This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w8ZuRQyK62OI8GoGdanaljFmtMI.roa File: w8ZuRQyK62OI8GoGdanaljFmtMI.roa (raw, json) Hash identifier: xLIOqMZ/996WD0cHfz0VFhrfrePPUxfR1CU3QVv6WKc= Subject key identifier: C3:C6:6E:45:0C:8A:EB:63:88:F0:6A:06:75:A9:DA:96:31:66:B4:C2 Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940 Certificate serial: 019B7CED4EF546B6A9D3A3F419D8888997E2 Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w8ZuRQyK62OI8GoGdanaljFmtMI.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39134 IP address blocks: 88.212.192.0/20 maxlen: 24 88.212.192.0/24 maxlen: 24 88.212.196.0/24 maxlen: 24 88.212.204.0/24 maxlen: 24 88.212.208.0/22 maxlen: 24 88.212.220.0/22 maxlen: 24 88.212.224.0/22 maxlen: 24 88.212.228.0/22 maxlen: 24 88.212.229.0/24 maxlen: 24 88.212.230.0/23 maxlen: 23 185.206.100.0/22 maxlen: 24 185.206.100.0/24 maxlen: 24 2a02:2100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4e:f5:46:b6:a9:d3:a3:f4:19:d8:88:89:97:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c66e450c8aeb6388f06a0675a9da963166b4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:15:37:c6:d8:51:33:9e:1e:7c:6c:e0:9e: b1:6f:15:11:cd:f0:89:83:85:c6:e3:12:bc:09:5d: b4:14:8f:f6:1e:36:d6:aa:b7:90:d3:e5:d3:69:54: 55:18:c4:28:be:94:98:d9:0d:ad:28:0e:66:8e:6c: 5f:60:10:3e:7a:6f:10:80:ad:48:73:4e:ef:ad:75: 8a:fd:84:20:af:d1:f1:62:99:78:52:b6:de:ab:64: f7:0b:02:f4:d6:98:1f:6f:14:da:de:52:38:f1:8e: f4:60:86:b2:86:46:fd:17:d6:5d:1c:f7:04:44:fc: 6f:be:97:d7:86:10:e5:e5:68:fc:c9:85:01:cb:eb: ca:29:e8:d9:62:4d:95:3e:df:d4:c5:e1:a8:e1:68: 77:58:25:c8:d8:5c:15:61:fc:b4:49:e2:53:29:41: 26:f7:eb:79:b7:e7:0a:11:92:c9:3b:5e:70:89:85: 7a:b4:ca:36:1b:c3:fa:08:c6:bf:43:28:ed:10:52: 94:af:26:dc:62:5e:4a:9e:7b:3d:76:99:a2:d7:33: d6:4b:50:75:0e:f6:0f:f1:27:ea:5d:7a:28:b8:3b: 99:79:71:41:aa:4c:92:36:43:cf:77:68:23:1c:d9: 39:f0:09:34:ee:8d:43:7a:de:16:85:c2:15:1a:49: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:6E:45:0C:8A:EB:63:88:F0:6A:06:75:A9:DA:96:31:66:B4:C2 X509v3 Authority Key Identifier: keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/w8ZuRQyK62OI8GoGdanaljFmtMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.212.192.0-88.212.211.255 88.212.220.0-88.212.231.255 185.206.100.0/22 IPv6: 2a02:2100::/32 Signature Algorithm: sha256WithRSAEncryption 9b:f3:5c:61:e6:a7:70:2d:ba:40:c2:f4:99:9e:49:f7:2b:2d: 0e:e5:a3:46:2d:95:06:bb:34:09:62:92:c5:32:e9:92:75:6e: 77:e0:5f:fc:9d:dc:ed:b8:c0:20:51:1c:c4:4d:e4:18:35:a6: 90:3a:9d:6d:1c:f7:f4:56:4c:d1:a1:6c:a9:1a:03:5c:31:ab: 29:30:fd:ab:95:3c:94:a0:02:d1:97:9d:21:1b:22:d7:7c:e5: 81:db:60:ef:f9:3e:e7:65:51:b8:7c:be:82:05:ea:0d:d2:09: a1:73:06:28:3a:26:04:06:99:ef:93:c1:bb:5b:b6:48:a2:7c: 11:69:da:f2:21:40:11:42:6b:4f:0a:19:17:8d:02:ae:e4:dd: 6a:64:c2:7e:a4:5c:4c:04:d1:fd:04:31:55:d4:ff:2f:3e:62: 9e:94:08:23:8b:33:53:62:ad:63:30:5f:da:c5:aa:96:82:ce: ed:ad:4d:4c:5d:68:8c:f1:02:b7:a7:ad:9d:10:6f:c7:25:83: 43:e6:ce:66:07:19:7c:23:43:86:75:d7:a4:8d:0a:ea:61:87: ed:06:0a:78:e6:ae:b7:14:4d:17:db:73:69:e5:47:36:16:5d: 89:1d:f8:1c:5b:00:3b:d7:41:5c:14:2a:40:c4:e3:f9:bf:4f: 8f:02:74:80 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt87U71Rrap06P0GdiIiZfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMzM1NDQyNTE0ZDUyNDliNTE0M2NmZGY4MjEyMTZiYjVj NTI5NDAwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M2NmU0NTBjOGFlYjYzODhmMDZhMDY3NWE5ZGE5NjMxNjZiNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MVN8bYUTOeHnxs4J6xbxURzfCJ g4XG4xK8CV20FI/2HjbWqreQ0+XTaVRVGMQovpSY2Q2tKA5mjmxfYBA+em8QgK1I c07vrXWK/YQgr9HxYpl4Urbeq2T3CwL01pgfbxTa3lI48Y70YIayhkb9F9ZdHPcE RPxvvpfXhhDl5Wj8yYUBy+vKKejZYk2VPt/UxeGo4Wh3WCXI2FwVYfy0SeJTKUEm 9+t5t+cKEZLJO15wiYV6tMo2G8P6CMa/QyjtEFKUrybcYl5Knns9dpmi1zPWS1B1 DvYP8SfqXXoouDuZeXFBqkySNkPPd2gjHNk58Ak07o1Det4WhcIVGkmC3QIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFMPGbkUMiutjiPBqBnWp2pYxZrTCMB8GA1UdIwQY MBaAFAEzVEJRTVJJtRQ8/fghIWu1xSlAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTIt ODE1ZDJjMDI2NjQ2LzEvdzhadVJReUs2Mk9JOEdvR2RhbmFsakZtdE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTItODE1ZDJjMDI2NjQ2 LzEvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBAZY1MAD BAJY1NAwDAMEAljU3AMEA1jU4AMEArnOZDANBAIAAjAHAwUAKgIhADANBgkqhkiG 9w0BAQsFAAOCAQEAm/NcYeancC26QML0mZ5J9ystDuWjRi2VBrs0CWKSxTLpknVu d+Bf/J3c7bjAIFEcxE3kGDWmkDqdbRz39FZM0aFsqRoDXDGrKTD9q5U8lKAC0Zed IRsi13zlgdtg7/k+52VRuHy+ggXqDdIJoXMGKDomBAaZ75PBu1u2SKJ8EWna8iFA EUJrTwoZF40CruTdamTCfqRcTATR/QQxVdT/Lz5inpQII4szU2KtYzBf2sWqloLO 7a1NTF1ojPECt6etnRBvxyWDQ+bOZgcZfCNDhnXXpI0K6mGH7QYKeOautxRNF9tz aeVHNhZdiR34HFsAO9dBXBQqQMTj+b9PjwJ0gA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:41:59 2026 by rpki-client