This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HTepiB_uWjsScmKE1AUgzcZrfH0.roa File: HTepiB_uWjsScmKE1AUgzcZrfH0.roa (raw, json) Hash identifier: +ocJiikN9/mW+HYjKHgBtVcAgdSazmCxghmk1f1eYT8= Subject key identifier: 1D:37:A9:88:1F:EE:5A:3B:12:72:62:84:D4:05:20:CD:C6:6B:7C:7D Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C682591171A30C3A2165EA6001C279 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HTepiB_uWjsScmKE1AUgzcZrfH0.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 88.148.69.0/24 maxlen: 24 88.148.72.0/24 maxlen: 24 88.148.78.0/24 maxlen: 24 88.148.86.0/24 maxlen: 24 88.148.89.0/24 maxlen: 24 88.148.94.0/24 maxlen: 24 88.148.107.0/24 maxlen: 24 89.32.165.0/24 maxlen: 24 89.34.120.0/24 maxlen: 24 89.44.65.0/24 maxlen: 24 89.44.67.0/24 maxlen: 24 89.44.71.0/24 maxlen: 24 89.45.240.0/24 maxlen: 24 89.45.245.0/24 maxlen: 24 94.76.139.0/24 maxlen: 24 94.76.155.0/24 maxlen: 24 94.76.177.0/24 maxlen: 24 94.76.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:82:59:11:71:a3:0c:3a:21:65:ea:60:01:c2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d37a9881fee5a3b12726284d40520cdc66b7c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:2c:44:1b:6a:4f:70:c6:3a:e1:f3:2e:b9: bd:b0:d1:39:88:6e:0e:06:45:c0:7d:40:0c:51:cb: 4f:bb:7e:eb:29:68:c6:8e:ef:b7:3a:2a:b4:c8:35: 50:2d:22:cc:58:62:4c:10:62:87:2e:45:cc:d6:fa: 07:e9:c0:47:ed:7e:b9:21:41:19:46:52:12:e8:e5: 3b:52:1f:62:fd:8f:36:45:26:9e:0f:dd:5a:61:90: fd:7c:fe:bf:58:78:20:e1:30:21:98:a3:52:d4:e7: 3c:0a:6d:6e:d3:7b:18:b4:67:72:92:64:5b:08:01: d0:0c:3c:f0:11:4f:ca:f9:03:3e:6b:99:a6:c2:22: e3:07:95:2c:aa:d3:65:80:f0:fd:07:92:1f:12:88: 17:69:26:b3:de:2d:18:68:2a:88:f2:5d:60:b5:fd: 50:a4:72:6b:a9:2b:6d:fc:d4:e7:6b:f6:95:11:94: a0:a3:75:08:04:c6:9c:0a:a4:78:94:5b:f1:db:7d: 84:33:65:fa:28:4c:1c:bb:96:f7:64:37:f8:76:18: f2:c1:ef:b0:7c:03:f9:89:79:43:0d:40:d5:04:78: 95:45:55:03:b8:b7:6b:85:c4:1a:c2:6c:17:6a:75: 01:0d:5f:94:98:7d:8e:21:1e:b5:75:73:95:38:50: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:37:A9:88:1F:EE:5A:3B:12:72:62:84:D4:05:20:CD:C6:6B:7C:7D X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/HTepiB_uWjsScmKE1AUgzcZrfH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.69.0/24 88.148.72.0/24 88.148.78.0/24 88.148.86.0/24 88.148.89.0/24 88.148.94.0/24 88.148.107.0/24 89.32.165.0/24 89.34.120.0/24 89.44.65.0/24 89.44.67.0/24 89.44.71.0/24 89.45.240.0/24 89.45.245.0/24 94.76.139.0/24 94.76.155.0/24 94.76.177.0/24 94.76.189.