWwQY T6fZOVOxR+zCTYmvZoJrcxmqF7VkT53ZZLiI3V/VWVWGI+frQjapqrW2l6mwruTU eE4NomvXCLnNzXzpm88cv12EPUFqnN8SwmNT/k5UUnuCDBSNgyXb5ahbav+ZcobK czYjNy8xHuGbsdaIGeQZnA7zPmpoSu4h8i/lZ1uf7kEgUoMvwyMQ+HpcIwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMk21iaH0soikBI5gNWPwOXaXkldMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEveVRiV0pvZlN5aUtRRWptQTFZX0E1ZHBlU1YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFY2IoD BARY2IAwDQYJKoZIhvcNAQELBQADggEBAJG9VqoMUIcEuLetrNTRxAJLj4B257+u lWoUnQdKXrxIIgRHWBdp/NnVNrCR7qQCJY0wnVPBuXmzWmMaPuVtHGUV5FX+u9Tk Mjg4+VUpmUImB3DSbM2Vh1nkTCX8ykoWFWQhZc8zEifojE0QuxVNXPwcwt103CW3 c9DJ2u3ylYSl49DIFVohjW4GhUHJ/QkuyjkWXA5u0rFvnisOxi/Y3p5kiMPEY5KX R6tEDQCDwxTZuLy8cgR82Lo55MyGuUC3ZVGONkEbxZUAa7U0tXEGvsLhxPOstSEG T+75u73Yzz3mTdnzHKl84iwD/vtQROogGN3hxzSNTXFUyEe84H+2q3U= -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client