This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/As_pVbbnYy_pmBMm0RcX49iX6nY.roa File: As_pVbbnYy_pmBMm0RcX49iX6nY.roa (raw, json) Hash identifier: qzus9UnBcueHhtxBHMySF8j/gf9sbzuNZT387lhMVtE= Subject key identifier: 02:CF:E9:55:B6:E7:63:2F:E9:98:13:26:D1:17:17:E3:D8:97:EA:76 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA2EDDE90E19308CED6D4E00742C9 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/As_pVbbnYy_pmBMm0RcX49iX6nY.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32806 IP address blocks: 88.151.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a2:ed:de:90:e1:93:08:ce:d6:d4:e0:07:42:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02cfe955b6e7632fe9981326d11717e3d897ea76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:79:ba:7f:29:00:e8:0f:68:59:bf:87:16: 47:b1:87:15:cb:09:b8:37:19:51:ac:24:4c:d2:ec: af:4a:0b:f8:5d:bb:5c:7a:ea:a9:da:c6:f5:9e:ba: 0a:d8:f0:e1:01:de:00:59:07:f0:6e:42:77:05:d0: bc:38:ee:45:75:a7:e4:3e:a2:23:33:7b:77:a9:43: 0a:fe:cc:57:8c:ac:c9:80:4d:04:bb:09:98:f3:c9: db:f4:cd:ac:e8:d6:ad:90:60:af:ab:05:a9:63:1e: c0:81:81:32:8d:9d:30:ea:a9:80:0d:85:d8:61:1f: da:f8:48:72:ac:f5:e8:e3:e5:6a:44:e3:e4:8a:2f: 20:96:bb:66:fe:49:c3:ff:d0:6d:a1:88:a8:17:a6: 11:d4:3e:7a:ba:31:88:d9:fe:8c:f2:ca:43:08:51: 28:bb:dd:21:48:2f:5f:51:94:17:8f:3b:b6:41:81: e0:57:8e:c3:9e:ed:3c:02:e9:34:4d:75:66:bf:28: 8d:2f:58:f6:bc:88:4b:7d:92:66:ff:47:98:1e:43: b9:9d:1c:68:c0:42:11:12:16:80:13:80:01:1d:11: 6a:e1:f4:0e:84:98:9c:53:87:a3:53:38:55:11:a0: 57:7e:32:86:34:b6:4c:c1:84:9a:b9:f9:37:b4:84: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:E9:55:B6:E7:63:2F:E9:98:13:26:D1:17:17:E3:D8:97:EA:76 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/As_pVbbnYy_pmBMm0RcX49iX6nY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.228.0/24 Signature Algorithm: sha256WithRSAEncryption bc:1a:87:84:01:13:37:79:b5:00:36:6c:e3:cb:c2:c2:0e:c2: 3b:f9:35:9c:ec:77:d6:4a:9f:a3:ff:b8:36:dd:0c:09:32:25: dd:54:9f:bb:98:ee:d5:54:62:13:38:51:c7:4e:90:cf:1e:67: 18:61:7d:a7:c7:1e:73:60:99:5a:39:8c:a6:8e:4e:ef:4a:44: 59:9f:24:30:ab:ec:dc:98:bd:06:48:7f:50:8a:47:1c:ec:73: 39:04:06:af:ee:5b:60:e0:00:31:66:f6:e4:d7:0b:07:ae:c6: 30:93:5b:29:af:82:d5:d9:ee:d3:00:44:3d:e0:b6:9c:13:84: 2b:17:46:2b:88:a3:ca:ec:7a:1f:db:7c:cb:4a:7f:86:d1:f4: fa:3d:bb:c2:64:b9:9a:3c:d0:f1:07:5e:63:c1:d2:e2:ad:8c: 08:f8:e7:e9:1d:4d:75:2f:9c:0f:e8:b2:00:9e:7f:49:40:85: 13:e7:15:09:4d:32:d6:f9:eb:05:b4:b9:e3:62:5d:e6:78:5d: dd:cd:89:3c:a6:87:c6:28:13:c2:71:2d:d2:1e:d4:af:2a:78: cb:c3:29:00:1c:e7:1b:e3:a8:a2:66:fc:2e:e5:ba:74:d2:1e: f4:6a:cf:af:31:97:87:8e:b9:5c:28:6d:2e:85:ed:68:65:f2: f9:cb:0c:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqLt3pDhkwjO1tTgB0LJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNmZTk1NWI2ZTc2MzJmZTk5ODEzMjZkMTE3MTdlM2Q4OTdlYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWh5un8pAOgPaFm/hxZHsYcVywm4 NxlRrCRM0uyvSgv4Xbtceuqp2sb1nroK2PDhAd4AWQfwbkJ3BdC8OO5FdafkPqIj M3t3qUMK/sxXjKzJgE0EuwmY88nb9M2s6NatkGCvqwWpYx7AgYEyjZ0w6qmADYXY YR/a+EhyrPXo4+VqROPkii8glrtm/knD/9BtoYioF6YR1D56ujGI2f6M8spDCFEo u90hSC9fUZQXjzu2QYHgV47Dnu08Auk0TXVmvyiNL1j2vIhLfZJm/0eYHkO5nRxo wEIREhaAE4ABHRFq4fQOhJicU4ejUzhVEaBXfjKGNLZMwYSaufk3tIS1PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALP6VW252Mv6ZgTJtEXF+PYl+p2MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvQXNfcFZiYm5ZeV9wbUJNbTBSY1g0OWlYNm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfkMA0G CSqGSIb3DQEBCwUAA4IBAQC8GoeEARM3ebUANmzjy8LCDsI7+TWc7HfWSp+j/7g2 3QwJMiXdVJ+7mO7VVGITOFHHTpDPHmcYYX2nxx5zYJlaOYymjk7vSkRZnyQwq+zc mL0GSH9Qikcc7HM5BAav7ltg4AAxZvbk1wsHrsYwk1spr4LV2e7TAEQ94LacE4Qr F0YriKPK7Hof23zLSn+G0fT6PbvCZLmaPNDxB15jwdLirYwI+OfpHU11L5wP6LIA nn9JQIUT5xUJTTLW+esFtLnjYl3meF3dzYk8pofGKBPCcS3SHtSvKnjLwykAHOcb 46iiZvwu5bp00h70as+vMZeHjrlcKG0uhe1oZfL5ywwf -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:27 2026 by rpki-client