This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eY6rIV9lpjNtRSgUsbjCu8KRO18.roa File: eY6rIV9lpjNtRSgUsbjCu8KRO18.roa (raw, json) Hash identifier: xARunhsXA/apYr93W8PheqPyL4HmYu/zzT8xJmEV+pc= Subject key identifier: 79:8E:AB:21:5F:65:A6:33:6D:45:28:14:B1:B8:C2:BB:C2:91:3B:5F Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019AE5B7089BB824E64564381FF647389F30 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eY6rIV9lpjNtRSgUsbjCu8KRO18.roa Signing time: Wed 03 Dec 2025 19:36:09 +0000 ROA not before: Wed 03 Dec 2025 19:36:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 88.214.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:b7:08:9b:b8:24:e6:45:64:38:1f:f6:47:38:9f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 3 19:36:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=798eab215f65a6336d452814b1b8c2bbc2913b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:4b:e0:bc:8d:d5:08:f8:80:40:77:5f:40: 69:09:35:3c:f2:2b:a5:76:2b:27:39:c7:66:ef:ee: 6e:3b:9d:47:91:36:51:6c:95:28:d1:5a:83:2c:a3: 1f:6c:3b:9e:7b:7b:0b:ee:3d:32:60:d4:81:c6:83: a4:61:dc:aa:e4:5e:b8:c6:6e:92:aa:f1:33:39:76: e7:73:bf:b3:e3:8a:28:ef:7d:fd:ee:64:3a:53:d7: d6:a0:2d:54:7e:b8:af:21:91:88:9d:0a:df:2a:ba: 7c:7c:36:43:62:e1:dd:0a:7a:65:6d:44:43:28:cf: c2:85:97:c5:6f:91:7d:9d:c7:ff:69:45:1d:aa:7e: 68:03:bb:5b:fa:a5:52:f2:ff:53:e4:40:5f:5e:06: b5:29:04:46:b6:90:6f:08:0d:a0:0d:b6:7b:71:9f: d5:f1:db:6d:01:6b:f4:49:62:51:f3:3d:98:f7:7c: 1f:33:b0:f2:73:4d:a7:b3:4a:a2:69:91:d2:d6:8e: 3c:fd:cd:f0:f9:d4:db:8e:2a:f7:23:04:0b:cb:09: c9:ce:bd:91:7f:00:05:d1:97:90:41:08:05:b6:42: 0c:7b:a8:31:cc:86:dd:62:be:60:ec:e6:7a:0b:e3: 68:ad:56:d0:b3:ea:a0:16:48:02:0f:82:59:9a:1f: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8E:AB:21:5F:65:A6:33:6D:45:28:14:B1:B8:C2:BB:C2:91:3B:5F X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/eY6rIV9lpjNtRSgUsbjCu8KRO18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.55.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b2:cd:51:30:c8:a4:c7:48:9f:ae:85:af:a9:0f:f4:12:7b: 9e:b3:b9:28:2f:58:72:56:bf:82:de:0c:0d:42:c9:65:61:c2: a9:49:99:b9:3b:39:5c:99:c7:15:ca:14:97:39:84:2f:dc:5e: 02:98:85:de:8f:9b:73:64:6f:a1:29:14:4b:33:4e:d2:94:6e: 2c:11:e8:47:e3:4c:b7:7c:85:36:6d:a6:0f:8d:85:91:e3:f2: f6:1e:ae:e3:0a:91:05:16:c5:e3:12:95:09:11:7d:c3:75:4f: dd:eb:06:00:9f:bb:28:3b:0d:36:7b:1b:cf:4b:12:2a:08:90: 76:53:91:a7:1d:82:81:c8:7b:50:e1:24:89:00:b2:78:7c:06: 33:7c:a5:76:4e:45:87:40:50:a6:41:aa:d0:14:4f:7f:c2:0e: 41:3c:17:d4:01:22:16:2a:48:d1:c6:2f:c2:05:a1:dc:09:63: 1d:b6:6b:51:f3:bf:85:ac:04:1b:94:49:63:fe:eb:d3:5b:ce: 4a:88:72:dc:9a:45:91:4b:59:c4:6b:6a:5d:67:dd:95:cd:ed: ea:ed:60:90:88:e5:71:f5:bb:ee:c3:e2:50:45:ff:ea:ac:34: ba:c2:93:f4:13:4b:76:5d:62:59:01:dc:6e:1e:40:65:91:a3: c1:34:23:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrltwibuCTmRWQ4H/ZHOJ8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjAzMTkzNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OThlYWIyMTVmNjVhNjMzNmQ0NTI4MTRiMWI4YzJiYmMyOTEzYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lhL4LyN1Qj4gEB3X0BpCTU88iul disnOcdm7+5uO51HkTZRbJUo0VqDLKMfbDuee3sL7j0yYNSBxoOkYdyq5F64xm6S qvEzOXbnc7+z44oo73397mQ6U9fWoC1UfrivIZGInQrfKrp8fDZDYuHdCnplbURD KM/ChZfFb5F9ncf/aUUdqn5oA7tb+qVS8v9T5EBfXga1KQRGtpBvCA2gDbZ7cZ/V 8dttAWv0SWJR8z2Y93wfM7Dyc02ns0qiaZHS1o48/c3w+dTbjir3IwQLywnJzr2R fwAF0ZeQQQgFtkIMe6gxzIbdYr5g7OZ6C+NorVbQs+qgFkgCD4JZmh9XAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmOqyFfZaYzbUUoFLG4wrvCkTtfMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvZVk2cklWOWxwak50UlNnVXNiakN1OEtSTzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNY3MA0G CSqGSIb3DQEBCwUAA4IBAQA8ss1RMMikx0ifroWvqQ/0Enues7koL1hyVr+C3gwN QsllYcKpSZm5OzlcmccVyhSXOYQv3F4CmIXej5tzZG+hKRRLM07SlG4sEehH40y3 fIU2baYPjYWR4/L2Hq7jCpEFFsXjEpUJEX3DdU/d6wYAn7soOw02exvPSxIqCJB2 U5GnHYKByHtQ4SSJALJ4fAYzfKV2TkWHQFCmQarQFE9/wg5BPBfUASIWKkjRxi/C BaHcCWMdtmtR87+FrAQblElj/uvTW85KiHLcmkWRS1nEa2pdZ92Vze3q7WCQiOVx 9bvuw+JQRf/qrDS6wpP0E0t2XWJZAdxuHkBlkaPBNCPJ -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:05 2025 by rpki-client