This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/88YNLmciNd0j13-H2-rZxVQMdGQ.roa File: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (raw, json) Hash identifier: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM= Subject key identifier: F3:C6:0D:2E:67:22:35:DD:23:D7:7F:87:DB:EA:D9:C5:54:0C:74:64 Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019B7910F01EE4D017D565C6B6640B659B5B Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/88YNLmciNd0j13-H2-rZxVQMdGQ.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 46.143.204.0/22 maxlen: 22 46.143.204.0/24 maxlen: 24 46.143.205.0/24 maxlen: 24 46.143.206.0/24 maxlen: 24 185.84.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f0:1e:e4:d0:17:d5:65:c6:b6:64:0b:65:9b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c60d2e672235dd23d77f87dbead9c5540c7464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:8d:fb:30:cb:83:25:d8:34:e7:c9:57:a8: be:a4:2f:3c:5c:60:02:d8:67:fc:cb:fa:be:bb:90: dc:92:47:14:c2:32:f2:e1:48:15:ef:b6:d7:f0:ce: 30:31:a9:93:69:dd:fb:df:d6:7c:fb:fa:17:88:d0: 90:3f:26:a7:c6:c5:f4:bf:16:41:e1:c9:3d:fd:79: d3:ff:69:72:4c:9a:ed:fb:32:3a:b5:e7:ff:f9:34: 8d:43:dd:47:72:e6:bc:87:46:e0:18:c1:c5:10:43: 8c:9a:09:f1:8a:a8:1f:42:ab:4e:da:f2:67:52:9a: 95:2a:63:1d:0b:60:d8:e6:70:ec:31:41:b2:ab:b8: a5:25:76:ae:5b:8d:22:88:e3:c1:a6:3c:09:37:ca: 6b:ee:6b:fb:03:31:a5:2f:2a:7e:02:0b:db:88:81: 4a:ee:cd:66:bc:b9:6c:e5:45:db:fd:71:9e:88:5c: 68:3b:c6:62:28:47:8d:25:60:8f:13:2c:94:7d:18: 14:56:64:c8:80:de:77:d7:b5:f9:ff:5f:80:d1:d0: 56:1b:4b:24:c7:ba:cc:27:54:cc:a7:de:ac:a4:03: fe:ba:73:ca:9b:d7:59:d3:b7:66:f4:7b:6a:45:96: 79:2b:a6:f5:da:a2:8b:53:7d:f7:34:3b:9e:ef:30: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:0D:2E:67:22:35:DD:23:D7:7F:87:DB:EA:D9:C5:54:0C:74:64 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/88YNLmciNd0j13-H2-rZxVQMdGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.204.0/22 185.84.220.0/22 Signature Algorithm: sha256WithRSAEncryption bc:ad:21:e1:24:4b:46:35:8b:13:ff:b1:50:e4:79:13:1e:b8: 0e:19:68:f1:39:24:22:42:ce:97:52:9e:47:46:6d:ac:1f:f2: cf:70:9f:bb:da:35:17:f7:67:36:de:7b:cd:cd:46:eb:08:67: 63:0a:78:26:28:2d:45:47:80:72:62:fe:b2:e4:1f:49:96:8f: 69:a3:26:b8:e5:a7:9a:45:87:96:cb:72:a1:f2:db:2a:5c:df: 4f:2b:f8:1b:96:6d:ef:ca:62:2e:aa:54:17:f2:f7:d8:53:78: 70:47:eb:ba:3d:f6:ca:ad:b5:5e:a3:20:d6:8a:4a:98:a3:b7: 2b:82:08:cc:7a:c0:b1:a9:da:e9:5a:d1:ce:b6:2f:68:ba:ad: 6a:69:1d:8c:16:63:9f:ee:28:74:b9:fe:7c:18:ac:4b:62:70: 22:a6:51:cf:f8:8e:0d:16:77:f9:cf:81:3a:fa:a0:57:9a:34: ca:95:f0:0c:b3:42:b3:32:cc:c7:eb:f2:79:d6:61:69:0d:0f: a6:fa:c8:f8:8a:a3:d5:10:08:c1:f8:89:e3:fd:0f:ea:66:93: 9e:56:14:8e:65:0a:25:39:cf:de:6b:21:95:a2:42:95:5b:a4: 62:44:ce:df:f2:f7:4c:79:2d:48:79:c1:f9:69:eb:01:96:45: 49:73:3b:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EPAe5NAX1WXGtmQLZZtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2M2MGQyZTY3MjIzNWRkMjNkNzdmODdkYmVhZDljNTU0MGM3NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkqN+zDLgyXYNOfJV6i+pC88XGAC 2Gf8y/q+u5DckkcUwjLy4UgV77bX8M4wMamTad3739Z8+/oXiNCQPyanxsX0vxZB 4ck9/XnT/2lyTJrt+zI6tef/+TSNQ91Hcua8h0bgGMHFEEOMmgnxiqgfQqtO2vJn UpqVKmMdC2DY5nDsMUGyq7ilJXauW40iiOPBpjwJN8pr7mv7AzGlLyp+AgvbiIFK 7s1mvLls5UXb/XGeiFxoO8ZiKEeNJWCPEyyUfRgUVmTIgN5317X5/1+A0dBWG0sk x7rMJ1TMp96spAP+unPKm9dZ07dm9HtqRZZ5K6b12qKLU333NDue7zA6nQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPPGDS5nIjXdI9d/h9vq2cVUDHRkMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvODhZTkxtY2lOZDBqMTMtSDItclp4VlFNZEdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLo/MAwQC uVTcMA0GCSqGSIb3DQEBCwUAA4IBAQC8rSHhJEtGNYsT/7FQ5HkTHrgOGWjxOSQi Qs6XUp5HRm2sH/LPcJ+72jUX92c23nvNzUbrCGdjCngmKC1FR4ByYv6y5B9Jlo9p oya45aeaRYeWy3Kh8tsqXN9PK/gblm3vymIuqlQX8vfYU3hwR+u6PfbKrbVeoyDW ikqYo7crggjMesCxqdrpWtHOti9ouq1qaR2MFmOf7ih0uf58GKxLYnAiplHP+I4N Fnf5z4E6+qBXmjTKlfAMs0KzMszH6/J51mFpDQ+m+sj4iqPVEAjB+Inj/Q/qZpOe VhSOZQolOc/eayGVokKVW6RiRM7f8vdMeS1IecH5aesBlkVJcztN -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:46 2026 by rpki-client