This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa File: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (raw, json) Hash identifier: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58= Subject key identifier: C7:35:F1:30:DF:03:80:92:94:49:E7:78:67:38:FF:31:BE:BB:1F:E5 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84D8531BE361639D89128B0326B25E Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 88.209.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d8:53:1b:e3:61:63:9d:89:12:8b:03:26:b2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c735f130df0380929449e7786738ff31bebb1fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:7a:ce:49:13:d4:54:16:89:ba:0f:5f:b9: 07:31:65:20:db:3b:b5:c8:b5:b5:b2:69:2a:70:97: 78:f5:5f:06:9d:db:26:c4:cd:e7:69:8a:86:9c:2a: 3c:cc:a4:68:6a:ff:fd:1b:b6:ff:2c:78:8d:16:ad: a8:0d:1c:27:0d:d0:a7:71:31:7f:f4:94:a8:1b:02: 98:1b:53:67:27:6a:ca:9e:59:3b:cd:09:4f:67:0a: 27:c9:62:82:81:44:0b:11:ea:b8:f3:cf:a6:f0:38: b7:f4:5e:39:eb:f7:86:d9:ec:20:58:bf:68:0d:b1: 2b:58:1e:e3:73:b5:15:2d:cb:3d:b0:d5:05:81:26: c5:f1:17:78:6b:7e:c8:af:c6:f9:52:09:dc:c2:ce: 22:c7:48:70:f9:6c:6f:fc:45:e9:85:64:04:91:c1: fc:d7:ab:33:41:3f:a2:b3:bd:28:b0:00:85:26:ad: 60:3d:92:a1:4c:eb:98:5c:f4:0f:4b:2f:bd:05:86: 93:e2:e3:2a:d5:82:47:b9:76:d3:c0:a3:74:96:4c: f2:80:dd:0b:26:d5:b2:7e:03:ef:27:1b:40:22:78: 6f:21:0b:bc:3c:e4:3e:12:7a:fd:be:5d:9b:a8:c4: b1:c9:9b:ac:88:7c:45:41:f1:d7:d6:a0:04:79:84: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:35:F1:30:DF:03:80:92:94:49:E7:78:67:38:FF:31:BE:BB:1F:E5 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:6f:ff:0b:b4:01:57:66:73:b2:a9:39:5a:fd:13:a6:53:8f: 44:6c:f3:82:88:49:22:0a:ac:a6:8e:bd:97:bd:78:11:36:26: a0:03:da:82:5e:00:f8:75:35:0e:bf:aa:3f:3c:95:9e:f0:66: 3e:30:e6:cd:cf:f5:c2:6f:db:b7:0a:b3:90:95:b0:37:39:6f: 50:67:4b:c0:fa:3b:56:ac:67:d5:04:23:3f:91:e5:ae:cc:d4: 08:f6:c4:2a:fa:7b:90:ee:51:df:d9:f2:30:b5:31:74:be:3d: 25:2b:6e:37:d3:45:e2:94:ca:e9:db:31:50:c5:88:ca:b5:da: 79:f5:61:43:25:37:0a:b4:76:58:ee:5f:b8:a7:39:57:52:bb: e1:1d:e8:40:b6:84:08:82:ac:7e:3f:3f:6c:91:20:03:b3:8d: 3f:cd:fe:9f:af:a5:bf:f8:7e:75:55:66:7f:d2:97:66:de:24: 51:53:8e:00:ef:66:04:6b:b2:07:98:f0:4a:54:29:b5:e2:b4: 49:8c:3a:63:21:c3:39:20:ac:f1:03:b4:f4:e7:81:da:65:e2: 94:29:15:14:91:37:4a:d4:0f:07:ae:cc:94:4e:96:76:4a:15: 36:d1:dc:9c:e5:32:0d:92:7e:d7:b9:e7:08:ec:42:9f:6a:5c: d0:d4:72:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNhTG+NhY52JEosDJrJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzM1ZjEzMGRmMDM4MDkyOTQ0OWU3Nzg2NzM4ZmYzMWJlYmIxZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMJ6zkkT1FQWiboPX7kHMWUg2zu1 yLW1smkqcJd49V8GndsmxM3naYqGnCo8zKRoav/9G7b/LHiNFq2oDRwnDdCncTF/ 9JSoGwKYG1NnJ2rKnlk7zQlPZwonyWKCgUQLEeq488+m8Di39F456/eG2ewgWL9o DbErWB7jc7UVLcs9sNUFgSbF8Rd4a37Ir8b5Ugncws4ix0hw+Wxv/EXphWQEkcH8 16szQT+is70osACFJq1gPZKhTOuYXPQPSy+9BYaT4uMq1YJHuXbTwKN0lkzygN0L JtWyfgPvJxtAInhvIQu8POQ+Enr9vl2bqMSxyZusiHxFQfHX1qAEeYTeeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMc18TDfA4CSlEnneGc4/zG+ux/lMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEveHpYeE1OOERnSktVU2VkNFp6al9NYjY3SC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNHwMA0G CSqGSIb3DQEBCwUAA4IBAQAcb/8LtAFXZnOyqTla/ROmU49EbPOCiEkiCqymjr2X vXgRNiagA9qCXgD4dTUOv6o/PJWe8GY+MObNz/XCb9u3CrOQlbA3OW9QZ0vA+jtW rGfVBCM/keWuzNQI9sQq+nuQ7lHf2fIwtTF0vj0lK24300XilMrp2zFQxYjKtdp5 9WFDJTcKtHZY7l+4pzlXUrvhHehAtoQIgqx+Pz9skSADs40/zf6fr6W/+H51VWZ/ 0pdm3iRRU44A72YEa7IHmPBKVCm14rRJjDpjIcM5IKzxA7T054HaZeKUKRUUkTdK 1A8HrsyUTpZ2ShU20dyc5TINkn7XuecI7EKfalzQ1HIX -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:58 2026 by rpki-client