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a4:03:5d:53:04:4b:48:be:a3:ef:9c:67:59:29:69:d1:dc: 92:3f:65:4c:98:db:7d:d1:ac:61:00:9d:ee:3a:5b:f7:e6:d8: 06:fd:6b:8e:e6:56:e2:9b:23:39:bf:12:4c:a2:18:56:16:4d: 6a:25:3a:07:3a:7c:fd:6e:ea:c7:94:63:7d:41:62:3c:bf:d8: 1c:ce:74:88:a8:bb:1a:bf:39:e6:a6:a7:d4:d6:0e:49:ea:27: a1:a5:63:d7:eb:ce:75:b5:0a:4d:d9:40:2f:4e:ed:92:86:06: 64:2a:c3:5a:a4:c1:d9:33:50:99:46:e6:a5:e8:85:12:f8:d6: 37:30:fe:12:29:66:f7:5c:b6:95:50:ef:b7:f0:f2:e3:3e:7d: 4c:57:62:4d:92:54:53:24:ed:f7:34:34:52:e8:d0:fb:97:a1: 90:cb:df:a0:8f:71:f7:f0:85:11:28:56:b5:95:7e:04:93:33: e7:5e:4e:8a:4b:2a:db:24:06:3d:2f:32:05:c9:a1:85:0d:81: 54:af:b3:cf:0f:db:9f:d6:df:93:cc:60:e2:14:b6:ea:00:0b: 5f:26:3b:88:f4:c7:4e:2b:5b:1b:ae:06:2b:1a:9d:3c:4f:20: 90:39:92:d3:58:f9:ba:ec:d5:3b:3f:4f:c8:b6:66:e8:ee:7f: ac:92:6a:40 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt3xoJZEXGjDDohZepgAcJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDM3YTk4ODFmZWU1YTNiMTI3MjYyODRkNDA1MjBjZGM2NmI3YzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOssRBtqT3DGOuHzLrm9sNE5iG4O BkXAfUAMUctPu37rKWjGju+3Oiq0yDVQLSLMWGJMEGKHLkXM1voH6cBH7X65IUEZ RlIS6OU7Uh9i/Y82RSaeD91aYZD9fP6/WHgg4TAhmKNS1Oc8Cm1u03sYtGdykmRb CAHQDDzwEU/K+QM+a5mmwiLjB5UsqtNlgPD9B5IfEogXaSaz3i0YaCqI8l1gtf1Q pHJrqStt/NTna/aVEZSgo3UIBMacCqR4lFvx232EM2X6KEwcu5b3ZDf4dhjywe+w fAP5iXlDDUDVBHiVRVUDuLdrhcQawmwXanUBDV+UmH2OIR61dXOVOFAMSwIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFB03qYgf7lo7EnJihNQFIM3Ga3x9MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvSFRlcGlCX3VXanNTY21LRTFBVWd6Y1pyZkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAFiURQME AFiUSAMEAFiUTgMEAFiUVgMEAFiUWQMEAFiUXgMEAFiUawMEAFkgpQMEAFkieAME AFksQQMEAFksQwMEAFksRwMEAFkt8AMEAFkt9QMEAF5MiwMEAF5MmwMEAF5MsQME AF5MvTANBgkqhkiG9w0BAQsFAAOCAQEAtKQDXVMES0i+o++cZ1kpadHckj9lTJjb fdGsYQCd7jpb9+bYBv1rjuZW4psjOb8STKIYVhZNaiU6Bzp8/W7qx5RjfUFiPL/Y HM50iKi7Gr855qan1NYOSeonoaVj1+vOdbUKTdlAL07tkoYGZCrDWqTB2TNQmUbm peiFEvjWNzD+Eilm91y2lVDvt/Dy4z59TFdiTZJUUyTt9zQ0UujQ+5ehkMvfoI9x 9/CFEShWtZV+BJMz515Oiksq2yQGPS8yBcmhhQ2BVK+zzw/bn9bfk8xg4hS26gAL XyY7iPTHTitbG64GKxqdPE8gkDmS01j5uuzVOz9PyLZm6O5/rJJqQA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:24 2026 by rpki-client