This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z88SnKsP5pvSo6qR47qZ1pWeSD0.roa File: z88SnKsP5pvSo6qR47qZ1pWeSD0.roa (raw, json) Hash identifier: oetmktJllcCOEDyCyKgeosdoCyMncQj+BUuqs+6CrFg= Subject key identifier: CF:CF:12:9C:AB:0F:E6:9B:D2:A3:AA:91:E3:BA:99:D6:95:9E:48:3D Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB14A0D4A95C129E2376F59F08A9F8 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z88SnKsP5pvSo6qR47qZ1pWeSD0.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203936 IP address blocks: 45.93.180.0/22 maxlen: 24 45.144.248.0/22 maxlen: 24 89.40.238.0/24 maxlen: 24 89.43.72.0/24 maxlen: 24 89.43.198.0/24 maxlen: 24 89.44.145.0/24 maxlen: 24 185.249.232.0/24 maxlen: 24 185.253.144.0/22 maxlen: 24 185.253.145.0/24 maxlen: 24 193.39.92.0/24 maxlen: 24 193.39.93.0/24 maxlen: 24 193.39.94.0/24 maxlen: 24 193.39.95.0/24 maxlen: 24 194.15.219.0/24 maxlen: 24 194.15.232.0/24 maxlen: 24 194.15.236.0/24 maxlen: 24 194.26.1.0/24 maxlen: 24 2a0c:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:14:a0:d4:a9:5c:12:9e:23:76:f5:9f:08:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfcf129cab0fe69bd2a3aa91e3ba99d6959e483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:e9:f6:c0:cd:1b:f4:a3:51:72:c6:eb:93: 5a:df:8f:07:08:79:b8:6c:c9:70:bc:4f:63:8d:bc: 7f:23:91:c3:36:d4:8f:d8:3b:b4:90:bb:03:db:09: a4:1c:85:6a:9e:b1:5c:75:1e:b7:cb:e7:1c:4f:ad: d3:37:c1:c5:d5:33:67:d6:c4:23:ce:86:2b:40:ad: ab:32:dd:52:f4:0f:a4:85:da:8a:5b:74:10:98:99: 17:4a:23:8d:b6:fa:01:fd:ad:70:e1:0c:5a:99:77: 7b:69:51:48:88:84:54:c5:23:84:5b:89:35:df:34: f3:7f:48:72:d8:a1:ff:ff:85:a5:a9:d6:a5:02:93: e9:24:c4:51:63:e9:a7:0a:28:ed:c4:0b:73:63:fe: ab:55:80:58:a8:18:e3:50:37:ee:90:5f:b1:5a:cb: 7a:72:0d:ec:39:99:56:a6:48:46:c9:de:6a:ac:26: d3:bb:da:1e:a5:fb:eb:2f:b9:e8:e3:5d:63:5f:16: 6c:45:a7:78:1f:60:27:b1:66:6e:60:06:a1:10:65: 44:7e:3c:77:2f:2e:7d:9a:07:70:82:78:4f:7f:e9: ed:cc:3d:23:13:d1:28:44:8b:06:3f:fc:3d:e1:af: ab:18:b1:a3:12:03:d5:94:a3:a1:e6:16:4c:d6:67: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:12:9C:AB:0F:E6:9B:D2:A3:AA:91:E3:BA:99:D6:95:9E:48:3D X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/z88SnKsP5pvSo6qR47qZ1pWeSD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.180.0/22 45.144.248.0/22 89.40.238.0/24 89.43.72.0/24 89.43.198.0/24 89.44.145.0/24 