This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/i_u3W_snjAXj4Rj5FQrPE0tb4dU.roa File: i_u3W_snjAXj4Rj5FQrPE0tb4dU.roa (raw, json) Hash identifier: 4agZvjNM2sUnZO/aBppZrrarV2vOgQ0nszmv6UvgTVw= Subject key identifier: 8B:FB:B7:5B:FB:27:8C:05:E3:E1:18:F9:15:0A:CF:13:4B:5B:E1:D5 Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a Certificate serial: 019B7C80C722D5A3E637B594CB3DAB0C14DE Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/i_u3W_snjAXj4Rj5FQrPE0tb4dU.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44789 IP address blocks: 88.132.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c7:22:d5:a3:e6:37:b5:94:cb:3d:ab:0c:14:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bfbb75bfb278c05e3e118f9150acf134b5be1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b2:3d:81:24:2c:a6:2f:61:e5:0b:0c:bd:61: 4a:05:a5:a7:ed:3b:1d:eb:a7:8e:fb:67:11:9a:09: 22:8a:0e:03:6e:f5:d0:0e:58:2a:8f:4b:6b:17:ae: f1:b6:a2:c2:50:6e:c2:5d:ac:09:fe:6b:bf:99:c7: 10:67:5b:85:6d:9b:f5:84:bf:f9:36:e2:41:82:fd: 31:5b:52:59:6b:bd:54:d7:42:a1:16:39:44:06:d2: b9:ee:c5:8c:5b:6e:bf:a5:b2:7a:1d:c4:33:20:ae: 34:c4:59:cb:bd:9f:33:44:ff:b1:32:71:21:fe:56: a0:3a:62:14:9a:00:e4:54:0c:b0:21:55:4b:97:5a: 41:51:76:f7:5e:2d:b8:31:05:3e:81:75:c2:ac:07: 37:8e:69:fa:de:5c:8a:38:f8:03:30:00:5e:81:e2: 47:2e:9d:0c:2f:b9:7e:c3:7e:d6:2a:62:c3:e1:6a: 5d:71:e4:09:50:54:1b:e5:bf:25:ef:3d:f1:2b:38: 1e:a5:fc:0b:27:bd:28:72:b1:38:a3:48:b1:25:2f: c8:7d:ea:e4:0a:19:5a:95:74:ba:e6:ae:7b:01:44: 1a:2f:b1:1f:7e:41:68:ad:5a:57:65:c2:d0:d2:6d: 27:c1:f5:fb:a4:29:ae:ab:31:89:b2:a4:8b:9e:c8: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:B7:5B:FB:27:8C:05:E3:E1:18:F9:15:0A:CF:13:4B:5B:E1:D5 X509v3 Authority Key Identifier: keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/i_u3W_snjAXj4Rj5FQrPE0tb4dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.132.252.0/22 Signature Algorithm: sha256WithRSAEncryption ae:72:00:f9:24:5f:2a:f2:85:59:a9:41:79:56:19:ed:c0:58: fc:9c:47:72:b0:cc:ba:91:6e:f8:29:0a:b2:68:6c:e3:bc:fc: 61:07:3f:55:80:18:e5:2c:e1:e9:dd:8c:bc:a8:da:14:69:81: 8c:d3:58:28:44:af:1c:4e:51:b7:3c:4a:5f:f4:9a:21:f0:c6: 65:9d:19:d2:9c:cf:aa:ee:07:f0:ea:56:3e:fc:cd:d0:87:b1: 53:93:0f:27:de:7b:df:7b:fa:7f:53:2f:ba:0a:e7:a1:21:e5: e8:1b:dd:41:77:bd:16:2e:14:df:f5:ed:48:e1:1b:fd:44:d0: 68:ae:58:d9:f7:0f:c1:46:56:a0:a6:eb:6f:fe:d9:84:06:ae: 15:d2:c9:2f:6f:af:d7:09:b8:b8:e3:35:26:5f:ef:1d:8c:c2: 0c:b9:2e:42:bc:ac:b4:71:c8:f9:ce:53:4e:d2:d6:67:11:e5: 98:81:90:27:ad:d3:a2:82:2a:e1:1c:8a:cf:42:33:d3:53:88: 22:ba:ed:2b:09:31:5d:88:10:9a:55:35:56:a8:c6:70:77:2c: 6f:4f:95:51:7a:b1:24:a8:68:74:cd:26:fc:80:ed:7f:23:1a: 75:e0:8b:9a:48:c3:b2:cd:cc:06:ed:ac:04:ca:d0:ca:28:34: 02:4c:4e:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMci1aPmN7WUyz2rDBTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMmJhODZkZjc4Nzg4OGY2Zjg1OTJhODA2YTZmZmVhMzA0 NmMwN2EwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmZiYjc1YmZiMjc4YzA1ZTNlMTE4ZjkxNTBhY2YxMzRiNWJlMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rI9gSQspi9h5QsMvWFKBaWn7Tsd 66eO+2cRmgkiig4DbvXQDlgqj0trF67xtqLCUG7CXawJ/mu/mccQZ1uFbZv1hL/5 NuJBgv0xW1JZa71U10KhFjlEBtK57sWMW26/pbJ6HcQzIK40xFnLvZ8zRP+xMnEh /lagOmIUmgDkVAywIVVLl1pBUXb3Xi24MQU+gXXCrAc3jmn63lyKOPgDMABegeJH Lp0ML7l+w37WKmLD4WpdceQJUFQb5b8l7z3xKzgepfwLJ70ocrE4o0ixJS/Iferk ChlalXS65q57AUQaL7EffkForVpXZcLQ0m0nwfX7pCmuqzGJsqSLnsgybQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIv7t1v7J4wF4+EY+RUKzxNLW+HVMB8GA1UdIwQY MBaAFH8rqG33h4iPb4WSqAam/+owRsB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnl1b2JmZUhpSTl2aFpLb0JxYl82akJHd0hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81ZTY3ODYtNjM3Ny00MjI0LWJhMDYt ZGM0NzY5ZWZmMWY1LzEvaV91M1dfc25qQVhqNFJqNUZRclBFMHRiNGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81ZTY3ODYtNjM3Ny00MjI0LWJhMDYtZGM0NzY5ZWZmMWY1 LzEvZnl1b2JmZUhpSTl2aFpLb0JxYl82akJHd0hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWIT8MA0G CSqGSIb3DQEBCwUAA4IBAQCucgD5JF8q8oVZqUF5VhntwFj8nEdysMy6kW74KQqy aGzjvPxhBz9VgBjlLOHp3Yy8qNoUaYGM01goRK8cTlG3PEpf9Joh8MZlnRnSnM+q 7gfw6lY+/M3Qh7FTkw8n3nvfe/p/Uy+6CuehIeXoG91Bd70WLhTf9e1I4Rv9RNBo rljZ9w/BRlagputv/tmEBq4V0skvb6/XCbi44zUmX+8djMIMuS5CvKy0ccj5zlNO 0tZnEeWYgZAnrdOigirhHIrPQjPTU4giuu0rCTFdiBCaVTVWqMZwdyxvT5VRerEk qGh0zSb8gO1/Ixp14IuaSMOyzcwG7awEytDKKDQCTE76 -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:36 2026 by rpki-client