This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/iPgazdI_NWGu6se1BPkdlOHXT-g.roa File: iPgazdI_NWGu6se1BPkdlOHXT-g.roa (raw, json) Hash identifier: 7OLuylsS/2TavIGOkUbdjKQBKLt/n6JEHNQvNJ0ip3s= Subject key identifier: 88:F8:1A:CD:D2:3F:35:61:AE:EA:C7:B5:04:F9:1D:94:E1:D7:4F:E8 Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611 Certificate serial: 019B7A5AEF7FAC7438A42A7F8F2B08BFC9A4 Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/iPgazdI_NWGu6se1BPkdlOHXT-g.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8468 IP address blocks: 88.83.96.0/24 maxlen: 24 88.83.104.0/24 maxlen: 24 88.83.106.0/24 maxlen: 24 88.83.109.0/24 maxlen: 24 88.83.111.0/24 maxlen: 24 88.83.116.0/24 maxlen: 24 88.83.118.0/23 maxlen: 24 88.83.124.0/23 maxlen: 24 88.83.126.0/24 maxlen: 24 195.80.2.0/24 maxlen: 24 195.80.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ef:7f:ac:74:38:a4:2a:7f:8f:2b:08:bf:c9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88f81acdd23f3561aeeac7b504f91d94e1d74fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:2c:c2:2a:35:4f:08:a8:52:93:c3:83:33: 5a:ac:54:42:42:3e:9c:e9:1f:cc:08:b7:68:aa:5c: 0d:db:88:0e:b2:01:af:3b:46:66:63:84:56:ba:20: 10:31:be:f1:3c:74:36:fa:ca:90:46:1b:8c:2f:95: 63:15:78:35:2e:18:f1:ea:1c:9a:b1:ea:3f:56:74: c8:b0:65:7d:68:a5:ee:62:74:b3:d1:87:7f:a6:0b: 07:0e:70:12:ab:bc:76:7c:c1:4c:06:b4:fe:26:a6: 79:0b:ad:66:b1:f9:4e:bd:bc:1d:6d:28:6b:7f:23: 81:74:e6:4d:8e:b7:ef:c5:e1:96:d4:a5:a2:3d:30: 0c:bf:fd:eb:99:b0:40:36:b6:73:52:11:1a:58:6c: 48:90:51:a8:6d:53:c7:3c:db:55:56:82:68:69:12: 4d:d9:c5:2f:84:01:2d:32:2a:64:f4:f6:fa:ad:96: d8:38:56:67:31:5f:b9:c4:1b:f8:13:59:91:d5:c7: 7f:59:a9:82:dd:75:3f:6e:e4:b7:53:43:4c:9f:de: e4:5f:3a:b3:28:1f:60:91:25:7a:05:0f:87:e4:c8: c0:52:3b:ab:5f:e9:7f:03:20:6c:b3:51:dc:86:25: c1:b5:07:d1:1f:22:4a:ba:24:97:30:90:f4:83:78: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:1A:CD:D2:3F:35:61:AE:EA:C7:B5:04:F9:1D:94:E1:D7:4F:E8 X509v3 Authority Key Identifier: keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/iPgazdI_NWGu6se1BPkdlOHXT-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.83.96.0/24 88.83.104.0/24 88.83.106.0/24 88.83.109.0/24 88.83.111.0/24 88.83.116.0/24 88.83.118.0/23 88.83.124.0-88.83.126.255 195.80.2.0/24 195.80.14.0/23 Signature Algorithm: sha256WithRSAEncryption 