185.249.232.0/24 185.253.144.0/22 193.39.92.0/22 194.15.219.0/24 194.15.232.0/24 194.15.236.0/24 194.26.1.0/24 IPv6: 2a0c:1380::/29 Signature Algorithm: sha256WithRSAEncryption 84:d1:74:79:71:9c:da:8b:93:fd:05:8b:d5:58:9d:5c:4c:f6: ef:af:c4:e7:1e:ad:c3:94:50:f6:eb:bd:34:01:b6:ff:5b:f6: 3b:82:a2:97:e2:2d:bf:54:30:66:73:d4:dc:82:8a:fe:75:ef: 6f:29:3d:b4:dc:6d:b3:47:ed:2d:17:1f:de:54:a9:f7:36:49: 79:d8:b7:34:ea:a4:af:77:f7:88:c3:fc:9b:85:f4:36:2f:c4: f1:8c:b8:38:44:0a:38:5f:b7:06:ba:98:05:b9:2d:f4:53:3c: ea:40:f8:c3:6c:2e:b9:7f:fe:d4:76:23:f3:c9:2a:3b:59:4f: ec:c5:98:64:60:37:49:a5:3e:47:6c:68:8d:f0:40:63:5d:a9: f5:b6:a6:56:97:93:d4:51:ce:ec:ed:89:f9:c6:39:0c:84:9c: 72:ae:29:06:ab:35:bd:ea:91:49:fa:68:0b:da:0a:5b:fa:9a: b0:31:5b:8f:52:56:fa:f9:26:62:c4:4b:e9:96:96:5a:0a:81: 16:69:33:f8:cc:f4:c9:51:1a:23:b1:ea:26:a1:70:6d:82:3a: 9a:53:f4:d5:f9:23:45:92:20:88:18:28:49:e5:cd:e5:a0:a8: e2:dd:b0:42:ec:26:b5:c1:b6:b2:56:0c:b3:30:12:1a:35:aa: 0b:e0:5f:de -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt26xSg1KlcEp4jdvWfCKn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmNmMTI5Y2FiMGZlNjliZDJhM2FhOTFlM2JhOTlkNjk1OWU0ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLp9sDNG/SjUXLG65Na348HCHm4 bMlwvE9jjbx/I5HDNtSP2Du0kLsD2wmkHIVqnrFcdR63y+ccT63TN8HF1TNn1sQj zoYrQK2rMt1S9A+khdqKW3QQmJkXSiONtvoB/a1w4QxamXd7aVFIiIRUxSOEW4k1 3zTzf0hy2KH//4WlqdalApPpJMRRY+mnCijtxAtzY/6rVYBYqBjjUDfukF+xWst6 cg3sOZlWpkhGyd5qrCbTu9oepfvrL7no411jXxZsRad4H2AnsWZuYAahEGVEfjx3 Ly59mgdwgnhPf+ntzD0jE9EoRIsGP/w94a+rGLGjEgPVlKOh5hZM1mcCRQIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFM/PEpyrD+ab0qOqkeO6mdaVnkg9MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvejg4U25Lc1A1cHZTbzZxUjQ3cVoxcFdlU0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLV20AwQC LZD4AwQAWSjuAwQAWStIAwQAWSvGAwQAWSyRAwQAufnoAwQCuf2QAwQCwSdcAwQA wg/bAwQAwg/oAwQAwg/sAwQAwhoBMA0EAgACMAcDBQMqDBOAMA0GCSqGSIb3DQEB CwUAA4IBAQCE0XR5cZzai5P9BYvVWJ1cTPbvr8TnHq3DlFD26700Abb/W/Y7gqKX 4i2/VDBmc9Tcgor+de9vKT203G2zR+0tFx/eVKn3Nkl52Lc06qSvd/eIw/ybhfQ2 L8TxjLg4RAo4X7cGupgFuS30UzzqQPjDbC65f/7UdiPzySo7WU/sxZhkYDdJpT5H bGiN8EBjXan1tqZWl5PUUc7s7Yn5xjkMhJxyrikGqzW96pFJ+mgL2gpb+pqwMVuP Ulb6+SZixEvplpZaCoEWaTP4zPTJURojseomoXBtgjqaU/TV+SNFkiCIGChJ5c3l oKji3bBC7Ca1wbayVgyzMBIaNaoL4F/e -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:41 2026 by rpki-client