This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/isx9aJTgF4G7gpPj-KWdwudLkLc.roa File: isx9aJTgF4G7gpPj-KWdwudLkLc.roa (raw, json) Hash identifier: koR3eD7JpX6pHcqx/HGtKH5HWHko5m10EufOOt+hqU8= Subject key identifier: 8A:CC:7D:68:94:E0:17:81:BB:82:93:E3:F8:A5:9D:C2:E7:4B:90:B7 Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F833933EC8C09F119DD764315ED3195 Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/isx9aJTgF4G7gpPj-KWdwudLkLc.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200574 IP address blocks: 88.199.101.0/24 maxlen: 24 88.199.102.0/24 maxlen: 24 88.199.103.0/24 maxlen: 24 94.40.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:39:33:ec:8c:09:f1:19:dd:76:43:15:ed:31:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8acc7d6894e01781bb8293e3f8a59dc2e74b90b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:ba:cc:79:68:40:c4:00:6e:ee:27:13:39: f9:6a:17:94:c1:49:84:7e:64:68:8a:02:8a:c3:20: 03:91:ea:b9:7a:cf:93:df:69:3b:86:3f:7b:88:9e: 3f:ee:85:f1:b0:1f:b6:71:90:4a:41:31:c8:94:24: bb:ba:0a:7d:49:81:45:d1:d6:3d:0c:56:e9:9e:53: c0:e5:e8:56:5e:e6:92:df:b9:7a:18:35:45:d1:65: 6d:48:a4:5d:dd:5a:b4:c0:2a:5f:b0:22:1f:33:ca: a2:49:f5:72:76:3a:ad:92:5f:fb:ab:a8:19:40:8f: e4:d4:7b:33:0d:75:ab:a7:d8:19:bd:25:d7:e4:f5: 4a:22:da:f6:be:3b:f5:9a:d9:1a:46:cd:ad:4e:c7: c1:07:92:ae:54:ba:61:cf:b3:01:ab:aa:da:c0:84: 24:62:e9:7b:e0:a0:8f:70:ee:ba:ef:57:77:a6:bb: d5:5b:44:5e:bb:2b:bf:05:f0:16:4a:d3:ae:a4:74: 37:7f:f5:9e:58:7f:0f:58:82:d1:30:a0:8e:49:e3: 7f:61:04:cd:44:20:cc:f0:c3:70:b6:52:ff:3b:f4: 23:af:02:b5:08:e2:5c:fc:ab:92:98:86:2c:71:2f: 8b:03:ef:9c:ff:c0:31:bd:57:71:ef:47:41:8d:b7: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CC:7D:68:94:E0:17:81:BB:82:93:E3:F8:A5:9D:C2:E7:4B:90:B7 X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/isx9aJTgF4G7gpPj-KWdwudLkLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.199.101.0-88.199.103.255 94.40.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:93:98:de:0a:5a:be:4f:ff:0d:ab:d8:7b:6e:00:c6:fc:06: 10:56:ae:31:f4:23:fc:eb:2a:68:59:b8:13:14:79:eb:cf:32: e3:73:0f:6b:9c:1b:d8:a5:36:5f:41:7e:e6:61:53:6b:40:6e: 3e:31:b9:0a:f2:41:01:13:5c:fe:22:a9:0b:f3:ae:e8:15:c0: 6f:c4:87:dd:1b:67:ae:90:17:a0:d2:b6:c7:a3:81:97:94:41: c1:9c:fa:a0:c7:94:47:97:73:4b:ed:15:cf:c4:ab:17:75:23: 0e:40:7a:59:91:4b:34:eb:07:0d:ac:d9:fa:91:35:ee:57:62: 5d:35:fb:ad:71:68:6e:b1:37:9c:fd:7a:82:a3:ce:f5:c6:b1: f0:9f:92:31:0d:3b:54:c7:3f:51:e4:5e:72:ed:5c:0b:77:a4: 4f:50:01:8b:6e:ee:bd:35:69:c1:81:99:aa:c3:3f:7e:8f:73: d9:f8:a6:01:40:0e:03:f7:af:19:41:60:55:b6:90:6a:af:38: 43:85:7e:42:66:33:7a:58:7c:29:db:1d:bb:ab:d5:5c:73:79: ce:74:0c:bc:b2:e4:ae:e1:0f:98:1f:ce:8e:5f:be:10:5b:44: 7a:67:f7:4f:ee:d5:e4:01:1a:31:49:8f:6a:1a:15:e7:9a:82: ee:d6:fa:16 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/gzkz7IwJ8RnddkMV7TGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWNjN2Q2ODk0ZTAxNzgxYmI4MjkzZTNmOGE1OWRjMmU3NGI5MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhm6zHloQMQAbu4nEzn5aheUwUmE fmRoigKKwyADkeq5es+T32k7hj97iJ4/7oXxsB+2cZBKQTHIlCS7ugp9SYFF0dY9 DFbpnlPA5ehWXuaS37l6GDVF0WVtSKRd3Vq0wCpfsCIfM8qiSfVydjqtkl/7q6gZ QI/k1HszDXWrp9gZvSXX5PVKItr2vjv1mtkaRs2tTsfBB5KuVLphz7MBq6rawIQk Yul74KCPcO6671d3prvVW0Reuyu/BfAWStOupHQ3f/WeWH8PWILRMKCOSeN/YQTN RCDM8MNwtlL/O/QjrwK1COJc/KuSmIYscS+LA++c/8AxvVdx70dBjbfuGQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIrMfWiU4BeBu4KT4/ilncLnS5C3MB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvaXN4OWFKVGdGNEc3Z3BQai1LV2R3dWRMa0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABYx2UD BANYx2ADBABeKD0wDQYJKoZIhvcNAQELBQADggEBAIuTmN4KWr5P/w2r2HtuAMb8 BhBWrjH0I/zrKmhZuBMUeevPMuNzD2ucG9ilNl9BfuZhU2tAbj4xuQryQQETXP4i qQvzrugVwG/Eh90bZ66QF6DStsejgZeUQcGc+qDHlEeXc0vtFc/Eqxd1Iw5AelmR SzTrBw2s2fqRNe5XYl01+61xaG6xN5z9eoKjzvXGsfCfkjENO1THP1HkXnLtXAt3 pE9QAYtu7r01acGBmarDP36Pc9n4pgFADgP3rxlBYFW2kGqvOEOFfkJmM3pYfCnb Hbur1Vxzec50DLyy5K7hD5gfzo5fvhBbRHpn90/u1eQBGjFJj2oaFeeagu7W+hY= -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:26 2026 by rpki-client