This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TkQ6SWfpccY3XBO0DCKBnkz5Itw.roa File: TkQ6SWfpccY3XBO0DCKBnkz5Itw.roa (raw, json) Hash identifier: bY+m5rhu93m9T/sMpZN40RoNCEPFxG2m6dz/HVDBX0I= Subject key identifier: 4E:44:3A:49:67:E9:71:C6:37:5C:13:B4:0C:22:81:9E:4C:F9:22:DC Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AF5088E01898EB65FE3AA3AC6D3FEB970 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TkQ6SWfpccY3XBO0DCKBnkz5Itw.roa Signing time: Sat 06 Dec 2025 18:59:29 +0000 ROA not before: Sat 06 Dec 2025 18:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 88.148.69.0/24 maxlen: 24 88.148.72.0/24 maxlen: 24 88.148.78.0/24 maxlen: 24 88.148.86.0/24 maxlen: 24 88.148.89.0/24 maxlen: 24 88.148.94.0/24 maxlen: 24 88.148.107.0/24 maxlen: 24 89.32.165.0/24 maxlen: 24 89.34.120.0/24 maxlen: 24 89.44.65.0/24 maxlen: 24 89.44.67.0/24 maxlen: 24 89.44.71.0/24 maxlen: 24 89.45.240.0/24 maxlen: 24 89.45.245.0/24 maxlen: 24 94.76.139.0/24 maxlen: 24 94.76.155.0/24 maxlen: 24 94.76.177.0/24 maxlen: 24 94.76.189.0/24 maxlen: 24 94.176.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:08:8e:01:89:8e:b6:5f:e3:aa:3a:c6:d3:fe:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 6 18:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e443a4967e971c6375c13b40c22819e4cf922dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:9f:19:7f:3e:5b:ce:45:3d:68:8b:93:b8: 37:7d:4f:4f:4b:d8:87:c0:fc:7d:cd:48:78:52:20: fc:a7:56:ca:a3:3c:55:3f:31:f6:84:14:6d:f8:5e: bb:8c:03:38:64:5e:57:af:0e:16:6f:ad:86:a8:c0: 97:ba:cf:eb:de:32:cb:1a:1d:f0:2e:c1:3f:0b:a6: 6f:e2:bd:99:d7:93:47:f6:1e:bd:e8:1c:04:64:1f: b9:e5:c2:fb:19:95:9d:0c:cd:19:48:84:43:e3:dc: b6:33:d7:95:87:03:af:af:8c:4c:d8:59:1c:1a:9d: 65:79:af:ff:41:e4:99:a4:6b:e0:0f:ba:cb:6f:78: 62:52:4c:11:1d:52:83:4a:65:86:79:68:ca:3b:4b: 3b:e2:77:44:d9:e4:4a:30:38:f5:55:2f:bf:f0:50: 21:e2:1a:a4:0d:9c:35:7f:f1:48:68:60:46:4c:e4: b3:26:b5:d1:b5:86:d8:07:14:3c:68:48:a7:63:32: d3:22:1a:ab:0c:67:97:52:72:33:86:4d:e5:a5:e9: e8:29:e3:16:ba:e3:96:7a:c6:ff:25:62:e8:10:4d: 83:df:95:64:3d:36:37:8c:ec:f0:eb:e9:10:e5:92: 6c:95:0f:91:16:e8:b0:a9:e2:d1:58:c7:6a:fa:9d: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:3A:49:67:E9:71:C6:37:5C:13:B4:0C:22:81:9E:4C:F9:22:DC X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/TkQ6SWfpccY3XBO0DCKBnkz5Itw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.69.0/24 88.148.72.0/24 88.148.78.0/24 88.148.86.0/24 88.148.89.0/24 88.148.94.0/24 88.148.107.0/24 89.32.165.0/24 89.34.120.0/24 89.44.65.0/24 89.44.67.0/24 89.44.71.0/24 89.45.240.0/24 89.45.245.0/24 94.76.139.0/24 94.76.155.0/24 94.76.177.0/24 94.76.189.0/24 94.176.142.