This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M23E5jFvo9QE4PZ22sZCcc77gm0.roa File: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (raw, json) Hash identifier: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI= Subject key identifier: 33:6D:C4:E6:31:6F:A3:D4:04:E0:F6:76:DA:C6:42:71:CE:FB:82:6D Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CC9D2F25032BD7049542B4FE20F1 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M23E5jFvo9QE4PZ22sZCcc77gm0.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208226 IP address blocks: 88.151.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cc:9d:2f:25:03:2b:d7:04:95:42:b4:fe:20:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=336dc4e6316fa3d404e0f676dac64271cefb826d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:4e:15:84:9b:17:0d:37:3b:e7:e5:e6:79: b3:8e:a9:77:89:1d:f2:ae:86:cd:fd:e8:31:d5:3f: be:7e:47:98:28:9a:fd:95:90:ae:ee:c9:c3:b8:87: 7d:ba:0a:2d:25:95:7c:d2:85:fb:f0:ad:02:e1:dc: ee:bd:03:1f:b7:9a:05:c2:46:78:37:88:5b:88:b3: 7a:5e:ab:54:03:ba:7c:b0:d3:e5:7f:5b:b7:b4:95: 23:cc:02:31:b4:9f:91:2f:5c:a9:c8:ce:41:3b:a3: 4c:fd:3c:90:d9:2b:8a:68:13:83:b5:a8:b7:9c:84: 1b:a1:5e:34:4e:c9:6b:40:80:81:18:a6:3b:49:94: 0f:dc:43:b5:4f:4c:cd:d9:96:da:ce:73:fd:46:53: 69:8b:18:d9:5a:ab:8c:ac:26:ae:1b:21:ea:c2:b9: c2:b5:cd:4d:c1:68:3d:02:be:40:73:a3:b5:39:7b: ce:36:00:59:08:20:8a:ea:c3:fe:cd:cf:8b:68:b3: 71:af:81:43:74:60:d7:da:59:49:e9:0a:6f:0c:ca: 0b:91:23:65:fa:25:85:96:0a:0d:89:e4:6a:47:df: 06:f5:e7:8f:d8:3a:d2:6a:14:c2:37:99:15:d2:9b: 00:95:0c:93:fe:a1:83:df:7d:8f:4d:6d:21:ee:e4: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:C4:E6:31:6F:A3:D4:04:E0:F6:76:DA:C6:42:71:CE:FB:82:6D X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M23E5jFvo9QE4PZ22sZCcc77gm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.197.0/24 Signature Algorithm: sha256WithRSAEncryption 20:6f:c5:ee:fb:08:c5:8c:35:95:11:9d:37:f6:0c:b5:94:18: 51:ce:20:65:d4:bd:24:da:04:09:55:83:53:fc:27:d1:91:25: 93:4a:e1:41:1c:57:ec:8f:4d:f4:14:3f:8e:57:6e:e6:d1:39: af:2c:4f:f4:4e:28:93:6c:2f:7d:b7:7a:17:8d:99:a8:e9:ed: fb:d2:10:19:a0:57:17:cf:78:03:d1:8d:23:53:ed:1b:e8:f7: 0c:b1:4f:5a:ff:dd:e0:08:40:9f:80:47:df:53:35:cc:2a:45: dc:8f:a5:1a:76:51:d3:5f:1f:76:a5:a3:1c:a6:aa:0a:09:89: e4:bf:6f:21:cd:d2:1f:c6:bd:2b:5f:11:26:1a:b8:40:00:f4: 37:2b:57:14:61:f3:33:8f:fa:0d:fa:f3:93:91:f2:b1:ea:41: cb:88:fb:91:b7:5e:cd:4e:2f:e0:ea:f3:63:d1:96:0f:0d:6f: aa:c5:4c:32:1e:87:9e:47:6a:82:09:e8:45:02:55:71:ca:91: d6:34:a7:18:6c:d1:5a:d7:ec:e3:fe:39:67:2b:14:df:26:f0: 10:f9:7b:ea:e8:96:14:f2:5b:6e:38:ce:da:85:4a:7d:30:ac: e6:60:32:67:e5:8e:05:6d:11:f1:df:1f:07:3d:85:24:d1:13: a7:41:18:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsydLyUDK9cElUK0/iDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzZkYzRlNjMxNmZhM2Q0MDRlMGY2NzZkYWM2NDI3MWNlZmI4MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJxOFYSbFw03O+fl5nmzjql3iR3y robN/egx1T++fkeYKJr9lZCu7snDuId9ugotJZV80oX78K0C4dzuvQMft5oFwkZ4 N4hbiLN6XqtUA7p8sNPlf1u3tJUjzAIxtJ+RL1ypyM5BO6NM/TyQ2SuKaBODtai3 nIQboV40TslrQICBGKY7SZQP3EO1T0zN2ZbaznP9RlNpixjZWquMrCauGyHqwrnC tc1NwWg9Ar5Ac6O1OXvONgBZCCCK6sP+zc+LaLNxr4FDdGDX2llJ6QpvDMoLkSNl +iWFlgoNieRqR98G9eeP2DrSahTCN5kV0psAlQyT/qGD332PTW0h7uQ6ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNtxOYxb6PUBOD2dtrGQnHO+4JtMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvTTIzRTVqRnZvOVFFNFBaMjJzWkNjYzc3Z20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfFMA0G CSqGSIb3DQEBCwUAA4IBAQAgb8Xu+wjFjDWVEZ039gy1lBhRziBl1L0k2gQJVYNT /CfRkSWTSuFBHFfsj030FD+OV27m0TmvLE/0TiiTbC99t3oXjZmo6e370hAZoFcX z3gD0Y0jU+0b6PcMsU9a/93gCECfgEffUzXMKkXcj6UadlHTXx92paMcpqoKCYnk v28hzdIfxr0rXxEmGrhAAPQ3K1cUYfMzj/oN+vOTkfKx6kHLiPuRt17NTi/g6vNj 0ZYPDW+qxUwyHoeeR2qCCehFAlVxypHWNKcYbNFa1+zj/jlnKxTfJvAQ+Xvq6JYU 8ltuOM7ahUp9MKzmYDJn5Y4FbRHx3x8HPYUk0ROnQRif -----END CERTIFICATE-----Generated at Wed Jan 21 09:53:52 2026 by rpki-client