This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/08RxR8iO2FhU9rvJfFlhqb7t6ko.roa File: 08RxR8iO2FhU9rvJfFlhqb7t6ko.roa (raw, json) Hash identifier: DIbHPZQ18xH9+/A7UUVj8MnmxfSRwJbz7oSJVK8sMZg= Subject key identifier: D3:C4:71:47:C8:8E:D8:58:54:F6:BB:C9:7C:59:61:A9:BE:ED:EA:4A Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Certificate serial: 019A95E4E68027EF1DCD95C93BCCD5E4C373 Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/08RxR8iO2FhU9rvJfFlhqb7t6ko.roa Signing time: Tue 18 Nov 2025 07:36:37 +0000 ROA not before: Tue 18 Nov 2025 07:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48988 IP address blocks: 5.253.228.0/23 maxlen: 24 108.174.78.0/24 maxlen: 24 111.88.140.0/22 maxlen: 24 198.13.184.0/21 maxlen: 24 213.148.0.0/20 maxlen: 24 213.148.24.0/22 maxlen: 24 2a13:8280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:e4:e6:80:27:ef:1d:cd:95:c9:3b:cc:d5:e4:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2 Validity Not Before: Nov 18 07:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3c47147c88ed85854f6bbc97c5961a9beedea4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:b8:32:aa:1f:a1:23:13:7e:8c:da:c8:4f: 14:41:56:99:01:14:9c:6c:dd:07:93:5b:93:fd:8e: b8:e9:ff:6b:21:41:ab:60:9b:7d:69:8f:ae:be:fa: 74:77:1b:3e:6c:90:82:42:25:2b:be:dd:64:78:e5: eb:6b:bf:cf:12:87:fb:4e:7a:70:38:1d:00:35:36: 81:0d:7f:cb:f6:c4:c7:99:cd:3f:f1:a4:bd:af:65: d9:dd:41:ee:4e:66:ee:25:8c:7f:bf:97:23:a2:31: 86:dc:76:0b:c6:15:19:58:87:24:94:a2:64:b0:f6: a6:1f:11:46:96:ab:d3:f5:9f:79:8f:0d:f3:e4:4d: d7:f5:da:e6:b4:f4:f5:bf:f3:22:b4:ae:fb:6c:89: ec:81:a3:e5:48:e1:6f:04:9d:f5:14:e9:f7:93:1e: 73:2b:41:7b:55:89:58:c2:f2:ad:16:ec:38:5c:a6: 45:4b:7e:c4:3a:45:48:2c:18:a7:9e:9b:62:4a:4c: 92:33:aa:c5:aa:0e:d1:b1:0a:57:23:fe:ea:40:92: e9:e8:d3:bf:d6:b0:f1:a2:c0:4c:32:0c:ec:95:94: 90:c2:e6:d1:51:22:38:01:53:aa:c5:f7:0a:ba:d1: 8d:68:57:6c:5e:f3:cb:6a:ec:22:de:2d:a5:42:22: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:71:47:C8:8E:D8:58:54:F6:BB:C9:7C:59:61:A9:BE:ED:EA:4A X509v3 Authority Key Identifier: keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/08RxR8iO2FhU9rvJfFlhqb7t6ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.228.0/23 108.174.78.0/24 111.88.140.0/22 198.13.184.0/21 213.148.0.0/20 213.148.24.0/22 IPv6: 2a13:8280::/32 Signature Algorithm: sha256WithRSAEncryption 80:66:18:a6:d7:c1:86:2f:38:5a:f8:ce:af:fe:95:75:60:98: 