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:71:d5:c9:06:4d:de:63:2e:03:56:80:11:a6:d6:1b:8e:0b: 20:97:f7:f6:19:15:f1:1a:2d:ee:af:3e:3d:f3:f3:23:b0:e2: c4:33:6e:d3:fe:4f:b9:75:3e:50:a6:de:76:e1:ad:fa:56:b0: cc:4c:3e:a9:0e:d2:e5:11:e1:80:7d:cd:74:4c:63:16:da:72: fc:c7:c5:b8:0c:20:f2:b3:3d:f3:1b:db:39:33:48:4c:80:bc: d0:af:fc:f2:6c:b1:33:c9:30:c3:41:1c:30:2e:94:eb:6a:99: 15:00:fd:30:5e:41:23:56:62:e2:15:52:5d:cf:7a:70:e1:f6: 1d:4c:22:ee:32:85:40:a4:a5:65:70:13:21:5a:98:e5:5a:ab: f6:54:0c:b1:bd:95:55:24:42:27:da:bd:3d:19:bb:d1:32:48: 9c:2c:d9:07:ae:c9:64:38:20:f1:b5:b6:ca:8a:24:cc:4e:06: ae:51:ad:99:8e:09:18:16:ca:8c:f2:40:5f:2f:12:72:3c:7c: 35:04:08:8b:82:3a:72:db:09:04:7f:12:18:20:c2:c1:3f:9c: b2:a0:a8:0c:4c:59:34:f6:3d:b7:6a:8d:8e:f7:79:9e:fa:a2: 61:36:1e:45:03:a5:c6:e0:29:cd:92:98:ee:5c:8e:c2:e6:27: df:80:a7:ea -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZr1CI4BiY62X+OqOsbT/rlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjA2MTg1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQ0M2E0OTY3ZTk3MWM2Mzc1YzEzYjQwYzIyODE5ZTRjZjkyMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQqfGX8+W85FPWiLk7g3fU9PS9iH wPx9zUh4UiD8p1bKozxVPzH2hBRt+F67jAM4ZF5Xrw4Wb62GqMCXus/r3jLLGh3w LsE/C6Zv4r2Z15NH9h696BwEZB+55cL7GZWdDM0ZSIRD49y2M9eVhwOvr4xM2Fkc Gp1lea//QeSZpGvgD7rLb3hiUkwRHVKDSmWGeWjKO0s74ndE2eRKMDj1VS+/8FAh 4hqkDZw1f/FIaGBGTOSzJrXRtYbYBxQ8aEinYzLTIhqrDGeXUnIzhk3lpenoKeMW uuOWesb/JWLoEE2D35VkPTY3jOzw6+kQ5ZJslQ+RFuiwqeLRWMdq+p3yRQIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFE5EOkln6XHGN1wTtAwigZ5M+SLcMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvVGtRNlNXZnBjY1kzWEJPMERDS0Jua3o1SXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAFiURQME AFiUSAMEAFiUTgMEAFiUVgMEAFiUWQMEAFiUXgMEAFiUawMEAFkgpQMEAFkieAME AFksQQMEAFksQwMEAFksRwMEAFkt8AMEAFkt9QMEAF5MiwMEAF5MmwMEAF5MsQME AF5MvQMEAF6wjjANBgkqhkiG9w0BAQsFAAOCAQEAHXHVyQZN3mMuA1aAEabWG44L IJf39hkV8Rot7q8+PfPzI7DixDNu0/5PuXU+UKbeduGt+lawzEw+qQ7S5RHhgH3N dExjFtpy/MfFuAwg8rM98xvbOTNITIC80K/88myxM8kww0EcMC6U62qZFQD9MF5B I1Zi4hVSXc96cOH2HUwi7jKFQKSlZXATIVqY5Vqr9lQMsb2VVSRCJ9q9PRm70TJI nCzZB67JZDgg8bW2yookzE4GrlGtmY4JGBbKjPJAXy8Scjx8NQQIi4I6ctsJBH8S GCDCwT+csqCoDExZNPY9t2qNjvd5nvqiYTYeRQOlxuApzZKY7lyOwuYn34Cn6g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:09 2025 by rpki-client