This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/ossK8NVWIjYFpVS_EefAqYZy2IE.roa File: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (raw, json) Hash identifier: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU= Subject key identifier: A2:CB:0A:F0:D5:56:22:36:05:A5:54:BF:11:E7:C0:A9:86:72:D8:81 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B775965BA01C6B945437B6E4E03D2C17A Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/ossK8NVWIjYFpVS_EefAqYZy2IE.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210025 IP address blocks: 88.218.207.0/24 maxlen: 24 2a09:b280::/48 maxlen: 48 2a09:b280:1000::/48 maxlen: 48 2a09:b280:1010::/48 maxlen: 48 2a09:b280:1020::/48 maxlen: 48 2a09:b280:1030::/48 maxlen: 48 2a09:b280:1100::/47 maxlen: 47 2a09:b280:ccc0::/48 maxlen: 48 2a09:b280:ccc1::/48 maxlen: 48 2a09:b280:cccc::/48 maxlen: 48 2a09:b280:ffb0::/48 maxlen: 48 2a09:b280:ffb1::/48 maxlen: 48 2a09:b280:ffb2::/48 maxlen: 48 2a09:b280:ffb5::/48 maxlen: 48 2a09:b280:ffb7::/48 maxlen: 48 2a09:b280:ffb8::/48 maxlen: 48 2a09:b280:ffb9::/48 maxlen: 48 2a09:b280:ffba::/48 maxlen: 48 2a09:b280:ffbb::/48 maxlen: 48 2a09:b280:ffbc::/48 maxlen: 48 2a09:b280:ffbd::/48 maxlen: 48 2a09:b280:ffbe::/48 maxlen: 48 2a09:b280:ffbf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:65:ba:01:c6:b9:45:43:7b:6e:4e:03:d2:c1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2cb0af0d556223605a554bf11e7c0a98672d881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:ac:e3:2a:f7:f9:ae:34:0f:bf:2c:33:26: 93:f9:50:94:01:f3:18:54:3c:50:2b:31:a4:11:27: 61:9d:7e:33:16:1a:6b:d5:e0:89:49:60:f9:15:e2: e8:40:ee:05:5f:8b:a5:4d:be:e5:dd:7b:0c:88:bf: c4:e7:fd:bf:c3:3d:68:be:cc:b4:0e:2b:18:1a:30: bc:fa:3f:4a:ef:98:65:65:ae:4b:66:a6:51:d5:84: 23:b8:32:6a:3d:2a:16:9b:dd:b7:8f:10:7a:f8:08: d9:84:28:5c:77:a2:70:09:49:38:15:b9:ac:8e:e6: 32:7d:bb:c1:df:b3:3e:25:42:e2:1c:c8:62:0c:cb: d3:dc:83:8d:cd:c5:3a:d6:b0:f6:40:51:6f:d4:2b: 5c:c9:8c:15:1f:61:2f:ec:11:0a:b8:ae:6a:85:c0: 0c:88:bd:86:4e:28:6b:fc:d0:b7:f9:8c:2d:5a:c7: 2c:f9:02:4e:3d:2d:57:d0:84:93:86:e1:f8:7e:ee: 5b:22:69:83:5d:9c:8c:12:e7:11:c2:c8:84:5a:48: 10:64:e8:fd:0d:e1:8d:28:81:3e:c9:6a:f3:6a:20: 17:8f:71:cd:34:5f:97:fe:8a:ec:d1:35:f2:d1:39: 40:e6:47:b7:44:22:51:0c:18:01:84:a7:04:dd:f6: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CB:0A:F0:D5:56:22:36:05:A5:54:BF:11:E7:C0:A9:86:72:D8:81 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/ossK8NVWIjYFpVS_EefAqYZy2IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.207.0/24 IPv6: 2a09:b280::/48 