This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/I9uIHyNAZuZvz077ylfXzs2a2u4.roa File: I9uIHyNAZuZvz077ylfXzs2a2u4.roa (raw, json) Hash identifier: HTHulKVM9Nf7ivuW33GQbC8YIjVpn1m5bDuyHdQbDxM= Subject key identifier: 23:DB:88:1F:23:40:66:E6:6F:CF:4E:FB:CA:57:D7:CE:CD:9A:DA:EE Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Certificate serial: 019B7C134B90174CF25C75FB9280800B4379 Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/I9uIHyNAZuZvz077ylfXzs2a2u4.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25308 IP address blocks: 88.210.15.0/24 maxlen: 24 88.210.16.0/24 maxlen: 24 88.210.17.0/24 maxlen: 24 88.210.18.0/24 maxlen: 24 88.210.19.0/24 maxlen: 24 88.210.22.0/24 maxlen: 24 88.210.23.0/24 maxlen: 24 212.118.44.0/24 maxlen: 24 212.118.46.0/23 maxlen: 23 212.118.46.0/24 maxlen: 24 212.118.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4b:90:17:4c:f2:5c:75:fb:92:80:80:0b:43:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23db881f234066e66fcf4efbca57d7cecd9adaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:13:45:58:0a:2c:d7:48:8e:c4:b7:b5:ee: 51:81:08:7b:19:6e:ee:40:de:17:23:78:18:9a:80: e6:ce:93:b2:29:dc:ee:32:50:1d:2a:bb:a4:3c:44: b6:60:1a:ff:1d:e5:c3:6b:67:df:ae:be:80:19:6e: e6:db:c9:6b:b5:ed:1d:09:54:76:4d:26:3d:a8:46: 31:b2:5b:1e:ed:fb:93:9c:ca:fb:5f:1d:d8:9b:ba: b7:52:f6:3c:13:c6:d2:a9:db:e5:46:6c:9c:fb:60: a1:94:02:31:1d:2d:24:47:07:0b:ab:e5:ea:73:35: 3e:88:16:ec:79:53:55:e8:9c:6a:de:96:e6:04:ee: db:ae:91:3a:85:e5:5b:3b:8f:dd:8d:84:09:59:d7: 1f:a4:e8:93:a0:76:de:c8:c7:e8:1a:0c:bd:04:cc: 8c:ce:36:86:81:8e:e5:92:26:5a:29:48:5c:60:95: 4d:44:c2:0f:15:84:d9:f2:1e:db:31:00:d0:66:f2: 7e:ac:98:8f:5e:02:2c:f4:8c:b0:85:fb:94:3f:06: 9c:63:9d:04:5d:d1:df:f4:3e:af:d3:0d:b8:b6:85: 15:97:55:29:13:1a:31:fd:d4:15:be:17:4c:4d:19: 07:cb:87:49:24:f9:74:95:0f:ac:2e:26:fc:5b:33: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:88:1F:23:40:66:E6:6F:CF:4E:FB:CA:57:D7:CE:CD:9A:DA:EE X509v3 Authority Key Identifier: keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/I9uIHyNAZuZvz077ylfXzs2a2u4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.15.0-88.210.19.255 88.210.22.0/23 212.118.44.0/24 212.118.46.0/23 Signature Algorithm: sha256WithRSAEncryption 50:82:cd:84:89:e1:1d:38:2f:7b:1f:33:e8:fe:f3:39:5f:2c: 7f:70:fd:df:11:25:fe:08:65:4e:53:20:6b:13:68:e9:2c:3f: ad:49:c0:24:11:c2:34:b0:0e:55:74:eb:ca:d1:eb:77:4d:49: 44:25:37:93:b3:00:7e:71:f9:a4:51:25:28:fd:69:f3:ef:50: 1e:52:e2:fa:e4:e4:4e:74:d1:1b:54:c8:63:52:d2:94:cb:89: 5b:f2:fd:57:6e:fa:43:da:4a:85:36:6a:0a:42:39:52:c3:8c: ff:45:65:7d:99:ef:c9:77:1e:52:4f:3f:17:0e:46:c0:c7:31: 41:6b:1b:19:97:17:3f:a1:69:af:8a:3f:cd:72:ec:68:30:f8: a7:e1:af:82:4a:85:25:07:08:bf:bc:78:9c:76:9d:e1:9c:f3: 27:0a:4e:3c:f7:67:be:cc:6a:06:f5:b1:5f:7b:23:bf:a2:ea: 76:fb:cc:1c:7d:5f:b8:22:c1:79:cb:3e:1b:c8:6c:69:68:20: ac:93:49:e1:12:fc:e0:7e:6b:93:1d:7b:8f:4d:88:f4:21:8b: c8:ca:c7:d5:d7:91:83:75:47:4c:ce:19:f8:0b:ab:5b:64:b4: eb:d3:bd:15:24:a0:f5:63:8e:fc:db:b6:50:0b:8b:e8:cf:83: 88:fc:8d:c0 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8E0uQF0zyXHX7koCAC0N5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy MzBmMTQwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2RiODgxZjIzNDA2NmU2NmZjZjRlZmJjYTU3ZDdjZWNkOWFkYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArasTRVgKLNdIjsS3te5RgQh7GW7u QN4XI3gYmoDmzpOyKdzuMlAdKrukPES2YBr/HeXDa2ffrr6AGW7m28lrte0dCVR2 TSY9qEYxslse7fuTnMr7Xx3Ym7q3UvY8E8bSqdvlRmyc+2ChlAIxHS0kRwcLq+Xq czU+iBbseVNV6Jxq3pbmBO7brpE6heVbO4/djYQJWdcfpOiToHbeyMfoGgy9BMyM zjaGgY7lkiZaKUhcYJVNRMIPFYTZ8h7bMQDQZvJ+rJiPXgIs9IywhfuUPwacY50E XdHf9D6v0w24toUVl1UpExox/dQVvhdMTRkHy4dJJPl0lQ+sLib8WzN2vQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCPbiB8jQGbmb89O+8pX187NmtruMB8GA1UdIwQY MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt MGQ4ZmNlM2ViZmJiLzEvSTl1SUh5TkFadVp2ejA3N3lsZlh6czJhMnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABY0g8D BAJY0hADBAFY0hYDBADUdiwDBAHUdi4wDQYJKoZIhvcNAQELBQADggEBAFCCzYSJ 4R04L3sfM+j+8zlfLH9w/d8RJf4IZU5TIGsTaOksP61JwCQRwjSwDlV068rR63dN SUQlN5OzAH5x+aRRJSj9afPvUB5S4vrk5E500RtUyGNS0pTLiVvy/Vdu+kPaSoU2 agpCOVLDjP9FZX2Z78l3HlJPPxcORsDHMUFrGxmXFz+haa+KP81y7Ggw+Kfhr4JK hSUHCL+8eJx2neGc8ycKTjz3Z77Magb1sV97I7+i6nb7zBx9X7giwXnLPhvIbGlo IKyTSeES/OB+a5Mde49NiPQhi8jKx9XXkYN1R0zOGfgLq1tktOvTvRUkoPVjjvzb tlALi+jPg4j8jcA= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:29 2026 by rpki-client