This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cMPrRmSojB9SkGby8eR98Ete7yU.roa File: cMPrRmSojB9SkGby8eR98Ete7yU.roa (raw, json) Hash identifier: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8= Subject key identifier: 70:C3:EB:46:64:A8:8C:1F:52:90:66:F2:F1:E4:7D:F0:4B:5E:EF:25 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84F0264A8237ECFC6225B8B5F68516 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cMPrRmSojB9SkGby8eR98Ete7yU.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397630 IP address blocks: 88.209.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f0:26:4a:82:37:ec:fc:62:25:b8:b5:f6:85:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c3eb4664a88c1f529066f2f1e47df04b5eef25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:d4:45:4e:04:ba:b1:b1:68:89:3e:bd:1a: ad:99:a9:d5:e9:21:4d:5a:73:3d:44:f7:d1:82:80: 8f:82:63:47:46:f2:8d:8d:e1:5b:e6:a9:86:1c:8e: d2:87:e4:26:70:50:31:08:33:16:2c:26:3a:79:02: f5:51:38:fa:22:fd:26:c3:48:fb:06:1d:5d:76:84: 21:0b:cc:87:60:14:ef:b9:41:72:1c:ef:00:ef:d2: d5:5b:f5:73:04:da:9b:7f:3e:c1:66:d8:fa:bd:7f: 53:70:4c:c9:56:f8:93:81:65:63:81:c9:c8:7b:2f: a1:f9:97:c4:8d:99:c5:84:7f:6c:ea:55:e2:02:82: 22:de:09:a3:ef:c9:5a:08:48:6c:3c:75:b8:1f:42: e1:66:3d:94:f9:5a:10:b8:1d:c5:8e:3a:0f:65:8f: c6:ee:a6:bd:01:30:4a:2b:f3:0b:aa:3a:1f:90:47: bb:66:90:91:c6:c5:35:8c:b2:e6:69:a3:6c:ef:3e: 28:5f:c6:13:90:e8:4d:50:2c:9b:bb:25:cb:bd:06: 5b:4a:9b:ed:3d:24:f1:ca:f3:6c:e1:24:ae:3b:7c: 1a:cd:9f:7d:36:30:87:b8:f6:f4:e2:69:54:7a:ca: 77:f8:d0:bd:dd:63:b6:26:4d:f0:4c:ac:fd:a8:87: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:EB:46:64:A8:8C:1F:52:90:66:F2:F1:E4:7D:F0:4B:5E:EF:25 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cMPrRmSojB9SkGby8eR98Ete7yU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.207.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a1:18:cf:10:44:62:79:5b:03:04:10:1f:2b:c1:58:44:06: 5a:1c:b2:37:10:9c:b7:29:d2:1e:7d:83:58:68:30:65:e7:a2: 7b:2d:7d:1d:c8:2c:bd:4f:b2:c8:ea:9a:09:ba:6a:28:39:50: 4e:7e:39:f4:2e:2b:47:51:da:8d:da:33:4e:73:10:2c:08:28: 81:01:5e:79:47:29:be:9a:54:02:35:9c:39:50:56:22:12:14: 73:22:49:0c:b9:b7:8e:f0:7e:10:26:7b:a3:21:db:90:55:ab: 0c:02:48:c0:5e:50:27:9b:06:0a:4b:11:4f:49:ef:3d:e0:ed: 7a:c0:d4:de:5c:bc:fa:00:9d:79:25:a8:ed:a9:08:d7:b5:5c: c3:2e:49:63:3f:e2:65:c3:e0:83:6d:9c:62:1b:84:b9:8b:97: 8b:27:df:bb:b1:7c:2f:33:15:3c:05:c7:be:5f:9e:67:68:00: c2:25:19:47:b1:5a:f0:6e:b2:9b:b6:49:71:72:1a:37:93:3a: a7:81:72:01:7f:ef:85:68:aa:f4:27:1d:c1:ad:56:5c:7d:07: 6a:d6:6f:da:ab:f6:52:17:c2:60:b5:71:0a:65:53:a4:ee:50: 0f:4e:9a:11:02:2d:1f:74:b8:5b:25:c3:81:53:70:4e:ca:5a: ce:12:4b:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPAmSoI37PxiJbi19oUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGMzZWI0NjY0YTg4YzFmNTI5MDY2ZjJmMWU0N2RmMDRiNWVlZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst3URU4EurGxaIk+vRqtmanV6SFN WnM9RPfRgoCPgmNHRvKNjeFb5qmGHI7Sh+QmcFAxCDMWLCY6eQL1UTj6Iv0mw0j7 Bh1ddoQhC8yHYBTvuUFyHO8A79LVW/VzBNqbfz7BZtj6vX9TcEzJVviTgWVjgcnI ey+h+ZfEjZnFhH9s6lXiAoIi3gmj78laCEhsPHW4H0LhZj2U+VoQuB3FjjoPZY/G 7qa9ATBKK/MLqjofkEe7ZpCRxsU1jLLmaaNs7z4oX8YTkOhNUCybuyXLvQZbSpvt PSTxyvNs4SSuO3wazZ99NjCHuPb04mlUesp3+NC93WO2Jk3wTKz9qIedhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDD60ZkqIwfUpBm8vHkffBLXu8lMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvY01QclJtU29qQjlTa0dieThlUjk4RXRlN3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHPMA0G CSqGSIb3DQEBCwUAA4IBAQAioRjPEERieVsDBBAfK8FYRAZaHLI3EJy3KdIefYNY aDBl56J7LX0dyCy9T7LI6poJumooOVBOfjn0LitHUdqN2jNOcxAsCCiBAV55Rym+ mlQCNZw5UFYiEhRzIkkMubeO8H4QJnujIduQVasMAkjAXlAnmwYKSxFPSe894O16 wNTeXLz6AJ15JajtqQjXtVzDLkljP+Jlw+CDbZxiG4S5i5eLJ9+7sXwvMxU8Bce+ X55naADCJRlHsVrwbrKbtklxcho3kzqngXIBf++FaKr0Jx3BrVZcfQdq1m/aq/ZS F8JgtXEKZVOk7lAPTpoRAi0fdLhbJcOBU3BOylrOEktM -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:55 2026 by rpki-client