This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/bR6IrI6IRBWDhHioFM0omeWX7i8.roa File: bR6IrI6IRBWDhHioFM0omeWX7i8.roa (raw, json) Hash identifier: crwSUTpmdjAStqPHzp+6HwQh32ozDg2gBGMop2ftlyM= Subject key identifier: 6D:1E:88:AC:8E:88:44:15:83:84:78:A8:14:CD:28:99:E5:97:EE:2F Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F711643D37B4678BFB6FD2C7A3B6 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/bR6IrI6IRBWDhHioFM0omeWX7i8.roa Signing time: Fri 02 Jan 2026 14:19:33 +0000 ROA not before: Fri 02 Jan 2026 14:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51178 IP address blocks: 93.88.172.0/22 maxlen: 22 93.88.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f7:11:64:3d:37:b4:67:8b:fb:6f:d2:c7:a3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1e88ac8e884415838478a814cd2899e597ee2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:86:3b:66:85:c5:fb:cc:09:f0:af:af:17: e3:9a:6f:ef:e4:33:bd:49:bc:36:b2:ac:91:61:4a: 48:33:4c:c3:63:f2:6c:4d:b6:3b:25:20:a4:16:03: 4c:d1:43:c9:91:7c:48:d2:fd:e7:43:3a:58:e2:f2: e1:1e:29:d9:82:7f:f4:6f:c2:e1:9b:e2:cf:cd:44: 39:f6:73:5c:e5:dc:72:52:23:c9:19:dd:c1:bd:c7: 8a:5a:00:45:0d:8a:be:40:d8:9e:c5:15:88:68:58: 9c:66:29:9b:c4:53:3b:72:34:71:b3:5b:77:f2:bb: 4c:7b:8a:88:d0:c9:c2:82:44:33:55:46:c0:fb:8b: 1c:ff:b8:6b:76:3b:3f:2c:49:d1:d5:43:16:dd:47: 31:2c:81:c5:9a:d1:ee:aa:6a:95:2d:07:9b:35:32: 15:d5:58:88:6d:de:54:e3:94:5a:43:6c:56:f3:cb: 5e:7d:5b:3e:43:2a:d9:c1:31:94:d0:43:50:13:a0: 4c:72:e2:59:63:8a:d1:db:2c:06:35:64:e0:1b:6c: 25:e2:3c:24:ad:06:b4:46:78:df:ee:d4:ae:ca:8c: 87:e8:82:1e:5d:fd:fd:90:0b:0a:df:54:24:64:f4: 65:7e:83:ed:47:74:7a:f2:77:db:a3:51:ec:43:0f: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:88:AC:8E:88:44:15:83:84:78:A8:14:CD:28:99:E5:97:EE:2F X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/bR6IrI6IRBWDhHioFM0omeWX7i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.172.0/22 Signature Algorithm: sha256WithRSAEncryption ce:5f:e7:3b:f8:86:ed:52:48:d4:00:26:b3:85:94:62:d1:52: 37:0a:9e:d3:a2:4b:70:78:e1:63:e0:cc:fd:68:02:0b:88:1d: 96:1e:b9:cf:ab:70:5e:01:86:98:2d:e0:eb:59:a6:8c:ad:5c: ab:99:fa:7d:9e:4c:60:fe:4e:dd:f4:f3:03:63:55:29:03:8e: 7e:b0:13:69:66:47:89:85:d0:78:89:c0:4f:0a:a5:94:61:29: 0b:4c:c7:8e:de:20:7c:31:57:d2:12:0b:06:15:fd:4e:8a:d4: 0f:af:10:90:7e:34:de:65:03:8f:55:81:70:63:b4:20:b8:6d: e1:48:b7:50:72:75:76:d3:29:d3:c2:db:9a:b4:78:f1:41:aa: c2:ef:a3:4e:be:8c:ae:34:b6:58:47:fc:a1:1b:82:fb:9b:64: 9c:7d:f8:de:4d:8c:08:07:bf:fe:14:03:21:71:4e:6c:c6:e8: 3d:60:f3:91:7c:78:31:de:dc:d3:1a:c9:7a:6c:5a:90:44:02: f6:1d:ec:3e:cb:68:4c:33:da:5d:9c:68:d1:8e:eb:55:62:16: 8e:ec:9c:09:a3:91:34:2c:61:0f:be:dc:04:56:76:f0:df:e0: c0:6d:27:8d:64:41:b4:30:17:b4:65:f6:97:67:a6:46:bf:8d: e6:da:05:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E/cRZD03tGeL+2/Sx6O2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDFlODhhYzhlODg0NDE1ODM4NDc4YTgxNGNkMjg5OWU1OTdlZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+GO2aFxfvMCfCvrxfjmm/v5DO9 Sbw2sqyRYUpIM0zDY/JsTbY7JSCkFgNM0UPJkXxI0v3nQzpY4vLhHinZgn/0b8Lh m+LPzUQ59nNc5dxyUiPJGd3BvceKWgBFDYq+QNiexRWIaFicZimbxFM7cjRxs1t3 8rtMe4qI0MnCgkQzVUbA+4sc/7hrdjs/LEnR1UMW3UcxLIHFmtHuqmqVLQebNTIV 1ViIbd5U45RaQ2xW88tefVs+QyrZwTGU0ENQE6BMcuJZY4rR2ywGNWTgG2wl4jwk rQa0Rnjf7tSuyoyH6IIeXf39kAsK31QkZPRlfoPtR3R68nfbo1HsQw97QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0eiKyOiEQVg4R4qBTNKJnll+4vMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvYlI2SXJJNklSQldEaEhpb0ZNMG9tZVdYN2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXVisMA0G CSqGSIb3DQEBCwUAA4IBAQDOX+c7+IbtUkjUACazhZRi0VI3Cp7ToktweOFj4Mz9 aAILiB2WHrnPq3BeAYaYLeDrWaaMrVyrmfp9nkxg/k7d9PMDY1UpA45+sBNpZkeJ hdB4icBPCqWUYSkLTMeO3iB8MVfSEgsGFf1OitQPrxCQfjTeZQOPVYFwY7QguG3h SLdQcnV20ynTwtuatHjxQarC76NOvoyuNLZYR/yhG4L7m2ScffjeTYwIB7/+FAMh cU5sxug9YPORfHgx3tzTGsl6bFqQRAL2Hew+y2hMM9pdnGjRjutVYhaO7JwJo5E0 LGEPvtwEVnbw3+DAbSeNZEG0MBe0ZfaXZ6ZGv43m2gWx -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:31 2026 by rpki-client