This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/jDxgulxOIeDDVgqo4I9r2tSN-u0.roa File: jDxgulxOIeDDVgqo4I9r2tSN-u0.roa (raw, json) Hash identifier: lWrJ9T+1lvLsb7F3BBzfRX4gmfKKEOCs3tZPfCMamzs= Subject key identifier: 8C:3C:60:BA:5C:4E:21:E0:C3:56:0A:A8:E0:8F:6B:DA:D4:8D:FA:ED Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e Certificate serial: 019B78A2C20426838763449A2EB8F8275A8C Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/jDxgulxOIeDDVgqo4I9r2tSN-u0.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12313 IP address blocks: 88.130.236.0/22 maxlen: 22 88.130.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c2:04:26:83:87:63:44:9a:2e:b8:f8:27:5a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c3c60ba5c4e21e0c3560aa8e08f6bdad48dfaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:18:a8:03:25:d4:6f:d9:eb:14:c1:d1:29: 25:4e:6c:dd:31:01:98:e9:74:9b:00:4b:66:01:26: fc:65:e6:ae:36:92:89:cc:5e:a8:77:02:29:c3:33: 4f:46:32:2b:ce:dd:4f:fc:bb:fe:0a:8f:45:25:79: 8f:b7:7f:88:a1:1d:ea:dc:4b:57:9f:a3:a7:b6:67: 00:bd:ef:f3:06:c7:21:92:29:43:ce:f5:23:04:bb: b2:68:10:da:75:eb:66:b7:0f:5d:e0:b1:e2:8b:69: 1b:21:9d:22:22:7e:e6:3a:4e:87:0f:5a:57:df:33: c7:25:5a:21:73:f8:3b:81:81:0d:c8:90:53:1e:54: 4b:8b:ef:04:9e:d9:46:c5:b6:8e:ac:64:e3:41:50: 74:95:bd:75:ef:cc:69:cf:e8:2c:61:5b:e3:68:2a: a4:88:8b:22:20:54:d9:0a:e4:e1:72:fe:9b:47:9b: a9:e2:a0:1e:18:6b:c4:ad:b1:f0:45:28:5b:30:f2: bc:43:13:c5:cf:c0:45:c6:f7:80:17:89:c8:5f:ff: 70:df:3f:52:11:df:fd:b5:f8:ae:0f:f2:98:04:2a: 1d:81:17:d0:37:de:b5:20:fd:51:92:0c:b4:a8:9c: 2e:8f:4b:ec:0a:87:14:92:fb:f8:7e:cc:f5:db:30: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:60:BA:5C:4E:21:E0:C3:56:0A:A8:E0:8F:6B:DA:D4:8D:FA:ED X509v3 Authority Key Identifier: keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/jDxgulxOIeDDVgqo4I9r2tSN-u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.130.236.0-88.130.255.255 Signature Algorithm: sha256WithRSAEncryption a8:32:cc:a1:23:2d:7f:6f:28:77:a0:4b:30:01:58:96:49:3d: 0a:83:5c:8f:f6:87:4c:0f:cd:f6:f3:fc:fa:e3:c4:0f:24:48: 8e:54:19:7b:b8:b6:5c:98:d6:e1:a0:33:65:a6:9a:1e:33:6c: 3b:af:16:8c:f1:fc:fb:64:fb:b3:8c:26:95:cd:9c:f0:bc:bc: 93:4d:3a:06:8e:b1:e8:ac:af:72:cb:75:e2:2b:5c:5f:89:d1: 4d:b7:8d:e1:74:79:1f:12:88:51:59:d1:86:a7:5b:7b:22:1a: 84:f4:21:59:79:4e:8d:cf:74:d6:64:ad:a0:50:06:50:33:37: 94:1a:df:16:f4:e4:cd:ae:6f:d4:39:d5:62:40:c9:0b:80:a4: 10:b2:c7:10:a2:c1:92:1e:d4:8a:ba:e2:19:08:96:3a:8b:84: bd:72:7d:73:10:dc:f7:c7:47:94:4c:7d:a4:2e:19:03:46:1f: 59:6c:0a:3c:d7:72:7d:73:24:02:f5:8b:b2:a3:5a:30:be:46: 6e:83:48:02:7a:c4:64:90:7a:6c:de:16:fb:cb:eb:69:eb:06: 19:f7:52:1a:2a:90:0c:2f:98:c8:c0:f4:e7:65:c6:c1:dc:81: 8a:f5:c5:5f:3f:87:41:a1:39:86:4a:26:93:2d:f9:c1:00:d6: c5:25:ff:be -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt4osIEJoOHY0SaLrj4J1qMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0 NjQzMmUwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzNjNjBiYTVjNGUyMWUwYzM1NjBhYThlMDhmNmJkYWQ0OGRmYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs50YqAMl1G/Z6xTB0SklTmzdMQGY 6XSbAEtmASb8ZeauNpKJzF6odwIpwzNPRjIrzt1P/Lv+Co9FJXmPt3+IoR3q3EtX n6OntmcAve/zBschkilDzvUjBLuyaBDadetmtw9d4LHii2kbIZ0iIn7mOk6HD1pX 3zPHJVohc/g7gYENyJBTHlRLi+8EntlGxbaOrGTjQVB0lb1178xpz+gsYVvjaCqk iIsiIFTZCuThcv6bR5up4qAeGGvErbHwRShbMPK8QxPFz8BFxveAF4nIX/9w3z9S Ed/9tfiuD/KYBCodgRfQN961IP1Rkgy0qJwuj0vsCocUkvv4fsz12zArfQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFIw8YLpcTiHgw1YKqOCPa9rUjfrtMB8GA1UdIwQY MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt NjQzYTQxNTlhYjQ2LzEvakR4Z3VseE9JZUREVmdxbzRJOXIydFNOLXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2 LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAJYguwD AwBYgjANBgkqhkiG9w0BAQsFAAOCAQEAqDLMoSMtf28od6BLMAFYlkk9CoNcj/aH TA/N9vP8+uPEDyRIjlQZe7i2XJjW4aAzZaaaHjNsO68WjPH8+2T7s4wmlc2c8Ly8 k006Bo6x6Kyvcst14itcX4nRTbeN4XR5HxKIUVnRhqdbeyIahPQhWXlOjc901mSt oFAGUDM3lBrfFvTkza5v1DnVYkDJC4CkELLHEKLBkh7UirriGQiWOouEvXJ9cxDc 98dHlEx9pC4ZA0YfWWwKPNdyfXMkAvWLsqNaML5GboNIAnrEZJB6bN4W+8vraesG GfdSGiqQDC+YyMD052XGwdyBivXFXz+HQaE5hkomky35wQDWxSX/vg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:58 2026 by rpki-client