This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa File: i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa (raw, json) Hash identifier: R7V99BPh2gSY158u1xq56jjcC0ccD7ZBtCrVoXgm5mE= Subject key identifier: 8B:C1:F7:69:4E:5B:81:6D:7C:B9:81:E1:38:E0:5F:59:9E:C4:26:1F Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c Certificate serial: 019B78A275C6FCA65DF97FC8858D9D81341B Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 88.135.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:75:c6:fc:a6:5d:f9:7f:c8:85:8d:9d:81:34:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bc1f7694e5b816d7cb981e138e05f599ec4261f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:2a:3f:e1:b8:f7:ab:f7:07:04:cc:17:bf: 4c:f6:c9:1b:5a:06:c6:e3:c4:47:c8:87:85:9c:3a: 53:eb:ce:69:fb:b8:5a:55:c1:96:45:97:94:3c:de: 26:b0:7d:be:0b:a3:4f:76:8b:7f:42:ea:3e:99:d4: 60:59:e3:e9:25:5c:b3:63:dc:7c:66:3d:19:66:8e: f0:44:d6:49:f8:c2:3c:ab:7f:d0:52:57:cb:c8:8f: bb:58:3a:0a:af:69:b7:06:9a:28:9d:9b:4d:2c:30: 4f:9f:e5:3e:c4:d1:b9:77:b1:4f:13:bf:4c:05:53: 49:25:34:f9:d4:b4:64:c0:25:25:e1:f6:4c:62:8c: f7:5f:75:97:4b:dd:d1:56:9e:00:46:1e:96:c7:e3: 30:94:da:e1:d3:a3:f9:16:a0:23:2f:61:88:b3:8a: 61:86:b5:fa:af:ac:2d:3d:21:63:c1:b2:1a:3e:80: 02:9b:06:cd:c9:38:56:88:53:60:c0:e9:ee:03:73: d8:63:64:b0:96:d5:7c:11:04:30:6d:68:f2:72:58: c3:0c:77:6e:06:72:ac:fa:c9:30:aa:be:74:c1:1f: 3f:ce:fe:b1:e4:f1:c7:71:10:cb:44:6f:25:cf:d0: f4:e0:4b:1a:e5:5e:8b:87:9b:65:2b:91:42:5f:70: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:F7:69:4E:5B:81:6D:7C:B9:81:E1:38:E0:5F:59:9E:C4:26:1F X509v3 Authority Key Identifier: keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.72.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c4:06:37:25:1b:a8:1e:71:f2:2c:5c:ff:30:01:49:4a:cf: 80:72:2e:15:11:a9:4d:a4:1d:83:d2:23:c0:5f:43:a9:20:5a: 24:04:99:01:96:dc:e7:97:66:9b:a6:cd:3c:aa:cf:c6:37:3b: ba:7b:d4:64:d5:f9:a8:3f:11:8f:af:65:80:2c:0d:61:be:33: 14:72:a0:b6:72:5f:4e:5a:c8:95:9a:17:68:37:44:49:ae:6f: 9e:77:9e:dc:97:4e:80:4f:58:c1:65:86:aa:38:14:d0:b3:d1: e6:8c:80:48:ae:2a:56:4f:1f:f0:b9:f0:72:c5:f2:3a:46:62: ca:3e:2b:53:94:0f:79:0e:96:89:1f:5d:c8:32:03:14:f8:a8: 21:2b:07:c7:0e:c1:9a:9a:dc:1e:18:73:53:bc:54:80:e0:d8: d4:40:a0:4d:65:ec:9e:af:ab:8a:66:e2:62:17:b6:44:ed:81: 50:94:77:b5:c4:15:ec:77:69:56:85:aa:4f:9b:a9:9f:e7:fc: 1f:7d:d1:16:b3:c9:0d:2c:02:2e:d8:a0:52:7c:b7:0c:fc:3f: 70:56:7f:4f:3e:38:93:21:fb:6e:ad:e9:f6:97:8d:7b:9f:41: 20:8e:fe:32:3b:d1:22:6c:f3:4b:eb:ca:69:c4:fc:c8:f1:8f: 49:18:1a:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onXG/KZd+X/IhY2dgTQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjU1YWZmZTA4NDMxMWI2ZWEwMmZiZTQ2ODZiNzk0NTM1 OTg2MWMwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmMxZjc2OTRlNWI4MTZkN2NiOTgxZTEzOGUwNWY1OTllYzQyNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0qP+G496v3BwTMF79M9skbWgbG 48RHyIeFnDpT685p+7haVcGWRZeUPN4msH2+C6NPdot/Quo+mdRgWePpJVyzY9x8 Zj0ZZo7wRNZJ+MI8q3/QUlfLyI+7WDoKr2m3BpoonZtNLDBPn+U+xNG5d7FPE79M BVNJJTT51LRkwCUl4fZMYoz3X3WXS93RVp4ARh6Wx+MwlNrh06P5FqAjL2GIs4ph hrX6r6wtPSFjwbIaPoACmwbNyThWiFNgwOnuA3PYY2SwltV8EQQwbWjycljDDHdu BnKs+skwqr50wR8/zv6x5PHHcRDLRG8lz9D04Esa5V6Lh5tlK5FCX3BwNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvB92lOW4FtfLmB4TjgX1mexCYfMB8GA1UdIwQY MBaAFK4lWv/ghDEbbqAvvkaGt5RTWYYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEt MTQxNWY4YzcwMzhlLzEvaThIM2FVNWJnVzE4dVlIaE9PQmZXWjdFSmg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEtMTQxNWY4YzcwMzhl LzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWIdIMA0G CSqGSIb3DQEBCwUAA4IBAQCBxAY3JRuoHnHyLFz/MAFJSs+Aci4VEalNpB2D0iPA X0OpIFokBJkBltznl2abps08qs/GNzu6e9Rk1fmoPxGPr2WALA1hvjMUcqC2cl9O WsiVmhdoN0RJrm+ed57cl06AT1jBZYaqOBTQs9HmjIBIripWTx/wufByxfI6RmLK PitTlA95DpaJH13IMgMU+KghKwfHDsGamtweGHNTvFSA4NjUQKBNZeyer6uKZuJi F7ZE7YFQlHe1xBXsd2lWhapPm6mf5/wffdEWs8kNLAIu2KBSfLcM/D9wVn9PPjiT Ifturen2l417n0Egjv4yO9EibPNL68ppxPzI8Y9JGBoZ -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:53 2026 by rpki-client