This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-aMVqaFAmZaBD4JRQkJqEqN3Dl8.roa File: 1-aMVqaFAmZaBD4JRQkJqEqN3Dl8.roa (raw, json) Hash identifier: cgIWHn8zayZ4Z+/9SvcKKonr3/hZQS2TRLrRp70F1Os= Subject key identifier: F9:A3:15:A9:A1:40:99:96:81:0F:82:51:42:42:6A:12:A3:77:0E:5F Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B310A2F1B9E3A13E0528A9E739F15A63A Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-aMVqaFAmZaBD4JRQkJqEqN3Dl8.roa Signing time: Thu 18 Dec 2025 10:38:29 +0000 ROA not before: Thu 18 Dec 2025 10:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 88.80.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:0a:2f:1b:9e:3a:13:e0:52:8a:9e:73:9f:15:a6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Dec 18 10:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9a315a9a1409996810f825142426a12a3770e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:4a:3b:7d:09:1a:e8:67:a8:16:4f:75:16: a1:cc:5f:ed:08:62:4c:ee:8e:9c:a6:2b:24:e4:f0: 1a:83:cd:16:b9:94:a2:31:d0:8d:5f:98:6d:ff:75: 71:99:76:df:fe:3f:38:52:c2:01:bb:b2:ed:93:f0: f3:c5:e5:b6:7f:46:03:bf:cb:8f:7d:63:fc:56:33: 63:d8:15:47:f4:cf:55:9d:c4:67:49:09:80:b6:2b: f7:37:d3:1c:47:92:51:bc:a1:73:c7:b2:b4:a3:60: 99:d6:cf:14:be:c7:95:0e:00:1f:62:b7:c8:49:35: bd:13:a7:a7:9b:a8:51:0c:8c:6a:1d:75:8b:5c:87: db:90:cf:a1:30:81:d3:17:b9:bc:f2:bc:94:c9:10: 2e:24:b1:49:db:41:b1:12:54:06:db:7c:3c:40:41: d1:82:b3:14:ac:6d:cf:35:7a:02:6b:08:b1:ba:17: bd:cb:fa:a0:f5:95:86:93:c7:87:e1:fc:e6:e0:20: 5b:ae:54:22:a6:50:72:50:c3:f5:56:18:3c:5c:85: bb:de:09:01:45:43:16:e4:e4:8c:be:89:11:f2:69: d8:59:6f:26:7d:f3:9e:46:ed:6d:b2:05:33:bb:6e: 8c:e4:50:40:dc:c4:9b:38:16:ca:a5:d6:ee:e6:0f: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A3:15:A9:A1:40:99:96:81:0F:82:51:42:42:6A:12:A3:77:0E:5F X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/1-aMVqaFAmZaBD4JRQkJqEqN3Dl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.136.0/24 Signature Algorithm: sha256WithRSAEncryption 84:fd:a0:76:18:1e:49:3a:01:eb:50:3c:f6:2e:40:58:79:c6: 8b:83:07:1d:17:1c:94:f1:d7:f6:8f:c6:f9:bc:48:56:db:6f: 8c:60:e7:03:14:36:39:46:33:02:03:5c:bb:c0:89:6d:c8:24: 7a:b8:9c:31:94:08:b8:b0:e1:ba:86:87:4f:1c:d4:b2:62:af: bf:c2:8a:71:04:37:08:25:96:43:c6:dc:12:7c:c4:67:62:70: d6:fa:e5:c0:df:69:ff:b6:7f:0b:c9:b2:4f:f8:ef:97:54:08: 68:0c:0e:fd:d1:6b:dd:b1:46:fd:1d:bd:0d:95:74:f5:f6:f6: b4:28:5a:4b:26:6e:68:ba:bb:0e:2e:cc:95:ba:a4:34:29:46: 73:91:0d:32:b1:37:52:b0:19:59:2b:04:42:d6:87:24:dd:19: 73:bd:9a:7b:5f:29:b9:e2:fb:e5:53:d5:bc:95:0c:1c:5a:b8: c0:27:86:1b:84:31:f1:a4:a0:b0:c6:d7:26:24:59:20:52:ff: 18:b8:32:80:00:87:10:c4:67:f1:ca:1b:a5:49:37:a5:6d:39: 8e:cb:f9:c8:d1:f1:8f:61:55:b0:e4:5f:4c:e3:66:27:75:ae: dc:7c:8b:b2:aa:e8:31:1d:ca:74:60:24:90:73:55:cb:30:71: 00:e1:c7:8d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsxCi8bnjoT4FKKnnOfFaY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMjE4MTAzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEzMTVhOWExNDA5OTk2ODEwZjgyNTE0MjQyNmExMmEzNzcwZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtFKO30JGuhnqBZPdRahzF/tCGJM 7o6cpisk5PAag80WuZSiMdCNX5ht/3VxmXbf/j84UsIBu7Ltk/DzxeW2f0YDv8uP fWP8VjNj2BVH9M9VncRnSQmAtiv3N9McR5JRvKFzx7K0o2CZ1s8UvseVDgAfYrfI STW9E6enm6hRDIxqHXWLXIfbkM+hMIHTF7m88ryUyRAuJLFJ20GxElQG23w8QEHR grMUrG3PNXoCawixuhe9y/qg9ZWGk8eH4fzm4CBbrlQiplByUMP1Vhg8XIW73gkB RUMW5OSMvokR8mnYWW8mffOeRu1tsgUzu26M5FBA3MSbOBbKpdbu5g+LSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmjFamhQJmWgQ+CUUJCahKjdw5fMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvMS1hTVZxYUZBbVphQkQ0SlJRa0pxRXFOM0RsOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTMvYjcxNGFkLTFmNzgtNGExMC04ZTYxLWFiOGYxZjMzODdl ZS8xL1VTVDdvZVFCd0Q1Ym9jMTNycDdqblAxakdfcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFhQiDAN BgkqhkiG9w0BAQsFAAOCAQEAhP2gdhgeSToB61A89i5AWHnGi4MHHRcclPHX9o/G +bxIVttvjGDnAxQ2OUYzAgNcu8CJbcgkericMZQIuLDhuoaHTxzUsmKvv8KKcQQ3 CCWWQ8bcEnzEZ2Jw1vrlwN9p/7Z/C8myT/jvl1QIaAwO/dFr3bFG/R29DZV09fb2 tChaSyZuaLq7Di7MlbqkNClGc5ENMrE3UrAZWSsEQtaHJN0Zc72ae18pueL75VPV vJUMHFq4wCeGG4Qx8aSgsMbXJiRZIFL/GLgygACHEMRn8cobpUk3pW05jsv5yNHx j2FVsORfTONmJ3Wu3HyLsqroMR3KdGAkkHNVyzBxAOHHjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:07 2025 by rpki-client