98:5b:af:9f:67:f4:82:3e:54:f9:97:2b:fb:f9:05:f2:4b:21: 67:f1:6b:36:a1:19:2f:58:39:df:cc:8d:ef:37:f7:13:78:b7: da:e5:1d:82:dd:ab:a3:8c:15:5e:10:67:19:e6:ed:0c:3a:a6: 5f:a3:5f:d1:b1:2d:c2:c5:84:bd:31:9e:dd:72:30:8d:76:d3: 92:c5:ee:94:ff:55:3e:3c:1d:ca:6c:54:71:35:dc:7d:85:6b: 52:4d:ac:49:92:ef:12:d1:9b:57:7a:b0:0c:59:41:8a:eb:e9: 72:c7:dc:26:aa:b5:dc:ac:12:77:f9:a6:c6:30:b7:22:9c:9f: 3e:8a:b7:e0:72:36:60:6b:ea:60:11:8f:65:90:55:7c:3f:1a: 3c:0a:4a:22:3f:b9:21:7a:c0:e3:35:f2:50:27:0d:2a:2a:1c: ed:aa:cf:85:60:e1:61:7b:63:ec:e5:ed:13:80:13:16:0d:bc: 77:bb:06:8d:b5:d4:78:28:62:8a:be:6b:73:93:d8:92:d7:61: 1d:10:45:4c:83:00:eb:87:2c:5d:c5:03:84:5a:29:7a:6a:e3: d8:9a:33:4a:97:56:64:7d:d5:5d:16:47:c1:da:92:04:75:02: 3d:e0:3a:e5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZqV5OaAJ+8dzZXJO8zV5MNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2QyYzhkYTgzZjVjM2M5NGFlOTQwYTBlZmQyYTc3MTRm ZjkwZTIwHhcNMjUxMTE4MDczNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2M0NzE0N2M4OGVkODU4NTRmNmJiYzk3YzU5NjFhOWJlZWRlYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5G4MqofoSMTfozayE8UQVaZARSc bN0Hk1uT/Y646f9rIUGrYJt9aY+uvvp0dxs+bJCCQiUrvt1keOXra7/PEof7Tnpw OB0ANTaBDX/L9sTHmc0/8aS9r2XZ3UHuTmbuJYx/v5cjojGG3HYLxhUZWIcklKJk sPamHxFGlqvT9Z95jw3z5E3X9drmtPT1v/MitK77bInsgaPlSOFvBJ31FOn3kx5z K0F7VYlYwvKtFuw4XKZFS37EOkVILBinnptiSkySM6rFqg7RsQpXI/7qQJLp6NO/ 1rDxosBMMgzslZSQwubRUSI4AVOqxfcKutGNaFdsXvPLauwi3i2lQiKydwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFNPEcUfIjthYVPa7yXxZYam+7epKMB8GA1UdIwQY MBaAFAQ9LI2oP1w8lK6UCg79KncU/5DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUt M2JiYzY2MWI0Y2M1LzEvMDhSeFI4aU8yRmhVOXJ2SmZGbGhxYjd0NmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYzRjMjUtZTU1Mi00ZDBjLTk1ZWUtM2JiYzY2MWI0Y2M1 LzEvQkQwc2phZ19YRHlVcnBRS0R2MHFkeFRfa09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBBf3kAwQA bK5OAwQCb1iMAwQDxg24AwQE1ZQAAwQC1ZQYMA0EAgACMAcDBQAqE4KAMA0GCSqG SIb3DQEBCwUAA4IBAQCAZhim18GGLzha+M6v/pV1YJiYW6+fZ/SCPlT5lyv7+QXy SyFn8Ws2oRkvWDnfzI3vN/cTeLfa5R2C3aujjBVeEGcZ5u0MOqZfo1/RsS3CxYS9 MZ7dcjCNdtOSxe6U/1U+PB3KbFRxNdx9hWtSTaxJku8S0ZtXerAMWUGK6+lyx9wm qrXcrBJ3+abGMLcinJ8+irfgcjZga+pgEY9lkFV8Pxo8CkoiP7khesDjNfJQJw0q Khztqs+FYOFhe2Ps5e0TgBMWDbx3uwaNtdR4KGKKvmtzk9iS12EdEEVMgwDrhyxd xQOEWil6auPYmjNKl1ZkfdVdFkfB2pIEdQI94Drl -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:10 2025 by rpki-client