This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa File: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (raw, json) Hash identifier: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8= Subject key identifier: 33:CF:03:F3:D9:9C:C0:E8:30:4B:4B:26:35:4D:BE:61:9F:D8:EC:DB Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32EF1AB76C1CEE70113D3C1B81432 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198294 IP address blocks: 84.47.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:f1:ab:76:c1:ce:e7:01:13:d3:c1:b8:14:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33cf03f3d99cc0e8304b4b26354dbe619fd8ecdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:56:8a:c8:03:4d:fc:17:47:98:60:c5:6b: bd:ce:c5:17:0e:fd:0a:e4:7a:0c:86:61:37:f7:4d: b1:e2:cb:5f:99:20:03:01:82:5c:90:31:68:b8:cb: 4a:70:30:01:d9:76:35:f5:73:2f:a6:67:75:a8:4e: 01:e0:cd:06:d5:37:82:c2:ee:21:ba:b7:5c:95:72: ce:a8:65:42:b2:ed:d2:ea:03:ee:a7:5e:52:ad:b1: 19:e7:0b:80:e4:28:7a:02:6d:a1:77:dd:ea:19:fc: 32:af:18:12:1e:d1:67:d4:50:95:7c:84:89:a8:f7: 29:71:1c:79:02:be:71:79:4c:3c:6f:70:21:b5:f7: 66:9f:2f:e3:ea:3c:56:4f:38:5d:dc:1c:30:5c:31: 19:75:4c:92:10:c8:8b:ca:6a:82:59:74:7c:fe:b2: 6e:4a:ea:9e:54:8f:84:d4:92:8f:3f:09:e2:01:af: f6:e3:8e:59:d3:b6:82:35:14:0d:0a:f8:c6:99:62: 0e:59:ac:9e:d4:ad:27:dc:68:86:49:0f:ff:fa:fe: 72:44:d7:90:b5:93:66:26:f6:8f:6d:1b:ac:d5:34: b7:69:16:54:b5:24:aa:1b:81:ca:b4:a1:c2:04:43: 98:25:ab:0c:61:7e:4b:5d:d7:8d:15:84:32:39:a6: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:03:F3:D9:9C:C0:E8:30:4B:4B:26:35:4D:BE:61:9F:D8:EC:DB X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.181.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:19:84:59:0e:fe:a5:30:78:b0:16:28:88:0b:89:3e:c1:03: 03:7c:08:08:e7:80:1d:1d:cb:35:14:07:6a:5f:f0:0a:83:e1: 3d:c7:bb:d5:89:ce:c3:f5:8a:c5:40:2f:07:12:a2:79:16:83: 45:d3:7a:96:fc:b7:8e:89:7d:2f:10:f7:a0:5e:19:d3:27:18: ff:a7:9c:52:46:77:a7:b9:7d:ae:84:5e:1c:60:f7:4e:d7:22: 0f:16:2a:66:e8:6a:87:ad:bf:58:9e:db:82:ef:c1:99:ed:01: 45:71:8a:dc:35:32:f5:e6:52:ee:f5:08:f7:73:8f:c1:73:8b: b4:26:9f:e1:a4:7d:08:9a:46:7c:82:e8:6a:b6:bc:55:e9:2d: bf:ce:a0:92:be:74:9d:7f:fa:70:59:32:74:bd:63:3e:ea:28: ba:fa:aa:f3:09:b0:06:e3:41:62:65:65:48:b4:e9:2a:e1:5f: 89:02:bc:cd:9e:bb:d3:0b:aa:95:b8:00:6b:3f:f1:92:0d:af: 48:49:09:45:ac:bc:83:7b:db:52:ef:47:89:8d:05:23:b7:1d: da:d5:f5:02:43:58:66:c6:69:45:44:20:39:ad:09:6e:2e:5e: cf:87:38:24:d3:cf:5f:f0:7f:c1:4f:ab:2f:2b:99:72:7a:47: 3e:47:5b:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy7xq3bBzucBE9PBuBQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2NmMDNmM2Q5OWNjMGU4MzA0YjRiMjYzNTRkYmU2MTlmZDhlY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJWisgDTfwXR5hgxWu9zsUXDv0K 5HoMhmE3902x4stfmSADAYJckDFouMtKcDAB2XY19XMvpmd1qE4B4M0G1TeCwu4h urdclXLOqGVCsu3S6gPup15SrbEZ5wuA5Ch6Am2hd93qGfwyrxgSHtFn1FCVfISJ qPcpcRx5Ar5xeUw8b3Ahtfdmny/j6jxWTzhd3BwwXDEZdUySEMiLymqCWXR8/rJu SuqeVI+E1JKPPwniAa/2445Z07aCNRQNCvjGmWIOWaye1K0n3GiGSQ//+v5yRNeQ tZNmJvaPbRus1TS3aRZUtSSqG4HKtKHCBEOYJasMYX5LXdeNFYQyOaaJXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPPA/PZnMDoMEtLJjVNvmGf2OzbMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvTTg4RDg5bWN3T2d3UzBzbU5VMi1ZWl9ZN05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC+1MA0G CSqGSIb3DQEBCwUAA4IBAQB+GYRZDv6lMHiwFiiIC4k+wQMDfAgI54AdHcs1FAdq X/AKg+E9x7vVic7D9YrFQC8HEqJ5FoNF03qW/LeOiX0vEPegXhnTJxj/p5xSRnen uX2uhF4cYPdO1yIPFipm6GqHrb9YntuC78GZ7QFFcYrcNTL15lLu9Qj3c4/Bc4u0 Jp/hpH0ImkZ8guhqtrxV6S2/zqCSvnSdf/pwWTJ0vWM+6ii6+qrzCbAG40FiZWVI tOkq4V+JArzNnrvTC6qVuABrP/GSDa9ISQlFrLyDe9tS70eJjQUjtx3a1fUCQ1hm xmlFRCA5rQluLl7Phzgk089f8H/BT6svK5lyekc+R1sj -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client