2a09:b280:1000::/48 2a09:b280:1010::/48 2a09:b280:1020::/48 2a09:b280:1030::/48 2a09:b280:1100::/47 2a09:b280:ccc0::/47 2a09:b280:cccc::/48 2a09:b280:ffb0::-2a09:b280:ffb2:ffff:ffff:ffff:ffff:ffff 2a09:b280:ffb5::/48 2a09:b280:ffb7::-2a09:b280:ffbf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 57:9b:68:c1:8e:59:5f:e1:93:b0:a4:0c:aa:b3:ea:de:ce:69: 16:02:89:97:fd:46:62:37:34:32:fd:61:33:4c:47:68:c2:67: e4:f9:e9:be:29:9f:39:7d:f7:c8:24:90:2e:4d:66:47:12:b4: 51:13:55:15:1d:d6:95:39:59:d8:c3:4b:77:2f:20:47:2f:6c: 1e:95:d5:0b:04:8c:74:31:19:5b:17:3d:e2:f2:7e:bd:15:7b: e8:62:88:fd:86:2a:4c:cd:0c:9b:4c:31:a0:59:a8:98:32:bf: c4:20:5a:b1:f4:9f:54:ce:6a:e9:ed:07:05:4f:00:47:8b:c8: e5:61:8c:d0:9a:13:93:73:4b:71:ca:cf:37:5e:99:22:0b:b9: 72:ea:74:cc:26:43:a2:b6:54:a5:aa:ee:3d:f1:ac:56:18:04: 6a:7d:89:d7:13:2a:4f:be:72:9a:39:a3:68:f0:dd:93:5a:81: 2f:cd:0c:a3:35:b2:20:3f:7b:7e:08:97:b5:d3:48:b2:30:ea: 90:61:7f:08:b7:3d:f8:16:83:8a:26:54:23:45:3e:6c:99:72: 3f:43:02:c7:1e:52:6a:a1:a1:3c:94:70:b2:f7:8e:19:96:ae: 9f:7d:85:81:b7:cc:53:3c:a2:bd:0f:9a:47:7d:2e:86:1f:fd: 1c:1f:34:9b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZt3WWW6Aca5RUN7bk4D0sF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmNiMGFmMGQ1NTYyMjM2MDVhNTU0YmYxMWU3YzBhOTg2NzJkODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LWs4yr3+a40D78sMyaT+VCUAfMY VDxQKzGkESdhnX4zFhpr1eCJSWD5FeLoQO4FX4ulTb7l3XsMiL/E5/2/wz1ovsy0 DisYGjC8+j9K75hlZa5LZqZR1YQjuDJqPSoWm923jxB6+AjZhChcd6JwCUk4Fbms juYyfbvB37M+JULiHMhiDMvT3IONzcU61rD2QFFv1CtcyYwVH2Ev7BEKuK5qhcAM iL2GTihr/NC3+YwtWscs+QJOPS1X0ISThuH4fu5bImmDXZyMEucRwsiEWkgQZOj9 DeGNKIE+yWrzaiAXj3HNNF+X/ors0TXy0TlA5ke3RCJRDBgBhKcE3fZkVQIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFKLLCvDVViI2BaVUvxHnwKmGctiBMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvb3NzSzhOVldJallGcFZTX0VlZkFxWVp5MklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzAMBAIAATAGAwQAWNrP MH8EAgACMHkDBwAqCbKAAAADBwAqCbKAEAADBwAqCbKAEBADBwAqCbKAECADBwAq CbKAEDADBwEqCbKAEQADBwEqCbKAzMADBwAqCbKAzMwwEgMHBCoJsoD/sAMHACoJ soD/sgMHACoJsoD/tTASAwcAKgmygP+3AwcGKgmygP+AMA0GCSqGSIb3DQEBCwUA A4IBAQBXm2jBjllf4ZOwpAyqs+rezmkWAomX/UZiNzQy/WEzTEdowmfk+em+KZ85 fffIJJAuTWZHErRRE1UVHdaVOVnYw0t3LyBHL2weldULBIx0MRlbFz3i8n69FXvo Yoj9hipMzQybTDGgWaiYMr/EIFqx9J9Uzmrp7QcFTwBHi8jlYYzQmhOTc0txys83 XpkiC7ly6nTMJkOitlSlqu498axWGARqfYnXEypPvnKaOaNo8N2TWoEvzQyjNbIg P3t+CJe100iyMOqQYX8Itz34FoOKJlQjRT5smXI/QwLHHlJqoaE8lHCy944Zlq6f fYWBt8xTPKK9D5pHfS6GH/0cHzSb -----END CERTIFICATE-----Generated at Tue Jan 13 12:59:26 2026 by rpki-client