This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/jDCERCzkhdhrug4frNl3uzi2ve4.roa File: jDCERCzkhdhrug4frNl3uzi2ve4.roa (raw, json) Hash identifier: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws= Subject key identifier: 8C:30:84:44:2C:E4:85:D8:6B:BA:0E:1F:AC:D9:77:BB:38:B6:BD:EE Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097 Certificate serial: 019B7DCB07FFEA4E6A539A936B2B4F22DB03 Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/jDCERCzkhdhrug4frNl3uzi2ve4.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205499 IP address blocks: 88.135.78.0/23 maxlen: 24 88.135.78.0/24 maxlen: 24 88.135.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:07:ff:ea:4e:6a:53:9a:93:6b:2b:4f:22:db:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c3084442ce485d86bba0e1facd977bb38b6bdee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e0:f1:d0:2c:e8:e5:fd:4f:1b:ea:7d:29:49: 17:0a:b8:bd:3f:1b:51:6a:4c:99:a8:97:f8:d8:41: a9:e2:6a:6d:ec:2e:4e:43:a4:6e:19:52:5e:f8:50: d5:23:2e:3a:bb:bc:cc:7b:85:9a:bd:e5:67:fe:61: 7a:41:e4:d6:18:51:57:ec:42:ce:d5:24:a9:9b:80: 7c:86:7c:8d:39:e7:b0:63:40:e9:31:c8:ee:fb:63: 06:70:db:14:8f:df:ba:90:ce:99:49:cc:26:18:b3: 1f:c2:04:1f:51:a8:07:dd:ff:2d:fb:9f:2b:69:d5: 07:ad:b1:0c:7c:f8:72:5f:c0:17:9b:ba:c8:84:3a: 11:10:90:2e:07:96:fb:29:36:f7:36:97:b3:42:ca: 1a:b2:91:76:2a:b1:ad:4d:17:e8:6b:28:ac:7b:61: 47:1d:34:6c:6c:57:e3:0e:1e:29:bf:a7:81:ec:46: e2:28:db:34:ce:4d:1b:8c:59:2b:21:a5:c8:33:ee: 0c:e7:0b:26:44:57:9f:60:65:21:0b:a6:ac:45:fc: 8e:df:30:ad:05:ab:4f:80:da:eb:9f:1f:22:0f:88: c5:42:31:6e:91:19:e4:5a:8b:6a:79:db:f5:30:94: 75:ab:f5:55:b9:bc:58:98:08:8e:96:cd:54:e8:67: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:84:44:2C:E4:85:D8:6B:BA:0E:1F:AC:D9:77:BB:38:B6:BD:EE X509v3 Authority Key Identifier: keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/jDCERCzkhdhrug4frNl3uzi2ve4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.78.0/23 Signature Algorithm: sha256WithRSAEncryption 67:d2:a0:a3:ed:16:1a:0d:28:14:7e:b1:57:07:ea:ec:9f:43: 84:cd:ce:ba:96:25:01:b6:7f:93:ff:c0:6f:a6:a9:ec:bb:3c: 68:9f:f8:21:74:99:10:b2:dc:3e:f5:5a:20:d4:66:6e:d0:01: bf:0e:4b:2c:e1:fe:4d:46:e3:58:a0:19:48:e2:14:ef:77:73: 55:59:e9:6f:2b:a0:88:62:6d:1b:c6:c4:5b:53:c5:07:8c:85: 42:4f:41:10:48:fd:ff:84:b6:9d:d1:2e:b8:00:56:f4:b7:a1: 89:99:2a:ed:26:97:c4:82:58:62:31:9c:3a:23:a8:08:e8:46: 7f:60:8a:6c:fc:de:bb:25:5b:5e:ca:cb:4c:fd:4e:ab:3f:f1: e9:9c:e3:90:d1:c6:81:59:a3:54:4c:02:23:3b:76:13:39:75: a3:a4:e2:f6:bb:0a:2d:c5:f6:5b:38:84:b4:04:42:95:8a:34: 44:73:a1:c8:4b:13:e2:ad:39:7d:ad:00:8b:88:19:de:3e:36: 54:b7:1b:e7:19:80:07:84:19:9d:9a:8e:1c:f1:29:1e:46:1c: 6f:54:fb:03:09:b8:ee:aa:af:ce:53:c6:02:18:2b:ee:ad:9e: 8a:73:1a:8c:d0:2e:bc:b9:a4:bd:7d:9e:b9:27:77:1b:97:9b: f9:47:f1:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywf/6k5qU5qTaytPItsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4 ZTIwOTcwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzMwODQ0NDJjZTQ4NWQ4NmJiYTBlMWZhY2Q5NzdiYjM4YjZiZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eDx0Czo5f1PG+p9KUkXCri9PxtR akyZqJf42EGp4mpt7C5OQ6RuGVJe+FDVIy46u7zMe4WaveVn/mF6QeTWGFFX7ELO 1SSpm4B8hnyNOeewY0DpMcju+2MGcNsUj9+6kM6ZScwmGLMfwgQfUagH3f8t+58r adUHrbEMfPhyX8AXm7rIhDoREJAuB5b7KTb3NpezQsoaspF2KrGtTRfoayise2FH HTRsbFfjDh4pv6eB7EbiKNs0zk0bjFkrIaXIM+4M5wsmRFefYGUhC6asRfyO3zCt BatPgNrrnx8iD4jFQjFukRnkWotqedv1MJR1q/VVubxYmAiOls1U6Gd3/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIwwhEQs5IXYa7oOH6zZd7s4tr3uMB8GA1UdIwQY MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt NWNjMmVmMDk5YWVlLzEvakRDRVJDemtoZGhydWc0ZnJObDN1emkydmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWIdOMA0G CSqGSIb3DQEBCwUAA4IBAQBn0qCj7RYaDSgUfrFXB+rsn0OEzc66liUBtn+T/8Bv pqnsuzxon/ghdJkQstw+9Vog1GZu0AG/Dkss4f5NRuNYoBlI4hTvd3NVWelvK6CI Ym0bxsRbU8UHjIVCT0EQSP3/hLad0S64AFb0t6GJmSrtJpfEglhiMZw6I6gI6EZ/ YIps/N67JVteystM/U6rP/HpnOOQ0caBWaNUTAIjO3YTOXWjpOL2uwotxfZbOIS0 BEKVijREc6HISxPirTl9rQCLiBnePjZUtxvnGYAHhBmdmo4c8SkeRhxvVPsDCbju qq/OU8YCGCvurZ6KcxqM0C68uaS9fZ65J3cbl5v5R/H4 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:41 2026 by rpki-client