This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pQIgkmIfN4k5V6A8XuBBLYD_qD8.roa File: pQIgkmIfN4k5V6A8XuBBLYD_qD8.roa (raw, json) Hash identifier: 8bHdLtcAnboCuqG4DKiUuefHKQ4LG9NdB1q9f4mloYY= Subject key identifier: A5:02:20:92:62:1F:37:89:39:57:A0:3C:5E:E0:41:2D:80:FF:A8:3F Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A044AF151B8C41FAA0D4C53D15E9 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pQIgkmIfN4k5V6A8XuBBLYD_qD8.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31108 IP address blocks: 88.221.82.0/24 maxlen: 24 88.221.86.0/24 maxlen: 24 2a02:26f0:1c::/48 maxlen: 48 2a02:26f0:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a0:44:af:15:1b:8c:41:fa:a0:d4:c5:3d:15:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5022092621f37893957a03c5ee0412d80ffa83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:bc:7a:0e:78:0c:23:cc:2f:6a:63:ca:79: 65:28:8b:84:4e:02:71:c5:d2:ce:50:77:76:7e:20: ab:24:fe:6e:84:13:50:4a:d3:b7:c3:02:3c:4a:60: 06:94:91:62:35:cd:49:a6:1e:70:2f:16:9e:71:a0: 48:d7:b1:71:ed:90:42:60:06:84:1d:fc:27:db:c8: 15:c1:bd:f0:29:5c:32:6c:ec:20:71:92:40:f6:a3: 71:dc:4f:a6:36:12:db:c2:e7:e3:ea:a6:8d:38:25: 0d:20:af:21:78:b8:62:37:60:18:9f:e1:e2:aa:bc: 14:c2:bf:06:f8:41:58:0a:88:35:a3:6e:36:8e:37: 59:28:1d:f4:2f:66:22:80:d5:8f:50:67:f1:dd:f3: 40:68:9b:5b:e2:02:b1:cf:e9:a8:c6:09:21:ba:62: 86:3f:30:b9:e3:4b:4e:65:37:34:78:cb:97:76:55: 13:3a:ba:84:71:3b:72:ca:69:2c:fd:fb:85:96:13: fb:b3:d0:7e:bf:e2:ae:da:a9:3e:35:cb:56:85:44: d8:a1:9b:3d:76:74:e8:a7:1b:ae:f2:da:98:e7:e9: cf:66:d9:d8:48:db:76:0c:91:5f:43:d6:2a:92:c4: 80:25:16:0f:52:48:f5:83:d9:ba:f0:c3:1c:7d:73: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:02:20:92:62:1F:37:89:39:57:A0:3C:5E:E0:41:2D:80:FF:A8:3F X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/pQIgkmIfN4k5V6A8XuBBLYD_qD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.221.82.0/24 88.221.86.0/24 IPv6: 2a02:26f0:1c::/48 2a02:26f0:3d::/48 Signature Algorithm: sha256WithRSAEncryption 0e:ef:80:03:5f:ed:63:26:00:2c:b0:01:58:29:95:34:95:fb: b6:08:70:ba:86:8a:60:17:e3:81:90:3f:f9:81:9f:63:5f:bf: 74:40:82:07:c2:0d:87:d9:77:d1:e9:7b:20:0b:95:dd:85:7b: e2:b4:e4:a9:39:b7:90:4f:53:2e:44:e5:37:da:40:35:50:05: a1:b6:ab:e3:10:1c:57:61:c6:c2:97:3e:27:7e:a4:a4:4e:cb: af:b8:37:01:67:b1:70:57:3a:22:86:ad:23:49:67:82:3c:28: 51:34:7a:f2:f0:fe:8f:82:5d:a9:27:eb:a0:a0:32:1b:f4:57: d6:91:9e:16:be:76:1a:f9:1f:48:ef:22:48:72:1e:1e:be:b2: 04:e5:1d:79:eb:da:d3:ad:13:b1:44:8b:d9:82:1b:5e:a3:a6: 34:18:67:65:44:bb:a2:4a:5b:29:b8:24:c6:dc:65:a5:1f:fc: 1d:93:b1:92:40:3f:d0:f5:e4:56:b7:d5:08:39:0a:4a:85:a1: f6:67:d1:ba:96:f3:4e:5c:e9:05:14:22:ae:b6:48:d0:d5:12: d2:d6:34:5d:0a:40:cf:c3:5d:a7:56:8e:d1:30:d1:27:5f:e9: 90:f7:21:94:43:2e:6d:86:0f:e5:91:de:3f:03:2a:ad:df:d7: 13:64:2c:88 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/FaBErxUbjEH6oNTFPRXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTAyMjA5MjYyMWYzNzg5Mzk1N2EwM2M1ZWUwNDEyZDgwZmZhODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tW8eg54DCPML2pjynllKIuETgJx xdLOUHd2fiCrJP5uhBNQStO3wwI8SmAGlJFiNc1Jph5wLxaecaBI17Fx7ZBCYAaE Hfwn28gVwb3wKVwybOwgcZJA9qNx3E+mNhLbwufj6qaNOCUNIK8heLhiN2AYn+Hi qrwUwr8G+EFYCog1o242jjdZKB30L2YigNWPUGfx3fNAaJtb4gKxz+moxgkhumKG PzC540tOZTc0eMuXdlUTOrqEcTtyymks/fuFlhP7s9B+v+Ku2qk+NctWhUTYoZs9 dnTopxuu8tqY5+nPZtnYSNt2DJFfQ9YqksSAJRYPUkj1g9m68MMcfXOCdQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKUCIJJiHzeJOVegPF7gQS2A/6g/MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvcFFJZ2ttSWZONGs1VjZBOFh1QkJMWURfcUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAWN1SAwQA WN1WMBgEAgACMBIDBwAqAibwABwDBwAqAibwAD0wDQYJKoZIhvcNAQELBQADggEB AA7vgANf7WMmACywAVgplTSV+7YIcLqGimAX44GQP/mBn2Nfv3RAggfCDYfZd9Hp eyALld2Fe+K05Kk5t5BPUy5E5TfaQDVQBaG2q+MQHFdhxsKXPid+pKROy6+4NwFn sXBXOiKGrSNJZ4I8KFE0evLw/o+CXakn66CgMhv0V9aRnha+dhr5H0jvIkhyHh6+ sgTlHXnr2tOtE7FEi9mCG16jpjQYZ2VEu6JKWym4JMbcZaUf/B2TsZJAP9D15Fa3 1Qg5CkqFofZn0bqW805c6QUUIq62SNDVEtLWNF0KQM/DXadWjtEw0Sdf6ZD3IZRD Lm2GD+WR3j8DKq3f1xNkLIg= -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:18 2026 by rpki-client