This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/iMohY32XGfMe49GauUZuk8wSe_o.roa File: iMohY32XGfMe49GauUZuk8wSe_o.roa (raw, json) Hash identifier: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw= Subject key identifier: 88:CA:21:63:7D:97:19:F3:1E:E3:D1:9A:B9:46:6E:93:CC:12:7B:FA Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Certificate serial: 019B7F15B479147C5EC4A01EB25244897DE7 Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/iMohY32XGfMe49GauUZuk8wSe_o.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 194.88.150.0/24 maxlen: 24 194.88.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b4:79:14:7c:5e:c4:a0:1e:b2:52:44:89:7d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ca21637d9719f31ee3d19ab9466e93cc127bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:45:30:5f:ae:7e:8d:c4:f4:6f:62:f9:1d: c2:f3:48:6b:62:cf:23:81:71:3f:65:53:e9:8a:3d: 5f:10:3c:8a:a5:41:c8:d3:ba:bd:c9:63:e4:57:dc: 45:a5:14:88:d8:60:64:bf:ac:b0:70:34:1a:70:db: 41:27:ab:bf:4f:39:ce:4e:3b:ab:e1:ab:cd:41:77: 27:1a:51:eb:d7:69:6b:8e:cb:06:04:f8:55:c8:64: 04:66:ee:6d:c6:62:38:ef:89:82:fd:d4:8e:a7:9a: 25:f5:ab:72:db:53:68:ce:3d:71:db:5e:72:1b:40: db:ff:a0:01:0f:5d:ee:df:c7:a5:59:2b:9d:fe:2a: 4a:82:54:1c:2d:85:2c:58:0b:df:2c:a5:b1:76:7d: 40:a6:75:fc:b5:1b:ad:2b:b3:e2:75:28:a3:d7:2f: 54:04:36:0e:20:d4:fd:16:62:0b:10:37:10:32:49: 98:75:12:fd:20:b6:cc:59:68:2c:82:2a:41:c4:7d: c3:78:0c:74:65:93:0e:81:fe:69:88:f0:7c:96:8c: 34:0c:8d:6c:89:65:01:70:70:1f:12:63:ba:de:bd: 52:77:e0:87:91:46:0b:b9:c3:4c:ff:46:8d:05:be: dc:ec:26:74:ce:5d:81:a7:d4:5c:81:fb:5a:49:20: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:21:63:7D:97:19:F3:1E:E3:D1:9A:B9:46:6E:93:CC:12:7B:FA X509v3 Authority Key Identifier: keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/iMohY32XGfMe49GauUZuk8wSe_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.150.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:81:ee:31:90:da:51:33:6c:fa:3e:bf:2f:7f:77:25:e0:e0: 8e:b1:aa:8a:c6:6f:27:d6:e7:dd:bb:84:4d:84:e0:7b:eb:9f: 9a:c9:3b:a9:9c:e6:55:2a:4c:f1:f7:95:62:be:26:c2:03:ea: 8c:a6:62:37:b1:f4:11:82:bb:9b:0e:8b:f8:54:b0:7e:ba:68: ca:76:e3:d7:cd:2c:2e:80:a1:1d:21:41:96:49:5c:e1:68:ab: 8c:9e:45:75:02:f6:84:81:82:c7:e6:18:ec:29:48:f4:8e:0d: 03:67:16:3c:7b:5a:61:42:59:ba:29:71:1e:fb:e8:ab:f7:8e: 82:d5:2c:23:83:72:03:ae:18:f9:53:c0:b7:2b:50:01:61:d4: 16:50:a1:1c:ad:91:1f:90:9e:67:5b:d1:6a:5c:76:80:14:7a: 08:92:41:1f:3d:f4:af:d4:27:c3:0f:82:0a:32:30:4a:36:41: bb:ac:14:73:2d:11:9c:08:30:5d:a9:73:4d:ad:62:bd:81:df: 8f:ea:09:64:58:97:36:4c:f3:5e:91:6a:aa:27:d1:7c:31:99: 80:82:b2:b2:c5:67:db:02:62:5e:b3:1e:ba:76:07:a7:48:03: 7b:84:9c:a7:ee:5d:04:70:aa:7b:ad:35:50:d2:d9:1f:06:0a: 0a:69:32:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbR5FHxexKAeslJEiX3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5 OTEwNWUwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGNhMjE2MzdkOTcxOWYzMWVlM2QxOWFiOTQ2NmU5M2NjMTI3YmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GBFMF+ufo3E9G9i+R3C80hrYs8j gXE/ZVPpij1fEDyKpUHI07q9yWPkV9xFpRSI2GBkv6ywcDQacNtBJ6u/TznOTjur 4avNQXcnGlHr12lrjssGBPhVyGQEZu5txmI474mC/dSOp5ol9aty21Nozj1x215y G0Db/6ABD13u38elWSud/ipKglQcLYUsWAvfLKWxdn1ApnX8tRutK7PidSij1y9U BDYOINT9FmILEDcQMkmYdRL9ILbMWWgsgipBxH3DeAx0ZZMOgf5piPB8low0DI1s iWUBcHAfEmO63r1Sd+CHkUYLucNM/0aNBb7c7CZ0zl2Bp9RcgftaSSDhnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjKIWN9lxnzHuPRmrlGbpPMEnv6MB8GA1UdIwQY MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt YzJiYzE0NTFmMjcxLzEvaU1vaFkzMlhHZk1lNDlHYXVVWnVrOHdTZV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwliWMA0G CSqGSIb3DQEBCwUAA4IBAQAbge4xkNpRM2z6Pr8vf3cl4OCOsaqKxm8n1ufdu4RN hOB765+ayTupnOZVKkzx95VivibCA+qMpmI3sfQRgrubDov4VLB+umjKduPXzSwu gKEdIUGWSVzhaKuMnkV1AvaEgYLH5hjsKUj0jg0DZxY8e1phQlm6KXEe++ir946C 1Swjg3IDrhj5U8C3K1ABYdQWUKEcrZEfkJ5nW9FqXHaAFHoIkkEfPfSv1CfDD4IK MjBKNkG7rBRzLRGcCDBdqXNNrWK9gd+P6glkWJc2TPNekWqqJ9F8MZmAgrKyxWfb AmJesx66dgenSAN7hJyn7l0EcKp7rTVQ0tkfBgoKaTL2 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client