This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa File: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (raw, json) Hash identifier: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU= Subject key identifier: D0:A1:51:41:00:7D:2D:CD:17:B9:62:97:BC:0D:1D:9C:8C:B6:9E:38 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CA5201B59B5FFB1B9CC605548781 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64160 IP address blocks: 88.151.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ca:52:01:b5:9b:5f:fb:1b:9c:c6:05:54:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a15141007d2dcd17b96297bc0d1d9c8cb69e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:5a:87:fc:7f:d1:94:88:89:3c:ce:fd:28: 8b:a6:84:e4:36:24:67:d2:c7:0c:34:87:05:cf:f2: 72:81:9c:7d:6b:92:7e:39:77:f2:a6:8f:cb:9a:82: 88:47:06:1c:40:53:b0:f5:16:eb:1a:a4:8e:3b:34: 52:78:9c:b2:c5:13:1c:54:ed:25:a6:76:22:f1:23: a3:cb:78:32:8a:63:71:eb:71:e5:e3:0a:d1:d5:8b: e5:d5:d0:82:98:6c:4e:a1:b7:66:f3:37:68:48:b1: 3e:bf:09:ed:63:3d:dd:5a:ee:63:d0:43:a3:11:04: bc:d0:56:40:06:7b:1d:cd:d0:53:45:59:d3:e4:5d: ef:84:82:fb:81:1a:4f:1d:ad:d9:59:f6:ac:76:fe: e8:54:1e:a3:78:b9:24:19:2a:d4:f6:f6:eb:d7:02: 8d:a4:56:09:b2:79:03:77:f3:54:55:e2:c2:d8:7b: 86:0f:bf:d1:4b:94:6b:05:09:75:d3:74:c0:48:62: da:e6:63:2c:76:79:2f:a9:62:86:44:99:78:7d:87: 7a:a8:1a:3f:4b:61:c0:88:0d:47:45:e0:96:cb:e1: 57:2f:a9:f3:3f:73:b9:48:d2:40:52:ef:bd:25:34: dd:71:65:8f:e4:cf:34:8b:40:13:a4:0d:e3:4b:3e: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A1:51:41:00:7D:2D:CD:17:B9:62:97:BC:0D:1D:9C:8C:B6:9E:38 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.198.0/24 Signature Algorithm: sha256WithRSAEncryption 82:4d:7e:20:02:a1:e6:71:bf:d3:54:50:a4:5d:76:9b:9d:4d: 2a:92:cb:c3:50:d2:52:f7:02:cb:39:10:5e:e7:40:f0:14:82: ee:f1:fd:c3:eb:20:1f:b2:4a:90:af:22:23:91:6e:dc:21:8f: 77:30:18:57:99:34:b5:f1:4a:db:cf:ee:8e:02:e8:f1:6c:4e: 9f:e3:1d:9a:ed:f2:4f:d3:26:01:2d:71:03:e2:6b:e3:5b:c2: 84:fa:61:3f:4c:75:19:1a:36:06:68:39:f9:55:49:94:16:65: f4:49:08:c1:bf:20:c9:37:e0:07:40:f1:8b:82:ea:fe:40:ce: cc:44:c0:5b:99:09:bd:28:c8:24:6b:f7:3a:a7:37:33:1e:82: 65:90:e7:07:03:f7:bc:9c:58:c7:29:3f:70:62:58:81:2a:10: c6:26:c5:9f:01:b3:8d:4d:57:7c:54:c8:fd:5d:d2:28:0a:04: 98:c1:85:17:ca:7d:55:f0:1c:d0:49:d0:1a:34:d0:31:d3:d2: 36:04:4f:d0:b9:88:e4:0d:18:7a:13:b6:ac:49:69:d0:aa:00: 52:9c:e5:b1:39:76:96:98:ef:35:f3:5a:5d:dc:6b:24:39:c7: 7d:5a:c6:c3:1d:85:0b:92:8a:78:58:f7:2b:55:52:79:b6:5b: d3:93:5e:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xspSAbWbX/sbnMYFVIeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGExNTE0MTAwN2QyZGNkMTdiOTYyOTdiYzBkMWQ5YzhjYjY5ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAZah/x/0ZSIiTzO/SiLpoTkNiRn 0scMNIcFz/JygZx9a5J+OXfypo/LmoKIRwYcQFOw9RbrGqSOOzRSeJyyxRMcVO0l pnYi8SOjy3gyimNx63Hl4wrR1Yvl1dCCmGxOobdm8zdoSLE+vwntYz3dWu5j0EOj EQS80FZABnsdzdBTRVnT5F3vhIL7gRpPHa3ZWfasdv7oVB6jeLkkGSrU9vbr1wKN pFYJsnkDd/NUVeLC2HuGD7/RS5RrBQl103TASGLa5mMsdnkvqWKGRJl4fYd6qBo/ S2HAiA1HReCWy+FXL6nzP3O5SNJAUu+9JTTdcWWP5M80i0ATpA3jSz5DnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNChUUEAfS3NF7lil7wNHZyMtp44MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvMEtGUlFRQjlMYzBYdVdLWHZBMGRuSXkybmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfGMA0G CSqGSIb3DQEBCwUAA4IBAQCCTX4gAqHmcb/TVFCkXXabnU0qksvDUNJS9wLLORBe 50DwFILu8f3D6yAfskqQryIjkW7cIY93MBhXmTS18Urbz+6OAujxbE6f4x2a7fJP 0yYBLXED4mvjW8KE+mE/THUZGjYGaDn5VUmUFmX0SQjBvyDJN+AHQPGLgur+QM7M RMBbmQm9KMgka/c6pzczHoJlkOcHA/e8nFjHKT9wYliBKhDGJsWfAbONTVd8VMj9 XdIoCgSYwYUXyn1V8BzQSdAaNNAx09I2BE/QuYjkDRh6E7asSWnQqgBSnOWxOXaW mO8181pd3GskOcd9WsbDHYULkop4WPcrVVJ5tlvTk15V -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:51 2026 by rpki-client