This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa File: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (raw, json) Hash identifier: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo= Subject key identifier: 8B:23:A8:29:B7:2E:88:F4:C7:08:BC:4C:0A:2C:BB:0F:15:EB:E6:B9 Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Certificate serial: 019B7A5B0C94CA0DBE36248907A071E60467 Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31263 IP address blocks: 88.214.44.0/22 maxlen: 22 195.182.225.0/24 maxlen: 24 195.182.226.0/24 maxlen: 24 195.182.227.0/24 maxlen: 24 195.182.228.0/24 maxlen: 24 195.182.229.0/24 maxlen: 24 195.182.230.0/24 maxlen: 24 195.182.231.0/24 maxlen: 24 195.182.232.0/21 maxlen: 21 195.182.240.0/20 maxlen: 20 195.182.240.0/24 maxlen: 24 195.182.241.0/24 maxlen: 24 195.182.242.0/23 maxlen: 23 195.182.244.0/22 maxlen: 22 195.182.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0c:94:ca:0d:be:36:24:89:07:a0:71:e6:04:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79 Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b23a829b72e88f4c708bc4c0a2cbb0f15ebe6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:b7:02:9b:03:f6:5e:c5:06:32:a7:01:b8: 45:38:98:7d:76:82:30:f0:53:8b:35:02:e1:82:d4: d3:80:76:0a:fc:fd:79:44:1b:50:12:12:6b:a7:68: 4f:ca:2d:e3:46:6b:41:15:29:04:13:d0:d7:4b:d2: 18:f6:af:9c:ff:ca:20:9b:8d:e4:fd:78:7e:6b:d1: c9:d5:f9:75:02:76:9d:b4:08:0f:83:66:63:7e:5a: 2c:bb:93:12:fb:f4:aa:4a:8f:9d:a0:b9:a5:a2:aa: c5:ec:9d:36:58:68:1a:31:91:1f:f3:3a:f1:e1:c2: 5a:23:b8:87:3f:79:18:21:ad:91:f1:bd:d5:c4:81: b4:69:04:0b:d9:7a:98:06:2f:34:77:03:49:d7:90: de:e6:bc:05:d9:89:84:4f:4a:17:75:c2:dd:b0:20: 84:c6:7f:e8:ad:48:0b:b1:d4:f0:11:3f:53:a1:93: 9f:c2:b4:98:58:b4:b1:ae:72:51:a6:c4:8f:0d:db: 27:4f:eb:33:b8:2c:11:d1:cf:29:cf:90:6f:60:39: f7:cf:7e:4a:31:39:af:21:04:bf:42:45:be:42:ce: a7:6b:5b:be:8a:bd:15:5e:54:a7:c5:80:14:b6:50: 2a:41:f8:f2:35:4f:f0:1e:28:78:cf:02:a5:20:35: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:23:A8:29:B7:2E:88:F4:C7:08:BC:4C:0A:2C:BB:0F:15:EB:E6:B9 X509v3 Authority Key Identifier: keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.44.0/22 195.182.225.0-195.182.255.255 Signature Algorithm: sha256WithRSAEncryption 75:b7:8c:0f:39:78:f3:24:e2:fa:27:88:d5:db:b8:d7:83:aa: 20:23:d5:00:d1:b8:ce:b4:e1:18:dc:ad:80:0c:59:d6:f3:1f: 02:50:ac:af:44:19:73:14:a0:ab:ac:0f:68:fd:42:0e:e8:ca: fb:bf:d2:b7:3a:ef:7a:d4:ef:05:ff:d2:83:13:39:78:78:f0: a7:cf:25:4d:86:2c:1e:f1:68:d3:09:78:73:ec:b5:16:4e:64: ef:f3:57:a5:e4:a9:a7:72:3c:b6:ac:95:6c:b2:31:42:24:af: 42:35:ff:f1:89:19:36:ec:bb:3b:d0:da:0f:29:d5:e1:9b:ff: 5a:d6:da:db:f0:0a:20:ca:32:fe:8d:b1:56:5d:90:e5:b8:ce: 71:bc:cd:41:62:af:b9:2b:5a:cf:a0:23:8f:9a:1b:e8:9d:2b: 5c:34:2e:8d:05:98:6b:03:b6:7d:0e:db:54:ac:5c:50:0d:96: 9a:b5:44:5e:a7:ee:1f:c9:24:d9:0a:61:b2:67:e3:6a:32:c3: ba:84:5e:09:97:ae:3d:87:28:cf:37:9d:05:8c:d4:e9:98:c2: b7:91:b6:d9:0b:75:aa:b9:f6:fa:19:6c:95:b3:3f:ce:00:6e: 63:33:ff:e7:e6:7e:2c:08:df:eb:46:b4:b9:25:87:7b:81:04: 55:41:22:96 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt6WwyUyg2+NiSJB6Bx5gRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OGFjMTc0ZTg1MmI3MWMzMTE2M2VjMWQ4NjQ5ZmZmNmIw N2JhNzkwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjIzYTgyOWI3MmU4OGY0YzcwOGJjNGMwYTJjYmIwZjE1ZWJlNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQm3ApsD9l7FBjKnAbhFOJh9doIw 8FOLNQLhgtTTgHYK/P15RBtQEhJrp2hPyi3jRmtBFSkEE9DXS9IY9q+c/8ogm43k /Xh+a9HJ1fl1AnadtAgPg2Zjflosu5MS+/SqSo+doLmloqrF7J02WGgaMZEf8zrx 4cJaI7iHP3kYIa2R8b3VxIG0aQQL2XqYBi80dwNJ15De5rwF2YmET0oXdcLdsCCE xn/orUgLsdTwET9ToZOfwrSYWLSxrnJRpsSPDdsnT+szuCwR0c8pz5BvYDn3z35K MTmvIQS/QkW+Qs6na1u+ir0VXlSnxYAUtlAqQfjyNU/wHih4zwKlIDVgtwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFIsjqCm3Loj0xwi8TAosuw8V6+a5MB8GA1UdIwQY MBaAFNeKwXToUrccMRY+wdhkn/9rB7p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMt OTQ3ZGUzODY4Y2Q1LzEvaXlPb0tiY3VpUFRIQ0x4TUNpeTdEeFhyNXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMtOTQ3ZGUzODY4Y2Q1 LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQCWNYsMAsD BADDtuEDAwDDtjANBgkqhkiG9w0BAQsFAAOCAQEAdbeMDzl48yTi+ieI1du414Oq ICPVANG4zrThGNytgAxZ1vMfAlCsr0QZcxSgq6wPaP1CDujK+7/StzrvetTvBf/S gxM5eHjwp88lTYYsHvFo0wl4c+y1Fk5k7/NXpeSpp3I8tqyVbLIxQiSvQjX/8YkZ Nuy7O9DaDynV4Zv/Wtba2/AKIMoy/o2xVl2Q5bjOcbzNQWKvuStaz6Ajj5ob6J0r XDQujQWYawO2fQ7bVKxcUA2WmrVEXqfuH8kk2QphsmfjajLDuoReCZeuPYcozzed BYzU6ZjCt5G22Qt1qrn2+hlslbM/zgBuYzP/5+Z+LAjf60a0uSWHe4EEVUEilg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:01:34 2026 by rpki-client