This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa File: hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa (raw, json) Hash identifier: LN1o3/IUnxwvsUL4vj6kqV3IpcbqWaMlyNgv17b6oto= Subject key identifier: 85:80:43:C4:F2:A0:A4:40:72:FB:41:EA:20:6D:00:54:A2:08:1A:FE Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Certificate serial: 019B7C128B51E6A3F12112AD73ABFFD4A86B Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 88.218.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:51:e6:a3:f1:21:12:ad:73:ab:ff:d4:a8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=858043c4f2a0a44072fb41ea206d0054a2081afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:0a:c7:bb:a5:e5:97:6d:45:1f:64:25:d1: fb:53:57:88:34:47:55:aa:45:c4:7c:fd:d0:1f:16: 49:15:be:dc:db:cf:5e:52:0d:57:2b:73:15:57:3e: a1:d3:03:01:3b:d7:49:c9:1f:88:51:d2:d3:e0:04: eb:cf:74:41:49:3c:7e:51:58:83:e0:fb:35:af:29: a6:b6:2b:fd:80:ec:70:c3:25:b6:16:e5:a4:11:d4: 94:78:a6:52:f5:1b:3f:71:a0:5b:31:19:b0:c0:00: 62:b8:07:0c:7a:28:8d:e3:50:fa:9e:c0:39:f5:c5: eb:ad:eb:a2:05:51:ff:9d:8f:69:f0:fc:2a:80:37: c3:1a:79:7f:aa:87:01:f9:94:22:9c:d0:dd:67:b1: bf:f5:4e:07:f9:e3:39:7f:d9:e2:26:98:74:00:52: 1d:2f:d4:9d:da:10:5a:cb:4c:5e:00:23:d4:e4:33: 81:1b:ad:51:23:86:a1:bb:b5:c1:97:d7:69:48:82: 13:6d:ba:36:ac:92:f9:3b:24:39:56:89:85:c6:d5: 3c:00:b6:26:49:4d:c3:2d:91:8b:d0:39:00:c2:31: cb:8d:d4:74:bd:b3:e8:3c:c2:ae:7e:02:aa:57:b9: 83:d8:d0:27:9d:f9:0b:0a:6f:77:2f:59:27:e5:08: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:80:43:C4:F2:A0:A4:40:72:FB:41:EA:20:6D:00:54:A2:08:1A:FE X509v3 Authority Key Identifier: keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.17.0/24 Signature Algorithm: sha256WithRSAEncryption 09:1a:4f:6e:dd:c9:da:81:5b:74:83:d6:89:cb:61:15:d9:ba: b3:f4:15:43:04:81:a2:54:18:59:ff:d0:d0:8f:fa:e2:19:94: 5c:50:e5:d7:1d:fc:67:39:17:1d:bc:3f:2b:41:7a:52:87:fb: f5:7e:85:9a:f9:59:0c:5e:6b:b4:05:ce:82:59:a9:3b:d4:0e: a3:84:7e:ab:85:06:bc:1a:df:c8:e6:a1:72:9b:41:d4:8c:dd: 60:4f:c8:88:f8:ee:79:8a:7e:99:61:0b:29:9a:96:ae:b6:f9: 77:38:be:24:07:ed:fc:ce:01:fa:e2:80:62:8f:97:51:82:6a: 61:21:5c:ff:4d:17:83:a0:3f:7e:8b:00:94:f3:75:04:30:60: 2d:b6:6a:c7:53:3b:c0:84:98:db:27:e4:b5:03:ed:98:d8:51: e6:93:40:a5:55:d1:11:32:ee:9c:45:03:38:ff:6f:23:4e:f9: 8d:b0:a4:83:10:9d:e4:43:f5:d2:91:91:33:2e:43:3e:3a:b3: af:74:6d:b7:b6:55:df:5c:0d:b3:24:42:be:1a:b7:9a:15:13: 18:5c:bc:8e:e8:f9:c1:f0:16:c7:3e:0f:3c:20:e3:ef:3d:05: 05:05:db:81:67:96:90:69:5f:bb:9e:60:f2:44:65:f8:0c:11: 89:ce:dc:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EotR5qPxIRKtc6v/1KhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1 MjIwMzMwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTgwNDNjNGYyYTBhNDQwNzJmYjQxZWEyMDZkMDA1NGEyMDgxYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDMKx7ul5ZdtRR9kJdH7U1eINEdV qkXEfP3QHxZJFb7c289eUg1XK3MVVz6h0wMBO9dJyR+IUdLT4ATrz3RBSTx+UViD 4Ps1rymmtiv9gOxwwyW2FuWkEdSUeKZS9Rs/caBbMRmwwABiuAcMeiiN41D6nsA5 9cXrreuiBVH/nY9p8PwqgDfDGnl/qocB+ZQinNDdZ7G/9U4H+eM5f9niJph0AFId L9Sd2hBay0xeACPU5DOBG61RI4ahu7XBl9dpSIITbbo2rJL5OyQ5VomFxtU8ALYm SU3DLZGL0DkAwjHLjdR0vbPoPMKufgKqV7mD2NAnnfkLCm93L1kn5QiCKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWAQ8TyoKRAcvtB6iBtAFSiCBr+MB8GA1UdIwQY MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt MThlODZmMGIxZDgxLzEvaFlCRHhQS2dwRUJ5LTBIcUlHMEFWS0lJR3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNoRMA0G CSqGSIb3DQEBCwUAA4IBAQAJGk9u3cnagVt0g9aJy2EV2bqz9BVDBIGiVBhZ/9DQ j/riGZRcUOXXHfxnORcdvD8rQXpSh/v1foWa+VkMXmu0Bc6CWak71A6jhH6rhQa8 Gt/I5qFym0HUjN1gT8iI+O55in6ZYQspmpautvl3OL4kB+38zgH64oBij5dRgmph IVz/TReDoD9+iwCU83UEMGAttmrHUzvAhJjbJ+S1A+2Y2FHmk0ClVdERMu6cRQM4 /28jTvmNsKSDEJ3kQ/XSkZEzLkM+OrOvdG23tlXfXA2zJEK+GreaFRMYXLyO6PnB 8BbHPg88IOPvPQUFBduBZ5aQaV+7nmDyRGX4DBGJztzd -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:38 2026 by rpki-client