This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa File: XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa (raw, json) Hash identifier: ogURT2KjU4HTxAtVdIiJTmcqfQTlAEEbsvpDQ/LABsc= Subject key identifier: 5C:EE:1D:EC:87:76:1B:52:C4:B4:0A:D9:C3:1D:D1:CC:49:10:EE:18 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019A97D6086002AE90738FDB011807A884BD Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa Signing time: Tue 18 Nov 2025 16:39:37 +0000 ROA not before: Tue 18 Nov 2025 16:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211191 IP address blocks: 88.214.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:d6:08:60:02:ae:90:73:8f:db:01:18:07:a8:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Nov 18 16:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cee1dec87761b52c4b40ad9c31dd1cc4910ee18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:f8:e5:f5:2f:30:d7:c3:2a:e7:1a:8f:f1: 7c:c0:64:28:58:8c:a2:f1:c3:54:e6:49:3d:95:51: ca:92:02:5a:30:6c:59:c2:9c:77:90:ac:f7:26:91: 7e:b7:8e:5a:0b:43:ae:46:6d:d8:5e:52:24:29:b1: 09:17:cc:cf:9d:c1:ad:f2:29:3b:1b:63:b4:86:16: fd:76:42:ee:e3:12:ae:82:5f:ce:ee:aa:ce:db:9d: 82:62:11:08:03:49:da:92:99:83:38:95:1e:26:7e: 82:f0:e8:cb:57:55:31:9d:15:d1:d8:ba:1e:89:ba: 14:2a:f4:b6:ba:2f:53:01:d8:7b:76:14:5e:ef:eb: 28:71:14:9e:39:39:cd:de:a5:22:0a:09:e3:60:b1: e8:05:9a:f2:4f:49:b9:3d:fc:ab:7c:67:f2:fe:c2: 61:16:9a:87:37:4f:c1:f6:97:26:21:57:1c:e8:5b: 3b:7a:af:5b:11:e4:37:48:d6:fc:5e:7c:60:84:a5: cf:bb:57:a9:cd:32:5a:7c:af:98:65:dc:69:72:ac: 5e:90:04:27:f7:9f:0e:41:a9:60:27:9f:56:24:dd: c3:5e:96:bb:8e:56:22:d7:c7:ec:d8:3d:27:76:d5: 08:ad:f3:92:58:33:b0:78:75:c1:cd:c1:6d:24:af: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:1D:EC:87:76:1B:52:C4:B4:0A:D9:C3:1D:D1:CC:49:10:EE:18 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/XO4d7Id2G1LEtArZwx3RzEkQ7hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.54.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ef:d5:7a:d0:2c:21:76:a0:ab:e2:91:a4:80:54:1c:82:73: a9:80:27:4a:bd:51:21:24:c3:91:2c:bd:b4:a9:c4:e2:75:03: 2b:b0:20:5f:63:b4:55:fd:45:9f:50:d2:be:90:0a:d4:9f:0b: 3c:a5:6b:10:66:22:39:58:d0:85:63:04:f7:43:af:76:ee:89: 75:0c:83:cb:21:c5:09:b6:67:35:75:86:21:4e:94:8a:14:1c: 58:16:02:68:80:0f:4b:93:c2:fd:28:e3:c8:3d:2b:26:ea:10: 27:d3:a9:b3:21:8a:de:e8:96:65:12:1f:36:cc:8c:8e:e9:d6: 7f:86:bc:4a:4b:12:de:cb:05:cf:e8:7e:6f:d6:45:2e:94:f6: d8:ae:2d:f9:8a:d5:b7:aa:e3:2e:36:fc:d2:db:10:7f:cb:cb: 7d:22:23:ea:2b:d5:e1:10:65:1e:ad:ea:a1:1f:e6:d4:58:12: ba:ea:a7:b8:b6:45:75:b1:dc:27:3e:db:9f:62:c4:b9:31:1f: 82:37:12:9d:6c:d9:c0:54:fb:df:5c:31:86:dc:5a:b9:c3:86: ce:0e:5e:cb:d6:82:d3:0f:de:b6:c8:95:08:5a:2f:5b:9b:70: 54:01:70:91:1b:c4:a2:af:26:2b:21:d4:86:0e:eb:cb:6b:d7: f6:43:93:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqX1ghgAq6Qc4/bARgHqIS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMTE4MTYzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2VlMWRlYzg3NzYxYjUyYzRiNDBhZDljMzFkZDFjYzQ5MTBlZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubz45fUvMNfDKucaj/F8wGQoWIyi 8cNU5kk9lVHKkgJaMGxZwpx3kKz3JpF+t45aC0OuRm3YXlIkKbEJF8zPncGt8ik7 G2O0hhb9dkLu4xKugl/O7qrO252CYhEIA0nakpmDOJUeJn6C8OjLV1UxnRXR2Loe iboUKvS2ui9TAdh7dhRe7+socRSeOTnN3qUiCgnjYLHoBZryT0m5PfyrfGfy/sJh FpqHN0/B9pcmIVcc6Fs7eq9bEeQ3SNb8XnxghKXPu1epzTJafK+YZdxpcqxekAQn 958OQalgJ59WJN3DXpa7jlYi18fs2D0ndtUIrfOSWDOweHXBzcFtJK/Y4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFzuHeyHdhtSxLQK2cMd0cxJEO4YMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvWE80ZDdJZDJHMUxFdEFyWnd4M1J6RWtRN2hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNY2MA0G CSqGSIb3DQEBCwUAA4IBAQAE79V60CwhdqCr4pGkgFQcgnOpgCdKvVEhJMORLL20 qcTidQMrsCBfY7RV/UWfUNK+kArUnws8pWsQZiI5WNCFYwT3Q6927ol1DIPLIcUJ tmc1dYYhTpSKFBxYFgJogA9Lk8L9KOPIPSsm6hAn06mzIYre6JZlEh82zIyO6dZ/ hrxKSxLeywXP6H5v1kUulPbYri35itW3quMuNvzS2xB/y8t9IiPqK9XhEGUereqh H+bUWBK66qe4tkV1sdwnPtufYsS5MR+CNxKdbNnAVPvfXDGG3Fq5w4bODl7L1oLT D962yJUIWi9bm3BUAXCRG8SiryYrIdSGDuvLa9f2Q5OG -----END CERTIFICATE-----Generated at Tue Nov 25 18:40:37 2025 by rpki-client