This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8Xitw9UVRcrb76gpVaumne_jEwU.roa File: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (raw, json) Hash identifier: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE= Subject key identifier: F1:78:AD:C3:D5:15:45:CA:DB:EF:A8:29:55:AB:A6:9D:EF:E3:13:05 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E68A183C43A6F5606E5C659648BD Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8Xitw9UVRcrb76gpVaumne_jEwU.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 88.209.203.0/24 maxlen: 24 88.209.207.0/24 maxlen: 24 88.209.230.0/24 maxlen: 24 88.209.245.0/24 maxlen: 24 88.209.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:8a:18:3c:43:a6:f5:60:6e:5c:65:96:48:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f178adc3d51545cadbefa82955aba69defe31305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fa:68:21:2f:f9:93:71:e4:75:ec:f7:77:83: 2b:ea:c4:0a:02:17:14:89:a1:40:d2:0d:08:eb:c9: 2e:1a:b3:14:fc:b6:45:a6:65:ca:74:93:3d:8f:8e: d2:ce:ed:11:75:8d:26:c6:de:ff:86:49:20:25:1c: 5e:42:d0:89:13:f4:8c:9a:3f:07:da:d4:fb:2b:7b: 50:7f:a8:08:2a:d7:76:b2:a1:9d:cc:a5:25:8e:fa: 7e:97:04:92:9e:9a:55:02:43:23:fa:a0:95:c6:9c: 3c:c1:cf:73:5a:9b:1e:6a:bc:7a:b8:b4:b3:72:2f: 94:3f:55:f8:49:af:b5:24:38:90:c3:e1:6e:fa:62: 6f:71:b0:30:d1:4a:1d:03:05:79:31:8e:d8:19:85: 62:e7:3b:51:28:db:a1:fb:99:af:84:f9:f5:a2:6e: fb:43:9d:e7:1f:b9:e7:13:e6:e6:65:38:ed:22:40: 2b:0e:71:76:f3:04:54:7c:3c:3b:0a:fc:27:5b:be: 10:bc:6b:25:a5:47:c5:44:16:88:25:ea:5d:de:40: 57:31:8d:fd:dd:07:a7:98:88:e9:4a:fb:67:22:e6: 6c:79:71:3e:93:b5:09:27:47:56:4b:c5:11:0a:81: 30:ee:cf:2c:86:92:7e:f1:57:42:4a:47:ee:7d:38: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:AD:C3:D5:15:45:CA:DB:EF:A8:29:55:AB:A6:9D:EF:E3:13:05 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8Xitw9UVRcrb76gpVaumne_jEwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.203.0/24 88.209.207.0/24 88.209.230.0/24 88.209.245.0/24 88.209.255.0/24 Signature Algorithm: sha256WithRSAEncryption 14:2b:93:7a:74:63:0b:eb:a3:d2:75:d5:6d:91:68:b0:56:48: 92:f8:bb:60:24:e2:c6:0d:ca:6e:2e:18:90:e0:05:24:96:a9: 79:86:95:8c:4d:c6:71:02:c7:77:c7:f9:b9:aa:a2:d4:5e:3e: ae:b9:80:95:3f:a4:6d:14:9b:50:79:17:25:02:7c:00:b2:7f: 33:51:94:5e:8b:eb:dd:23:ae:49:52:9d:3e:02:d1:5a:2d:a7: 4c:ea:57:47:a4:76:57:45:f7:da:25:bb:06:46:5f:39:1c:20: a1:e7:62:6c:59:39:88:8a:35:72:6d:8b:25:05:6b:e5:c7:a0: 5e:cd:49:c4:c3:82:b0:b9:32:ce:e0:1b:f3:c9:15:cb:37:df: 91:84:02:3f:f8:55:8e:44:e5:c2:0f:09:9f:b4:aa:9f:a1:64: a9:54:34:0e:76:0d:ee:f4:32:ea:a5:18:0c:fd:1a:7a:14:1d: 88:b9:42:af:42:94:fd:db:87:0b:71:9c:ab:29:9d:35:2f:e0: 89:0c:84:a3:ef:43:d5:f3:5e:5f:9e:3d:bd:a0:4c:48:a9:83: 17:6f:7f:ef:d1:00:70:32:ee:d3:de:7e:9f:1b:36:35:d0:8b: 2d:29:a5:3b:a5:34:aa:b8:9e:60:c7:47:f0:a4:68:68:8c:21: 37:f2:52:bc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hOaKGDxDpvVgblxllki9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTc4YWRjM2Q1MTU0NWNhZGJlZmE4Mjk1NWFiYTY5ZGVmZTMxMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PpoIS/5k3Hkdez3d4Mr6sQKAhcU iaFA0g0I68kuGrMU/LZFpmXKdJM9j47Szu0RdY0mxt7/hkkgJRxeQtCJE/SMmj8H 2tT7K3tQf6gIKtd2sqGdzKUljvp+lwSSnppVAkMj+qCVxpw8wc9zWpsearx6uLSz ci+UP1X4Sa+1JDiQw+Fu+mJvcbAw0UodAwV5MY7YGYVi5ztRKNuh+5mvhPn1om77 Q53nH7nnE+bmZTjtIkArDnF28wRUfDw7CvwnW74QvGslpUfFRBaIJepd3kBXMY39 3QenmIjpSvtnIuZseXE+k7UJJ0dWS8URCoEw7s8shpJ+8VdCSkfufThTmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPF4rcPVFUXK2++oKVWrpp3v4xMFMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvOFhpdHc5VVZSY3JiNzZncFZhdW1uZV9qRXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWNHLAwQA WNHPAwQAWNHmAwQAWNH1AwQAWNH/MA0GCSqGSIb3DQEBCwUAA4IBAQAUK5N6dGML 66PSddVtkWiwVkiS+LtgJOLGDcpuLhiQ4AUklql5hpWMTcZxAsd3x/m5qqLUXj6u uYCVP6RtFJtQeRclAnwAsn8zUZRei+vdI65JUp0+AtFaLadM6ldHpHZXRffaJbsG Rl85HCCh52JsWTmIijVybYslBWvlx6BezUnEw4KwuTLO4BvzyRXLN9+RhAI/+FWO ROXCDwmftKqfoWSpVDQOdg3u9DLqpRgM/Rp6FB2IuUKvQpT924cLcZyrKZ01L+CJ DISj70PV815fnj29oExIqYMXb3/v0QBwMu7T3n6fGzY10IstKaU7pTSquJ5gx0fw pGhojCE38lK8 -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:07 2026 by rpki-client