This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/avohNYANBKv4qq3XkcvTOdS38TQ.roa File: avohNYANBKv4qq3XkcvTOdS38TQ.roa (raw, json) Hash identifier: iaIygUnr7eXRMWhN6cRZ9bof6sesbaqZvOPUXchc93o= Subject key identifier: 6A:FA:21:35:80:0D:04:AB:F8:AA:AD:D7:91:CB:D3:39:D4:B7:F1:34 Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Certificate serial: 019B7C1289D249FBAD65963A8669EB4E58C7 Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/avohNYANBKv4qq3XkcvTOdS38TQ.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42288 IP address blocks: 88.218.18.0/24 maxlen: 24 88.218.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:89:d2:49:fb:ad:65:96:3a:86:69:eb:4e:58:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6afa2135800d04abf8aaadd791cbd339d4b7f134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:c4:8b:d5:13:9c:07:74:a6:2c:2f:98:7f: 8a:1e:bd:42:02:28:a7:d1:ae:c5:f2:62:81:8e:74: bf:17:58:7f:29:27:b3:fb:f5:f1:41:92:9b:1a:e2: aa:22:bc:e6:13:e0:a7:6c:29:cb:7e:bd:44:34:05: e4:b2:18:4e:89:80:dd:e6:74:95:4f:59:ac:cf:75: cc:f8:5a:68:3a:99:de:e5:1b:70:ef:d7:c4:5a:c9: 6a:90:7c:c1:89:20:bc:a3:c6:c7:ff:bf:0b:0f:0e: d0:4d:20:8b:e1:5e:bc:0d:17:3d:96:dd:1b:3e:42: 46:2e:ba:e9:55:2a:f1:bd:ee:d9:53:ba:f2:0c:4b: 89:5b:80:ae:b2:65:f2:ad:2f:f3:5b:57:a8:65:a5: 67:42:03:fd:6e:27:4f:53:23:ea:bf:c2:dc:87:b0: c8:93:15:bf:c6:11:7a:42:21:62:47:b7:ae:a1:58: 30:24:3e:07:58:10:c9:8d:b0:fb:6c:19:0b:f9:8b: eb:b4:ac:0a:86:7c:b4:cc:c7:58:24:4d:88:87:e2: 61:ab:5a:ed:36:29:ba:fc:88:de:22:db:0d:5f:91: f3:61:a4:2e:36:4d:39:7e:62:9f:f0:75:0a:a9:cd: e6:52:a9:48:9c:14:3b:50:24:c8:d0:7a:d5:5b:90: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FA:21:35:80:0D:04:AB:F8:AA:AD:D7:91:CB:D3:39:D4:B7:F1:34 X509v3 Authority Key Identifier: keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/avohNYANBKv4qq3XkcvTOdS38TQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.18.0/23 Signature Algorithm: sha256WithRSAEncryption 48:4b:3d:26:27:0d:05:0f:0b:6b:46:54:e3:1b:89:de:e5:55: f7:35:01:b9:91:4a:0b:82:71:98:cc:a4:9b:1d:1a:cc:32:ae: ff:1b:74:b3:26:b9:39:e7:b0:a8:8a:8a:94:78:4a:2c:ca:9e: 78:f8:56:8b:3d:92:09:82:ba:5d:63:ca:99:9e:e3:7a:2b:d1: ab:65:e8:cd:51:7d:9c:b8:19:82:fc:a1:e8:8d:1c:8d:63:70: bd:0a:87:26:a6:70:17:e4:88:ac:6b:53:b7:1e:02:6a:f9:1a: e7:55:45:e2:42:51:a0:81:e5:a7:9b:ae:8d:f9:13:75:61:a6: 6b:8d:71:ba:78:83:0f:7f:42:5a:93:00:25:74:a9:2f:45:21: 6a:67:50:37:52:45:21:f1:05:74:05:4a:fe:b9:1c:74:71:ff: e4:13:a4:5d:27:7a:88:96:6c:f5:6f:a4:f2:7d:e6:8d:df:4d: c7:45:8b:4f:cf:11:cd:69:20:0c:b8:a3:94:07:7e:37:6f:98: 0a:ac:0a:ca:da:f3:c0:4e:fe:2f:2d:2f:64:c2:86:7e:fb:c9: 99:ff:f6:31:a9:16:47:10:58:d7:30:e2:04:8f:fc:2b:61:09: 1f:c0:d2:82:c8:6a:5c:89:e8:31:3b:a5:f5:87:a8:2e:3e:16: 34:a0:93:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EonSSfutZZY6hmnrTljHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1 MjIwMzMwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWZhMjEzNTgwMGQwNGFiZjhhYWFkZDc5MWNiZDMzOWQ0YjdmMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq7Ei9UTnAd0piwvmH+KHr1CAiin 0a7F8mKBjnS/F1h/KSez+/XxQZKbGuKqIrzmE+CnbCnLfr1ENAXkshhOiYDd5nSV T1msz3XM+FpoOpne5Rtw79fEWslqkHzBiSC8o8bH/78LDw7QTSCL4V68DRc9lt0b PkJGLrrpVSrxve7ZU7ryDEuJW4CusmXyrS/zW1eoZaVnQgP9bidPUyPqv8Lch7DI kxW/xhF6QiFiR7euoVgwJD4HWBDJjbD7bBkL+YvrtKwKhny0zMdYJE2Ih+Jhq1rt Nim6/IjeItsNX5HzYaQuNk05fmKf8HUKqc3mUqlInBQ7UCTI0HrVW5DjRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGr6ITWADQSr+Kqt15HL0znUt/E0MB8GA1UdIwQY MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt MThlODZmMGIxZDgxLzEvYXZvaE5ZQU5CS3Y0cXEzWGtjdlRPZFMzOFRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNoSMA0G CSqGSIb3DQEBCwUAA4IBAQBISz0mJw0FDwtrRlTjG4ne5VX3NQG5kUoLgnGYzKSb HRrMMq7/G3SzJrk557CoioqUeEosyp54+FaLPZIJgrpdY8qZnuN6K9GrZejNUX2c uBmC/KHojRyNY3C9CocmpnAX5Iisa1O3HgJq+RrnVUXiQlGggeWnm66N+RN1YaZr jXG6eIMPf0JakwAldKkvRSFqZ1A3UkUh8QV0BUr+uRx0cf/kE6RdJ3qIlmz1b6Ty feaN303HRYtPzxHNaSAMuKOUB343b5gKrArK2vPATv4vLS9kwoZ++8mZ//YxqRZH EFjXMOIEj/wrYQkfwNKCyGpciegxO6X1h6guPhY0oJN8 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:08 2026 by rpki-client