This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/q47qpt1p1Wj02CxPXYgOsikq_GY.roa File: q47qpt1p1Wj02CxPXYgOsikq_GY.roa (raw, json) Hash identifier: RR0Z4b1X2W/yjPPcvR1hUKYG5qy0mYBUJ7YN4lZTqrk= Subject key identifier: AB:8E:EA:A6:DD:69:D5:68:F4:D8:2C:4F:5D:88:0E:B2:29:2A:FC:66 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA29387E278F4271D624268BBA94D Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/q47qpt1p1Wj02CxPXYgOsikq_GY.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22351 IP address blocks: 88.151.225.0/24 maxlen: 24 88.151.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a2:93:87:e2:78:f4:27:1d:62:42:68:bb:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab8eeaa6dd69d568f4d82c4f5d880eb2292afc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:71:80:5b:8f:55:98:bd:79:38:c6:ed:22: 2a:7b:cc:52:0a:cf:8f:26:67:e5:02:0d:85:18:6f: 1f:5f:b4:86:52:e8:73:d3:ec:f8:de:96:a9:82:ce: d4:03:a3:cc:19:61:f1:8c:77:da:6a:99:6a:27:e9: e5:9a:a1:5f:e2:c4:94:1b:57:f5:b3:9b:82:f2:c9: 91:d1:07:83:05:17:e8:2a:89:f5:5d:78:66:74:4b: 74:e2:dd:12:ab:42:59:44:6c:82:be:e2:0f:7a:cc: ab:ee:da:4c:d0:88:63:1a:42:3d:76:e6:f6:2c:7a: 35:e7:e3:a2:f0:52:8a:72:8a:dd:d0:fd:99:1f:f1: ff:c0:b3:f3:2c:31:34:1e:e0:ad:16:5a:5d:c8:4c: 27:f2:40:86:31:35:b5:7a:30:82:5d:d1:d2:9e:54: 62:69:20:90:b4:9d:3b:5b:d8:e8:04:6f:09:5e:b8: 0e:b9:1c:92:7b:40:72:b0:fe:dc:96:2f:f0:1d:29: 2d:77:e3:b9:c9:c0:e0:b1:c2:dd:89:0a:e0:bc:31: da:5c:77:43:e9:85:f8:f4:05:b1:b8:59:57:f1:1a: 19:67:47:b1:7d:df:13:3e:32:a1:61:bc:f1:0f:e5: 91:ba:9c:e6:b9:b1:73:f4:4a:99:12:7c:98:1a:31: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:EA:A6:DD:69:D5:68:F4:D8:2C:4F:5D:88:0E:B2:29:2A:FC:66 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/q47qpt1p1Wj02CxPXYgOsikq_GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.225.0-88.151.227.255 Signature Algorithm: sha256WithRSAEncryption 35:8a:0d:e5:af:d1:68:f3:83:ec:db:3b:0a:35:78:c0:86:fb: 43:a5:70:53:0a:cd:00:b5:c0:f1:9f:93:7f:50:86:a2:e9:ac: 6c:21:0c:a8:ea:ce:d5:21:7d:e5:1c:1f:ca:7d:cc:a1:4a:1e: 8d:a3:3c:a7:8c:4c:33:7a:ef:d1:b0:b5:d6:ef:db:0d:8d:4e: bc:a0:ce:aa:2a:ea:70:ac:39:f6:41:23:e2:77:ab:b1:98:50: f2:22:e7:f0:17:82:79:ff:29:be:20:99:30:de:43:51:9f:b7: 6e:e5:97:c4:f6:e0:06:c8:e3:a6:d5:4b:f3:6d:42:72:98:f8: 2a:c0:94:14:b7:72:59:54:9f:83:f1:64:6c:98:61:a4:be:7f: 58:2c:8d:42:9b:22:7f:5f:16:f5:d3:1d:e1:f7:ec:8d:e7:b4: ff:a3:1d:06:cb:e4:b8:83:3d:d5:d4:81:a0:dd:53:fd:a4:e7: e0:48:f4:cf:19:06:76:34:53:6d:2a:17:ac:aa:0a:6c:20:3e: 2c:db:52:38:e1:be:49:e2:c2:c6:9a:49:71:ce:29:2e:6a:3c: 6c:67:3b:e0:0c:29:aa:21:fd:31:48:8a:66:ce:77:19:f8:d1: 6c:34:d4:a3:d6:61:b1:37:9f:eb:05:66:9a:a9:82:59:67:69: 30:23:d7:9f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fqKTh+J49CcdYkJou6lNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjhlZWFhNmRkNjlkNTY4ZjRkODJjNGY1ZDg4MGViMjI5MmFmYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXhxgFuPVZi9eTjG7SIqe8xSCs+P JmflAg2FGG8fX7SGUuhz0+z43papgs7UA6PMGWHxjHfaaplqJ+nlmqFf4sSUG1f1 s5uC8smR0QeDBRfoKon1XXhmdEt04t0Sq0JZRGyCvuIPesyr7tpM0IhjGkI9dub2 LHo15+Oi8FKKcord0P2ZH/H/wLPzLDE0HuCtFlpdyEwn8kCGMTW1ejCCXdHSnlRi aSCQtJ07W9joBG8JXrgOuRySe0BysP7cli/wHSktd+O5ycDgscLdiQrgvDHaXHdD 6YX49AWxuFlX8RoZZ0exfd8TPjKhYbzxD+WRupzmubFz9EqZEnyYGjHACwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKuO6qbdadVo9NgsT12IDrIpKvxmMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvcTQ3cXB0MXAxV2owMkN4UFhZZ09zaWtxX0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABYl+ED BAJYl+AwDQYJKoZIhvcNAQELBQADggEBADWKDeWv0Wjzg+zbOwo1eMCG+0OlcFMK zQC1wPGfk39QhqLprGwhDKjqztUhfeUcH8p9zKFKHo2jPKeMTDN679Gwtdbv2w2N Trygzqoq6nCsOfZBI+J3q7GYUPIi5/AXgnn/Kb4gmTDeQ1Gft27ll8T24AbI46bV S/NtQnKY+CrAlBS3cllUn4PxZGyYYaS+f1gsjUKbIn9fFvXTHeH37I3ntP+jHQbL 5LiDPdXUgaDdU/2k5+BI9M8ZBnY0U20qF6yqCmwgPizbUjjhvkniwsaaSXHOKS5q PGxnO+AMKaoh/TFIimbOdxn40Ww01KPWYbE3n+sFZpqpgllnaTAj158= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:40 2026 by rpki-client