This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fCRl6H2tV2dYneBgV0uiC_W_S-w.roa File: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (raw, json) Hash identifier: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4= Subject key identifier: 7C:24:65:E8:7D:AD:57:67:58:9D:E0:60:57:4B:A2:0B:F5:BF:4B:EC Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EE7FFF082938A3F4235A27EA05F8 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fCRl6H2tV2dYneBgV0uiC_W_S-w.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 88.209.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ee:7f:ff:08:29:38:a3:f4:23:5a:27:ea:05:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2465e87dad5767589de060574ba20bf5bf4bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:c1:b4:d1:11:ca:d2:85:73:6a:81:84:a6: c6:38:f6:d1:42:3b:e0:24:36:60:d6:53:80:d1:d9: 1f:5f:5e:0a:4e:77:44:7d:4e:f0:d7:59:d4:94:3d: 02:a6:4f:0c:c4:43:00:cd:fe:d0:7d:45:38:0d:54: fe:d5:83:e3:fb:63:49:9b:07:1a:cb:dc:cf:52:17: c4:bc:ae:4c:d3:5b:17:cc:6f:08:f8:7c:10:33:44: 4d:52:75:e6:39:3a:d9:0d:6d:6a:34:b7:45:c8:0b: a6:06:8b:b3:d3:0a:9c:7a:63:e4:db:b0:c9:05:3c: 64:80:33:42:a3:20:58:bf:c3:9e:28:3b:39:f7:49: 7b:18:f5:8d:44:26:8f:68:65:d7:39:12:01:bb:ae: 4e:2f:aa:bb:b9:5c:b8:0e:6a:7b:ff:15:df:25:02: 71:30:bf:82:dc:01:7d:fa:b1:50:90:98:c8:61:1a: 52:a4:58:5f:cb:a2:d7:55:a2:aa:74:8d:56:f3:c7: 0d:61:10:a3:f5:03:ed:da:ff:a4:a9:34:aa:f8:c1: c0:44:e1:d4:dc:d7:e4:37:38:11:a4:de:50:c4:75: bb:1f:0e:ff:9f:d1:ef:a0:af:81:21:a1:0a:78:32: a9:14:fe:26:f1:6a:d9:44:00:77:6f:67:20:1b:38: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:65:E8:7D:AD:57:67:58:9D:E0:60:57:4B:A2:0B:F5:BF:4B:EC X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fCRl6H2tV2dYneBgV0uiC_W_S-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.231.0/24 Signature Algorithm: sha256WithRSAEncryption b0:b6:61:df:20:bd:90:75:83:0d:78:93:b0:dd:15:a7:05:1d: 86:8e:03:d3:a5:39:3e:dd:9c:3d:cb:f6:7a:c6:a2:87:71:b6: ba:62:37:9e:21:36:fd:20:26:f7:81:c0:ad:4a:a6:de:a8:38: 05:c5:20:20:89:cb:d5:86:ea:d3:a6:19:e5:1e:95:ff:5c:56: b6:fe:7b:1b:de:f9:e9:02:90:71:ac:0f:bf:a9:36:72:31:6e: 00:18:e1:fa:88:9d:13:43:d2:ff:52:59:f6:1c:56:58:63:63: b5:8a:3e:d5:ec:ce:bb:82:48:2d:e3:85:a7:93:d6:6f:84:d8: 83:19:60:bf:32:e4:13:44:ea:13:fc:a8:f2:9f:18:6d:6a:1f: 5b:a1:91:6a:dd:14:34:50:e1:35:85:3d:64:7c:88:5d:ea:37: c0:59:29:cc:4a:0a:dc:85:25:21:11:dd:b0:12:c8:81:ac:c2: 72:d7:55:a0:d6:a4:a9:17:2d:d0:95:e3:c3:d1:91:8a:e3:f5: c1:0a:5f:4f:e1:80:43:5e:2f:aa:4d:07:ad:eb:2e:27:d6:82: af:d8:82:a8:94:63:93:2d:b0:09:0f:4d:26:8f:17:35:f6:7a: bd:95:0d:3b:69:6d:59:3f:9f:a3:ff:f6:55:53:d8:4a:eb:ba: d7:bf:22:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO5//wgpOKP0I1on6gX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzI0NjVlODdkYWQ1NzY3NTg5ZGUwNjA1NzRiYTIwYmY1YmY0YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZfBtNERytKFc2qBhKbGOPbRQjvg JDZg1lOA0dkfX14KTndEfU7w11nUlD0Cpk8MxEMAzf7QfUU4DVT+1YPj+2NJmwca y9zPUhfEvK5M01sXzG8I+HwQM0RNUnXmOTrZDW1qNLdFyAumBouz0wqcemPk27DJ BTxkgDNCoyBYv8OeKDs590l7GPWNRCaPaGXXORIBu65OL6q7uVy4Dmp7/xXfJQJx ML+C3AF9+rFQkJjIYRpSpFhfy6LXVaKqdI1W88cNYRCj9QPt2v+kqTSq+MHAROHU 3NfkNzgRpN5QxHW7Hw7/n9HvoK+BIaEKeDKpFP4m8WrZRAB3b2cgGzh3cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwkZeh9rVdnWJ3gYFdLogv1v0vsMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvZkNSbDZIMnRWMmRZbmVCZ1YwdWlDX1dfUy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHnMA0G CSqGSIb3DQEBCwUAA4IBAQCwtmHfIL2QdYMNeJOw3RWnBR2GjgPTpTk+3Zw9y/Z6 xqKHcba6YjeeITb9ICb3gcCtSqbeqDgFxSAgicvVhurTphnlHpX/XFa2/nsb3vnp ApBxrA+/qTZyMW4AGOH6iJ0TQ9L/Uln2HFZYY2O1ij7V7M67gkgt44Wnk9ZvhNiD GWC/MuQTROoT/Kjynxhtah9boZFq3RQ0UOE1hT1kfIhd6jfAWSnMSgrchSUhEd2w EsiBrMJy11Wg1qSpFy3QlePD0ZGK4/XBCl9P4YBDXi+qTQet6y4n1oKv2IKolGOT LbAJD00mjxc19nq9lQ07aW1ZP5+j//ZVU9hK67rXvyLz -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:04 2026 by rpki-client