This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/j9orTwG1Vgweag4E9VIs_WouzoE.roa File: j9orTwG1Vgweag4E9VIs_WouzoE.roa (raw, json) Hash identifier: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is= Subject key identifier: 8F:DA:2B:4F:01:B5:56:0C:1E:6A:0E:04:F5:52:2C:FD:6A:2E:CE:81 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EC538A2F92B8687AAF00908D61F2 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/j9orTwG1Vgweag4E9VIs_WouzoE.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207236 IP address blocks: 88.151.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ec:53:8a:2f:92:b8:68:7a:af:00:90:8d:61:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fda2b4f01b5560c1e6a0e04f5522cfd6a2ece81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:e1:86:8a:03:86:3e:1e:e0:b3:e7:07:15: 2e:7a:29:45:e1:b4:1b:5d:c7:a6:89:ae:99:9c:a9: 3f:83:e5:70:14:5f:0d:d6:7f:69:8f:ac:41:dd:b0: 89:19:74:c8:e1:b8:c1:d7:b1:6d:59:f8:12:ab:4e: 7e:e6:8c:c5:4b:1a:cb:04:15:ca:08:3f:92:0d:b0: e4:23:6a:a1:d7:02:62:bd:7a:54:21:55:70:30:1c: fb:f6:07:8c:6c:c6:b5:17:60:9f:30:a3:0e:de:47: f1:0c:e8:a5:30:63:11:46:1a:6a:6d:8a:ab:91:e6: 0e:b6:e8:19:26:d8:31:96:f0:51:e3:23:c8:8f:f5: 93:0a:97:7c:c8:9e:89:9f:5a:70:22:c5:f4:0e:8e: 1d:cd:c1:c1:38:53:17:5c:67:c3:6a:18:af:4b:8c: 30:d6:a5:f1:d0:6b:a6:cd:2d:56:6a:52:7b:3f:b3: b1:52:5c:a4:96:28:07:9a:34:81:49:03:a2:89:b4: 91:41:c8:eb:06:67:ae:d8:70:31:c7:77:4d:72:51: 5c:cb:aa:7a:0b:f8:70:b9:46:a8:dd:a7:f4:63:58: 9c:69:2a:83:18:ea:68:68:ed:47:c3:89:ea:5c:bd: dc:b1:c7:49:68:d5:76:34:ce:a2:23:a0:e1:3c:0a: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:2B:4F:01:B5:56:0C:1E:6A:0E:04:F5:52:2C:FD:6A:2E:CE:81 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/j9orTwG1Vgweag4E9VIs_WouzoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.60.0/24 Signature Algorithm: sha256WithRSAEncryption b8:78:9a:2e:da:70:79:46:26:6c:3b:dd:16:0f:2f:c3:f5:0f: 19:05:2f:07:2a:db:0d:02:30:33:74:a6:a0:96:5f:30:fb:25: 78:97:29:56:80:11:50:ed:77:71:b9:65:86:5e:e0:8c:85:ca: 97:d6:a3:de:ea:0a:fa:a2:40:3a:49:9d:64:bb:68:7d:ee:2f: fa:4a:8b:b4:80:58:3f:7a:9e:d6:57:48:61:8a:e8:1e:c4:53: d4:df:ca:26:53:3d:d5:51:d7:a3:e7:61:7e:4e:53:67:9b:54: 2d:30:cd:b3:2a:a1:21:29:44:68:d1:84:9c:4c:9d:db:a9:0d: 68:e1:e7:07:dd:e1:6b:c5:b4:25:df:ea:58:cc:d4:6f:c1:79: 78:40:a5:7d:3c:2a:77:95:9d:41:ff:89:de:a5:41:65:85:8b: 9e:dd:8a:e5:2e:53:14:9e:e1:9b:c7:02:4f:89:3b:d9:6a:27: c8:4f:d6:54:8f:e0:d4:ac:e4:5b:3e:da:d6:87:85:ba:a7:35: 79:7b:59:f6:b8:96:95:38:3f:92:59:b0:0b:3c:a8:77:b4:f5: 33:d6:2e:fe:f7:33:39:8b:8d:c0:79:f6:73:b8:66:50:43:36: 55:f4:cb:19:60:8a:5f:a4:b7:1a:d7:9e:85:2a:f8:10:4e:10: 50:b3:61:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOxTii+SuGh6rwCQjWHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmRhMmI0ZjAxYjU1NjBjMWU2YTBlMDRmNTUyMmNmZDZhMmVjZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3jhhooDhj4e4LPnBxUueilF4bQb Xcemia6ZnKk/g+VwFF8N1n9pj6xB3bCJGXTI4bjB17FtWfgSq05+5ozFSxrLBBXK CD+SDbDkI2qh1wJivXpUIVVwMBz79geMbMa1F2CfMKMO3kfxDOilMGMRRhpqbYqr keYOtugZJtgxlvBR4yPIj/WTCpd8yJ6Jn1pwIsX0Do4dzcHBOFMXXGfDahivS4ww 1qXx0GumzS1WalJ7P7OxUlykligHmjSBSQOiibSRQcjrBmeu2HAxx3dNclFcy6p6 C/hwuUao3af0Y1icaSqDGOpoaO1Hw4nqXL3cscdJaNV2NM6iI6DhPAp6FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/aK08BtVYMHmoOBPVSLP1qLs6BMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvajlvclR3RzFWZ3dlYWc0RTlWSXNfV291em9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJc8MA0G CSqGSIb3DQEBCwUAA4IBAQC4eJou2nB5RiZsO90WDy/D9Q8ZBS8HKtsNAjAzdKag ll8w+yV4lylWgBFQ7XdxuWWGXuCMhcqX1qPe6gr6okA6SZ1ku2h97i/6Sou0gFg/ ep7WV0hhiugexFPU38omUz3VUdej52F+TlNnm1QtMM2zKqEhKURo0YScTJ3bqQ1o 4ecH3eFrxbQl3+pYzNRvwXl4QKV9PCp3lZ1B/4nepUFlhYue3YrlLlMUnuGbxwJP iTvZaifIT9ZUj+DUrORbPtrWh4W6pzV5e1n2uJaVOD+SWbALPKh3tPUz1i7+9zM5 i43AefZzuGZQQzZV9MsZYIpfpLca156FKvgQThBQs2GZ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client