This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/2g3YqagtveoXivlimUOijGK4Sw4.roa File: 2g3YqagtveoXivlimUOijGK4Sw4.roa (raw, json) Hash identifier: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw= Subject key identifier: DA:0D:D8:A9:A8:2D:BD:EA:17:8A:F9:62:99:43:A2:8C:62:B8:4B:0E Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019B7C8035672439B916A4850351BEF06B6A Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/2g3YqagtveoXivlimUOijGK4Sw4.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 93.88.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:67:24:39:b9:16:a4:85:03:51:be:f0:6b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0dd8a9a82dbdea178af9629943a28c62b84b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:f3:f5:87:77:9a:85:bf:c7:08:3b:c8:20: f0:e7:31:01:42:c3:34:3d:ab:42:60:44:29:5b:c9: c9:09:2a:92:b3:18:19:9c:a9:1c:be:8d:04:19:f8: a9:66:ee:58:cf:62:2f:6c:c7:bf:3e:4b:62:cf:71: cf:62:2d:48:54:b9:76:fc:6f:30:11:62:53:06:6e: e9:27:f4:fa:89:33:a7:03:32:f5:92:e9:89:18:2a: bb:ca:3b:4a:d7:d8:38:b2:60:1c:1e:f8:60:4c:1d: 9d:63:19:92:eb:56:bf:77:dd:4e:55:2c:bf:de:30: a0:d3:be:26:d4:cb:bd:f6:c5:9f:c6:f1:e7:c7:d3: dd:13:f1:5f:5d:2d:a5:a5:8a:ea:ca:99:ae:4c:df: a0:b9:e7:8b:b4:48:84:43:37:3d:2f:b6:66:2e:97: ee:75:a7:7b:81:29:8a:ca:a8:9a:04:85:22:f7:e2: 04:4d:28:b8:5f:47:4e:99:e5:17:55:ea:7b:e3:2a: 0a:59:4c:f4:05:11:d5:b2:7b:de:63:98:ad:5e:99: 70:4b:0a:58:88:36:2e:c3:33:a2:0d:d0:db:fd:08: 0f:34:c4:4b:49:f7:0f:73:a5:37:87:df:1b:6e:31: db:40:25:8f:5c:16:16:cf:8b:3e:ca:78:6a:35:e1: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0D:D8:A9:A8:2D:BD:EA:17:8A:F9:62:99:43:A2:8C:62:B8:4B:0E X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/2g3YqagtveoXivlimUOijGK4Sw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.155.0/24 Signature Algorithm: sha256WithRSAEncryption 02:2b:80:87:85:db:f5:dd:ea:dc:83:b3:74:3b:1e:49:cb:6f: b1:d1:69:0a:28:c0:40:8a:b6:41:b6:fe:8c:68:0b:47:7a:6c: 8d:2d:3f:10:ea:29:85:73:9a:ee:92:52:d1:9d:75:0b:ac:66: 39:09:79:f2:5e:f0:2e:15:2a:ea:72:a6:53:70:51:00:77:35: 53:62:f6:4f:57:24:48:58:5e:90:f1:1b:43:c3:79:71:7e:eb: c8:0e:0d:1a:0e:c5:8d:ef:65:4f:3c:52:47:5e:1d:8b:07:92: 43:f1:77:83:32:22:76:11:1b:b9:2a:be:0c:a0:3e:02:d5:19: c8:62:cd:04:4a:64:3b:ee:38:bc:0e:34:c1:56:2d:86:a6:57: 56:fc:2e:4b:6b:a3:28:ac:d6:b2:ff:d8:33:de:17:95:f0:fd: cc:c5:49:d9:84:33:e8:7d:45:7e:47:9e:3c:64:d4:53:63:00: ae:b5:25:91:b0:77:1e:20:dc:de:a4:0e:bc:d6:8f:7a:c7:35: 6c:9b:42:1f:85:23:98:44:a6:90:b3:1a:43:84:62:b1:5f:ba: 67:4a:c8:8f:6f:f9:31:9c:9a:26:77:7f:39:4f:2e:3c:ce:d3: 19:97:16:f2:2b:55:2c:50:64:43:7e:3f:8f:d3:42:14:cb:50: 28:e3:f9:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDVnJDm5FqSFA1G+8GtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBkZDhhOWE4MmRiZGVhMTc4YWY5NjI5OTQzYTI4YzYyYjg0YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZjz9Yd3moW/xwg7yCDw5zEBQsM0 PatCYEQpW8nJCSqSsxgZnKkcvo0EGfipZu5Yz2IvbMe/Pktiz3HPYi1IVLl2/G8w EWJTBm7pJ/T6iTOnAzL1kumJGCq7yjtK19g4smAcHvhgTB2dYxmS61a/d91OVSy/ 3jCg074m1Mu99sWfxvHnx9PdE/FfXS2lpYrqypmuTN+gueeLtEiEQzc9L7ZmLpfu dad7gSmKyqiaBIUi9+IETSi4X0dOmeUXVep74yoKWUz0BRHVsnveY5itXplwSwpY iDYuwzOiDdDb/QgPNMRLSfcPc6U3h98bbjHbQCWPXBYWz4s+ynhqNeGeqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNoN2KmoLb3qF4r5YplDooxiuEsOMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvMmczWXFhZ3R2ZW9YaXZsaW1VT2lqR0s0U3c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVibMA0G CSqGSIb3DQEBCwUAA4IBAQACK4CHhdv13ercg7N0Ox5Jy2+x0WkKKMBAirZBtv6M aAtHemyNLT8Q6imFc5ruklLRnXULrGY5CXnyXvAuFSrqcqZTcFEAdzVTYvZPVyRI WF6Q8RtDw3lxfuvIDg0aDsWN72VPPFJHXh2LB5JD8XeDMiJ2ERu5Kr4MoD4C1RnI Ys0ESmQ77ji8DjTBVi2GpldW/C5La6MorNay/9gz3heV8P3MxUnZhDPofUV+R548 ZNRTYwCutSWRsHceINzepA681o96xzVsm0IfhSOYRKaQsxpDhGKxX7pnSsiPb/kx nJomd385Ty48ztMZlxbyK1UsUGRDfj+P00IUy1Ao4/nw -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:11 2026 by rpki-client