This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/o88UhRYinZyJF20rjzEVuBIkISw.roa File: o88UhRYinZyJF20rjzEVuBIkISw.roa (raw, json) Hash identifier: tZQVa9T+yiGaS1fruAYDiVbeo+e7RJEVkkoEPTA9LJA= Subject key identifier: A3:CF:14:85:16:22:9D:9C:89:17:6D:2B:8F:31:15:B8:12:24:21:2C Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE3D157567175809055CBEEF79DB6 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/o88UhRYinZyJF20rjzEVuBIkISw.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 85.204.22.0/24 maxlen: 24 92.114.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e3:d1:57:56:71:75:80:90:55:cb:ee:f7:9d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3cf148516229d9c89176d2b8f3115b81224212c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:bc:2b:f0:df:eb:83:fa:fe:15:84:1d:c1: ca:3c:08:ae:74:24:43:82:e2:2e:0f:29:16:56:24: 44:5d:f9:71:55:14:45:15:91:b8:47:8e:22:d8:05: a6:d0:b9:30:98:09:7d:dc:1a:03:ca:a9:33:5e:99: fa:d0:d5:2a:e3:1e:b2:39:0d:ed:80:23:ba:6c:5d: 23:33:1a:b6:26:bc:c0:2b:ce:4c:92:2f:39:9c:b2: 38:d2:47:7f:f7:fd:f7:eb:af:b7:e7:7e:13:ae:ce: d3:01:c5:14:ef:aa:b3:fe:59:1d:ad:74:fa:84:66: d1:a4:87:04:67:14:42:15:46:9d:89:78:31:bf:fa: 5e:e8:fa:aa:28:6c:0c:71:85:1d:55:da:e2:02:95: 5c:b9:52:51:39:9e:d6:b0:f8:20:9c:d4:59:b3:b8: 8d:b7:1b:1d:bb:7f:03:d0:f8:bf:48:7c:4d:97:67: cf:ef:15:00:5d:1c:38:22:30:8e:85:d7:fe:62:d8: d4:4b:b0:47:65:ea:6e:15:51:ee:62:a1:ae:90:7d: 61:87:d1:f4:ed:b7:e8:18:e0:29:05:25:e0:02:bb: 55:b1:01:a7:ad:b5:dd:28:49:89:e6:df:d5:46:a5: 27:ad:e3:54:7c:0c:18:78:a0:87:09:e5:0c:10:f9: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:14:85:16:22:9D:9C:89:17:6D:2B:8F:31:15:B8:12:24:21:2C X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/o88UhRYinZyJF20rjzEVuBIkISw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.22.0/24 92.114.32.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:71:3b:a6:55:e7:b6:cd:58:c0:6b:6e:57:6c:04:4d:0c:9e: cc:ca:b4:45:2b:96:2e:63:e1:ff:63:33:03:7e:82:5d:87:21: 29:d5:e9:50:52:b0:15:f7:c8:d0:f2:d4:4a:5a:32:2c:14:ba: f2:f3:78:62:47:10:5f:68:84:11:21:78:ac:41:4e:3e:f8:39: aa:21:34:19:b4:f8:77:aa:63:8a:44:91:38:51:51:d5:c4:02: 4f:57:c6:c7:21:94:23:dd:fb:52:c4:92:82:72:ba:68:9a:38: 84:de:48:66:be:de:af:58:f6:76:6c:2f:67:58:d1:da:2e:d8: f7:b7:26:d9:f1:fc:7e:8e:b3:32:ef:09:07:74:dd:33:41:2a: 1b:88:ad:d1:20:2b:1e:89:52:4c:1e:62:e9:39:e0:81:9a:80: 3e:95:15:be:fe:0b:8f:47:d3:3b:b1:1d:90:be:37:33:16:78: 53:6a:34:bf:80:f9:26:9c:f8:5b:18:69:09:3f:be:42:14:cb: d8:cd:2e:71:5e:ad:f7:6e:cb:65:b7:77:7a:0c:c8:a6:92:c7: c6:a0:94:64:5a:11:e2:eb:e1:97:a0:d9:8d:88:66:0e:d8:fa: 00:dc:6f:a5:f8:1a:f1:a9:38:87:15:cf:e8:a0:1b:13:7e:ed: fd:98:f2:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fePRV1ZxdYCQVcvu9522MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NmMTQ4NTE2MjI5ZDljODkxNzZkMmI4ZjMxMTViODEyMjQyMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB68K/Df64P6/hWEHcHKPAiudCRD guIuDykWViREXflxVRRFFZG4R44i2AWm0LkwmAl93BoDyqkzXpn60NUq4x6yOQ3t gCO6bF0jMxq2JrzAK85Mki85nLI40kd/9/3366+3534Trs7TAcUU76qz/lkdrXT6 hGbRpIcEZxRCFUadiXgxv/pe6PqqKGwMcYUdVdriApVcuVJROZ7WsPggnNRZs7iN txsdu38D0Pi/SHxNl2fP7xUAXRw4IjCOhdf+YtjUS7BHZepuFVHuYqGukH1hh9H0 7bfoGOApBSXgArtVsQGnrbXdKEmJ5t/VRqUnreNUfAwYeKCHCeUMEPmCNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKPPFIUWIp2ciRdtK48xFbgSJCEsMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbzg4VWhSWWluWnlKRjIwcmp6RVZ1QklrSVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcwWAwQA XHIgMA0GCSqGSIb3DQEBCwUAA4IBAQA9cTumVee2zVjAa25XbARNDJ7MyrRFK5Yu Y+H/YzMDfoJdhyEp1elQUrAV98jQ8tRKWjIsFLry83hiRxBfaIQRIXisQU4++Dmq ITQZtPh3qmOKRJE4UVHVxAJPV8bHIZQj3ftSxJKCcrpomjiE3khmvt6vWPZ2bC9n WNHaLtj3tybZ8fx+jrMy7wkHdN0zQSobiK3RICseiVJMHmLpOeCBmoA+lRW+/guP R9M7sR2QvjczFnhTajS/gPkmnPhbGGkJP75CFMvYzS5xXq33bstlt3d6DMimksfG oJRkWhHi6+GXoNmNiGYO2PoA3G+l+BrxqTiHFc/ooBsTfu39mPJ+ -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:04 2026 by rpki-client