This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A1KsXVbocIspaaEnnSBA9Wl3ydw.roa File: A1KsXVbocIspaaEnnSBA9Wl3ydw.roa (raw, json) Hash identifier: 5Ts45I88lE5OCHjGflnFmutzwm+YDR/RRBsgIV/Dp9s= Subject key identifier: 03:52:AC:5D:56:E8:70:8B:29:69:A1:27:9D:20:40:F5:69:77:C9:DC Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C699CCBD0A609C05195808C751E33E Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A1KsXVbocIspaaEnnSBA9Wl3ydw.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209281 IP address blocks: 88.148.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:99:cc:bd:0a:60:9c:05:19:58:08:c7:51:e3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0352ac5d56e8708b2969a1279d2040f56977c9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:55:c2:4f:e7:fc:94:da:12:51:d9:7a:49: 72:bc:36:d1:b6:57:7f:47:dc:9c:f4:d3:4e:3e:a4: fb:fb:69:1e:b5:9d:89:18:b0:4e:6b:38:e3:90:66: dc:82:3d:ef:8f:4e:8b:a2:8b:51:8b:f0:4f:ad:2a: da:a5:e5:22:6a:d3:77:98:ed:28:b8:af:0b:ea:c0: f3:5b:9e:ce:0a:67:a5:d9:b5:70:63:ec:25:51:ec: 1f:c7:97:cc:bb:41:85:19:37:a1:6a:74:60:7b:85: 0f:4e:79:51:c7:85:2e:27:1d:fc:02:cd:f4:17:39: 5b:06:6d:6b:ca:92:cf:82:73:b7:66:7c:79:ff:4a: 21:d9:9c:28:e7:5c:1d:fa:6d:14:3d:4e:b1:87:39: 40:f1:9a:71:e9:d0:16:1f:2d:e8:17:3f:c1:97:df: 87:a9:36:f1:dc:59:7d:89:57:db:95:b1:44:6c:ba: f8:92:b0:1b:eb:8a:4f:e8:ea:80:34:6e:b0:a4:a8: 43:27:99:d4:9b:e6:e5:53:9c:b2:20:e7:d4:f3:81: da:6a:54:6e:55:01:32:c7:2d:eb:c6:e6:55:b6:2f: 01:57:a0:8c:0a:33:ac:f1:2f:c9:b2:0a:21:01:05: a1:92:5c:20:58:79:33:41:21:e2:83:cf:8e:c1:0b: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:52:AC:5D:56:E8:70:8B:29:69:A1:27:9D:20:40:F5:69:77:C9:DC X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/A1KsXVbocIspaaEnnSBA9Wl3ydw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.49.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:b7:ba:18:6b:9b:16:13:aa:cd:77:b8:44:db:8a:a7:7c:1a: ae:57:ef:3d:99:47:21:e2:da:d7:ab:fe:4f:6a:d3:c5:89:59: 37:ee:66:58:c1:dd:c5:30:b8:79:c1:8d:c3:ad:62:df:54:bf: ce:3c:71:bb:f2:50:96:56:ba:ca:59:b1:47:43:b6:7e:aa:89: 6d:0c:71:90:fb:df:ed:04:72:7d:f3:61:89:37:c6:fa:81:25: 57:fa:0f:e7:87:a5:ee:54:f2:a6:b7:db:d5:bd:52:97:94:2b: 77:55:90:dc:b9:ed:1a:4b:e5:66:6c:4f:8d:69:a4:d9:c6:ec: ce:24:0c:d3:38:ec:5a:a8:57:fc:1f:2b:68:28:a6:1c:c5:80: 01:59:e3:90:75:6e:dd:78:68:31:e9:2f:0b:7d:94:7b:7f:e1: 8e:78:3e:6d:b1:38:01:53:5e:45:40:2f:9c:4b:e9:c5:cf:65: 70:ca:a9:2b:40:08:ec:0c:cc:19:56:6b:18:4c:f9:d1:90:ea: 5a:9c:85:24:72:5b:e4:6b:67:36:0f:e4:89:0b:a2:23:76:95: 7b:67:2c:8d:ae:29:0b:b1:4a:cb:cb:02:cd:7c:e9:6d:24:b0: d5:d0:d6:02:b1:3a:d3:12:0a:92:34:10:a5:75:1a:5d:27:64: ec:6d:0a:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpnMvQpgnAUZWAjHUeM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzUyYWM1ZDU2ZTg3MDhiMjk2OWExMjc5ZDIwNDBmNTY5NzdjOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFVVwk/n/JTaElHZeklyvDbRtld/ R9yc9NNOPqT7+2ketZ2JGLBOazjjkGbcgj3vj06LootRi/BPrSrapeUiatN3mO0o uK8L6sDzW57OCmel2bVwY+wlUewfx5fMu0GFGTehanRge4UPTnlRx4UuJx38As30 FzlbBm1rypLPgnO3Znx5/0oh2Zwo51wd+m0UPU6xhzlA8Zpx6dAWHy3oFz/Bl9+H qTbx3Fl9iVfblbFEbLr4krAb64pP6OqANG6wpKhDJ5nUm+blU5yyIOfU84HaalRu VQEyxy3rxuZVti8BV6CMCjOs8S/JsgohAQWhklwgWHkzQSHig8+OwQvMawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANSrF1W6HCLKWmhJ50gQPVpd8ncMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvQTFLc1hWYm9jSXNwYWFFbm5TQkE5V2wzeWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJQxMA0G CSqGSIb3DQEBCwUAA4IBAQBKt7oYa5sWE6rNd7hE24qnfBquV+89mUch4trXq/5P atPFiVk37mZYwd3FMLh5wY3DrWLfVL/OPHG78lCWVrrKWbFHQ7Z+qoltDHGQ+9/t BHJ982GJN8b6gSVX+g/nh6XuVPKmt9vVvVKXlCt3VZDcue0aS+VmbE+NaaTZxuzO JAzTOOxaqFf8HytoKKYcxYABWeOQdW7deGgx6S8LfZR7f+GOeD5tsTgBU15FQC+c S+nFz2VwyqkrQAjsDMwZVmsYTPnRkOpanIUkclvka2c2D+SJC6IjdpV7ZyyNrikL sUrLywLNfOltJLDV0NYCsTrTEgqSNBCldRpdJ2TsbQqZ -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:39 2026 by rpki-client