This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa File: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (raw, json) Hash identifier: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc= Subject key identifier: 2E:80:59:58:D9:26:2D:25:5F:B1:9B:99:E1:AF:CF:FB:16:CB:36:66 Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097 Certificate serial: 019B7DCB087C36299CDD771760A56433063F Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210319 IP address blocks: 88.135.76.0/24 maxlen: 24 88.135.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:08:7c:36:29:9c:dd:77:17:60:a5:64:33:06:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e805958d9262d255fb19b99e1afcffb16cb3666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:99:2d:12:38:e6:b9:4a:4d:fe:6a:91:1d:79: 51:90:0e:4d:1f:97:d0:0c:77:49:f6:12:fc:19:5b: 9a:81:6d:6c:66:88:81:52:da:48:18:d2:78:9f:05: 9a:cc:0e:47:3a:65:fe:6a:c9:83:f5:d2:1d:70:93: df:e0:96:be:78:8e:ad:97:c5:30:71:1e:41:15:65: b0:ac:db:f4:62:96:7f:c4:79:44:44:fc:9a:d4:5d: ef:60:ce:5c:45:09:ed:a6:5e:fc:17:d5:79:01:c3: 33:b7:f2:70:de:1d:e0:18:42:0c:13:86:56:e7:59: ff:fa:d6:f4:b6:03:25:86:e7:d6:79:24:07:e8:95: 55:84:db:56:79:97:b5:4c:c8:75:1d:73:34:98:31: 3c:47:90:c2:0f:23:36:be:e6:9f:3a:9d:a1:cc:78: 52:9f:4f:03:d8:18:4d:98:b8:5e:49:25:8e:0c:21: 29:07:d1:18:12:f3:6b:4d:b8:e0:ee:41:c7:e1:fa: f2:f7:b7:0c:31:c2:77:ad:06:2e:c6:e4:57:8d:8a: a9:b5:e6:e9:53:10:e3:7c:9f:b3:2c:93:8a:2b:a5: 97:80:4e:6f:e3:a9:17:91:6d:e9:31:34:71:92:e9: 1c:ca:7d:4a:6e:a3:51:61:1b:11:65:8b:47:3d:cd: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:80:59:58:D9:26:2D:25:5F:B1:9B:99:E1:AF:CF:FB:16:CB:36:66 X509v3 Authority Key Identifier: keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.76.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:8e:c4:56:56:ef:ac:47:a3:2b:93:f9:06:1a:5f:0a:ae:b4: 2f:2c:4d:18:1d:49:bc:3f:e6:65:2c:e4:b8:b9:13:65:cf:6a: ae:66:65:63:f4:83:87:ea:65:90:b2:b1:dc:6c:51:a1:b9:bf: ba:a2:30:11:dd:be:01:c6:17:f8:ca:fb:86:7f:09:04:22:d6: 87:50:32:47:68:e4:8d:37:f9:5b:11:2a:a1:02:0e:45:6a:f8: 29:b2:72:c3:ff:05:49:ad:90:ee:c5:3a:ec:55:21:01:28:a2: 87:28:03:7b:72:66:4a:fa:70:2a:b6:25:c7:35:5b:55:7d:bf: 99:91:9c:dc:ab:9a:17:b9:43:c4:5b:a3:13:6b:59:69:2c:69: ed:0a:fe:03:9f:e3:48:6b:84:49:6e:73:a2:c6:7d:c2:a8:af: ba:d1:3a:d9:31:5a:1b:c1:45:ef:e2:9f:dd:ec:1c:cb:d5:8e: ad:66:6f:14:8a:1c:d0:e8:49:b2:55:9a:38:bd:dc:43:e0:a8: cf:12:3b:e9:18:83:28:4f:1b:7f:1d:ec:3f:e1:f3:36:1c:40: 82:7c:8b:dc:8d:8c:8e:40:9e:31:0f:1e:f9:bb:f3:b6:05:fb: 9b:af:5f:06:0c:d9:27:48:12:06:1a:26:a3:94:f6:97:e0:d0: 7c:e5:15:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywh8Nimc3XcXYKVkMwY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4 ZTIwOTcwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTgwNTk1OGQ5MjYyZDI1NWZiMTliOTllMWFmY2ZmYjE2Y2IzNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZktEjjmuUpN/mqRHXlRkA5NH5fQ DHdJ9hL8GVuagW1sZoiBUtpIGNJ4nwWazA5HOmX+asmD9dIdcJPf4Ja+eI6tl8Uw cR5BFWWwrNv0YpZ/xHlERPya1F3vYM5cRQntpl78F9V5AcMzt/Jw3h3gGEIME4ZW 51n/+tb0tgMlhufWeSQH6JVVhNtWeZe1TMh1HXM0mDE8R5DCDyM2vuafOp2hzHhS n08D2BhNmLheSSWODCEpB9EYEvNrTbjg7kHH4fry97cMMcJ3rQYuxuRXjYqptebp UxDjfJ+zLJOKK6WXgE5v46kXkW3pMTRxkukcyn1KbqNRYRsRZYtHPc3NtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6AWVjZJi0lX7GbmeGvz/sWyzZmMB8GA1UdIwQY MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt NWNjMmVmMDk5YWVlLzEvTG9CWldOa21MU1Zmc1p1WjRhX1AteGJMTm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWIdMMA0G CSqGSIb3DQEBCwUAA4IBAQAqjsRWVu+sR6Mrk/kGGl8KrrQvLE0YHUm8P+ZlLOS4 uRNlz2quZmVj9IOH6mWQsrHcbFGhub+6ojAR3b4Bxhf4yvuGfwkEItaHUDJHaOSN N/lbESqhAg5FavgpsnLD/wVJrZDuxTrsVSEBKKKHKAN7cmZK+nAqtiXHNVtVfb+Z kZzcq5oXuUPEW6MTa1lpLGntCv4Dn+NIa4RJbnOixn3CqK+60TrZMVobwUXv4p/d 7BzL1Y6tZm8UihzQ6EmyVZo4vdxD4KjPEjvpGIMoTxt/Hew/4fM2HECCfIvcjYyO QJ4xDx75u/O2Bfubr18GDNknSBIGGiajlPaX4NB85RWz -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:39 2026 by rpki-client