This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa File: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (raw, json) Hash identifier: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4= Subject key identifier: FB:96:2F:31:71:F4:87:14:E7:16:C8:F5:B0:0C:C6:FF:4E:8D:FA:9F Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B775966E66ABBA3F3F7E9E9B7F9FA5B34 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215467 IP address blocks: 88.218.206.0/24 maxlen: 24 2a09:b280:fe00::/48 maxlen: 48 2a09:b280:fe01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:66:e6:6a:bb:a3:f3:f7:e9:e9:b7:f9:fa:5b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb962f3171f48714e716c8f5b00cc6ff4e8dfa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:d4:4b:08:45:c2:4a:4d:f7:00:51:fe:93: b1:ea:b5:27:5d:60:62:f5:fe:4a:15:8f:56:af:f3: e5:39:fe:5a:1e:3c:50:d5:43:b3:fb:cb:45:fe:4a: 57:b6:49:76:0f:40:f2:6b:f3:79:b6:08:38:37:87: 5a:9f:3e:19:be:f8:2f:f6:a0:1c:79:0d:2a:60:d9: 4c:e4:f9:0a:cb:1d:ff:c3:ec:1e:d4:68:42:1b:11: a8:0d:62:a7:e4:b2:e8:6f:e2:ef:57:98:76:8c:a4: 5b:76:ea:6f:fd:5b:49:d3:67:cd:f9:55:74:2c:97: 66:53:86:fe:12:0e:de:1e:bf:6d:ac:5d:2a:db:eb: 3b:21:c2:33:9d:0d:45:41:fd:8b:0f:cb:af:98:07: 8e:ea:d0:7e:cc:84:58:06:7d:12:15:74:b0:36:14: 57:e1:5c:75:2c:25:47:8a:34:82:ef:e0:84:f4:1e: 09:1f:22:62:56:2b:ab:bb:c0:c1:2d:a1:8c:bc:8b: 67:00:65:64:dc:84:d3:65:30:5e:8a:ee:de:66:dd: e8:4c:33:f5:f1:f7:ff:85:5e:67:fd:0e:71:d8:bb: ce:5c:a1:f8:4d:bc:5a:1d:dd:1b:18:f4:8e:80:93: 26:44:e0:44:34:cb:b1:24:48:41:6a:63:f9:ac:de: b6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:96:2F:31:71:F4:87:14:E7:16:C8:F5:B0:0C:C6:FF:4E:8D:FA:9F X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.206.0/24 IPv6: 2a09:b280:fe00::/47 Signature Algorithm: sha256WithRSAEncryption 58:4e:e8:e9:76:59:da:95:63:d1:d8:6c:6e:5a:36:bf:75:35: 16:b7:4a:d8:ed:cd:b7:f4:43:e4:d4:c2:1c:d7:78:51:42:c3: 52:ec:a0:89:0f:40:0e:e1:66:86:b2:10:ce:af:46:76:93:c1: 96:16:fe:fe:fd:8a:ee:b3:5c:50:c1:7d:c4:e3:a7:32:20:c4: fa:8d:28:27:1e:20:70:46:14:69:13:fe:c7:c0:23:d3:c0:bd: e6:ff:d2:90:fa:8b:5e:c9:ab:32:2c:cf:03:c4:9b:25:94:7a: 7b:5d:7b:0d:28:9b:fe:64:d2:76:8d:58:38:6f:12:1a:de:9b: b4:40:4b:5e:fe:a7:f6:e6:6f:4e:f8:2f:51:71:09:3c:a8:25: c5:1d:fe:dc:50:83:a1:45:2e:0f:a8:28:c9:2f:d7:94:a7:46: 72:96:cf:74:0a:46:2f:65:1e:55:0b:b2:6c:9f:7f:54:5d:c3: f5:22:51:88:1e:f5:ef:0c:64:46:7e:2c:57:4d:6e:d0:13:f9: 80:0a:31:96:d1:0b:80:b9:45:63:0e:63:c8:60:ef:ff:f7:50: b1:e0:32:bd:89:8d:c7:bd:6c:80:99:06:60:89:a0:37:07:fd: 14:8b:32:e8:33:32:db:0b:16:84:14:fa:46:2c:ce:80:8a:52: b7:c6:36:24 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WWbmaruj8/fp6bf5+ls0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk2MmYzMTcxZjQ4NzE0ZTcxNmM4ZjViMDBjYzZmZjRlOGRmYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm7USwhFwkpN9wBR/pOx6rUnXWBi 9f5KFY9Wr/PlOf5aHjxQ1UOz+8tF/kpXtkl2D0Dya/N5tgg4N4danz4Zvvgv9qAc eQ0qYNlM5PkKyx3/w+we1GhCGxGoDWKn5LLob+LvV5h2jKRbdupv/VtJ02fN+VV0 LJdmU4b+Eg7eHr9trF0q2+s7IcIznQ1FQf2LD8uvmAeO6tB+zIRYBn0SFXSwNhRX 4Vx1LCVHijSC7+CE9B4JHyJiViuru8DBLaGMvItnAGVk3ITTZTBeiu7eZt3oTDP1 8ff/hV5n/Q5x2LvOXKH4TbxaHd0bGPSOgJMmROBENMuxJEhBamP5rN62KwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPuWLzFx9IcU5xbI9bAMxv9OjfqfMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvMS01WXZNWEgwaHhUbkZzajFzQXpHXzA2Ti1wOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvNmMyMDNkLTYyMjEtNDYwYS1hZjQ5LWMxMjIxODc2NTE1 NC8xL01sQ1B0NEhLYmIyQ0lmTEMtVlNqcDBSckswSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFjazjAP BAIAAjAJAwcBKgmygP4AMA0GCSqGSIb3DQEBCwUAA4IBAQBYTujpdlnalWPR2Gxu Wja/dTUWt0rY7c239EPk1MIc13hRQsNS7KCJD0AO4WaGshDOr0Z2k8GWFv7+/Yru s1xQwX3E46cyIMT6jSgnHiBwRhRpE/7HwCPTwL3m/9KQ+oteyasyLM8DxJsllHp7 XXsNKJv+ZNJ2jVg4bxIa3pu0QEte/qf25m9O+C9RcQk8qCXFHf7cUIOhRS4PqCjJ L9eUp0Zyls90CkYvZR5VC7Jsn39UXcP1IlGIHvXvDGRGfixXTW7QE/mACjGW0QuA uUVjDmPIYO//91Cx4DK9iY3HvWyAmQZgiaA3B/0UizLoMzLbCxaEFPpGLM6AilK3 xjYk -----END CERTIFICATE-----Generated at Tue Jan 13 12:59:03 2026 by rpki-client