This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JIj4PudCyUS_1zPUTqaD8QCkhU4.roa File: JIj4PudCyUS_1zPUTqaD8QCkhU4.roa (raw, json) Hash identifier: eOZUCvaEiu5+M5NqWIekiWw43SNObwkEs9ddDSwDyEc= Subject key identifier: 24:88:F8:3E:E7:42:C9:44:BF:D7:33:D4:4E:A6:83:F1:00:A4:85:4E Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C694D1FC53A2E3B9E64EAC170FC1C9 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JIj4PudCyUS_1zPUTqaD8QCkhU4.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203068 IP address blocks: 88.148.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:d1:fc:53:a2:e3:b9:e6:4e:ac:17:0f:c1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2488f83ee742c944bfd733d44ea683f100a4854e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:33:4f:a1:87:f9:db:b4:09:8f:5c:53:a2: 3e:06:76:9c:d1:8c:1b:df:6b:20:b3:83:c4:fb:38: 99:24:68:4c:8a:35:21:16:3b:18:86:df:52:81:b9: 4c:f1:35:dd:49:53:d8:82:a5:5e:11:a6:9f:0f:89: 29:4a:81:46:7b:67:7d:12:8d:55:6c:18:3c:38:bc: 5e:a2:12:da:21:4f:f2:f0:fb:da:67:56:88:7c:01: 5d:28:4e:f4:f9:fb:59:a0:ef:da:63:a6:87:da:61: 17:85:cf:11:78:3f:76:51:f7:18:33:17:b1:43:93: b7:53:49:f3:56:2a:62:7e:af:a3:3e:f7:fe:9a:cd: fb:a6:20:74:fe:51:e6:94:02:5e:51:1a:27:29:64: 3e:93:a1:35:0f:ec:f2:44:e2:09:fc:e3:53:9f:84: e4:48:6c:56:ce:e9:4c:be:b8:ed:84:ce:a3:7a:29: 75:c9:dc:98:1c:c1:c0:d1:52:2c:13:da:c2:1a:90: 47:14:4a:f8:77:53:5f:c9:3a:f5:84:8a:a4:57:1a: 82:28:42:4c:ba:ba:42:03:a9:97:d4:0e:62:c3:34: 4b:15:d1:25:6a:73:41:8e:3d:24:9b:36:a2:f5:01: 38:8a:ca:c3:11:da:f7:e1:3b:cb:e3:39:5c:1f:1f: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:F8:3E:E7:42:C9:44:BF:D7:33:D4:4E:A6:83:F1:00:A4:85:4E X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/JIj4PudCyUS_1zPUTqaD8QCkhU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.88.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ca:ee:91:43:cd:6a:9a:27:7d:63:95:bd:1d:f2:22:2c:f9: 20:2e:90:64:8c:18:67:8e:33:10:c2:1e:cd:40:a8:67:34:3b: 37:b4:0f:48:16:a0:fd:03:08:be:d7:fd:c8:c6:01:6d:49:e5: 2e:f2:03:2b:a5:4f:c9:ef:bd:cb:3b:36:81:1b:8f:d1:10:4c: 48:d3:ae:c7:5d:33:85:23:a6:60:e9:7f:c2:9d:dc:bd:88:aa: 8b:d6:ab:1f:fb:7b:71:a0:04:67:35:50:16:7d:21:86:eb:10: 04:ca:31:30:ca:46:d1:4f:fd:43:2f:c0:f8:c2:a6:06:74:97: 78:97:1d:ab:59:26:d0:32:a7:0f:0f:70:4e:75:38:45:00:b6: 49:61:1d:99:27:bb:e0:d9:77:ef:97:8b:7c:2f:75:01:e4:28: 74:db:06:a5:16:3a:84:d6:9d:30:92:4a:59:dc:4b:6d:aa:c1: 46:30:69:7b:67:0a:4f:6b:f3:ba:1c:ae:30:72:fd:6a:f3:be: fd:bb:21:20:4f:8a:a6:58:28:de:9f:9a:3a:b9:f1:a4:d2:b7: 50:c3:86:3a:32:b0:97:ff:9f:06:8a:42:f0:7e:67:6f:87:36: ea:06:10:ba:9c:ea:17:cc:5a:73:c8:fe:ed:67:0c:3b:d2:80: e1:6c:a1:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpTR/FOi47nmTqwXD8HJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDg4ZjgzZWU3NDJjOTQ0YmZkNzMzZDQ0ZWE2ODNmMTAwYTQ4NTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgzT6GH+du0CY9cU6I+Bnac0Ywb 32sgs4PE+ziZJGhMijUhFjsYht9SgblM8TXdSVPYgqVeEaafD4kpSoFGe2d9Eo1V bBg8OLxeohLaIU/y8PvaZ1aIfAFdKE70+ftZoO/aY6aH2mEXhc8ReD92UfcYMxex Q5O3U0nzVipifq+jPvf+ms37piB0/lHmlAJeURonKWQ+k6E1D+zyROIJ/ONTn4Tk SGxWzulMvrjthM6jeil1ydyYHMHA0VIsE9rCGpBHFEr4d1NfyTr1hIqkVxqCKEJM urpCA6mX1A5iwzRLFdElanNBjj0kmzai9QE4isrDEdr34TvL4zlcHx/kBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSI+D7nQslEv9cz1E6mg/EApIVOMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvSklqNFB1ZEN5VVNfMXpQVVRxYUQ4UUNraFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJRYMA0G CSqGSIb3DQEBCwUAA4IBAQBAyu6RQ81qmid9Y5W9HfIiLPkgLpBkjBhnjjMQwh7N QKhnNDs3tA9IFqD9Awi+1/3IxgFtSeUu8gMrpU/J773LOzaBG4/REExI067HXTOF I6Zg6X/Cndy9iKqL1qsf+3txoARnNVAWfSGG6xAEyjEwykbRT/1DL8D4wqYGdJd4 lx2rWSbQMqcPD3BOdThFALZJYR2ZJ7vg2Xfvl4t8L3UB5Ch02walFjqE1p0wkkpZ 3EttqsFGMGl7ZwpPa/O6HK4wcv1q8779uyEgT4qmWCjen5o6ufGk0rdQw4Y6MrCX /58GikLwfmdvhzbqBhC6nOoXzFpzyP7tZww70oDhbKE1 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:31 2026 by rpki-client