88:38:a5:0d:fe:65:63:7e:ed:41:1a:cf:f4:80:58:61:a4:62: b5:85:7f:63:07:e4:65:fa:73:d8:7f:5c:64:2d:93:7d:03:46: 1c:23:42:d9:64:67:22:cb:f4:bb:f9:89:7d:db:5c:fc:a1:51: 40:4c:42:97:83:a4:cb:47:1a:48:77:5e:54:11:e4:0a:d9:fe: c0:ea:21:c0:24:ce:60:dc:8b:e0:53:65:fa:dc:7a:ef:f9:c0: 55:8d:eb:0d:31:e4:92:f7:f0:75:bd:b0:04:79:25:b5:0e:d2: bc:66:92:46:d4:b9:64:f4:23:84:6b:2f:82:ad:69:67:fc:23: 95:65:f9:54:20:6f:79:fe:b7:43:14:e4:ff:5a:11:de:d4:6a: 64:95:dc:72:ce:27:0f:47:de:71:dc:f5:57:cd:d4:57:98:06: 85:26:81:8d:bb:a0:06:67:75:47:25:87:77:b8:fd:05:54:d6: f2:9e:c5:f5:ff:d4:3b:dd:39:15:af:44:d8:a8:e9:db:f4:30: f5:a5:2a:c2:c3:2d:94:73:55:8d:76:ff:73:b2:d5:bf:1a:9e: bb:f7:a3:df:3c:73:70:95:1b:66:42:e4:50:0c:3c:cf:3b:cf: f8:0d:bd:96:c2:37:10:12:14:c6:8a:ea:ba:8f:54:3a:6d:d3: a6:38:82:b0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt6Wu9/rHQ4pCp/jysIv8mkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTM3M2ZlZTc4MGVlYWIyYTkwNDIyZDBhZDUxNGUwODRh OGQ2MTEwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGY4MWFjZGQyM2YzNTYxYWVlYWM3YjUwNGY5MWQ5NGUxZDc0ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qYswio1TwioUpPDgzNarFRCQj6c 6R/MCLdoqlwN24gOsgGvO0ZmY4RWuiAQMb7xPHQ2+sqQRhuML5VjFXg1Lhjx6hya seo/VnTIsGV9aKXuYnSz0Yd/pgsHDnASq7x2fMFMBrT+JqZ5C61msflOvbwdbShr fyOBdOZNjrfvxeGW1KWiPTAMv/3rmbBANrZzUhEaWGxIkFGobVPHPNtVVoJoaRJN 2cUvhAEtMipk9Pb6rZbYOFZnMV+5xBv4E1mR1cd/WamC3XU/buS3U0NMn97kXzqz KB9gkSV6BQ+H5MjAUjurX+l/AyBss1HchiXBtQfRHyJKuiSXMJD0g3gJ8wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFIj4Gs3SPzVhrurHtQT5HZTh10/oMB8GA1UdIwQY MBaAFHPjc/7ngO6rKpBCLQrVFOCEqNYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTIt MDQxZmQ0YzZmZmQ0LzEvaVBnYXpkSV9OV0d1NnNlMUJQa2RsT0hYVC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTItMDQxZmQ0YzZmZmQ0 LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAWFNgAwQA WFNoAwQAWFNqAwQAWFNtAwQAWFNvAwQAWFN0AwQBWFN2MAwDBAJYU3wDBABYU34D BADDUAIDBAHDUA4wDQYJKoZIhvcNAQELBQADggEBAIg4pQ3+ZWN+7UEaz/SAWGGk YrWFf2MH5GX6c9h/XGQtk30DRhwjQtlkZyLL9Lv5iX3bXPyhUUBMQpeDpMtHGkh3 XlQR5ArZ/sDqIcAkzmDci+BTZfrceu/5wFWN6w0x5JL38HW9sAR5JbUO0rxmkkbU uWT0I4RrL4KtaWf8I5Vl+VQgb3n+t0MU5P9aEd7UamSV3HLOJw9H3nHc9VfN1FeY BoUmgY27oAZndUclh3e4/QVU1vKexfX/1DvdORWvRNio6dv0MPWlKsLDLZRzVY12 /3Oy1b8anrv3o988c3CVG2ZC5FAMPM87z/gNvZbCNxASFMaK6rqPVDpt06Y4grA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:04 2026 by rpki-client