This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa File: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (raw, json) Hash identifier: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0= Subject key identifier: 9F:C3:23:29:7B:EA:67:FC:A4:57:1A:23:FC:F2:02:88:69:0C:54:DE Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EF831034ADAC889F99F319326307 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215567 IP address blocks: 88.209.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ef:83:10:34:ad:ac:88:9f:99:f3:19:32:63:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc323297bea67fca4571a23fcf20288690c54de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:d9:5f:c1:9e:8f:6f:1d:e6:f8:30:c6:97: ae:4d:5a:cd:83:d7:1b:10:38:7b:73:52:69:e9:31: 61:cc:b5:a8:13:e5:35:41:8a:3f:8f:2a:1e:5b:f9: c8:1b:42:58:9f:24:53:be:09:b2:f6:64:73:4e:39: 30:74:99:43:8f:24:81:ff:e5:90:53:b8:dc:f5:45: b0:95:96:c1:e6:9d:9f:11:4d:2f:5a:8a:8a:b3:c6: 15:bb:e2:c4:98:c0:d4:03:07:84:ae:77:81:71:eb: 1f:41:07:7d:21:9d:c2:6e:d7:aa:9d:f2:f8:9c:ee: 72:4b:86:4a:70:39:38:4d:2a:e8:3e:f9:dd:68:51: 5c:82:05:50:dc:15:df:4d:72:65:4b:2b:93:eb:23: 85:a8:41:27:73:8a:a2:d0:6f:d0:4a:5e:93:de:7d: 56:f5:88:15:c8:d3:73:e6:eb:e7:1d:91:38:d8:80: 37:24:41:d5:ac:98:75:6c:35:28:49:1a:1f:f2:6c: 9b:85:77:12:89:15:81:52:f9:50:6d:41:70:24:4c: 53:90:2f:2c:6e:42:8f:73:16:10:f4:ca:bb:14:ef: ef:e2:89:40:d6:f4:c7:4c:a9:a8:76:22:98:62:45: 92:86:68:1d:57:87:4a:f7:43:f4:d5:14:2d:9a:5b: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C3:23:29:7B:EA:67:FC:A4:57:1A:23:FC:F2:02:88:69:0C:54:DE X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.248.0/24 Signature Algorithm: sha256WithRSAEncryption 32:91:ca:2e:1f:63:91:d3:4e:99:7b:24:f1:22:78:7b:f5:e5: 9a:9b:19:d9:af:00:e3:54:91:e2:97:c1:63:34:e2:0d:ee:1b: e6:c5:a2:46:a5:9d:12:db:90:0e:55:51:31:12:3c:01:0c:a3: 01:80:47:5e:ce:b0:0f:3b:c4:9c:3e:07:ca:82:94:45:bb:ec: b7:a1:40:6b:e5:b7:73:7e:c1:c2:a9:b8:05:4e:4b:6d:e0:8b: 83:d2:b0:39:15:66:57:a5:61:52:e0:2f:fa:8d:d0:89:46:92: 11:e0:c8:15:25:de:4d:9a:0c:42:ad:2a:b6:bf:62:6f:29:f7: 32:17:3a:00:16:d0:f2:0d:95:4d:6b:50:e0:a0:d3:52:a4:91: 93:9a:4b:8c:96:82:e3:83:c5:05:3d:b9:30:ec:f6:60:e7:df: 1d:d3:8b:b4:62:76:18:ed:a0:3b:7b:69:06:ab:2f:fc:8c:15: 6a:6e:10:63:87:3c:9b:cc:d7:3a:87:99:e8:20:9f:1e:5d:47: cf:8c:ef:25:e0:c0:13:45:3e:b2:97:f2:2e:03:e1:65:07:62: 87:2b:ae:8d:02:fa:f5:ab:c5:08:01:22:3f:f3:88:2a:81:88: d9:57:dc:12:34:ba:ca:36:fa:20:3e:48:35:bb:42:ab:de:66: 44:86:80:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO+DEDStrIifmfMZMmMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMzMjMyOTdiZWE2N2ZjYTQ1NzFhMjNmY2YyMDI4ODY5MGM1NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/HZX8Gej28d5vgwxpeuTVrNg9cb EDh7c1Jp6TFhzLWoE+U1QYo/jyoeW/nIG0JYnyRTvgmy9mRzTjkwdJlDjySB/+WQ U7jc9UWwlZbB5p2fEU0vWoqKs8YVu+LEmMDUAweErneBcesfQQd9IZ3CbteqnfL4 nO5yS4ZKcDk4TSroPvndaFFcggVQ3BXfTXJlSyuT6yOFqEEnc4qi0G/QSl6T3n1W 9YgVyNNz5uvnHZE42IA3JEHVrJh1bDUoSRof8mybhXcSiRWBUvlQbUFwJExTkC8s bkKPcxYQ9Mq7FO/v4olA1vTHTKmodiKYYkWShmgdV4dK90P01RQtmlvyCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/DIyl76mf8pFcaI/zyAohpDFTeMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvbjhNaktYdnFaX3lrVnhval9QSUNpR2tNVk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH4MA0G CSqGSIb3DQEBCwUAA4IBAQAykcouH2OR006ZeyTxInh79eWamxnZrwDjVJHil8Fj NOIN7hvmxaJGpZ0S25AOVVExEjwBDKMBgEdezrAPO8ScPgfKgpRFu+y3oUBr5bdz fsHCqbgFTktt4IuD0rA5FWZXpWFS4C/6jdCJRpIR4MgVJd5NmgxCrSq2v2JvKfcy FzoAFtDyDZVNa1DgoNNSpJGTmkuMloLjg8UFPbkw7PZg598d04u0YnYY7aA7e2kG qy/8jBVqbhBjhzybzNc6h5noIJ8eXUfPjO8l4MATRT6yl/IuA+FlB2KHK66NAvr1 q8UIASI/84gqgYjZV9wSNLrKNvogPkg1u0Kr3mZEhoAq -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client