This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/bAcGH9H1K73FpXSxpyLe2c0iBX8.roa File: bAcGH9H1K73FpXSxpyLe2c0iBX8.roa (raw, json) Hash identifier: TpsGeeQA3yklbylho+JTjROwnPYe5ku9NUEkM8M/pMk= Subject key identifier: 6C:07:06:1F:D1:F5:2B:BD:C5:A5:74:B1:A7:22:DE:D9:CD:22:05:7F Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Certificate serial: 019B7C134C26E3CC4EC1658B5915D4FF6854 Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/bAcGH9H1K73FpXSxpyLe2c0iBX8.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204076 IP address blocks: 88.210.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4c:26:e3:cc:4e:c1:65:8b:59:15:d4:ff:68:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c07061fd1f52bbdc5a574b1a722ded9cd22057f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:ce:55:3e:1d:5f:da:e1:05:21:c5:55:c2: 00:e6:7a:9c:4e:5f:1d:c6:cb:72:af:d9:66:84:cd: e1:2f:4f:2f:25:fd:3f:b4:1c:3b:65:b2:bc:ec:fe: 4b:b1:75:bb:2f:c2:05:f6:db:d6:7c:71:18:30:18: 9d:13:93:b3:d9:87:ca:58:b9:0a:79:64:20:5c:b3: 33:e5:7c:ab:67:0c:f4:e7:0e:da:c1:86:2f:64:ce: c3:40:86:c4:96:6d:98:bb:1d:b0:a9:0e:54:1c:68: 18:de:3f:2e:f0:fe:ce:26:73:1f:d4:d9:28:ab:8e: cb:da:8f:77:e0:2f:dc:a2:94:2d:08:75:b3:c8:91: 85:f3:68:ce:b1:dd:a4:5d:a9:27:3d:28:55:e1:cc: a5:1d:03:91:86:3a:dc:03:97:76:93:58:23:f1:26: a1:f5:e6:18:ea:15:fc:d8:94:cd:ef:7f:8b:86:24: d6:43:2a:45:34:4b:3b:4f:18:14:67:e7:ca:1a:d4: fe:95:4c:ca:33:c9:67:9d:16:1a:83:09:cd:86:af: 8d:65:7f:8a:b1:51:e8:00:a9:ef:99:30:02:5a:59: 01:11:d4:10:f4:b9:af:c7:1c:d6:fb:2e:c8:f7:dd: ae:83:4f:0e:5e:ed:8c:d8:e3:18:3e:d7:a5:ee:2f: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:06:1F:D1:F5:2B:BD:C5:A5:74:B1:A7:22:DE:D9:CD:22:05:7F X509v3 Authority Key Identifier: keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/bAcGH9H1K73FpXSxpyLe2c0iBX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.42.0/24 Signature Algorithm: sha256WithRSAEncryption 00:3e:46:08:90:91:af:10:cf:bb:5a:af:2e:8c:cc:bf:9c:24: e7:6e:9b:4e:6e:bd:18:9a:64:4a:b9:fe:a9:cd:2e:cf:ff:48: 95:b6:fd:a1:13:2e:ad:c7:49:f1:d3:70:1f:f4:e6:ab:ce:6a: 1c:bb:e3:54:72:e3:42:62:d2:af:37:4f:0c:a9:ae:e3:0f:42: 42:dd:b9:f2:15:c1:68:a1:80:8b:66:01:41:dc:ba:21:b7:d6: ac:ca:2f:ac:f1:dd:e3:4c:b7:45:4e:02:96:49:40:e3:6e:3c: e4:fb:04:b7:d9:d7:f7:64:d7:5c:e9:f8:c9:d2:28:4d:ad:40: 0f:32:7d:28:9e:49:ba:62:b5:be:98:78:31:74:64:b3:e6:75: bf:7b:89:f6:78:ed:e0:0c:ab:32:77:6a:fd:7a:e8:87:b1:2a: 72:85:b4:92:c7:b5:b7:6c:d5:6f:8f:e8:a5:71:b6:28:47:07: cc:b2:1f:34:65:e2:b6:ac:d9:57:7c:e6:f3:35:ea:1c:79:c1: b4:30:28:8d:38:a2:7e:a4:83:75:86:e4:ab:69:ae:db:26:30: d2:e2:2b:6a:f5:46:53:38:d2:eb:0a:4e:6f:78:d9:8e:3a:c6: 02:94:33:3e:c0:75:d8:a3:ad:ae:c4:db:09:62:91:7c:e3:b3: 12:aa:2a:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0wm48xOwWWLWRXU/2hUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy MzBmMTQwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzA3MDYxZmQxZjUyYmJkYzVhNTc0YjFhNzIyZGVkOWNkMjIwNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvOVT4dX9rhBSHFVcIA5nqcTl8d xstyr9lmhM3hL08vJf0/tBw7ZbK87P5LsXW7L8IF9tvWfHEYMBidE5Oz2YfKWLkK eWQgXLMz5XyrZwz05w7awYYvZM7DQIbElm2Yux2wqQ5UHGgY3j8u8P7OJnMf1Nko q47L2o934C/copQtCHWzyJGF82jOsd2kXaknPShV4cylHQORhjrcA5d2k1gj8Sah 9eYY6hX82JTN73+LhiTWQypFNEs7TxgUZ+fKGtT+lUzKM8lnnRYagwnNhq+NZX+K sVHoAKnvmTACWlkBEdQQ9LmvxxzW+y7I992ug08OXu2M2OMYPtel7i97EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwHBh/R9Su9xaV0saci3tnNIgV/MB8GA1UdIwQY MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt MGQ4ZmNlM2ViZmJiLzEvYkFjR0g5SDFLNzNGcFhTeHB5TGUyYzBpQlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNIqMA0G CSqGSIb3DQEBCwUAA4IBAQAAPkYIkJGvEM+7Wq8ujMy/nCTnbptObr0YmmRKuf6p zS7P/0iVtv2hEy6tx0nx03Af9Oarzmocu+NUcuNCYtKvN08Mqa7jD0JC3bnyFcFo oYCLZgFB3Loht9asyi+s8d3jTLdFTgKWSUDjbjzk+wS32df3ZNdc6fjJ0ihNrUAP Mn0onkm6YrW+mHgxdGSz5nW/e4n2eO3gDKsyd2r9euiHsSpyhbSSx7W3bNVvj+il cbYoRwfMsh80ZeK2rNlXfObzNeocecG0MCiNOKJ+pIN1huSraa7bJjDS4itq9UZT ONLrCk5veNmOOsYClDM+wHXYo62uxNsJYpF847MSqiqG -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:32 2026 by rpki-client