This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa File: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (raw, json) Hash identifier: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0= Subject key identifier: 88:43:64:46:52:68:04:BF:89:FE:8E:1E:A7:62:F6:59:0F:70:AA:14 Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B97B9DC2ACB61038A41C00451623A2894 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa Signing time: Wed 07 Jan 2026 09:11:38 +0000 ROA not before: Wed 07 Jan 2026 09:11:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206735 IP address blocks: 185.88.21.0/24 maxlen: 24 185.88.22.0/24 maxlen: 24 185.205.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:b9:dc:2a:cb:61:03:8a:41:c0:04:51:62:3a:28:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 7 09:11:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88436446526804bf89fe8e1ea762f6590f70aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:a2:c7:10:ef:ea:69:a1:74:b4:95:c3:b7: 62:17:6b:0b:65:da:4c:44:6d:e3:75:91:34:0f:c4: b7:5f:95:17:e1:70:f0:c7:cf:3f:84:26:92:0e:c3: 7d:a7:3d:ea:31:19:1d:08:c5:79:b3:c1:09:53:83: cd:1d:da:ba:cd:6b:61:32:41:ea:85:28:71:d2:63: 77:8d:1f:cb:b9:7f:c5:57:92:91:a4:af:12:bd:a8: 17:dd:19:22:fc:70:c1:26:e5:d2:5a:2d:df:b4:7c: 62:63:91:78:dc:c5:e6:18:34:de:88:fd:1d:2b:b2: 9b:04:0a:ff:c5:99:ac:31:4c:5a:e8:35:d5:3f:b0: 30:a2:c9:a0:a2:53:ac:36:57:19:b7:20:14:65:31: 07:3b:f9:68:7d:3a:09:19:53:6d:be:f7:b4:e6:a5: 66:f1:7f:ff:71:8b:8c:73:8f:94:23:86:40:69:c1: 1c:87:7c:1a:33:10:d0:d3:8e:b1:80:c9:ba:52:40: 59:8e:c7:a5:1a:01:4f:13:2a:30:00:d2:3b:d9:d3: 0a:34:c8:b9:b1:05:4b:a9:8f:c5:ac:24:c2:7f:ee: be:5b:da:08:ab:93:48:5d:67:86:15:3f:34:49:6d: b8:15:93:a6:8a:1b:aa:a1:2a:dd:1d:88:c7:3a:0a: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:43:64:46:52:68:04:BF:89:FE:8E:1E:A7:62:F6:59:0F:70:AA:14 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.21.0-185.88.22.255 185.205.98.0/24 Signature Algorithm: sha256WithRSAEncryption a9:44:f4:c5:45:92:2c:32:e4:ab:95:a8:ef:8a:f8:fc:d5:99: e8:f9:7a:14:e1:0b:48:a9:0c:67:47:22:a3:3b:15:ef:17:ef: c6:e1:1e:a3:f1:8c:4d:cf:fe:c5:b9:aa:bd:2a:be:d9:bf:8e: 0e:0e:8e:81:e3:9e:08:7e:07:27:79:8d:85:6d:34:97:4d:51: c3:67:8b:71:46:04:7c:cc:d5:b2:62:ba:cb:6a:5e:10:54:50: b0:64:a3:32:f1:7c:d6:ef:6c:4c:5d:7e:6c:0b:05:25:df:96: a6:5e:b9:99:5f:65:65:62:b8:aa:3b:c2:aa:68:e3:87:c5:27: 4e:b8:6e:3a:25:68:d5:a1:60:61:67:ae:12:e0:e7:a0:c3:70: 8c:f6:81:d0:82:5a:2a:4a:4c:26:02:e8:64:6d:2b:1f:8e:10: 88:70:cf:8b:89:00:ed:e2:b9:f9:aa:a5:1c:48:00:7f:8d:b9: 16:3c:ed:f6:d2:6e:d0:b6:4a:d5:2e:36:b9:49:19:24:91:7c: 13:54:95:7c:a2:58:e7:b9:d0:ae:48:cf:57:3f:d3:30:19:9c: e0:1c:30:a7:94:8f:64:78:75:c2:41:1e:87:e9:06:f8:17:6b: 2b:72:2b:d0:39:07:b7:f0:c9:ee:77:b6:f0:04:09:c5:91:2e: a5:d7:f3:73 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuXudwqy2EDikHABFFiOiiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTA3MDkxMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQzNjQ0NjUyNjgwNGJmODlmZThlMWVhNzYyZjY1OTBmNzBhYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6CixxDv6mmhdLSVw7diF2sLZdpM RG3jdZE0D8S3X5UX4XDwx88/hCaSDsN9pz3qMRkdCMV5s8EJU4PNHdq6zWthMkHq hShx0mN3jR/LuX/FV5KRpK8SvagX3Rki/HDBJuXSWi3ftHxiY5F43MXmGDTeiP0d K7KbBAr/xZmsMUxa6DXVP7AwosmgolOsNlcZtyAUZTEHO/lofToJGVNtvve05qVm 8X//cYuMc4+UI4ZAacEch3waMxDQ046xgMm6UkBZjselGgFPEyowANI72dMKNMi5 sQVLqY/FrCTCf+6+W9oIq5NIXWeGFT80SW24FZOmihuqoSrdHYjHOgowrwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIhDZEZSaAS/if6OHqdi9lkPcKoUMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvaUVOa1JsSm9CTC1KX280ZXAyTDJXUTl3cWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5WBUD BAC5WBYDBAC5zWIwDQYJKoZIhvcNAQELBQADggEBAKlE9MVFkiwy5KuVqO+K+PzV mej5ehThC0ipDGdHIqM7Fe8X78bhHqPxjE3P/sW5qr0qvtm/jg4OjoHjngh+Byd5 jYVtNJdNUcNni3FGBHzM1bJiustqXhBUULBkozLxfNbvbExdfmwLBSXflqZeuZlf ZWViuKo7wqpo44fFJ064bjolaNWhYGFnrhLg56DDcIz2gdCCWipKTCYC6GRtKx+O EIhwz4uJAO3iufmqpRxIAH+NuRY87fbSbtC2StUuNrlJGSSRfBNUlXyiWOe50K5I z1c/0zAZnOAcMKeUj2R4dcJBHofpBvgXaytyK9A5B7fwye53tvAECcWRLqXX83M= -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:02 2026 by rpki-client