This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/88OxeMyclDuCM-XGy1vyZJ0MjVI.roa File: 88OxeMyclDuCM-XGy1vyZJ0MjVI.roa (raw, json) Hash identifier: NrH1CK+Qlg4Jb0s5eAUMievQdVKIQaKIT+Afju3AdMA= Subject key identifier: F3:C3:B1:78:CC:9C:94:3B:82:33:E5:C6:CB:5B:F2:64:9D:0C:8D:52 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A695D9815CBB2DA8498CFE1FF4AF Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/88OxeMyclDuCM-XGy1vyZJ0MjVI.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212151 IP address blocks: 2a07:3500:13b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a6:95:d9:81:5c:bb:2d:a8:49:8c:fe:1f:f4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c3b178cc9c943b8233e5c6cb5bf2649d0c8d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:12:21:5c:b1:45:25:3c:c9:72:a5:cd:de: 0a:f4:30:a9:1f:2b:9c:a3:30:c1:bf:0f:10:c9:f1: a0:4a:55:7b:d2:f4:be:8e:6a:0e:57:e8:24:17:9d: 40:40:5b:ec:84:b2:e0:7d:f8:26:58:e7:f3:24:bb: e6:51:b1:41:84:3e:52:37:56:16:be:f6:a0:8e:0a: 51:07:97:a5:4f:fc:da:dd:c8:25:41:0b:2f:82:c2: 2a:c4:88:10:21:e2:1d:a8:83:fd:18:20:0a:11:27: 66:36:fb:b6:1b:f4:00:c5:4b:e9:da:69:1f:7a:96: b0:70:37:f7:ca:77:28:c6:4d:bb:d7:8e:a8:48:c6: c3:62:ac:a5:cf:e2:c5:3f:0d:0a:e2:91:52:a3:ab: 40:0e:b6:18:76:84:21:5f:ab:95:19:94:00:7b:43: 37:2e:86:a4:dc:16:c1:09:cb:0c:6c:fa:9e:df:8a: 37:bd:eb:dc:40:9c:f0:d3:de:b6:bc:1e:44:55:af: c1:4d:5d:3b:d8:de:5f:19:66:a0:ca:fb:37:4d:a5: 8d:26:d2:b7:a6:a3:d6:28:0e:5e:b7:5a:c2:c2:d3: 1f:0b:df:8b:fa:72:30:96:cf:b7:17:2e:d3:72:67: 6f:c0:dc:c0:e1:8e:a7:f7:02:6d:30:84:45:a2:4b: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C3:B1:78:CC:9C:94:3B:82:33:E5:C6:CB:5B:F2:64:9D:0C:8D:52 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/88OxeMyclDuCM-XGy1vyZJ0MjVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:13b8::/48 Signature Algorithm: sha256WithRSAEncryption 67:9d:f1:a2:e3:6c:c6:06:71:87:44:4a:ed:cc:32:96:27:72: dc:07:ef:c5:e3:64:ad:44:89:f4:68:52:01:0b:96:7f:bd:87: 36:46:39:33:71:a7:d8:e8:f8:b9:b5:69:9e:ed:23:46:d9:d0: c9:5e:4b:ea:75:09:09:e8:31:26:b6:08:a4:71:d7:0f:90:5b: b8:61:5f:2c:a8:71:dd:17:87:c3:0b:d2:ae:32:04:ff:c7:cb: a8:82:90:d8:2a:06:d5:b4:aa:88:03:89:3f:66:28:d6:c2:18: 84:62:a2:b4:e2:7c:a8:07:10:e4:f6:bb:c5:b2:90:e0:d9:8b: 8b:04:c8:b0:ae:7a:b6:e9:c7:f8:ff:9c:97:c9:32:a4:7a:1e: 3c:09:b8:6a:4e:1e:b8:12:ba:70:c1:4d:c8:56:71:c0:62:5c: 53:31:67:27:3d:90:52:2f:44:fe:b4:44:1a:cf:38:b9:e9:14: 5b:31:2a:25:ff:68:1d:14:1f:e9:5b:fd:98:16:a3:2c:cb:27: 20:85:f3:b9:ab:5c:85:04:d5:ea:d8:93:ac:17:59:65:36:5e: a0:45:37:83:6e:b2:a7:fd:d3:fd:0d:e6:68:5f:a1:21:3a:7d: 0c:b1:5d:db:31:45:74:bd:b8:9c:1e:aa:f5:0e:e2:d6:c2:6a: 88:6a:a5:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKaV2YFcuy2oSYz+H/SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MzYjE3OGNjOWM5NDNiODIzM2U1YzZjYjViZjI2NDlkMGM4ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA4SIVyxRSU8yXKlzd4K9DCpHyuc ozDBvw8QyfGgSlV70vS+jmoOV+gkF51AQFvshLLgffgmWOfzJLvmUbFBhD5SN1YW vvagjgpRB5elT/za3cglQQsvgsIqxIgQIeIdqIP9GCAKESdmNvu2G/QAxUvp2mkf epawcDf3yncoxk27146oSMbDYqylz+LFPw0K4pFSo6tADrYYdoQhX6uVGZQAe0M3 Loak3BbBCcsMbPqe34o3vevcQJzw0962vB5EVa/BTV072N5fGWagyvs3TaWNJtK3 pqPWKA5et1rCwtMfC9+L+nIwls+3Fy7TcmdvwNzA4Y6n9wJtMIRFoksyxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPPDsXjMnJQ7gjPlxstb8mSdDI1SMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvODhPeGVNeWNsRHVDTS1YR3kxdnlaSjBNalZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ABO4 MA0GCSqGSIb3DQEBCwUAA4IBAQBnnfGi42zGBnGHRErtzDKWJ3LcB+/F42StRIn0 aFIBC5Z/vYc2RjkzcafY6Pi5tWme7SNG2dDJXkvqdQkJ6DEmtgikcdcPkFu4YV8s qHHdF4fDC9KuMgT/x8uogpDYKgbVtKqIA4k/ZijWwhiEYqK04nyoBxDk9rvFspDg 2YuLBMiwrnq26cf4/5yXyTKkeh48CbhqTh64ErpwwU3IVnHAYlxTMWcnPZBSL0T+ tEQazzi56RRbMSol/2gdFB/pW/2YFqMsyycghfO5q1yFBNXq2JOsF1llNl6gRTeD brKn/dP9DeZoX6EhOn0MsV3bMUV0vbicHqr1DuLWwmqIaqXy -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client