This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/XjDc2QA9m4quHMdfD5XNqmD-sRU.roa File: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (raw, json) Hash identifier: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg= Subject key identifier: 5E:30:DC:D9:00:3D:9B:8A:AE:1C:C7:5F:0F:95:CD:AA:60:FE:B1:15 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B77596663FF09B86D9207A8C012B230E2 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/XjDc2QA9m4quHMdfD5XNqmD-sRU.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 88.218.204.0/24 maxlen: 24 2a09:b280:fe11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:66:63:ff:09:b8:6d:92:07:a8:c0:12:b2:30:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e30dcd9003d9b8aae1cc75f0f95cdaa60feb115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:32:6f:e2:39:01:95:0a:6c:bc:cf:2e:fc: 87:d3:62:64:e8:66:b5:50:c2:e8:de:32:85:53:05: d4:29:dd:29:38:ad:c0:6b:7b:34:fe:c8:41:9b:0d: b4:b0:0c:f9:fb:04:e2:66:aa:b6:ba:6d:fb:0c:05: 6f:d6:1f:b4:ef:3f:70:10:47:70:52:0e:9f:ff:37: 36:b8:e5:91:a5:93:98:26:f0:4e:cd:1d:a1:21:fc: 7b:35:0e:07:b5:ac:81:2a:c4:7c:92:4a:4d:d9:c1: e6:c8:98:d0:2a:6e:d8:44:c3:b0:0d:27:e7:77:e2: d4:01:c3:0d:5a:7e:36:62:2b:7b:fc:be:57:f4:9c: 22:02:9a:d7:0d:6a:cc:9f:71:45:66:53:be:eb:14: 1b:28:93:17:62:13:2a:0c:84:69:9f:04:4a:6c:03: d6:44:2c:e6:00:e2:19:94:44:4a:a7:87:a4:1d:bd: fe:f0:69:2f:ec:a0:e5:e6:67:dc:71:c0:48:12:2e: 71:a8:63:a3:b4:d1:71:43:5c:5e:9a:96:c2:28:26: cf:d2:05:4e:c7:b9:76:89:c8:90:ce:2d:59:6f:a9: 74:9b:b9:83:27:ac:12:f4:00:44:23:de:fd:20:1c: 43:b8:69:3f:94:99:27:a6:62:96:ef:49:1d:e7:0f: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:30:DC:D9:00:3D:9B:8A:AE:1C:C7:5F:0F:95:CD:AA:60:FE:B1:15 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/XjDc2QA9m4quHMdfD5XNqmD-sRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.204.0/24 IPv6: 2a09:b280:fe11::/48 Signature Algorithm: sha256WithRSAEncryption 8b:31:cc:c7:d5:c4:f8:cb:f2:3c:4a:29:fe:11:94:30:c8:45: 49:53:cd:22:01:3a:ac:28:d4:a1:75:5e:75:20:a5:08:73:4b: 91:8d:cb:56:ee:d5:06:5c:7f:2a:7e:7c:ee:5a:7a:a9:72:d6: f7:a8:81:b1:8f:14:78:44:b3:58:56:0e:7d:ae:c0:19:15:99: 80:9e:1e:8e:15:c7:7c:52:d0:cb:b5:1b:28:39:5b:e5:03:e3: 4f:a4:eb:95:76:55:59:a3:74:2e:c2:ab:05:f9:22:70:c6:d4: 54:75:18:d7:00:b6:e4:ff:50:68:4a:60:a0:52:a9:70:ae:cf: 3c:a0:49:ce:ed:16:41:7d:31:6a:d5:8a:1a:42:21:70:36:80: b9:e4:05:1e:74:81:55:97:0d:27:4a:65:43:6d:5c:35:57:fe: 4f:12:dc:31:4f:2c:01:d6:66:71:11:d5:e6:af:16:b5:42:40: 7f:7a:f7:1e:eb:52:c0:8d:e9:f1:76:24:8f:68:66:85:20:6e: 60:21:11:62:aa:9a:90:16:53:a2:85:91:19:0f:d9:c9:1d:12: 6f:b8:09:0d:1a:c5:c4:ef:50:cf:51:81:1c:f1:1f:d3:be:50: 24:ad:00:d8:42:b8:f4:94:7d:91:b4:e2:92:72:5e:d0:27:1e: aa:ba:22:9b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WWZj/wm4bZIHqMASsjDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTMwZGNkOTAwM2Q5YjhhYWUxY2M3NWYwZjk1Y2RhYTYwZmViMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk4yb+I5AZUKbLzPLvyH02Jk6Ga1 UMLo3jKFUwXUKd0pOK3Aa3s0/shBmw20sAz5+wTiZqq2um37DAVv1h+07z9wEEdw Ug6f/zc2uOWRpZOYJvBOzR2hIfx7NQ4HtayBKsR8kkpN2cHmyJjQKm7YRMOwDSfn d+LUAcMNWn42Yit7/L5X9JwiAprXDWrMn3FFZlO+6xQbKJMXYhMqDIRpnwRKbAPW RCzmAOIZlERKp4ekHb3+8Gkv7KDl5mfcccBIEi5xqGOjtNFxQ1xempbCKCbP0gVO x7l2iciQzi1Zb6l0m7mDJ6wS9ABEI979IBxDuGk/lJknpmKW70kd5w/iNQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF4w3NkAPZuKrhzHXw+Vzapg/rEVMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvWGpEYzJRQTltNHF1SE1kZkQ1WE5xbUQtc1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWNrMMA8E AgACMAkDBwAqCbKA/hEwDQYJKoZIhvcNAQELBQADggEBAIsxzMfVxPjL8jxKKf4R lDDIRUlTzSIBOqwo1KF1XnUgpQhzS5GNy1bu1QZcfyp+fO5aeqly1veogbGPFHhE s1hWDn2uwBkVmYCeHo4Vx3xS0Mu1Gyg5W+UD40+k65V2VVmjdC7CqwX5InDG1FR1 GNcAtuT/UGhKYKBSqXCuzzygSc7tFkF9MWrVihpCIXA2gLnkBR50gVWXDSdKZUNt XDVX/k8S3DFPLAHWZnER1eavFrVCQH969x7rUsCN6fF2JI9oZoUgbmAhEWKqmpAW U6KFkRkP2ckdEm+4CQ0axcTvUM9RgRzxH9O+UCStANhCuPSUfZG04pJyXtAnHqq6 Ips= -----END CERTIFICATE-----Generated at Tue Jan 13 12:59:25 2026 by rpki-client