This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/88NWVToLEwKK_Mpgeyzi5wA0xpo.roa File: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (raw, json) Hash identifier: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4= Subject key identifier: F3:C3:56:55:3A:0B:13:02:8A:FC:CA:60:7B:2C:E2:E7:00:34:C6:9A Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Certificate serial: 019B7A5AEBD210B5F91BA40DE1CF429B3343 Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/88NWVToLEwKK_Mpgeyzi5wA0xpo.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57586 IP address blocks: 91.233.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:eb:d2:10:b5:f9:1b:a4:0d:e1:cf:42:9b:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c356553a0b13028afcca607b2ce2e70034c69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:63:ca:12:c4:e7:5c:06:52:be:c5:25:02: cf:20:33:67:c1:30:45:c9:4a:df:de:fd:f2:f9:a4: f2:cc:3c:28:e5:ae:17:08:a9:6f:3d:ad:05:35:7b: 1e:33:63:b2:43:1a:dc:33:89:7b:d8:d6:17:c0:90: f8:a4:0c:6f:49:f2:1e:57:6a:ae:8b:e2:d7:2d:4c: 72:f0:8a:19:8b:6f:c7:b1:c0:5c:69:43:96:c7:13: 6e:39:c7:be:53:b3:99:8b:72:8d:b2:cd:a0:10:78: 74:fe:66:e1:5e:93:97:ad:f8:0f:8f:93:65:96:6f: 01:b0:a9:82:47:b3:61:1c:7c:3e:cc:b9:18:43:a7: 87:6d:db:25:b9:25:30:5e:74:69:cb:32:c6:70:e1: 64:61:3e:a0:14:b8:a9:a5:6b:11:da:c8:6f:b9:04: 08:a3:7b:a6:b0:6a:c4:33:5d:21:b8:3d:73:f5:6b: 8b:08:fe:bd:10:bd:cc:4f:35:2a:1d:a2:58:db:73: 77:1e:14:b2:ba:b1:45:c3:4a:38:c8:d5:73:fb:3f: 1a:3d:03:b3:26:a0:ac:9f:cd:8c:a6:98:5a:27:ce: c9:5c:68:05:0a:1f:20:d6:7c:55:ee:ca:c7:7b:2d: 53:c7:7b:2a:01:35:3b:2d:81:49:2c:98:62:68:d1: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C3:56:55:3A:0B:13:02:8A:FC:CA:60:7B:2C:E2:E7:00:34:C6:9A X509v3 Authority Key Identifier: keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/88NWVToLEwKK_Mpgeyzi5wA0xpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.62.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ba:de:a1:4a:3d:1c:22:b7:4f:f8:db:c8:cf:66:b2:d2:45: 79:8d:16:97:ee:32:47:46:0d:df:2f:e9:51:02:f5:eb:34:b2: bd:bf:32:cd:a2:bf:82:31:fa:ce:6f:e0:a6:84:5f:b1:99:92: 08:04:38:6c:4c:d7:a2:8d:3c:49:bc:6d:f9:ab:91:a4:db:66: 89:72:82:9c:41:27:45:f4:91:fe:7f:86:e5:5f:dd:cb:44:41: 1e:63:f6:37:27:d4:e6:c4:e4:3c:fa:3b:0a:6f:3f:b1:d1:38: 00:a3:db:c6:c2:38:fe:01:29:0b:87:10:67:2e:f4:f1:93:25: b0:1c:ff:82:96:d6:28:6b:45:46:df:e6:a9:6f:b4:53:85:71: 52:26:25:d8:a0:04:3e:dd:fc:59:53:e3:2f:d3:5e:75:eb:b3: ab:78:d1:88:89:e3:52:9b:5b:c0:eb:a4:f0:e4:ad:43:0f:1f: 98:32:7b:d9:a1:ae:2a:31:0d:30:ad:c7:64:d3:d4:56:e9:f4: e6:1e:d0:97:de:8f:c2:9a:9c:2e:c1:dc:5e:a2:35:a5:6a:a2: 7e:b7:61:b5:59:47:6a:c7:33:20:71:ef:77:f4:bf:66:47:95: 95:9c:32:0c:16:dd:d8:b6:d4:a8:ba:2a:07:b0:38:63:2b:1f: 1f:00:7e:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuvSELX5G6QN4c9CmzNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjOGZmOTZlYWUyZDQ0OGVjNzg0OWQxNzNiNTUyZjE1ZjBm NzA0YzEwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MzNTY1NTNhMGIxMzAyOGFmY2NhNjA3YjJjZTJlNzAwMzRjNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rdjyhLE51wGUr7FJQLPIDNnwTBF yUrf3v3y+aTyzDwo5a4XCKlvPa0FNXseM2OyQxrcM4l72NYXwJD4pAxvSfIeV2qu i+LXLUxy8IoZi2/HscBcaUOWxxNuOce+U7OZi3KNss2gEHh0/mbhXpOXrfgPj5Nl lm8BsKmCR7NhHHw+zLkYQ6eHbdsluSUwXnRpyzLGcOFkYT6gFLippWsR2shvuQQI o3umsGrEM10huD1z9WuLCP69EL3MTzUqHaJY23N3HhSyurFFw0o4yNVz+z8aPQOz JqCsn82MpphaJ87JXGgFCh8g1nxV7srHey1Tx3sqATU7LYFJLJhiaNHIiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPDVlU6CxMCivzKYHss4ucANMaaMB8GA1UdIwQY MBaAFOyP+W6uLUSOx4SdFztVLxXw9wTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMt NmYxYzk3NGU4NjM3LzEvODhOV1ZUb0xFd0tLX01wZ2V5emk1d0EweHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMtNmYxYzk3NGU4NjM3 LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+k+MA0G CSqGSIb3DQEBCwUAA4IBAQAlut6hSj0cIrdP+NvIz2ay0kV5jRaX7jJHRg3fL+lR AvXrNLK9vzLNor+CMfrOb+CmhF+xmZIIBDhsTNeijTxJvG35q5Gk22aJcoKcQSdF 9JH+f4blX93LREEeY/Y3J9TmxOQ8+jsKbz+x0TgAo9vGwjj+ASkLhxBnLvTxkyWw HP+CltYoa0VG3+apb7RThXFSJiXYoAQ+3fxZU+Mv015167OreNGIieNSm1vA66Tw 5K1DDx+YMnvZoa4qMQ0wrcdk09RW6fTmHtCX3o/CmpwuwdxeojWlaqJ+t2G1WUdq xzMgce939L9mR5WVnDIMFt3YttSouioHsDhjKx8fAH5H -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:16 2026 by rpki-client