This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/33HmxX5laer88g91bQT40p7G6N8.roa File: 33HmxX5laer88g91bQT40p7G6N8.roa (raw, json) Hash identifier: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI= Subject key identifier: DF:71:E6:C5:7E:65:69:EA:FC:F2:0F:75:6D:04:F8:D2:9E:C6:E8:DF Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DD4D55C3C322F4CE8B3ECC4627EF Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/33HmxX5laer88g91bQT40p7G6N8.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 88.209.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dd:4d:55:c3:c3:22:f4:ce:8b:3e:cc:46:27:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df71e6c57e6569eafcf20f756d04f8d29ec6e8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:e3:02:ed:47:6f:b2:8a:7b:e1:d6:a4:fe: d2:44:43:35:6e:f4:1e:24:41:03:10:a8:43:b1:70: cf:c8:aa:dd:f8:88:a7:94:fa:7c:2e:8b:9d:94:07: 2f:20:ce:71:a0:d1:62:42:cd:26:0a:06:8d:ab:4a: ee:93:e2:18:ee:37:4b:9d:d2:a4:ca:b8:f8:55:47: 56:8e:20:27:a5:dc:46:af:e2:e0:3c:17:20:0f:5e: fb:42:92:9a:c1:e6:30:c3:e5:56:23:0c:29:7e:dc: 4e:06:a7:f2:7a:a3:14:4f:3f:21:63:0f:d6:49:69: ce:93:ad:f7:16:35:7d:bc:cd:76:8d:bb:3a:19:59: 3b:a8:c9:a5:df:88:63:e4:cf:6b:5a:0e:36:86:e0: 28:58:e5:88:dd:07:29:d1:06:fa:1e:e2:3d:10:64: 80:ce:b5:82:9b:0c:84:1d:b6:fb:c1:1f:d2:c5:f0: 89:62:4f:35:04:33:35:15:a7:cf:46:69:55:69:ea: 87:d9:a7:a2:dd:63:db:76:f9:b8:e7:96:d5:03:07: 50:ef:2a:41:76:e7:6d:e9:c5:db:53:d2:de:ff:53: ff:4e:bd:ee:f9:3e:58:55:12:4b:21:79:21:83:15: 7c:06:da:ae:9a:20:26:07:5e:31:5d:bc:51:6c:ed: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:E6:C5:7E:65:69:EA:FC:F2:0F:75:6D:04:F8:D2:9E:C6:E8:DF X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/33HmxX5laer88g91bQT40p7G6N8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.249.0/24 Signature Algorithm: sha256WithRSAEncryption 55:2b:6c:81:e2:dc:c3:db:93:4c:c5:65:22:93:79:41:9c:33: 8f:81:d8:91:f6:45:7a:c0:e7:a4:07:86:86:58:85:a9:d2:f8: 19:5f:eb:f8:d5:cb:69:25:b2:eb:23:1d:8e:ec:4c:cc:7d:59: ff:aa:59:59:f8:a2:fd:f8:b2:6e:a2:d9:7c:16:d1:02:7d:bf: a7:14:9f:d4:4f:cb:8e:54:7a:0a:ba:56:d0:d8:8b:ce:9b:f5: ec:8d:43:ce:92:ae:96:eb:1d:c5:18:9a:5b:00:a7:ae:3b:c7: 2e:d4:7a:51:09:3b:8b:98:b2:50:c5:16:d8:ab:a8:f3:91:6a: 3c:55:fa:2d:fe:27:65:57:e2:78:ae:36:f6:f1:e9:da:b8:3a: 0e:43:b8:a5:f2:52:a7:72:8b:53:ce:36:6e:28:36:8b:1a:b7: 1e:54:83:66:0d:46:fe:ca:2d:f1:84:5d:18:83:a2:dc:61:37: b4:d6:1e:23:3c:30:52:4d:42:b5:cb:ae:77:54:b4:99:30:2c: 03:70:29:39:84:25:a9:49:c2:9b:b5:a2:93:fb:47:d4:a0:97: 2c:8e:52:c3:fc:8c:77:a5:0b:25:ba:90:1b:28:72:3c:56:d0: 26:9f:76:7a:4b:ba:34:f5:5a:e6:d6:d6:bd:6c:72:4a:03:23: f4:9f:87:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hN1NVcPDIvTOiz7MRifvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjcxZTZjNTdlNjU2OWVhZmNmMjBmNzU2ZDA0ZjhkMjllYzZlOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqjjAu1Hb7KKe+HWpP7SREM1bvQe JEEDEKhDsXDPyKrd+IinlPp8LoudlAcvIM5xoNFiQs0mCgaNq0ruk+IY7jdLndKk yrj4VUdWjiAnpdxGr+LgPBcgD177QpKaweYww+VWIwwpftxOBqfyeqMUTz8hYw/W SWnOk633FjV9vM12jbs6GVk7qMml34hj5M9rWg42huAoWOWI3Qcp0Qb6HuI9EGSA zrWCmwyEHbb7wR/SxfCJYk81BDM1FafPRmlVaeqH2aei3WPbdvm455bVAwdQ7ypB dudt6cXbU9Le/1P/Tr3u+T5YVRJLIXkhgxV8BtqumiAmB14xXbxRbO3nNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9x5sV+ZWnq/PIPdW0E+NKexujfMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMzNIbXhYNWxhZXI4OGc5MWJRVDQwcDdHNk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH5MA0G CSqGSIb3DQEBCwUAA4IBAQBVK2yB4tzD25NMxWUik3lBnDOPgdiR9kV6wOekB4aG WIWp0vgZX+v41ctpJbLrIx2O7EzMfVn/qllZ+KL9+LJuotl8FtECfb+nFJ/UT8uO VHoKulbQ2IvOm/XsjUPOkq6W6x3FGJpbAKeuO8cu1HpRCTuLmLJQxRbYq6jzkWo8 Vfot/idlV+J4rjb28enauDoOQ7il8lKncotTzjZuKDaLGrceVINmDUb+yi3xhF0Y g6LcYTe01h4jPDBSTUK1y653VLSZMCwDcCk5hCWpScKbtaKT+0fUoJcsjlLD/Ix3 pQslupAbKHI8VtAmn3Z6S7o09Vrm1ta9bHJKAyP0n4dK -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:59 2026 by rpki-client