This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/aYfHgbHMm_Pnlt2s2lodf-nI8JQ.roa File: aYfHgbHMm_Pnlt2s2lodf-nI8JQ.roa (raw, json) Hash identifier: KCdJC9T/yyZ6sVCQ8QCGnOhwuDapNZ61HvcNzZAj9P0= Subject key identifier: 69:87:C7:81:B1:CC:9B:F3:E7:96:DD:AC:DA:5A:1D:7F:E9:C8:F0:94 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F1595F806E59F70C305211AF549FE01 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/aYfHgbHMm_Pnlt2s2lodf-nI8JQ.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8657 IP address blocks: 88.221.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:f8:06:e5:9f:70:c3:05:21:1a:f5:49:fe:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6987c781b1cc9bf3e796ddacda5a1d7fe9c8f094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:cc:e9:4c:9b:af:62:27:f2:b5:68:51:68: 32:e3:94:f9:bb:56:b8:77:3d:e3:79:47:86:a4:ac: db:7c:bb:31:cb:39:93:18:76:a4:2a:3b:89:f7:8e: fa:75:5b:01:ce:ec:20:c2:bf:2e:be:45:5c:a2:1d: 56:38:92:91:21:5d:6d:91:2c:ce:f9:33:11:ec:ea: 71:40:1a:b0:ec:29:0b:c3:bc:0a:b1:29:7b:b7:5d: e0:e2:45:47:3c:25:1b:89:95:a2:b3:d4:06:30:54: c9:ef:31:7c:17:fc:59:2c:de:dc:87:86:46:28:76: 98:b4:a4:9e:2b:cc:83:63:5c:d9:a2:89:e3:ef:ed: 0a:e9:51:92:8f:7e:ae:75:2c:56:bc:bb:cd:af:20: 35:31:0c:68:e7:7c:1b:7c:d4:fb:df:01:14:fc:62: 58:78:93:2b:ee:83:ee:50:d2:f8:47:00:e3:61:96: ad:09:f7:95:19:c4:8b:e9:95:b9:7a:48:89:d4:76: 6d:9a:8a:fd:de:34:d3:2c:1b:d4:04:5b:ff:6c:56: f7:3e:69:3b:96:2d:db:94:34:b0:cd:80:87:01:dd: b9:de:a3:7d:07:ae:08:16:4b:49:b8:c3:09:f5:77: 19:bb:0f:06:79:7f:d7:3c:1e:7b:10:bf:ca:28:8f: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:C7:81:B1:CC:9B:F3:E7:96:DD:AC:DA:5A:1D:7F:E9:C8:F0:94 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/aYfHgbHMm_Pnlt2s2lodf-nI8JQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.221.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:9e:70:cf:2f:a7:2f:bd:c9:a6:3d:b9:8e:3e:f8:a2:e8:7a: f8:37:91:6a:d0:dd:5f:71:66:06:14:bf:66:9c:4d:4e:10:2f: d7:84:78:a0:b2:48:78:89:bc:e9:db:b7:8d:09:33:ae:80:b8: 7e:79:ab:76:29:13:b2:34:ec:c5:75:e6:87:bd:c7:a2:45:26: 89:36:2e:9c:b3:83:af:fd:b2:05:89:8a:ba:6e:27:73:37:46: 2b:d9:ef:7d:73:c3:2e:85:a6:d9:57:68:a8:96:13:71:96:b3: ad:e4:db:7d:89:87:2d:fb:81:cd:8f:a8:b8:e3:f6:84:0b:f5: 40:99:df:d1:68:7a:53:82:04:6c:c1:c7:c8:1f:89:0f:e7:11: 5d:54:d0:86:d6:56:23:18:59:fc:df:00:3e:48:ff:f9:6e:6c: fa:58:9d:17:dc:99:a4:af:ed:c4:56:06:df:78:4c:01:d1:f8: 49:80:f7:0e:56:97:0e:14:0d:51:ca:16:fa:bd:7b:00:3c:44: a3:05:b9:29:e3:12:43:32:34:00:f9:af:af:74:71:4a:73:fb: c6:a9:9a:4a:ff:93:76:67:8d:99:e7:fa:19:79:14:58:5e:75: 27:3c:ba:1a:73:63:60:c7:9b:45:99:08:78:fa:14:f6:08:51: 2b:7b:b5:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZX4BuWfcMMFIRr1Sf4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg3Yzc4MWIxY2M5YmYzZTc5NmRkYWNkYTVhMWQ3ZmU5YzhmMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrLM6Uybr2In8rVoUWgy45T5u1a4 dz3jeUeGpKzbfLsxyzmTGHakKjuJ9476dVsBzuwgwr8uvkVcoh1WOJKRIV1tkSzO +TMR7OpxQBqw7CkLw7wKsSl7t13g4kVHPCUbiZWis9QGMFTJ7zF8F/xZLN7ch4ZG KHaYtKSeK8yDY1zZoonj7+0K6VGSj36udSxWvLvNryA1MQxo53wbfNT73wEU/GJY eJMr7oPuUNL4RwDjYZatCfeVGcSL6ZW5ekiJ1HZtmor93jTTLBvUBFv/bFb3Pmk7 li3blDSwzYCHAd253qN9B64IFktJuMMJ9XcZuw8GeX/XPB57EL/KKI+vswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmHx4GxzJvz55bdrNpaHX/pyPCUMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvYVlmSGdiSE1tX1BubHQyczJsb2RmLW5JOEpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWN1AMA0G CSqGSIb3DQEBCwUAA4IBAQCMnnDPL6cvvcmmPbmOPvii6Hr4N5Fq0N1fcWYGFL9m nE1OEC/XhHigskh4ibzp27eNCTOugLh+eat2KROyNOzFdeaHvceiRSaJNi6cs4Ov /bIFiYq6bidzN0Yr2e99c8MuhabZV2iolhNxlrOt5Nt9iYct+4HNj6i44/aEC/VA md/RaHpTggRswcfIH4kP5xFdVNCG1lYjGFn83wA+SP/5bmz6WJ0X3Jmkr+3EVgbf eEwB0fhJgPcOVpcOFA1Ryhb6vXsAPESjBbkp4xJDMjQA+a+vdHFKc/vGqZpK/5N2 Z42Z5/oZeRRYXnUnPLoac2Ngx5tFmQh4+hT2CFEre7U+ -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:35 2026 by rpki-client