This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9sk7o3-J1zppXpr20oFx7pS_U0c.roa File: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (raw, json) Hash identifier: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ= Subject key identifier: F6:C9:3B:A3:7F:89:D7:3A:69:5E:9A:F6:D2:81:71:EE:94:BF:53:47 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCB3C24C8617AC5C2D8BF7B1F2DC4 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9sk7o3-J1zppXpr20oFx7pS_U0c.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60168 IP address blocks: 88.80.152.0/22 maxlen: 24 88.80.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cb:3c:24:c8:61:7a:c5:c2:d8:bf:7b:1f:2d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6c93ba37f89d73a695e9af6d28171ee94bf5347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:5d:d3:4b:23:b3:e4:6a:43:3e:81:c0:4a: 8e:11:a0:96:c3:d8:5f:46:ed:4c:f6:77:2c:e4:21: 1e:1a:35:1c:c1:fa:6d:a6:1e:ac:31:02:84:50:6c: 63:12:a3:7f:4e:5f:df:e0:b1:b7:c3:af:9b:91:ce: f6:e1:1b:e2:12:6e:8b:49:16:a1:a2:31:18:fb:58: 2e:cc:1c:07:c4:0c:82:7a:21:86:62:57:41:34:8b: bf:05:04:2c:10:e2:55:a4:bb:04:8c:b8:1d:7f:fc: bb:79:ee:e6:b1:12:05:e6:20:68:00:c5:83:80:5f: b9:94:74:fd:f7:b6:6a:b3:34:f9:c8:76:ef:69:2b: 90:f8:32:2c:5d:30:8d:7f:31:a5:47:cb:98:da:b5: 0f:67:05:d9:f5:e6:2f:e9:e7:9f:84:07:90:85:1a: 89:65:65:12:c3:7c:2a:81:a9:a9:9d:91:2d:fa:5e: e7:5f:0f:a3:b3:08:4e:65:7e:2d:17:37:ce:68:0a: 97:a3:e6:c4:66:8c:fd:d2:b4:2f:fe:a5:a3:77:91: 26:42:37:64:47:15:5d:84:00:ec:5a:9e:ee:54:6f: 55:51:bb:ef:53:a2:60:4b:ec:93:66:11:ac:31:62: 44:90:4e:1b:ae:b7:44:b7:d7:18:1a:ae:97:27:bf: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C9:3B:A3:7F:89:D7:3A:69:5E:9A:F6:D2:81:71:EE:94:BF:53:47 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9sk7o3-J1zppXpr20oFx7pS_U0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.152.0/21 Signature Algorithm: sha256WithRSAEncryption 00:02:cb:de:e9:e4:d8:b2:be:a8:de:a6:d9:ff:c6:42:77:ba: 25:36:f2:0d:54:b3:cf:7e:e3:58:00:c7:4a:51:ec:ca:25:4b: 00:d9:20:74:c4:0c:8e:50:d6:4b:e2:6b:ea:12:48:b7:3b:32: 16:96:f0:f0:69:96:e9:53:fd:d7:ed:f6:e1:5c:69:79:c2:fc: 2f:1d:bb:72:2a:24:a8:34:45:db:b6:f1:3a:75:54:21:25:69: 86:7b:95:00:87:44:65:93:92:08:b3:f1:6a:c8:5c:69:7d:13: 34:24:8b:8a:c2:48:01:53:77:90:f8:e6:91:fb:50:66:a9:1d: 79:80:3f:bf:9c:2a:83:a1:1b:e2:ee:a5:fa:38:d8:e4:cd:39: 84:1b:b7:ce:aa:9d:df:0b:98:f0:1c:90:61:8d:55:8d:b3:f6: e8:42:ad:6b:d4:1c:a2:b0:ba:db:da:97:d1:91:39:b4:fe:ba: 17:7b:fd:9e:9a:cd:e6:5f:a7:1e:01:b6:2f:27:59:f6:6c:5c: b0:4f:0b:8f:55:52:15:d2:1d:59:76:a7:62:de:b7:61:00:ff: 74:0f:8a:7d:ab:6c:a7:0f:6a:fc:75:ba:6f:a4:f1:fa:b1:87: ae:67:83:fd:48:cb:a8:be:9f:60:48:4a:2d:f3:d2:ff:f1:78: d1:d1:67:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cs8JMhhesXC2L97Hy3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmM5M2JhMzdmODlkNzNhNjk1ZTlhZjZkMjgxNzFlZTk0YmY1MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhd00sjs+RqQz6BwEqOEaCWw9hf Ru1M9ncs5CEeGjUcwfptph6sMQKEUGxjEqN/Tl/f4LG3w6+bkc724RviEm6LSRah ojEY+1guzBwHxAyCeiGGYldBNIu/BQQsEOJVpLsEjLgdf/y7ee7msRIF5iBoAMWD gF+5lHT997ZqszT5yHbvaSuQ+DIsXTCNfzGlR8uY2rUPZwXZ9eYv6eefhAeQhRqJ ZWUSw3wqgampnZEt+l7nXw+jswhOZX4tFzfOaAqXo+bEZoz90rQv/qWjd5EmQjdk RxVdhADsWp7uVG9VUbvvU6JgS+yTZhGsMWJEkE4brrdEt9cYGq6XJ7+AtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbJO6N/idc6aV6a9tKBce6Uv1NHMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvOXNrN28zLUoxenBwWHByMjBvRng3cFNfVTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWFCYMA0G CSqGSIb3DQEBCwUAA4IBAQAAAsve6eTYsr6o3qbZ/8ZCd7olNvINVLPPfuNYAMdK UezKJUsA2SB0xAyOUNZL4mvqEki3OzIWlvDwaZbpU/3X7fbhXGl5wvwvHbtyKiSo NEXbtvE6dVQhJWmGe5UAh0Rlk5IIs/FqyFxpfRM0JIuKwkgBU3eQ+OaR+1BmqR15 gD+/nCqDoRvi7qX6ONjkzTmEG7fOqp3fC5jwHJBhjVWNs/boQq1r1ByisLrb2pfR kTm0/roXe/2ems3mX6ceAbYvJ1n2bFywTwuPVVIV0h1Zdqdi3rdhAP90D4p9q2yn D2r8dbpvpPH6sYeuZ4P9SMuovp9gSEot89L/8XjR0Wfg -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:32 2026 by rpki-client