This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/OV64helYAJmEZm2bDmJsd9IkHzk.roa
File: OV64helYAJmEZm2bDmJsd9IkHzk.roa (raw, json)
Hash identifier: UhAyc+ieCBBw/k+JMKhFKLxqTy1qSE7B2ZqDelVZiX8=
Subject key identifier: 39:5E:B8:85:E9:58:00:99:84:66:6D:9B:0E:62:6C:77:D2:24:1F:39
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 019B3BC783F942124238A91CDCB49DBC24F9
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/OV64helYAJmEZm2bDmJsd9IkHzk.roa
Signing time: Sat 20 Dec 2025 12:41:29 +0000
ROA not before: Sat 20 Dec 2025 12:41:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42288
IP address blocks: 88.218.18.0/24 maxlen: 24
88.218.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:c7:83:f9:42:12:42:38:a9:1c:dc:b4:9d:bc:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Dec 20 12:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395eb885e958009984666d9b0e626c77d2241f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:62:9d:f0:e1:cf:ae:de:a9:d4:e5:6c:8a:
82:9a:03:4e:a1:f2:66:5f:c6:57:31:9a:62:89:17:
a6:b7:65:48:41:54:6d:f4:0c:07:0b:b5:89:13:f8:
20:97:02:88:dd:c6:92:52:8b:c4:1b:7f:f5:a4:db:
5f:a1:8b:bd:ec:4b:8f:40:5e:34:98:4b:14:1a:42:
99:47:90:a2:a5:d0:c5:25:46:e2:d9:de:48:53:8e:
94:66:13:6e:14:95:58:be:6e:59:21:11:63:cc:6a:
f5:ff:86:63:83:e8:1c:e7:9c:c8:ee:c9:59:fe:09:
33:6a:46:e9:49:14:56:3b:77:2a:76:3c:5a:c0:d9:
07:38:a5:a7:2c:b6:77:2c:7c:3e:10:10:eb:4b:44:
e9:82:91:28:ae:4a:68:f1:02:42:e9:56:ce:a7:4a:
a9:73:a7:d0:9c:46:f0:29:ac:ae:4c:22:a3:7f:07:
f3:be:53:d6:2a:b0:fc:85:0a:68:6a:fb:ca:cf:45:
f9:80:ed:65:fd:74:36:42:74:81:d8:c0:09:88:77:
9f:75:0c:28:29:11:89:28:f6:e2:00:76:2c:8a:20:
c1:3f:c3:84:f9:07:8b:65:01:72:70:7e:4b:4e:41:
c7:5b:1b:78:69:d7:f9:b0:62:18:89:4f:9c:01:12:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:B8:85:E9:58:00:99:84:66:6D:9B:0E:62:6C:77:D2:24:1F:39
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/OV64helYAJmEZm2bDmJsd9IkHzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/23
Signature Algorithm: sha256WithRSAEncryption
41:14:c5:c1:d5:c7:49:f8:b9:5b:0c:78:29:d5:ed:85:38:ed:
27:dd:7c:5e:e7:d6:ce:dc:dd:7b:d2:0b:e6:13:c3:45:66:a6:
ef:ee:56:1d:40:d6:4b:ce:15:64:2e:b5:69:e1:22:78:05:a0:
0a:45:a0:bd:5c:ac:6e:5e:7c:c7:d5:f6:14:74:a7:c8:58:b9:
92:6d:de:0b:72:84:23:e2:cc:4e:28:84:c6:a0:ba:ad:4f:e1:
c6:ab:6a:ce:2d:9a:fb:4f:0f:bf:c5:9e:b8:ea:f8:c5:48:db:
52:39:fe:e8:c3:7a:f2:88:66:87:bb:01:12:17:ab:ac:c5:93:
ca:29:6f:e7:59:fc:06:8b:d1:e5:1f:94:e2:18:4e:76:b4:c3:
7d:99:ac:66:68:1c:cf:84:31:b7:61:a9:ce:dc:23:a4:73:b3:
67:58:30:08:c0:84:6a:c0:8c:e1:0e:eb:69:3c:5d:a3:07:95:
21:4f:aa:d8:e1:81:d3:8b:be:8b:9e:4f:07:8f:ae:e0:b3:6a:
1b:b6:73:0b:c7:b8:44:30:81:d6:92:f5:ed:17:51:4d:2f:8f:
dc:13:c2:a1:f1:c0:22:0b:5a:2f:75:82:21:f9:4e:b1:3b:31:
28:b7:62:83:3b:05:05:b2:c8:87:a4:0f:5d:a9:4a:a5:ac:31:
e6:2a:24:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZs7x4P5QhJCOKkc3LSdvCT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjUxMjIwMTI0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTVlYjg4NWU5NTgwMDk5ODQ2NjZkOWIwZTYyNmM3N2QyMjQxZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXZinfDhz67eqdTlbIqCmgNOofJm
X8ZXMZpiiRemt2VIQVRt9AwHC7WJE/gglwKI3caSUovEG3/1pNtfoYu97EuPQF40
mEsUGkKZR5CipdDFJUbi2d5IU46UZhNuFJVYvm5ZIRFjzGr1/4Zjg+gc55zI7slZ
/gkzakbpSRRWO3cqdjxawNkHOKWnLLZ3LHw+EBDrS0TpgpEorkpo8QJC6VbOp0qp
c6fQnEbwKayuTCKjfwfzvlPWKrD8hQpoavvKz0X5gO1l/XQ2QnSB2MAJiHefdQwo
KRGJKPbiAHYsiiDBP8OE+QeLZQFycH5LTkHHWxt4adf5sGIYiU+cARLoWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDleuIXpWACZhGZtmw5ibHfSJB85MB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvT1Y2NGhlbFlBSm1FWm0yYkRtSnNkOUlrSHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWNoSMA0G
CSqGSIb3DQEBCwUAA4IBAQBBFMXB1cdJ+LlbDHgp1e2FOO0n3Xxe59bO3N170gvm
E8NFZqbv7lYdQNZLzhVkLrVp4SJ4BaAKRaC9XKxuXnzH1fYUdKfIWLmSbd4LcoQj
4sxOKITGoLqtT+HGq2rOLZr7Tw+/xZ646vjFSNtSOf7ow3ryiGaHuwESF6usxZPK
KW/nWfwGi9HlH5TiGE52tMN9maxmaBzPhDG3YanO3COkc7NnWDAIwIRqwIzhDutp
PF2jB5UhT6rY4YHTi76Lnk8Hj67gs2obtnMLx7hEMIHWkvXtF1FNL4/cE8Kh8cAi
C1ovdYIh+U6xOzEot2KDOwUFssiHpA9dqUqlrDHmKiQ1
-----END CERTIFICATE-----
Generated at Sat Dec 27 08:04:26 2025 by rpki-client