This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa File: x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa (raw, json) Hash identifier: T+4iofAbDpf5avC4l/+tJIoT9rhbeVtFuRCldw4lWGM= Subject key identifier: C7:97:F5:00:A5:40:8F:48:50:8F:A7:7D:5E:E5:B3:47:3F:BC:7B:40 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E54BC854300C3A120C66AFF4C55A Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 88.151.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e5:4b:c8:54:30:0c:3a:12:0c:66:af:f4:c5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c797f500a5408f48508fa77d5ee5b3473fbc7b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:a4:5a:0e:fc:96:2e:c7:1a:da:00:57:75: 48:9a:b9:b9:2e:30:8c:95:98:dc:4f:34:f8:88:88: cf:bc:e7:df:90:88:77:9c:b8:0b:97:8d:3a:e7:84: 43:b7:8e:28:5b:c8:98:0e:6c:b6:14:0c:df:46:16: 6e:58:d1:34:6f:04:f8:e6:3d:00:5b:7f:9f:3d:d6: 1f:8d:00:c7:a8:d2:ed:59:42:17:a9:ab:fd:41:37: 18:cb:ef:5a:b3:f0:19:a5:81:ae:ae:2f:25:67:e3: 45:f8:78:fe:47:ed:49:8e:8d:70:9b:9e:ff:17:dd: 50:da:6d:bc:36:e1:db:2d:fc:ac:17:1b:a6:4f:9d: ec:a1:d8:75:85:b6:3a:6b:c8:f3:23:f3:25:fe:42: 58:c1:f9:39:88:d5:0c:74:9c:a9:a3:87:1b:79:2e: b1:08:4a:b2:db:21:41:01:cd:aa:6c:fb:7e:71:24: a4:4f:a0:f2:c5:90:20:e0:9e:53:8e:61:5f:b5:f4: 42:96:e4:bd:bb:9a:03:00:32:9a:fa:82:b7:b1:27: 0d:93:7d:24:11:d8:d0:c8:1b:1a:51:31:8d:5d:41: 03:4a:aa:4b:46:ff:45:12:61:cb:84:46:b6:a4:8b: 16:df:72:c2:19:b3:97:cc:b7:b2:c8:72:e4:7f:b8: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:97:F5:00:A5:40:8F:48:50:8F:A7:7D:5E:E5:B3:47:3F:BC:7B:40 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.62.0/24 Signature Algorithm: sha256WithRSAEncryption 53:15:68:ea:e5:21:1e:04:45:db:54:81:be:87:1a:4f:45:07: 1b:6b:ee:d6:b7:a6:5f:42:62:90:da:26:60:b9:19:be:80:94: ff:69:18:ad:46:9f:fc:a5:96:f1:fa:bc:a4:c7:22:0a:01:95: c6:97:b3:bb:ea:e6:28:d0:1e:38:99:c1:32:03:c3:9b:a0:50: d0:26:b2:6f:37:14:7d:a8:3d:68:49:b1:4a:53:a0:1e:b6:ff: d6:cb:03:26:08:91:f8:e8:2b:ac:a5:c5:2c:86:ef:40:d4:51: d6:29:7b:b6:90:5b:45:c1:7a:d8:8f:0b:b2:a5:50:02:2e:18: a0:b5:db:76:da:73:49:42:cd:66:31:b9:18:59:48:7c:77:a8: f0:70:c2:0e:f2:d3:15:44:0c:25:21:4a:01:84:da:30:65:f0: 82:c1:e9:c1:8c:40:85:dc:75:50:d0:f8:1a:75:b7:39:4f:f8: d4:0f:d6:a6:17:94:cf:b7:8f:53:aa:a9:f5:48:4a:33:d1:dc: c4:16:39:a1:67:b6:40:70:47:17:a0:6e:70:f6:ec:16:fc:c2: 18:79:89:26:21:15:36:6a:60:49:43:75:8e:f3:d7:87:ea:e8: ad:00:21:f5:78:e5:d2:28:96:39:8f:2a:5d:4a:2d:a5:bb:28: 34:18:a0:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOVLyFQwDDoSDGav9MVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk3ZjUwMGE1NDA4ZjQ4NTA4ZmE3N2Q1ZWU1YjM0NzNmYmM3YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ekWg78li7HGtoAV3VImrm5LjCM lZjcTzT4iIjPvOffkIh3nLgLl40654RDt44oW8iYDmy2FAzfRhZuWNE0bwT45j0A W3+fPdYfjQDHqNLtWUIXqav9QTcYy+9as/AZpYGuri8lZ+NF+Hj+R+1Jjo1wm57/ F91Q2m28NuHbLfysFxumT53sodh1hbY6a8jzI/Ml/kJYwfk5iNUMdJypo4cbeS6x CEqy2yFBAc2qbPt+cSSkT6DyxZAg4J5TjmFftfRCluS9u5oDADKa+oK3sScNk30k EdjQyBsaUTGNXUEDSqpLRv9FEmHLhEa2pIsW33LCGbOXzLeyyHLkf7hkJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMeX9QClQI9IUI+nfV7ls0c/vHtAMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEveDVmMUFLVkFqMGhRajZkOVh1V3pSei04ZTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJc+MA0G CSqGSIb3DQEBCwUAA4IBAQBTFWjq5SEeBEXbVIG+hxpPRQcba+7Wt6ZfQmKQ2iZg uRm+gJT/aRitRp/8pZbx+rykxyIKAZXGl7O76uYo0B44mcEyA8OboFDQJrJvNxR9 qD1oSbFKU6Aetv/WywMmCJH46CuspcUshu9A1FHWKXu2kFtFwXrYjwuypVACLhig tdt22nNJQs1mMbkYWUh8d6jwcMIO8tMVRAwlIUoBhNowZfCCwenBjECF3HVQ0Pga dbc5T/jUD9amF5TPt49Tqqn1SEoz0dzEFjmhZ7ZAcEcXoG5w9uwW/MIYeYkmIRU2 amBJQ3WO89eH6uitACH1eOXSKJY5jypdSi2luyg0GKA4 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:01 2026 by rpki-client