This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Ldib0sJakE8ZKooEG4htHcyRxxQ.roa File: Ldib0sJakE8ZKooEG4htHcyRxxQ.roa (raw, json) Hash identifier: FNTpROf4uoy7qWvXeLIv8VAK05w3xcysE+coW3g+tqI= Subject key identifier: 2D:D8:9B:D2:C2:5A:90:4F:19:2A:8A:04:1B:88:6D:1D:CC:91:C7:14 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31CF9EC6CFC5642E1308675EB36FB Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Ldib0sJakE8ZKooEG4htHcyRxxQ.roa Signing time: Thu 01 Jan 2026 22:17:25 +0000 ROA not before: Thu 01 Jan 2026 22:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 89.222.88.0/24 maxlen: 24 89.222.89.0/24 maxlen: 24 89.222.90.0/24 maxlen: 24 89.222.91.0/24 maxlen: 24 89.222.92.0/24 maxlen: 24 89.222.93.0/24 maxlen: 24 89.222.94.0/24 maxlen: 24 89.222.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1c:f9:ec:6c:fc:56:42:e1:30:86:75:eb:36:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dd89bd2c25a904f192a8a041b886d1dcc91c714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:0b:f6:b1:79:c7:dd:6b:fe:06:fb:2b:45: c0:ee:78:a6:e2:f1:d8:54:ec:54:9d:2b:1f:be:57: 90:2d:7e:25:fb:7a:33:83:f6:f5:62:51:09:fb:4f: e5:cf:62:6b:5c:a9:3f:e7:ed:13:a0:fb:87:a8:c4: 48:b4:61:1d:f8:b5:a3:4e:68:34:e3:0b:11:4f:85: 11:43:0c:a6:f4:a2:7f:08:34:18:a0:c4:8e:b7:e1: e7:dc:f1:9d:e7:41:db:92:43:b4:b6:e8:7e:7e:4c: 8a:a5:bd:a7:0f:7f:49:b9:91:32:87:b5:af:0d:1f: 64:04:55:45:68:14:8d:dd:6e:f8:07:98:64:ad:4f: 1c:f5:9b:d6:d4:c7:02:a0:0b:32:a8:2b:fb:75:00: bb:78:26:0f:73:f9:a9:7e:e5:f8:85:5f:f5:d2:df: 05:20:8e:67:20:a5:2c:80:fc:3a:de:8e:a7:aa:b3: 06:11:e9:60:2c:b1:85:58:88:f8:6e:bf:7f:34:52: b5:8a:bf:14:70:2a:d2:95:e0:56:e0:8f:ec:fd:d1: 88:d5:9b:b7:2a:23:e1:b7:e5:60:cd:f5:5a:82:76: 51:62:cf:9e:d5:09:11:08:d5:76:29:72:79:8a:bc: 5e:d2:87:c0:0e:e7:9f:37:7d:8b:65:71:c2:30:3d: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D8:9B:D2:C2:5A:90:4F:19:2A:8A:04:1B:88:6D:1D:CC:91:C7:14 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Ldib0sJakE8ZKooEG4htHcyRxxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.88.0/21 Signature Algorithm: sha256WithRSAEncryption 09:fb:c3:d6:f7:7e:87:52:a0:db:ac:c9:98:a0:9c:4d:cd:6c: 40:03:02:a5:b5:71:71:c3:9b:fd:03:f5:56:d1:95:8a:f3:6f: 6b:03:8c:7e:d3:1d:07:86:97:c8:81:1d:67:06:5e:ca:60:c1: fc:86:ac:20:6c:ff:7a:75:52:82:47:89:4a:37:d0:66:a9:b4: a1:d9:7e:9c:96:2d:26:b3:eb:30:c8:72:e5:6f:2c:74:e9:1f: c8:8c:55:8e:18:c7:cf:7a:49:5a:80:54:47:ff:51:fb:ff:5c: d5:6e:4f:44:56:14:46:2c:60:c9:29:7f:5f:ce:2a:8d:26:3c: 0c:ac:a9:40:d8:45:c5:4e:18:f2:60:8f:aa:fc:75:2c:d6:02: 8a:83:c0:d9:2c:28:41:a6:69:db:b6:80:93:88:4e:dd:26:04: 82:8b:d3:e0:1b:cb:f1:ec:0c:2b:65:00:0e:c6:c9:37:48:b4: d7:47:80:ce:ee:24:19:07:33:02:50:36:37:40:46:01:be:6d: 40:5a:23:b7:b3:fc:0d:54:41:78:e1:db:dc:a8:6d:12:38:9c: 3b:ce:8d:ba:7e:7d:4b:7d:03:cd:d2:1b:77:02:5a:65:b6:8a: 41:8c:a2:e8:17:f4:fb:9a:36:cb:ab:65:43:36:af:4b:67:60: b7:40:50:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oxz57Gz8VkLhMIZ16zb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGQ4OWJkMmMyNWE5MDRmMTkyYThhMDQxYjg4NmQxZGNjOTFjNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TEL9rF5x91r/gb7K0XA7nim4vHY VOxUnSsfvleQLX4l+3ozg/b1YlEJ+0/lz2JrXKk/5+0ToPuHqMRItGEd+LWjTmg0 4wsRT4URQwym9KJ/CDQYoMSOt+Hn3PGd50HbkkO0tuh+fkyKpb2nD39JuZEyh7Wv DR9kBFVFaBSN3W74B5hkrU8c9ZvW1McCoAsyqCv7dQC7eCYPc/mpfuX4hV/10t8F II5nIKUsgPw63o6nqrMGEelgLLGFWIj4br9/NFK1ir8UcCrSleBW4I/s/dGI1Zu3 KiPht+VgzfVagnZRYs+e1QkRCNV2KXJ5irxe0ofADuefN32LZXHCMD0v8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC3Ym9LCWpBPGSqKBBuIbR3MkccUMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvTGRpYjBzSmFrRThaS29vRUc0aHRIY3lSeHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWd5YMA0G CSqGSIb3DQEBCwUAA4IBAQAJ+8PW936HUqDbrMmYoJxNzWxAAwKltXFxw5v9A/VW 0ZWK829rA4x+0x0HhpfIgR1nBl7KYMH8hqwgbP96dVKCR4lKN9BmqbSh2X6cli0m s+swyHLlbyx06R/IjFWOGMfPeklagFRH/1H7/1zVbk9EVhRGLGDJKX9fziqNJjwM rKlA2EXFThjyYI+q/HUs1gKKg8DZLChBpmnbtoCTiE7dJgSCi9PgG8vx7AwrZQAO xsk3SLTXR4DO7iQZBzMCUDY3QEYBvm1AWiO3s/wNVEF44dvcqG0SOJw7zo26fn1L fQPN0ht3AlpltopBjKLoF/T7mjbLq2VDNq9LZ2C3QFBY -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:43 2026 by rpki-client