This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/avSOkO1vns5GxCktjUNPLihkmzc.roa File: avSOkO1vns5GxCktjUNPLihkmzc.roa (raw, json) Hash identifier: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24= Subject key identifier: 6A:F4:8E:90:ED:6F:9E:CE:46:C4:29:2D:8D:43:4F:2E:28:64:9B:37 Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251 Certificate serial: 019B79ECC35BE66B5D0F9C4902C62D5398A5 Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/avSOkO1vns5GxCktjUNPLihkmzc.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 88.218.132.0/22 maxlen: 22 2a09:aa80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c3:5b:e6:6b:5d:0f:9c:49:02:c6:2d:53:98:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af48e90ed6f9ece46c4292d8d434f2e28649b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:c3:2c:75:00:aa:cd:1a:00:c3:61:f7:ae: 0d:0d:0f:a7:39:a8:b7:27:2e:03:87:ca:d4:89:75: b8:fb:90:9d:86:3a:4d:fc:cf:2d:41:c9:4c:90:ec: a4:c4:ff:66:6a:75:cf:b5:7a:95:f9:42:2d:bd:36: f4:46:3e:0f:3d:1a:41:df:2d:06:eb:f7:b5:39:00: 74:aa:66:21:3d:4a:35:ad:a3:98:3b:79:6c:22:ee: 68:2e:aa:f1:da:68:cb:30:6a:f2:35:f7:52:7a:2f: c4:dd:7e:04:de:de:c4:7f:2f:2d:c7:e8:fc:b6:29: 43:45:9b:e3:e8:5c:a6:81:08:d9:36:b1:b8:8a:77: 43:57:7a:22:1f:77:7f:a4:57:96:f0:c5:34:71:76: bc:69:f8:13:82:80:16:4c:c7:9e:64:e5:5b:46:2a: cd:5b:f5:be:1a:67:d4:97:66:2f:4c:f1:e4:8e:12: b1:da:df:24:ee:51:1a:b2:ad:d4:59:1f:de:7e:d0: 25:7c:58:24:7e:4f:b0:c9:e7:f0:ac:f1:9e:90:47: b4:d1:36:d2:0c:98:2d:1d:34:d9:19:67:77:83:94: 93:c7:d0:56:d8:2f:04:20:83:da:b7:a1:34:e4:1b: fd:14:b8:9b:c1:0a:70:4b:72:71:2e:35:7b:d3:a6: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F4:8E:90:ED:6F:9E:CE:46:C4:29:2D:8D:43:4F:2E:28:64:9B:37 X509v3 Authority Key Identifier: keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/avSOkO1vns5GxCktjUNPLihkmzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.132.0/22 IPv6: 2a09:aa80::/32 Signature Algorithm: sha256WithRSAEncryption 8d:f6:72:a4:89:85:b4:3c:f0:de:a3:a7:bf:7a:da:0c:0b:e4: c5:fb:ec:42:9e:af:11:52:a9:fe:dc:bc:c6:b0:39:6d:5d:a9: ff:57:3b:10:e5:a7:6e:93:14:2a:10:a1:70:f0:70:ae:84:58: a1:04:48:cf:6f:f7:fe:77:9c:be:09:32:6c:0c:44:30:26:55: d7:b1:73:50:e4:2a:6d:09:99:c9:97:cb:cc:97:a3:bf:b5:72: fb:e4:e4:0f:3c:a0:ed:a7:6c:75:51:92:7d:48:e4:18:b2:e0: 06:7f:01:43:b5:8f:54:32:15:e5:33:8b:3a:1b:ad:d2:94:4c: 17:c9:04:54:f5:99:52:d2:0a:d6:22:94:f2:8a:7e:0b:73:fb: d3:8e:2b:13:9b:f1:72:a6:cf:08:22:91:a2:66:ad:db:2e:98: b7:71:41:85:c6:7a:77:9b:74:b7:a3:83:a6:26:ad:5b:d8:45: 34:5d:3e:44:81:6c:8d:c5:9a:4c:e1:96:5d:67:c5:ae:8f:8c: 77:45:fb:a6:1a:d7:d0:3e:d1:8d:d4:2c:f1:08:c6:65:db:31: 1b:35:ff:5f:3e:ef:0a:8d:ec:66:27:be:8b:9e:75:01:5f:9f: 4b:79:2b:cb:12:2f:75:00:9c:70:fb:55:2c:2f:3f:aa:5a:b8: d8:c7:ac:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MNb5mtdD5xJAsYtU5ilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh NzIyNTEwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY0OGU5MGVkNmY5ZWNlNDZjNDI5MmQ4ZDQzNGYyZTI4NjQ5YjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcXDLHUAqs0aAMNh964NDQ+nOai3 Jy4Dh8rUiXW4+5CdhjpN/M8tQclMkOykxP9manXPtXqV+UItvTb0Rj4PPRpB3y0G 6/e1OQB0qmYhPUo1raOYO3lsIu5oLqrx2mjLMGryNfdSei/E3X4E3t7Efy8tx+j8 tilDRZvj6FymgQjZNrG4indDV3oiH3d/pFeW8MU0cXa8afgTgoAWTMeeZOVbRirN W/W+GmfUl2YvTPHkjhKx2t8k7lEasq3UWR/eftAlfFgkfk+wyefwrPGekEe00TbS DJgtHTTZGWd3g5STx9BW2C8EIIPat6E05Bv9FLibwQpwS3JxLjV706aM/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGr0jpDtb57ORsQpLY1DTy4oZJs3MB8GA1UdIwQY MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt MGE4OTJhYjQ3ZGIzLzEvYXZTT2tPMXZuczVHeENrdGpVTlBMaWhrbXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWNqEMA0E AgACMAcDBQAqCaqAMA0GCSqGSIb3DQEBCwUAA4IBAQCN9nKkiYW0PPDeo6e/etoM C+TF++xCnq8RUqn+3LzGsDltXan/VzsQ5adukxQqEKFw8HCuhFihBEjPb/f+d5y+ CTJsDEQwJlXXsXNQ5CptCZnJl8vMl6O/tXL75OQPPKDtp2x1UZJ9SOQYsuAGfwFD tY9UMhXlM4s6G63SlEwXyQRU9ZlS0grWIpTyin4Lc/vTjisTm/Fyps8IIpGiZq3b Lpi3cUGFxnp3m3S3o4OmJq1b2EU0XT5EgWyNxZpM4ZZdZ8Wuj4x3RfumGtfQPtGN 1CzxCMZl2zEbNf9fPu8KjexmJ76LnnUBX59LeSvLEi91AJxw+1UsLz+qWrjYx6wg -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:48 2026 by rpki-client