This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDz0O2A-gElcx4WUvd4FQFxf7ec.roa File: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (raw, json) Hash identifier: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs= Subject key identifier: C4:3C:F4:3B:60:3E:80:49:5C:C7:85:94:BD:DE:05:40:5C:5F:ED:E7 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EA8E14D16F50499339F40CE0B26F Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDz0O2A-gElcx4WUvd4FQFxf7ec.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206361 IP address blocks: 88.209.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ea:8e:14:d1:6f:50:49:93:39:f4:0c:e0:b2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c43cf43b603e80495cc78594bdde05405c5fede7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:8b:46:60:9a:4f:60:48:2c:af:84:42:d2: b6:b0:5c:2c:25:02:c8:f3:74:f1:95:a0:15:9f:7d: b8:85:cb:81:6f:68:18:d9:b7:99:c0:3e:8c:9e:b3: 28:b9:99:9a:ee:e4:1e:47:d3:33:e2:8a:61:aa:c3: 24:3f:b0:be:d6:d5:58:63:b7:4b:72:d8:a6:0f:97: c7:a1:90:5c:e3:16:42:42:0e:ac:df:2d:64:9e:ed: f5:2b:d3:0f:6a:24:39:2d:2f:07:26:06:d8:d9:42: 0b:45:40:00:ff:46:29:13:11:f0:48:71:e7:be:35: 7c:92:bb:25:86:03:ce:8c:f3:81:e2:0e:df:cb:2a: bb:b0:ea:37:ee:3b:32:f2:bf:ff:12:f1:ad:29:ae: 96:f7:38:9d:0c:81:7c:fa:25:a3:d1:aa:2a:5c:c5: c2:c5:62:84:77:b9:35:21:e4:6f:2a:33:25:50:62: 53:cd:03:14:9e:cf:08:3a:97:bb:58:ee:f9:c5:a8: ab:88:e0:16:57:bd:89:70:4a:16:00:26:50:f7:5a: 01:2f:33:42:b4:6b:48:69:f5:f0:c8:3e:e6:d0:e5: 1b:b2:29:04:66:87:f8:2d:de:64:8c:5b:11:b8:5e: 2b:27:b6:64:f9:85:1f:2a:ca:e9:1c:ea:b9:de:00: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:F4:3B:60:3E:80:49:5C:C7:85:94:BD:DE:05:40:5C:5F:ED:E7 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xDz0O2A-gElcx4WUvd4FQFxf7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.193.0/24 Signature Algorithm: sha256WithRSAEncryption af:42:8b:b2:23:90:fc:94:45:0a:26:b2:02:12:41:84:23:d5: 88:49:61:7e:10:d8:50:42:cd:c1:87:3f:be:0b:6a:86:8c:8c: e6:e0:31:a0:a9:4a:97:12:cb:a2:87:2a:44:5b:c8:78:cf:dd: e2:60:c4:86:8b:d3:5f:e9:47:ae:1f:49:01:12:bf:a6:97:0a: 0d:e9:3e:8b:82:38:2f:a9:7a:38:53:a7:a0:01:52:1b:95:1c: ac:6e:ae:19:78:71:53:1d:de:1e:30:f0:a8:d3:12:f1:21:73: a1:b9:0f:50:5e:42:9d:07:1b:f9:d5:85:11:f1:17:07:2f:2f: 66:4f:be:52:eb:82:04:25:6e:1f:7a:e8:b8:ba:cb:24:58:e0: 77:60:ae:3d:a6:50:53:c8:88:09:12:76:e3:b2:39:20:81:70: c6:5e:bc:25:73:63:3d:19:6a:70:cd:c5:87:b9:d6:3c:8b:91: 4f:88:71:c2:0f:25:4e:3d:d4:8d:55:a8:b4:71:4c:65:43:6d: fc:2f:65:13:92:a4:16:19:93:bb:94:07:58:ef:20:32:71:9e: 9a:96:79:6d:d6:f9:4b:94:20:c1:4e:c0:80:a5:af:c2:43:b8: 14:e5:19:c1:33:a5:f6:c7:45:60:ba:25:cf:d2:bc:94:f0:d9: 5a:89:aa:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOqOFNFvUEmTOfQM4LJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDNjZjQzYjYwM2U4MDQ5NWNjNzg1OTRiZGRlMDU0MDVjNWZlZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZyLRmCaT2BILK+EQtK2sFwsJQLI 83TxlaAVn324hcuBb2gY2beZwD6MnrMouZma7uQeR9Mz4ophqsMkP7C+1tVYY7dL ctimD5fHoZBc4xZCQg6s3y1knu31K9MPaiQ5LS8HJgbY2UILRUAA/0YpExHwSHHn vjV8krslhgPOjPOB4g7fyyq7sOo37jsy8r//EvGtKa6W9zidDIF8+iWj0aoqXMXC xWKEd7k1IeRvKjMlUGJTzQMUns8IOpe7WO75xairiOAWV72JcEoWACZQ91oBLzNC tGtIafXwyD7m0OUbsikEZof4Ld5kjFsRuF4rJ7Zk+YUfKsrpHOq53gCNeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQ89DtgPoBJXMeFlL3eBUBcX+3nMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEveER6ME8yQS1nRWxjeDRXVXZkNEZRRnhmN2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHBMA0G CSqGSIb3DQEBCwUAA4IBAQCvQouyI5D8lEUKJrICEkGEI9WISWF+ENhQQs3Bhz++ C2qGjIzm4DGgqUqXEsuihypEW8h4z93iYMSGi9Nf6UeuH0kBEr+mlwoN6T6Lgjgv qXo4U6egAVIblRysbq4ZeHFTHd4eMPCo0xLxIXOhuQ9QXkKdBxv51YUR8RcHLy9m T75S64IEJW4feui4usskWOB3YK49plBTyIgJEnbjsjkggXDGXrwlc2M9GWpwzcWH udY8i5FPiHHCDyVOPdSNVai0cUxlQ238L2UTkqQWGZO7lAdY7yAycZ6alnlt1vlL lCDBTsCApa/CQ7gU5RnBM6X2x0VguiXP0ryU8Nlaiaqt -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client