This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WSqAKS32qZddCtX5UkiFXlnkp88.roa File: WSqAKS32qZddCtX5UkiFXlnkp88.roa (raw, json) Hash identifier: WhL+3anRVyQf5+/PAbPHrY7brX4fpcHT/ZFt4pvR0AQ= Subject key identifier: 59:2A:80:29:2D:F6:A9:97:5D:0A:D5:F9:52:48:85:5E:59:E4:A7:CF Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783440D8B4D14D7E9AD3A5004C43E80B Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WSqAKS32qZddCtX5UkiFXlnkp88.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 932 IP address blocks: 88.218.192.0/24 maxlen: 24 88.218.194.0/23 maxlen: 24 176.113.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:40:d8:b4:d1:4d:7e:9a:d3:a5:00:4c:43:e8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=592a80292df6a9975d0ad5f95248855e59e4a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:15:b7:f4:33:f6:af:f8:d1:32:7c:65:4a:7c: f3:06:60:eb:50:83:83:2d:d4:67:e4:01:1b:ac:17: 7a:4e:3b:26:2a:79:47:f2:79:2a:1a:6a:31:36:f5: db:e7:39:19:ff:3f:be:27:f5:52:11:a0:8a:15:07: 7c:bb:5f:25:28:63:48:a4:2b:2b:4d:df:da:09:15: 7f:6e:f3:cd:ab:6a:69:09:2a:c5:bd:36:ac:0e:3a: e4:38:3b:22:15:ce:33:fb:7e:32:3d:bf:16:0e:9f: 6e:e3:d7:af:71:a4:6f:18:0c:bb:8d:c3:3a:b2:4b: 3e:3b:18:3f:40:95:4c:31:44:28:65:54:3f:15:da: 8d:b3:29:49:4e:95:b6:ca:37:17:73:7d:1d:d9:c9: 02:71:b5:53:c4:39:33:d3:6c:f5:ca:53:24:04:46: 1a:93:02:c3:c3:6d:23:58:88:b1:a3:e7:1b:5e:23: 7d:cd:e8:7e:2b:c7:9e:14:ee:8d:c3:4d:7e:9c:45: 7c:21:a1:93:01:bf:24:64:1a:b6:bc:07:df:5c:45: e2:89:03:83:b8:3e:cd:90:1b:36:74:c0:95:52:05: 06:14:e7:bd:43:66:ae:ef:27:95:84:71:c5:ed:56: 52:81:5f:38:84:70:f2:33:1e:09:7d:06:5f:7a:78: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:80:29:2D:F6:A9:97:5D:0A:D5:F9:52:48:85:5E:59:E4:A7:CF X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/WSqAKS32qZddCtX5UkiFXlnkp88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.192.0/24 88.218.194.0/23 176.113.70.0/24 Signature Algorithm: sha256WithRSAEncryption 70:dd:7e:e8:1a:dd:e1:8c:f3:0b:81:14:f0:db:26:a7:06:83: c4:28:92:85:6c:3d:0b:4d:a3:48:cd:0e:d3:70:ae:47:3c:62: 64:ad:14:ea:f9:b4:11:8e:3a:ec:32:26:62:8a:bf:83:63:3a: df:fa:92:05:43:fc:65:c0:37:23:31:ee:ca:2e:5a:8f:20:90: 5a:1e:ab:97:20:25:ab:3e:5c:23:f2:c8:e3:0f:aa:6f:45:a9: 68:af:ea:df:88:6f:06:42:49:4b:7c:7e:52:90:7e:d2:de:c6: 83:a8:c6:de:cf:a8:22:ad:b4:59:8f:d8:60:f0:c5:7f:ff:0d: 28:e2:c4:1e:b5:2c:57:0d:c8:e6:15:1c:bd:f7:61:c4:04:c9: f8:da:6a:36:f7:c1:1d:fe:a6:57:3b:7f:09:b2:84:dc:3b:c3: 3c:e9:0a:79:b4:e0:3e:8a:94:59:5b:60:50:ce:67:9d:36:59: d7:d6:d9:48:37:91:4e:bc:e2:11:c3:cb:28:33:c4:89:99:70: 58:02:b1:34:cf:bd:a5:4d:a5:68:5e:9d:40:87:e5:2d:48:aa: 52:5d:5c:5a:88:3b:8a:89:9e:80:d2:2f:ff:78:e2:ab:5a:68: 7d:be:34:a0:a8:a8:03:d9:63:ba:a5:76:17:35:76:4d:2b:ec: 41:c8:72:59 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NEDYtNFNfprTpQBMQ+gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTJhODAyOTJkZjZhOTk3NWQwYWQ1Zjk1MjQ4ODU1ZTU5ZTRhN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BW39DP2r/jRMnxlSnzzBmDrUIOD LdRn5AEbrBd6TjsmKnlH8nkqGmoxNvXb5zkZ/z++J/VSEaCKFQd8u18lKGNIpCsr Td/aCRV/bvPNq2ppCSrFvTasDjrkODsiFc4z+34yPb8WDp9u49evcaRvGAy7jcM6 sks+Oxg/QJVMMUQoZVQ/FdqNsylJTpW2yjcXc30d2ckCcbVTxDkz02z1ylMkBEYa kwLDw20jWIixo+cbXiN9zeh+K8eeFO6Nw01+nEV8IaGTAb8kZBq2vAffXEXiiQOD uD7NkBs2dMCVUgUGFOe9Q2au7yeVhHHF7VZSgV84hHDyMx4JfQZfenhrWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFkqgCkt9qmXXQrV+VJIhV5Z5KfPMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvV1NxQUtTMzJxWmRkQ3RYNVVraUZYbG5rcDg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNrAAwQB WNrCAwQAsHFGMA0GCSqGSIb3DQEBCwUAA4IBAQBw3X7oGt3hjPMLgRTw2yanBoPE KJKFbD0LTaNIzQ7TcK5HPGJkrRTq+bQRjjrsMiZiir+DYzrf+pIFQ/xlwDcjMe7K LlqPIJBaHquXICWrPlwj8sjjD6pvRalor+rfiG8GQklLfH5SkH7S3saDqMbez6gi rbRZj9hg8MV//w0o4sQetSxXDcjmFRy992HEBMn42mo298Ed/qZXO38JsoTcO8M8 6Qp5tOA+ipRZW2BQzmedNlnX1tlIN5FOvOIRw8soM8SJmXBYArE0z72lTaVoXp1A h+UtSKpSXVxaiDuKiZ6A0i//eOKrWmh9vjSgqKgD2WO6pXYXNXZNK+xByHJZ -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:00 2026 by rpki-client