This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/jKKjoO8JUGIlXn-UDp4x0csWoxs.roa File: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (raw, json) Hash identifier: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0= Subject key identifier: 8C:A2:A3:A0:EF:09:50:62:25:5E:7F:94:0E:9E:31:D1:CB:16:A3:1B Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Certificate serial: 019B7758FC8ADF7976221BBA73564102FE60 Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/jKKjoO8JUGIlXn-UDp4x0csWoxs.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 185.88.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fc:8a:df:79:76:22:1b:ba:73:56:41:02:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ca2a3a0ef095062255e7f940e9e31d1cb16a31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:ca:6f:62:4b:36:63:b6:40:05:cb:ae:56: 52:09:64:f1:70:08:87:9e:ac:ab:b3:7a:78:09:fb: 2f:ff:4b:bb:0d:f1:a3:d4:be:e8:36:f0:e1:d2:69: c9:c1:b6:f7:15:1b:2e:e0:4d:0b:b3:47:40:02:07: fc:6d:2d:0c:c4:8a:a1:1f:12:14:57:86:d7:b8:c3: 65:d6:e7:06:45:68:b4:95:15:0e:c6:fc:6a:1a:26: d0:43:d4:7b:14:90:62:bb:dc:27:3c:43:1e:2d:b8: 69:df:2a:b2:15:0d:1d:34:c9:ad:87:d0:3d:7c:b9: 62:3c:6f:cf:0a:78:ce:b0:f3:bf:c3:f4:d3:90:00: 6d:9d:b7:b5:9e:28:fc:87:ad:c0:50:17:cf:ad:6b: 22:9b:6f:13:1b:67:4f:6c:85:f0:e1:96:ba:47:d2: 81:fa:b4:33:8e:52:2c:25:dc:74:be:da:5e:7c:36: fd:18:9b:06:d4:0e:bd:b1:97:99:c5:f3:f7:c5:b1: 29:05:27:71:f5:a2:3f:3e:35:73:54:48:e1:b4:8a: 04:b5:a6:7e:33:61:01:b6:55:c6:c5:c2:aa:d3:28: 98:ba:38:d3:d7:bc:cd:dc:c2:a9:9a:cc:87:16:45: bc:f2:03:0d:65:e9:a9:37:42:c1:9e:33:d9:29:09: 08:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A2:A3:A0:EF:09:50:62:25:5E:7F:94:0E:9E:31:D1:CB:16:A3:1B X509v3 Authority Key Identifier: keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/jKKjoO8JUGIlXn-UDp4x0csWoxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.68.0/22 Signature Algorithm: sha256WithRSAEncryption aa:bd:fa:b5:c2:32:92:28:c4:7c:a0:27:16:a5:b3:36:fe:26: 3f:8b:55:a8:92:dc:97:30:d0:ff:10:0e:0e:64:9e:10:1f:c4: e5:79:9a:0d:49:0e:f7:06:35:fb:f2:2e:3c:d6:8a:9d:4b:ce: d4:41:8b:df:f2:a0:aa:e1:9d:15:6e:e1:89:ba:76:b2:f5:88: 89:ea:df:a8:db:b1:a4:9d:6a:50:20:c4:05:04:3c:ea:8a:85: 26:36:da:1a:79:cf:c5:4d:f8:e6:f8:91:68:65:c6:bf:a1:90: 34:ba:de:10:53:7c:8e:ad:0c:cd:d1:e7:95:d0:fd:71:31:91: 9b:8c:ab:61:f5:0e:67:d2:a1:7a:65:92:65:b7:3c:1b:75:04: 62:e0:64:03:2e:23:b7:5c:50:de:93:5c:3b:c1:ab:1a:1a:21: 43:26:96:f9:a6:17:af:06:42:0c:62:0f:ee:75:fd:59:ab:6b: e0:cb:7b:b3:df:2a:e8:38:b1:ba:5f:fc:55:be:f2:ba:0f:75: bd:66:7c:5d:2e:45:58:44:e1:7a:71:13:b0:f3:7a:a4:d9:4a: b1:e7:51:6f:24:e5:ce:fe:36:e6:e7:f9:e3:3e:65:7c:55:b0: 1b:d5:8e:83:1b:2e:dd:ef:5b:72:bb:fe:72:c0:cb:85:21:e6: bf:fe:0d:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPyK33l2Ihu6c1ZBAv5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm YjJlNWUwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2EyYTNhMGVmMDk1MDYyMjU1ZTdmOTQwZTllMzFkMWNiMTZhMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA377Kb2JLNmO2QAXLrlZSCWTxcAiH nqyrs3p4Cfsv/0u7DfGj1L7oNvDh0mnJwbb3FRsu4E0Ls0dAAgf8bS0MxIqhHxIU V4bXuMNl1ucGRWi0lRUOxvxqGibQQ9R7FJBiu9wnPEMeLbhp3yqyFQ0dNMmth9A9 fLliPG/PCnjOsPO/w/TTkABtnbe1nij8h63AUBfPrWsim28TG2dPbIXw4Za6R9KB +rQzjlIsJdx0vtpefDb9GJsG1A69sZeZxfP3xbEpBSdx9aI/PjVzVEjhtIoEtaZ+ M2EBtlXGxcKq0yiYujjT17zN3MKpmsyHFkW88gMNZempN0LBnjPZKQkI4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyio6DvCVBiJV5/lA6eMdHLFqMbMB8GA1UdIwQY MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct MzNhYmM1M2MwZTc5LzEvaktLam9POEpVR0lsWG4tVURwNHgwY3NXb3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5 LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVhEMA0G CSqGSIb3DQEBCwUAA4IBAQCqvfq1wjKSKMR8oCcWpbM2/iY/i1WoktyXMND/EA4O ZJ4QH8TleZoNSQ73BjX78i481oqdS87UQYvf8qCq4Z0VbuGJunay9YiJ6t+o27Gk nWpQIMQFBDzqioUmNtoaec/FTfjm+JFoZca/oZA0ut4QU3yOrQzN0eeV0P1xMZGb jKth9Q5n0qF6ZZJltzwbdQRi4GQDLiO3XFDek1w7wasaGiFDJpb5phevBkIMYg/u df1Zq2vgy3uz3yroOLG6X/xVvvK6D3W9ZnxdLkVYROF6cROw83qk2Uqx51FvJOXO /jbm5/njPmV8VbAb1Y6DGy7d71tyu/5ywMuFIea//g3X -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:12 2026 by rpki-client