This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/N2sWHSmbIsvTWoltMydI9-BAqXc.roa File: N2sWHSmbIsvTWoltMydI9-BAqXc.roa (raw, json) Hash identifier: yjcwh1uIjEMcOQTev4RTyInZjAxP+wJLc+YJsfKivH4= Subject key identifier: 37:6B:16:1D:29:9B:22:CB:D3:5A:89:6D:33:27:48:F7:E0:40:A9:77 Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F83372360A6788D115272FD97D67AAF Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/N2sWHSmbIsvTWoltMydI9-BAqXc.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199296 IP address blocks: 88.199.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:37:23:60:a6:78:8d:11:52:72:fd:97:d6:7a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=376b161d299b22cbd35a896d332748f7e040a977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:c3:f8:ab:32:9f:ac:8c:59:98:95:65:14: 7f:c8:63:58:f1:f0:db:4a:23:fa:80:89:43:28:9b: b0:01:55:08:c7:a8:49:c1:3a:8f:d2:79:69:16:0c: 92:23:ad:17:9a:b2:5e:14:52:05:a0:6c:82:8f:75: a1:75:70:e4:4d:1a:f4:cf:4d:50:5d:49:16:16:57: b5:d2:32:c2:de:a3:08:91:ed:c4:89:a2:ae:ef:c3: ae:2c:91:bc:c2:99:03:81:18:a4:fc:0b:0b:de:7d: 94:1a:af:6f:15:17:14:98:14:6e:3a:01:1a:39:df: 18:94:47:76:fe:f1:23:34:cc:1d:a7:44:a4:b7:2c: 12:8d:4d:1a:df:69:68:5c:40:b4:c5:a4:dc:8e:85: 23:1d:85:46:ef:8c:45:ae:c5:f9:34:ae:5a:71:b3: ab:05:ea:5a:00:c4:09:3e:51:cd:03:a7:a8:4b:97: 1d:de:97:ea:8a:99:3b:14:c9:2f:a0:69:a1:7b:f1: aa:bf:38:5e:a5:bc:84:e5:c5:a2:96:3b:24:3c:00: c8:ef:51:73:f7:5b:7b:34:6f:c4:cf:47:0c:c5:2a: c6:25:6c:13:4e:86:e3:e3:88:ed:34:de:a7:bf:87: 8e:5c:2c:b1:5a:06:63:27:08:ed:7b:1d:c3:7c:8f: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:16:1D:29:9B:22:CB:D3:5A:89:6D:33:27:48:F7:E0:40:A9:77 X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/N2sWHSmbIsvTWoltMydI9-BAqXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.199.144.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:f6:b1:da:e1:e6:f6:27:7b:29:e0:f9:68:83:e4:eb:27:3b: 78:5f:92:15:49:fe:b5:92:ff:4b:49:4d:10:48:b1:5a:a5:e5: 7f:be:84:7c:43:95:3e:ab:bb:ed:61:ce:91:d4:f7:3a:ea:db: 5a:52:91:8c:59:92:18:ad:69:12:6a:2b:2e:a3:40:07:e3:80: 56:e9:36:2a:f3:74:17:ee:1a:95:d0:19:ea:2d:20:c1:3d:8b: 3e:f1:75:29:0a:26:7a:a7:e5:48:57:03:03:72:95:6f:ae:7c: c9:1f:d8:f6:f7:aa:f8:bb:9f:b3:64:aa:45:a6:f7:b5:f5:da: 0b:c1:a3:e6:60:f8:e1:13:33:9a:df:74:59:6c:12:3e:45:d2: 21:0e:fb:3a:49:3d:1b:1d:2a:eb:0b:46:e7:be:6a:7a:70:81: fa:64:b5:99:e5:d4:ac:21:af:43:b8:e4:a9:16:ee:ea:d5:1d: 36:b9:56:e8:f7:f8:68:62:bc:a8:f9:55:94:25:6d:ff:e4:22: 36:81:73:08:af:ac:94:94:64:1d:6f:4f:0b:e0:4c:1d:61:85: c4:c1:58:0d:5b:cc:bc:b7:e2:2c:c8:7c:ec:85:2e:80:35:cf: cf:34:56:34:d4:d3:ef:d2:cf:75:b9:d2:95:9e:52:36:f2:2d: 7c:0e:38:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gzcjYKZ4jRFScv2X1nqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzZiMTYxZDI5OWIyMmNiZDM1YTg5NmQzMzI3NDhmN2UwNDBhOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgrD+Ksyn6yMWZiVZRR/yGNY8fDb SiP6gIlDKJuwAVUIx6hJwTqP0nlpFgySI60XmrJeFFIFoGyCj3WhdXDkTRr0z01Q XUkWFle10jLC3qMIke3EiaKu78OuLJG8wpkDgRik/AsL3n2UGq9vFRcUmBRuOgEa Od8YlEd2/vEjNMwdp0SktywSjU0a32loXEC0xaTcjoUjHYVG74xFrsX5NK5acbOr BepaAMQJPlHNA6eoS5cd3pfqipk7FMkvoGmhe/GqvzhepbyE5cWiljskPADI71Fz 91t7NG/Ez0cMxSrGJWwTTobj44jtNN6nv4eOXCyxWgZjJwjtex3DfI/qhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdrFh0pmyLL01qJbTMnSPfgQKl3MB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvTjJzV0hTbWJJc3ZUV29sdE15ZEk5LUJBcVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWMeQMA0G CSqGSIb3DQEBCwUAA4IBAQB/9rHa4eb2J3sp4Plog+TrJzt4X5IVSf61kv9LSU0Q SLFapeV/voR8Q5U+q7vtYc6R1Pc66ttaUpGMWZIYrWkSaisuo0AH44BW6TYq83QX 7hqV0BnqLSDBPYs+8XUpCiZ6p+VIVwMDcpVvrnzJH9j296r4u5+zZKpFpve19doL waPmYPjhEzOa33RZbBI+RdIhDvs6ST0bHSrrC0bnvmp6cIH6ZLWZ5dSsIa9DuOSp Fu7q1R02uVbo9/hoYryo+VWUJW3/5CI2gXMIr6yUlGQdb08L4EwdYYXEwVgNW8y8 t+IsyHzshS6ANc/PNFY01NPv0s91udKVnlI28i18Djjw -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client