This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa File: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (raw, json) Hash identifier: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA= Subject key identifier: AC:A4:BD:15:A3:3A:42:DD:0C:B3:96:01:50:70:23:7C:86:87:15:7F Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B7E39089DE680866AEF709D38646636E4 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212792 IP address blocks: 88.210.60.0/24 maxlen: 24 88.210.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:9d:e6:80:86:6a:ef:70:9d:38:64:66:36:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca4bd15a33a42dd0cb396015070237c8687157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:ca:08:8a:1e:60:e8:fb:23:a8:38:ef:a0: b2:68:4a:5b:9d:fa:b5:9b:c3:d6:b8:5d:d7:08:ee: 5d:df:2c:70:2c:73:36:78:d7:6c:d8:22:31:4e:ca: 51:69:f7:c7:55:83:06:ae:7f:5f:07:ff:93:e7:2d: 20:f4:7b:e3:dc:80:9b:0e:0d:4c:64:38:8a:3f:75: 97:80:54:e2:7d:d8:87:88:35:3e:2c:f6:e0:77:56: d0:31:f0:95:4f:0d:38:9e:55:f1:e3:32:56:2c:94: b6:b2:26:a8:7f:2a:16:de:7b:2b:31:93:cb:d9:20: d4:4b:85:26:ed:fe:d3:e8:2f:f5:d6:a8:0a:ac:a1: 4e:09:76:85:27:95:94:24:36:19:b1:de:89:f0:5c: 0c:d6:43:ae:a6:ef:89:43:be:c8:20:31:f6:45:51: 2e:a9:46:4e:24:97:4f:8a:84:74:f7:6f:7e:e8:10: ec:7b:48:a9:c8:25:3f:0c:26:d1:8c:13:7b:24:3f: 4f:66:b4:8b:6f:bc:7e:2e:90:b7:54:13:47:79:dd: 60:00:e4:34:5b:6e:cb:1b:96:9f:de:f1:d7:27:cc: c3:28:cd:97:b9:d8:0c:ad:ef:b4:77:87:f5:5b:54: 9a:46:87:44:c1:55:9e:1c:fc:da:95:55:e9:b4:90: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:BD:15:A3:3A:42:DD:0C:B3:96:01:50:70:23:7C:86:87:15:7F X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.60.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:42:5a:9a:b2:91:20:df:8f:1e:de:b7:50:12:0e:cf:d8:60: 28:fb:30:b0:54:73:bb:df:1d:6c:81:8b:b8:ce:ff:e2:ae:c2: 2d:53:ff:0b:87:70:2d:76:9a:07:02:ec:ee:4a:6b:1c:bf:45: b5:07:ea:4f:ce:9f:c0:08:69:95:f3:ce:7b:ea:25:f9:94:00: 04:2e:5a:3b:0c:1c:a3:55:d1:e1:29:42:34:97:cf:dd:37:fe: ef:fb:50:4c:8f:a9:64:1a:24:b4:3b:d1:96:24:b9:8f:40:8f: 98:20:26:ec:43:0c:5a:c5:50:cf:d6:2b:5c:7e:b3:30:a3:c3: 89:8e:c4:60:0f:2e:49:2c:b6:a8:05:01:58:7a:45:d7:28:36: 81:29:aa:92:03:25:03:55:34:b0:e6:4b:6e:b9:4e:8e:98:c1: 20:0d:40:49:71:a2:47:60:22:70:1d:99:5b:f1:9b:29:b1:a3: 10:18:4b:da:5b:81:2b:05:1e:d7:17:71:3b:67:5d:b4:dc:9b: 68:d5:8e:1e:67:2c:db:2d:2b:d7:80:3a:86:ff:45:78:fe:61: 1b:eb:b1:44:62:f6:57:a9:50:3a:18:60:44:5c:05:b1:01:a1: 0c:49:cc:98:ea:8b:f7:95:31:77:ad:cf:0f:4f:e2:74:fc:d3: 5b:78:70:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQid5oCGau9wnThkZjbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E0YmQxNWEzM2E0MmRkMGNiMzk2MDE1MDcwMjM3Yzg2ODcxNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4prKCIoeYOj7I6g476CyaEpbnfq1 m8PWuF3XCO5d3yxwLHM2eNds2CIxTspRaffHVYMGrn9fB/+T5y0g9Hvj3ICbDg1M ZDiKP3WXgFTifdiHiDU+LPbgd1bQMfCVTw04nlXx4zJWLJS2siaofyoW3nsrMZPL 2SDUS4Um7f7T6C/11qgKrKFOCXaFJ5WUJDYZsd6J8FwM1kOupu+JQ77IIDH2RVEu qUZOJJdPioR0929+6BDse0ipyCU/DCbRjBN7JD9PZrSLb7x+LpC3VBNHed1gAOQ0 W27LG5af3vHXJ8zDKM2XudgMre+0d4f1W1SaRodEwVWeHPzalVXptJC8XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKykvRWjOkLdDLOWAVBwI3yGhxV/MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvcktTOUZhTTZRdDBNczVZQlVIQWpmSWFIRlg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNI8MA0G CSqGSIb3DQEBCwUAA4IBAQBuQlqaspEg348e3rdQEg7P2GAo+zCwVHO73x1sgYu4 zv/irsItU/8Lh3AtdpoHAuzuSmscv0W1B+pPzp/ACGmV88576iX5lAAELlo7DByj VdHhKUI0l8/dN/7v+1BMj6lkGiS0O9GWJLmPQI+YICbsQwxaxVDP1itcfrMwo8OJ jsRgDy5JLLaoBQFYekXXKDaBKaqSAyUDVTSw5ktuuU6OmMEgDUBJcaJHYCJwHZlb 8ZspsaMQGEvaW4ErBR7XF3E7Z1203Jto1Y4eZyzbLSvXgDqG/0V4/mEb67FEYvZX qVA6GGBEXAWxAaEMScyY6ov3lTF3rc8PT+J0/NNbeHBP -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:46 2026 by rpki-client