This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Til4t04kDY5jYk9ijprnqg_q-Fk.roa File: Til4t04kDY5jYk9ijprnqg_q-Fk.roa (raw, json) Hash identifier: ih0vZpcsRR46jgafI1oHgYOPGbw6Ps10OaF0ajz2o1g= Subject key identifier: 4E:29:78:B7:4E:24:0D:8E:63:62:4F:62:8E:9A:E7:AA:0F:EA:F8:59 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B775903665E47D50C4C529B4E34E5F4F1 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Til4t04kDY5jYk9ijprnqg_q-Fk.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 88.222.208.0/20 maxlen: 24 88.222.223.0/24 maxlen: 24 88.222.240.0/21 maxlen: 24 88.223.80.0/20 maxlen: 24 88.223.80.0/21 maxlen: 24 88.223.88.0/22 maxlen: 24 88.223.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:66:5e:47:d5:0c:4c:52:9b:4e:34:e5:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e2978b74e240d8e63624f628e9ae7aa0feaf859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:05:4c:08:96:a5:9d:06:30:93:05:6d:2b: e4:73:fe:fc:5f:15:88:b9:b1:da:7f:a3:24:99:f5: da:a4:e4:14:46:d6:ce:63:7b:28:bb:a4:a7:51:47: 42:bb:46:10:fd:32:53:04:33:1f:1b:52:a8:1f:c1: 30:74:f1:b4:e5:01:ca:1e:3f:73:53:9d:b9:6b:e9: a0:46:4f:69:19:86:88:c7:ae:a7:13:41:b7:95:2f: 78:99:1a:2c:b8:8f:3c:33:fd:88:ed:d4:1b:89:39: 3a:4f:79:30:aa:1f:5f:07:b4:a3:e8:ec:3d:db:78: 2a:fd:f4:59:fa:05:93:37:15:91:60:d4:aa:a8:ba: 7f:91:a9:29:2c:f1:f8:4b:17:5d:62:45:5e:96:c8: eb:87:eb:2a:5a:03:d0:35:af:62:69:7d:88:f1:f7: e3:64:a0:28:f0:0c:be:9f:72:4a:01:c0:d2:48:25: 90:42:d8:28:b2:76:ac:7b:92:02:e6:a1:a4:ff:e3: ba:d6:bf:47:ae:3e:5d:3e:e1:69:83:6e:e7:b5:c2: 33:3f:9f:9c:20:a0:27:11:e1:d9:85:52:cd:95:91: 1d:50:76:25:67:b7:8b:39:e6:0e:1c:1b:30:7c:06: fa:30:b3:db:a8:48:56:56:bd:3b:4c:4f:17:fb:61: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:78:B7:4E:24:0D:8E:63:62:4F:62:8E:9A:E7:AA:0F:EA:F8:59 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Til4t04kDY5jYk9ijprnqg_q-Fk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.222.208.0/20 88.222.240.0/21 88.223.80.0/20 Signature Algorithm: sha256WithRSAEncryption 76:f9:cd:6e:d9:da:3b:54:c8:b8:e2:ad:29:b3:18:a0:c5:fa: 93:f6:59:c4:65:9c:e7:60:6a:0f:ef:4d:ed:98:0c:51:4c:2d: e6:5e:25:96:a9:2b:68:b9:fd:c2:87:d5:36:ff:c8:6b:68:4f: 7e:c7:14:0b:8b:09:f1:65:0b:45:ca:b4:d6:6e:3f:d5:b1:19: f4:3c:42:5f:47:b6:c3:e0:3b:53:eb:7f:49:9b:10:2d:99:f3: 29:b8:6f:f0:63:58:ec:23:4d:b5:3b:12:1c:88:19:f2:a8:04: d9:c6:3a:84:b8:e9:1a:43:19:42:88:c7:28:a9:6a:9c:85:79: 16:00:27:f6:de:bd:7e:c4:3d:3c:28:fc:3b:96:1d:2b:30:e7: ce:d8:a5:b6:35:46:d0:10:77:08:8d:c1:96:3c:46:19:b8:2a: eb:b1:70:2e:34:5e:c1:ee:07:79:80:d9:13:f7:00:e3:21:3e: 42:3f:61:2d:0a:50:1d:35:e6:cb:c4:5d:31:5b:6c:e2:a0:9c: 22:6b:a6:e2:7d:5c:f8:0f:f3:33:80:b0:b0:a5:05:38:14:d0: 29:fa:e1:7f:d5:8c:b4:72:14:0c:d6:e0:3f:25:36:92:c5:91: 94:4b:54:6b:11:56:d4:1a:4a:77:5d:76:50:02:c2:03:50:bd: 77:81:09:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WQNmXkfVDExSm0405fTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTI5NzhiNzRlMjQwZDhlNjM2MjRmNjI4ZTlhZTdhYTBmZWFmODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZsFTAiWpZ0GMJMFbSvkc/78XxWI ubHaf6MkmfXapOQURtbOY3sou6SnUUdCu0YQ/TJTBDMfG1KoH8EwdPG05QHKHj9z U525a+mgRk9pGYaIx66nE0G3lS94mRosuI88M/2I7dQbiTk6T3kwqh9fB7Sj6Ow9 23gq/fRZ+gWTNxWRYNSqqLp/kakpLPH4SxddYkVelsjrh+sqWgPQNa9iaX2I8ffj ZKAo8Ay+n3JKAcDSSCWQQtgosnase5IC5qGk/+O61r9Hrj5dPuFpg27ntcIzP5+c IKAnEeHZhVLNlZEdUHYlZ7eLOeYOHBswfAb6MLPbqEhWVr07TE8X+2FU2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFE4peLdOJA2OY2JPYo6a56oP6vhZMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvVGlsNHQwNGtEWTVqWWs5aWpwcm5xZ19xLUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEWN7QAwQD WN7wAwQEWN9QMA0GCSqGSIb3DQEBCwUAA4IBAQB2+c1u2do7VMi44q0psxigxfqT 9lnEZZznYGoP703tmAxRTC3mXiWWqStouf3Ch9U2/8hraE9+xxQLiwnxZQtFyrTW bj/VsRn0PEJfR7bD4DtT639JmxAtmfMpuG/wY1jsI021OxIciBnyqATZxjqEuOka QxlCiMcoqWqchXkWACf23r1+xD08KPw7lh0rMOfO2KW2NUbQEHcIjcGWPEYZuCrr sXAuNF7B7gd5gNkT9wDjIT5CP2EtClAdNebLxF0xW2zioJwia6bifVz4D/MzgLCw pQU4FNAp+uF/1Yy0chQM1uA/JTaSxZGUS1RrEVbUGkp3XXZQAsIDUL13gQmM -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:24 2026 by rpki-client