This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wFQBUTx4etXY1QgR_GIoLdUMrMA.roa File: wFQBUTx4etXY1QgR_GIoLdUMrMA.roa (raw, json) Hash identifier: Si4GA7e7Iiq12I9TjolV3T6skn5l+c7DF3KhS0oMsc8= Subject key identifier: C0:54:01:51:3C:78:7A:D5:D8:D5:08:11:FC:62:28:2D:D5:0C:AC:C0 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC64F792B1351EE47163A73B3FB9BA891 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wFQBUTx4etXY1QgR_GIoLdUMrMA.roa Signing time: Thu 27 Nov 2025 17:14:48 +0000 ROA not before: Thu 27 Nov 2025 17:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 84.232.28.0/24 maxlen: 24 88.148.24.0/23 maxlen: 24 88.148.54.0/24 maxlen: 24 88.148.56.0/24 maxlen: 24 88.148.60.0/24 maxlen: 24 88.148.61.0/24 maxlen: 24 88.148.84.0/24 maxlen: 24 94.24.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4f:79:2b:13:51:ee:47:16:3a:73:b3:fb:9b:a8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 27 17:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c05401513c787ad5d8d50811fc62282dd50cacc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:aa:b1:28:b2:e1:aa:9f:65:82:c9:c1:90: 46:74:a6:50:ba:57:29:63:31:a6:d8:db:f1:fd:77: c0:d3:8b:96:4c:41:0e:07:cb:e2:29:68:69:63:5d: c1:27:68:6d:e9:6c:fb:53:97:ec:73:35:52:42:5c: d0:d4:b1:ed:29:22:19:be:1a:d1:04:f1:4a:23:da: e2:ec:ac:96:f6:35:31:b9:76:dc:cf:ba:b1:d5:29: b4:c1:f3:de:b9:1a:f8:85:35:b1:23:61:83:33:d6: 74:6f:90:91:be:2b:75:ea:06:78:32:11:31:8d:50: 2d:7a:d5:09:e9:33:62:8d:47:00:c8:f9:f0:53:74: 78:42:8c:48:e8:dc:be:77:f5:70:6e:51:fb:9a:d5: 48:18:e9:db:84:8c:cb:7e:68:4c:ce:a0:9f:95:32: 0a:a5:c8:fc:fd:5d:ad:db:b5:c8:47:f6:a9:86:62: 0e:60:5d:4a:ab:78:cd:83:17:d3:54:03:be:d6:93: c4:97:c7:5b:45:c9:23:01:85:3e:eb:8a:00:45:6a: b7:67:73:85:d9:9e:e4:e5:ec:90:0f:d3:88:57:a9: b5:7c:61:c2:4a:1e:6a:34:79:87:05:f8:f9:ce:af: f4:57:18:2f:20:10:4c:d3:d6:d9:24:7f:2d:bb:7a: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:54:01:51:3C:78:7A:D5:D8:D5:08:11:FC:62:28:2D:D5:0C:AC:C0 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wFQBUTx4etXY1QgR_GIoLdUMrMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.28.0/24 88.148.24.0/23 88.148.54.0/24 88.148.56.0/24 88.148.60.0/23 88.148.84.0/24 94.24.35.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5c:72:f6:39:22:bd:6d:4a:2b:02:ba:18:39:a5:0d:fd:0b: 9b:1f:f6:41:37:c5:e7:85:cd:63:8d:a4:e5:d8:eb:30:ff:06: f6:12:93:ac:32:32:9b:b7:99:8b:9d:ba:ea:0b:8a:3b:98:a8: e3:c2:3e:4b:a9:3f:01:a6:d2:18:08:7e:f9:c1:0c:4e:e0:7c: 80:7e:83:e8:41:c1:30:39:76:54:fa:38:bb:d1:78:11:38:e0: 73:08:47:31:6c:bb:7d:a5:9d:07:95:00:b6:22:ab:3d:2d:77: 14:83:68:31:ac:21:c7:77:8a:fa:40:14:af:a7:01:b7:9f:f8: bf:97:00:52:1d:70:56:53:ad:9a:d2:d4:77:f9:67:47:0c:db: 6b:dc:96:06:bf:77:0c:d9:97:27:3e:ab:79:68:e7:eb:49:c5: 02:b3:04:19:29:c2:f8:29:15:9f:94:28:cd:e9:ae:d5:6e:73: f5:3f:6a:c1:97:01:d4:f2:8f:5b:94:d1:1b:8c:87:d1:01:37: 3e:a9:d2:5a:d0:73:6a:9e:e9:25:5d:fe:2c:65:34:b3:ce:ac: 83:6e:1b:f6:c4:33:64:05:2d:2a:9c:c2:39:50:9d:2f:a3:19: 47:5c:03:fd:48:00:37:6e:1d:30:34:26:cf:1a:de:8d:3a:29: f5:0e:7f:ec -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZrGT3krE1HuRxY6c7P7m6iRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI3MTcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU0MDE1MTNjNzg3YWQ1ZDhkNTA4MTFmYzYyMjgyZGQ1MGNhY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopqqsSiy4aqfZYLJwZBGdKZQulcp YzGm2Nvx/XfA04uWTEEOB8viKWhpY13BJ2ht6Wz7U5fsczVSQlzQ1LHtKSIZvhrR BPFKI9ri7KyW9jUxuXbcz7qx1Sm0wfPeuRr4hTWxI2GDM9Z0b5CRvit16gZ4MhEx jVAtetUJ6TNijUcAyPnwU3R4QoxI6Ny+d/VwblH7mtVIGOnbhIzLfmhMzqCflTIK pcj8/V2t27XIR/aphmIOYF1Kq3jNgxfTVAO+1pPEl8dbRckjAYU+64oARWq3Z3OF 2Z7k5eyQD9OIV6m1fGHCSh5qNHmHBfj5zq/0VxgvIBBM09bZJH8tu3oSfQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMBUAVE8eHrV2NUIEfxiKC3VDKzAMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvd0ZRQlVUeDRldFhZMVFnUl9HSW9MZFVNck1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAVOgcAwQB WJQYAwQAWJQ2AwQAWJQ4AwQBWJQ8AwQAWJRUAwQAXhgjMA0GCSqGSIb3DQEBCwUA A4IBAQB2XHL2OSK9bUorAroYOaUN/QubH/ZBN8Xnhc1jjaTl2Osw/wb2EpOsMjKb t5mLnbrqC4o7mKjjwj5LqT8BptIYCH75wQxO4HyAfoPoQcEwOXZU+ji70XgROOBz CEcxbLt9pZ0HlQC2Iqs9LXcUg2gxrCHHd4r6QBSvpwG3n/i/lwBSHXBWU62a0tR3 +WdHDNtr3JYGv3cM2ZcnPqt5aOfrScUCswQZKcL4KRWflCjN6a7VbnP1P2rBlwHU 8o9blNEbjIfRATc+qdJa0HNqnuklXf4sZTSzzqyDbhv2xDNkBS0qnMI5UJ0voxlH XAP9SAA3bh0wNCbPGt6NOin1Dn/s -----END CERTIFICATE-----Generated at Sat Dec 6 16:15:46 2025 by rpki-client