This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/2uecjOvLN1BSU6b3oazOrql7q2M.roa File: 2uecjOvLN1BSU6b3oazOrql7q2M.roa (raw, json) Hash identifier: ZX6X4gaPr/5A/SYnCtAMK/rTL/P4oXacFopRXkrrmR4= Subject key identifier: DA:E7:9C:8C:EB:CB:37:50:52:53:A6:F7:A1:AC:CE:AE:A9:7B:AB:63 Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b Certificate serial: 019B7C1238E69646C1FB1BE1BD6C44F30AFC Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/2uecjOvLN1BSU6b3oazOrql7q2M.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61071 IP address blocks: 88.213.210.0/24 maxlen: 24 88.213.211.0/24 maxlen: 24 88.213.213.0/24 maxlen: 24 88.213.214.0/23 maxlen: 23 88.213.214.0/24 maxlen: 24 88.213.215.0/24 maxlen: 24 178.217.88.0/22 maxlen: 24 185.134.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:38:e6:96:46:c1:fb:1b:e1:bd:6c:44:f3:0a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dae79c8cebcb37505253a6f7a1acceaea97bab63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:c2:98:53:80:7b:48:c4:3a:e9:c0:07:94: 5e:5e:c5:08:c5:02:8a:c9:87:34:51:fa:a4:dd:88: 8a:fc:da:55:bb:15:d8:f7:38:1a:75:ed:00:67:86: 3a:78:d7:ce:ca:c7:42:ab:fc:b6:18:5f:ae:8d:40: e3:3b:75:0a:c4:91:c2:08:ea:75:b8:e1:6e:a4:63: 9e:60:3c:0b:1f:39:ff:84:27:b2:44:9f:50:05:74: 82:09:4d:96:20:64:00:e1:96:b3:16:58:41:22:35: 3f:b2:49:e7:fb:21:04:6d:fb:a1:45:da:eb:4f:9a: 35:59:5a:33:fe:d1:c6:b8:80:78:9d:d6:20:60:6d: 61:e0:10:e5:75:45:71:ea:d1:a9:d9:0a:2d:29:dd: 5e:2d:fe:1d:dd:51:9d:4a:68:15:0a:aa:01:8e:c9: 8c:fb:2a:13:dd:f9:b6:91:6e:57:96:72:34:da:f3: ac:e1:b3:bb:f3:bf:06:21:7d:57:6f:bb:65:a3:c1: 83:ae:cb:e6:40:26:7e:1c:44:81:25:71:35:25:f7: 26:2a:8f:e0:a5:0f:6b:8a:db:f3:ad:f3:76:4a:e2: 9f:b2:0b:75:60:53:0e:ed:03:99:64:28:c3:1e:90: 24:1d:31:96:e3:4a:69:50:58:bd:2b:94:fe:05:01: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E7:9C:8C:EB:CB:37:50:52:53:A6:F7:A1:AC:CE:AE:A9:7B:AB:63 X509v3 Authority Key Identifier: keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/2uecjOvLN1BSU6b3oazOrql7q2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.213.210.0/23 88.213.213.0-88.213.215.255 178.217.88.0/22 185.134.228.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:ae:ba:72:af:ab:f2:ce:78:73:60:93:68:77:a8:99:3a:29: 67:7f:e5:77:01:bf:55:ef:79:3b:be:a0:0a:40:25:3b:06:fe: 88:c1:9b:b4:bf:d7:bf:cc:2b:c1:19:8d:1a:7d:c9:58:d8:1e: 60:d0:a1:4c:f3:8e:31:93:80:16:be:9f:c5:8c:85:9f:6c:72: fa:6e:60:6b:84:b9:a0:9e:92:0a:a1:f2:38:86:d6:9b:68:dd: 78:e7:3a:69:83:bb:64:ea:49:b7:8b:83:ff:96:ed:1b:2d:6d: 6a:6a:f5:91:5a:9c:cd:8a:dd:7a:df:ec:8f:be:25:65:d3:ea: b8:ec:ea:d2:e6:cb:49:5f:25:5d:69:9d:ca:9b:19:db:3e:c1: 51:a5:9e:15:7c:d6:37:7e:e2:59:44:f1:bd:87:e8:7c:27:d9: ef:3b:f4:b5:3b:c6:17:32:5a:ed:f5:85:f3:2a:9f:73:7a:d5: 1a:67:78:cc:87:c8:4d:ed:88:e8:3c:a8:1b:9d:af:22:f9:a3: 1a:2b:c5:e1:71:46:a3:78:20:e4:e1:92:7b:52:ca:c6:7b:30: 14:68:9c:f3:20:c2:b5:c3:eb:e2:22:c7:f5:0c:52:51:f1:ad: d9:cc:80:c1:13:0d:62:14:c9:38:54:49:78:49:18:f7:f8:7f: 6c:4e:e0:c5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8EjjmlkbB+xvhvWxE8wr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5 ODA5MGIwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWU3OWM4Y2ViY2IzNzUwNTI1M2E2ZjdhMWFjY2VhZWE5N2JhYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmljCmFOAe0jEOunAB5ReXsUIxQKK yYc0Ufqk3YiK/NpVuxXY9zgade0AZ4Y6eNfOysdCq/y2GF+ujUDjO3UKxJHCCOp1 uOFupGOeYDwLHzn/hCeyRJ9QBXSCCU2WIGQA4ZazFlhBIjU/sknn+yEEbfuhRdrr T5o1WVoz/tHGuIB4ndYgYG1h4BDldUVx6tGp2QotKd1eLf4d3VGdSmgVCqoBjsmM +yoT3fm2kW5XlnI02vOs4bO7878GIX1Xb7tlo8GDrsvmQCZ+HESBJXE1JfcmKo/g pQ9ritvzrfN2SuKfsgt1YFMO7QOZZCjDHpAkHTGW40ppUFi9K5T+BQHFswIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNrnnIzryzdQUlOm96Gszq6pe6tjMB8GA1UdIwQY MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt MzA2YzU2NTEzNDNlLzEvMnVlY2pPdkxOMUJTVTZiM29hek9ycWw3cTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBWNXSMAwD BABY1dUDBANY1dADBAKy2VgDBAK5huQwDQYJKoZIhvcNAQELBQADggEBAGuuunKv q/LOeHNgk2h3qJk6KWd/5XcBv1XveTu+oApAJTsG/ojBm7S/17/MK8EZjRp9yVjY HmDQoUzzjjGTgBa+n8WMhZ9scvpuYGuEuaCekgqh8jiG1pto3XjnOmmDu2TqSbeL g/+W7RstbWpq9ZFanM2K3Xrf7I++JWXT6rjs6tLmy0lfJV1pncqbGds+wVGlnhV8 1jd+4llE8b2H6Hwn2e879LU7xhcyWu31hfMqn3N61RpneMyHyE3tiOg8qBudryL5 oxorxeFxRqN4IOThkntSysZ7MBRonPMgwrXD6+Iix/UMUlHxrdnMgMETDWIUyThU SXhJGPf4f2xO4MU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:38 2026 by rpki-client