This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/88_mVYcIi195yWHslC0XBRd6U4I.roa File: 88_mVYcIi195yWHslC0XBRd6U4I.roa (raw, json) Hash identifier: Dy2Oyo3fbXv0DZlmMowb5sHIPWHSUgUfkyA7eVeHSDM= Subject key identifier: F3:CF:E6:55:87:08:8B:5F:79:C9:61:EC:94:2D:17:05:17:7A:53:82 Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe Certificate serial: 019B7D5B04F5F447E6503C1DC41AD6A7126C Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/88_mVYcIi195yWHslC0XBRd6U4I.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200324 IP address blocks: 194.41.48.0/24 maxlen: 24 194.41.49.0/24 maxlen: 24 194.41.50.0/24 maxlen: 24 194.41.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:04:f5:f4:47:e6:50:3c:1d:c4:1a:d6:a7:12:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3cfe65587088b5f79c961ec942d1705177a5382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:e0:32:e1:b4:74:bb:02:c1:29:d4:25:c3: d8:96:de:64:cf:f2:36:0b:4e:89:c8:ba:bb:66:93: 22:d9:b1:11:1a:a9:38:5e:4c:1d:07:3a:1e:a7:a8: 00:9a:c1:27:3f:59:56:64:44:45:e7:47:bd:49:6c: 72:50:6f:00:da:46:83:45:77:34:aa:f0:61:93:9e: 0b:68:db:30:df:e6:73:a0:34:26:18:3d:3b:18:3b: f8:50:d5:1b:ed:65:94:dc:fd:4f:8d:25:fa:3f:82: 48:ed:3b:1d:aa:bc:72:9c:91:a4:33:a1:f2:b5:14: af:90:55:05:b6:54:28:7c:4f:24:62:e9:8c:42:2f: e7:06:2a:68:97:09:7a:2d:1e:e2:c0:b4:73:34:c9: a2:47:bd:4e:97:34:d9:14:18:83:af:47:89:3f:c0: bf:a4:81:9f:2a:a4:11:52:9c:14:c7:e7:9e:5e:b7: 4e:c9:97:b8:c1:8e:81:47:28:dd:98:ae:e5:3a:a9: 70:18:ab:52:e5:2a:bc:71:ab:57:cf:6a:a7:da:d9: a7:c8:19:60:b0:98:cb:81:a5:ca:5a:30:4d:2d:71: a1:a3:98:92:c1:d7:74:83:5e:ea:7c:51:4c:50:13: 41:2f:db:2b:53:e5:78:96:11:02:f8:09:08:09:f3: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:E6:55:87:08:8B:5F:79:C9:61:EC:94:2D:17:05:17:7A:53:82 X509v3 Authority Key Identifier: keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/88_mVYcIi195yWHslC0XBRd6U4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.48.0/22 Signature Algorithm: sha256WithRSAEncryption 63:4e:ce:5a:30:50:db:e6:05:49:7f:c6:35:b0:ed:a2:a5:55: d9:11:00:63:c6:78:c1:ea:3a:ce:2e:c3:ac:c6:98:b4:f6:b2: c6:40:df:f6:af:b0:81:66:30:01:86:da:13:17:7d:83:94:95: 4d:02:23:33:32:9d:65:f7:a6:06:89:22:fa:9b:e9:27:d0:8a: 92:8a:81:9a:22:e4:8d:c7:d7:9e:e4:7a:c1:c8:4a:d2:fd:da: f1:bd:ba:e7:e2:d9:fa:0b:62:58:e4:fc:ca:05:c5:e3:1c:a9: ca:52:f5:01:b1:80:fa:c8:f1:ed:12:42:b0:9a:0f:f5:d0:e0: a0:0c:f8:4e:13:81:c3:7a:ca:31:a3:e3:5b:f9:63:21:64:15: b6:5d:6b:3a:d2:be:2f:04:55:62:21:c3:8e:62:26:3c:e3:fb: 1f:d4:0c:04:37:4a:63:b0:00:ef:df:e4:34:15:bc:f0:fd:e0: e8:02:93:d3:05:9e:1b:1f:56:f9:07:d2:fa:e6:be:db:50:d5: e6:b0:6c:3c:e5:7f:98:21:9a:13:d7:08:61:09:56:b2:fb:06: fe:88:fe:c6:1d:8c:89:6b:7c:5e:4e:2a:63:d2:26:a5:8e:6d: ab:aa:0c:22:73:cf:93:57:0d:d9:a6:c1:ef:84:7d:2d:21:6d: eb:a1:1e:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwT19EfmUDwdxBrWpxJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODlkYjcyNTBmZDg0NzZjODk4YWVlMGE1ZmJmMmE5ODgz NDAxZmUwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2NmZTY1NTg3MDg4YjVmNzljOTYxZWM5NDJkMTcwNTE3N2E1MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprngMuG0dLsCwSnUJcPYlt5kz/I2 C06JyLq7ZpMi2bERGqk4XkwdBzoep6gAmsEnP1lWZERF50e9SWxyUG8A2kaDRXc0 qvBhk54LaNsw3+ZzoDQmGD07GDv4UNUb7WWU3P1PjSX6P4JI7TsdqrxynJGkM6Hy tRSvkFUFtlQofE8kYumMQi/nBipolwl6LR7iwLRzNMmiR71OlzTZFBiDr0eJP8C/ pIGfKqQRUpwUx+eeXrdOyZe4wY6BRyjdmK7lOqlwGKtS5Sq8catXz2qn2tmnyBlg sJjLgaXKWjBNLXGho5iSwdd0g17qfFFMUBNBL9srU+V4lhEC+AkICfN3EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPP5lWHCItfeclh7JQtFwUXelOCMB8GA1UdIwQY MBaAFKCJ23JQ/YR2yJiu4KX78qmINAH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMt ZDgyNWQwMzY1Nzg5LzEvODhfbVZZY0lpMTk1eVdIc2xDMFhCUmQ2VTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yYTg4MzItY2RkNi00ZDhjLTkzZjMtZDgyNWQwMzY1Nzg5 LzEvb0luYmNsRDloSGJJbUs3Z3BmdnlxWWcwQWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwikwMA0G CSqGSIb3DQEBCwUAA4IBAQBjTs5aMFDb5gVJf8Y1sO2ipVXZEQBjxnjB6jrOLsOs xpi09rLGQN/2r7CBZjABhtoTF32DlJVNAiMzMp1l96YGiSL6m+kn0IqSioGaIuSN x9ee5HrByErS/drxvbrn4tn6C2JY5PzKBcXjHKnKUvUBsYD6yPHtEkKwmg/10OCg DPhOE4HDesoxo+Nb+WMhZBW2XWs60r4vBFViIcOOYiY84/sf1AwEN0pjsADv3+Q0 Fbzw/eDoApPTBZ4bH1b5B9L65r7bUNXmsGw85X+YIZoT1whhCVay+wb+iP7GHYyJ a3xeTipj0ialjm2rqgwic8+TVw3ZpsHvhH0tIW3roR4z -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:40 2026 by rpki-client