This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1aapPemEWb2KKqhqLo2UorL8aKg.roa File: 1aapPemEWb2KKqhqLo2UorL8aKg.roa (raw, json) Hash identifier: Y03oCllnjdJA7su6yz1iY6x6gRBWgUodJXA2HQ1iJxc= Subject key identifier: D5:A6:A9:3D:E9:84:59:BD:8A:2A:A8:6A:2E:8D:94:A2:B2:FC:68:A8 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69D55554F68549D703D5355C13E9A Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1aapPemEWb2KKqhqLo2UorL8aKg.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 88.148.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:55:55:4f:68:54:9d:70:3d:53:55:c1:3e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5a6a93de98459bd8a2aa86a2e8d94a2b2fc68a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:5f:cb:16:ee:a2:1e:54:93:38:94:59:0f: 83:0b:84:e6:38:b2:2d:ee:13:b5:e0:4b:68:b5:96: dd:a0:1a:ed:34:c0:64:37:aa:17:9f:61:cc:81:63: b0:25:0c:73:cc:89:5a:2f:3e:c0:e9:50:a0:8e:eb: 86:32:cc:66:1e:68:71:1f:9e:fd:0e:3e:3b:56:95: 43:fb:c5:c1:97:66:65:44:b2:d9:06:b9:0d:0b:5f: 5c:72:18:59:de:97:67:c5:e3:0e:09:46:68:00:50: 02:65:74:e5:43:13:08:d9:33:e7:86:b3:85:c6:f7: 70:42:ed:2e:1e:48:13:5a:31:02:2e:da:7c:83:b1: ec:a9:7e:fd:b2:a0:7e:3a:0f:02:c0:4b:70:86:74: 15:3d:47:fa:32:fc:85:c1:62:d6:a0:5b:8b:1f:25: 55:d6:69:0c:d1:73:37:64:70:b0:c5:0b:ba:d2:56: 30:32:0b:0d:6d:c4:f8:af:7a:eb:ad:86:2e:b1:51: 1c:7e:c1:97:cc:39:bf:24:5b:ad:39:9d:b5:8d:b6: b8:9f:f5:ec:87:cd:b6:58:88:c4:33:89:84:92:77: fb:6f:59:d7:92:34:c6:df:24:eb:95:e3:87:32:c9: 8e:97:b7:84:2b:f6:bc:00:d5:64:34:bc:aa:87:2c: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:A9:3D:E9:84:59:BD:8A:2A:A8:6A:2E:8D:94:A2:B2:FC:68:A8 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1aapPemEWb2KKqhqLo2UorL8aKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.34.0/24 Signature Algorithm: sha256WithRSAEncryption 62:8d:cf:13:bb:d8:bc:96:b6:e7:9c:57:8f:46:be:93:f5:d8: 34:ad:e2:c5:34:b8:99:47:db:f0:de:69:b2:ed:69:73:1a:a6: f1:f9:31:db:6d:68:10:ed:8e:c9:70:e4:78:e7:ce:6f:83:25: 87:c6:6f:6e:db:d5:a1:3a:c5:07:7d:00:eb:fe:28:f7:f4:e2: db:74:aa:d6:8a:63:45:02:63:0c:0a:07:90:22:40:3a:8d:21: 84:23:0f:ac:38:42:98:6b:c0:3e:3b:79:69:ca:70:46:89:f9: d7:f7:70:6b:1e:05:1a:fb:80:ac:be:7f:1d:11:61:34:9d:b6: 64:9d:f1:24:c3:6d:27:06:5b:21:9a:33:c8:46:73:73:1f:03: a7:8b:d2:99:79:18:e2:0b:bc:fd:cc:e9:77:72:1d:e9:91:eb: 51:a3:dd:b8:b6:c0:28:4e:7c:af:29:13:a6:b6:37:b4:7d:50: 6a:2d:c7:02:87:a4:b6:e2:4e:c1:7b:d0:e1:7d:0a:fe:2f:bb: 74:61:7f:d5:98:b8:9f:1e:a1:d4:0f:0c:a6:bf:62:cb:ab:08: 97:12:02:a0:43:7a:b7:ba:e2:93:04:61:e8:a9:b2:b6:6d:29: d0:4d:79:ef:67:b9:05:6c:5f:18:64:7f:95:01:af:b1:1a:1f: cc:2b:c4:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xp1VVU9oVJ1wPVNVwT6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWE2YTkzZGU5ODQ1OWJkOGEyYWE4NmEyZThkOTRhMmIyZmM2OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m1fyxbuoh5UkziUWQ+DC4TmOLIt 7hO14EtotZbdoBrtNMBkN6oXn2HMgWOwJQxzzIlaLz7A6VCgjuuGMsxmHmhxH579 Dj47VpVD+8XBl2ZlRLLZBrkNC19cchhZ3pdnxeMOCUZoAFACZXTlQxMI2TPnhrOF xvdwQu0uHkgTWjECLtp8g7HsqX79sqB+Og8CwEtwhnQVPUf6MvyFwWLWoFuLHyVV 1mkM0XM3ZHCwxQu60lYwMgsNbcT4r3rrrYYusVEcfsGXzDm/JFutOZ21jba4n/Xs h822WIjEM4mEknf7b1nXkjTG3yTrleOHMsmOl7eEK/a8ANVkNLyqhyyKsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNWmqT3phFm9iiqoai6NlKKy/GioMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvMWFhcFBlbUVXYjJLS3FocUxvMlVvckw4YUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJQiMA0G CSqGSIb3DQEBCwUAA4IBAQBijc8Tu9i8lrbnnFePRr6T9dg0reLFNLiZR9vw3mmy 7WlzGqbx+THbbWgQ7Y7JcOR4585vgyWHxm9u29WhOsUHfQDr/ij39OLbdKrWimNF AmMMCgeQIkA6jSGEIw+sOEKYa8A+O3lpynBGifnX93BrHgUa+4Csvn8dEWE0nbZk nfEkw20nBlshmjPIRnNzHwOni9KZeRjiC7z9zOl3ch3pketRo924tsAoTnyvKROm tje0fVBqLccCh6S24k7Be9DhfQr+L7t0YX/VmLifHqHUDwymv2LLqwiXEgKgQ3q3 uuKTBGHoqbK2bSnQTXnvZ7kFbF8YZH+VAa+xGh/MK8Ta -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:34 2026 by rpki-client