This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/88IvAIXIIPB-9OETK9vB-bAXOTs.roa File: 88IvAIXIIPB-9OETK9vB-bAXOTs.roa (raw, json) Hash identifier: oSp3g07wMvL4By2ftRsgUZY7cxvk+8N0s1QZPnjKLJ4= Subject key identifier: F3:C2:2F:00:85:C8:20:F0:7E:F4:E1:13:2B:DB:C1:F9:B0:17:39:3B Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Certificate serial: 019B7910D20F4706C005C07A4CC7CCECD630 Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/88IvAIXIIPB-9OETK9vB-bAXOTs.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 155.55.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d2:0f:47:06:c0:05:c0:7a:4c:c7:cc:ec:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c22f0085c820f07ef4e1132bdbc1f9b017393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:48:6c:d4:95:8a:05:cb:3a:b2:b6:26:b2:bd: 74:36:04:2b:66:bb:c1:b0:6f:e2:9c:ac:43:08:7f: d8:09:e6:8e:16:30:a8:f8:58:c9:a8:6b:5f:e0:a4: eb:bf:0d:a9:d4:9e:1e:be:53:c8:16:ac:47:4e:78: a4:36:9b:8e:43:e7:d1:d1:e0:96:a0:ea:e2:d6:85: 88:51:3d:59:d5:09:bd:95:60:57:4f:27:02:1b:3b: 3e:09:f1:bc:18:f0:8d:a8:02:48:b9:27:84:7c:f2: 98:4e:02:b2:da:f6:f4:00:ce:5c:28:45:c3:4a:cd: df:5b:fe:f0:eb:5a:aa:d4:f2:73:0e:7d:4d:f2:a7: 9b:1b:89:60:4a:90:0a:81:82:a7:59:c0:6d:15:f1: 84:4c:56:af:0a:18:c6:bd:87:13:1d:f0:15:4e:df: 25:cb:6a:0b:8d:86:bb:b8:d4:2e:22:86:34:bb:7c: 92:a9:01:b6:f9:1c:8a:a3:8e:58:bf:62:8f:f3:a0: cc:90:96:f8:bf:87:26:a2:d6:ba:e3:8a:8f:e7:0f: 83:c0:7b:39:e1:9d:94:0d:eb:62:fc:10:37:6b:3b: af:73:7d:f5:d1:de:94:eb:a2:a2:52:af:39:75:46: 7c:18:8d:4a:ef:1d:b7:96:b5:cc:61:3d:a9:de:fc: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C2:2F:00:85:C8:20:F0:7E:F4:E1:13:2B:DB:C1:F9:B0:17:39:3B X509v3 Authority Key Identifier: keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/88IvAIXIIPB-9OETK9vB-bAXOTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.55.192.0/22 Signature Algorithm: sha256WithRSAEncryption 54:01:e6:da:e4:f6:db:b3:22:b9:c5:e8:f8:c1:c9:6b:6e:f4: 5a:e9:37:ef:df:fd:c8:8a:11:a2:89:56:5e:c7:31:bd:09:3a: 62:5f:cb:bb:88:16:64:4a:e2:c5:ea:84:17:f3:34:8f:9a:1c: 99:38:76:7b:b4:bc:f2:2b:24:f6:9b:f9:5b:7c:15:2f:cc:b7: 55:d8:01:c0:e6:cc:ca:e1:7d:1f:9e:9f:75:a4:fa:b8:5e:b3: c8:ea:1a:e3:ba:0f:81:b0:2f:e5:79:27:b9:ce:88:af:c2:04: 15:53:7d:8b:04:10:7f:98:17:61:e4:3f:fe:f6:4c:e2:ab:1b: 5d:8b:9b:e5:4b:cd:20:d2:85:d5:cf:73:a1:d2:ba:17:b2:1c: 2b:17:f6:68:3f:67:fa:33:bd:a1:0b:9c:0e:8a:85:d6:21:74: 01:2b:63:27:bf:eb:c0:c5:a6:d1:fa:05:09:7d:20:5d:f0:72: 47:7c:f7:45:91:fb:54:85:ca:3a:1f:8f:55:e8:80:d4:99:be: 64:a8:28:d0:8c:ce:75:8c:02:8d:71:77:a8:9b:fd:c2:25:1f: 8c:22:9f:af:38:ef:4a:d4:72:49:08:c2:0b:7d:c2:42:73:71: 47:c2:bf:85:60:51:90:dc:0e:75:d9:23:9e:b8:29:92:d9:8d: 8b:96:79:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ENIPRwbABcB6TMfM7NYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDYzMjVlMzQ0MThhNTdjZTU2NmVmYzBjM2U4YjM4YTBl ZmE1ZGIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MyMmYwMDg1YzgyMGYwN2VmNGUxMTMyYmRiYzFmOWIwMTczOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6khs1JWKBcs6srYmsr10NgQrZrvB sG/inKxDCH/YCeaOFjCo+FjJqGtf4KTrvw2p1J4evlPIFqxHTnikNpuOQ+fR0eCW oOri1oWIUT1Z1Qm9lWBXTycCGzs+CfG8GPCNqAJIuSeEfPKYTgKy2vb0AM5cKEXD Ss3fW/7w61qq1PJzDn1N8qebG4lgSpAKgYKnWcBtFfGETFavChjGvYcTHfAVTt8l y2oLjYa7uNQuIoY0u3ySqQG2+RyKo45Yv2KP86DMkJb4v4cmota644qP5w+DwHs5 4Z2UDeti/BA3azuvc3310d6U66KiUq85dUZ8GI1K7x23lrXMYT2p3vxeGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPCLwCFyCDwfvThEyvbwfmwFzk7MB8GA1UdIwQY MBaAFFkGMl40QYpXzlZu/Aw+izig76XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2Yt YjIxN2E2OGNlYWY0LzEvODhJdkFJWElJUEItOU9FVEs5dkItYkFYT1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDYzNDktMWJjMC00YTBiLWI2N2YtYjIxN2E2OGNlYWY0 LzEvV1FZeVhqUkJpbGZPVm03OERENkxPS0R2cGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmzfAMA0G CSqGSIb3DQEBCwUAA4IBAQBUAeba5PbbsyK5xej4wclrbvRa6Tfv3/3IihGiiVZe xzG9CTpiX8u7iBZkSuLF6oQX8zSPmhyZOHZ7tLzyKyT2m/lbfBUvzLdV2AHA5szK 4X0fnp91pPq4XrPI6hrjug+BsC/leSe5zoivwgQVU32LBBB/mBdh5D/+9kziqxtd i5vlS80g0oXVz3Oh0roXshwrF/ZoP2f6M72hC5wOioXWIXQBK2Mnv+vAxabR+gUJ fSBd8HJHfPdFkftUhco6H49V6IDUmb5kqCjQjM51jAKNcXeom/3CJR+MIp+vOO9K 1HJJCMILfcJCc3FHwr+FYFGQ3A512SOeuCmS2Y2Llnk5 -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:26 2026 by rpki-client