This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/j43LOA8IRrlHidVD9kIt8ts1bQQ.roa File: j43LOA8IRrlHidVD9kIt8ts1bQQ.roa (raw, json) Hash identifier: ajq42AMhzoj0izmv7N0d9nYjqO9xCqAA6SJaUcmPxOA= Subject key identifier: 8F:8D:CB:38:0F:08:46:B9:47:89:D5:43:F6:42:2D:F2:DB:35:6D:04 Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b Certificate serial: 019AC642FBF440F7BC3B64066F20C36DBDD4 Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/j43LOA8IRrlHidVD9kIt8ts1bQQ.roa Signing time: Thu 27 Nov 2025 17:01:09 +0000 ROA not before: Thu 27 Nov 2025 17:01:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38913 IP address blocks: 88.214.28.0/22 maxlen: 22 88.214.28.0/24 maxlen: 24 2a09:8b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:42:fb:f4:40:f7:bc:3b:64:06:6f:20:c3:6d:bd:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b Validity Not Before: Nov 27 17:01:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f8dcb380f0846b94789d543f6422df2db356d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:b4:97:4e:d1:78:43:ad:3f:fb:e6:81:df: ce:54:83:8d:cf:f9:4f:86:dc:17:65:77:a0:87:84: 69:ee:f2:31:9f:f3:7e:2e:0e:f1:54:55:11:0b:d5: 41:ba:d0:b9:b7:ec:ea:7b:e6:6a:fb:e5:3a:c4:e9: 71:90:78:cc:a4:46:ba:bc:ee:02:c3:e5:12:b6:58: 08:98:f7:c4:ce:6a:ec:1f:5f:84:14:f3:ed:0a:57: e3:8e:77:63:81:17:91:ed:c3:01:5e:f2:dd:ec:98: 08:54:f4:7f:6b:71:26:3f:02:d7:b0:82:e7:dc:e8: ea:f6:f8:fc:b2:f4:ee:8f:53:fd:8e:19:71:e6:96: 3d:d2:fa:1f:3f:4c:a0:57:fe:3b:01:1c:a0:b9:fd: c1:de:9e:5b:c9:f3:bd:65:6a:a2:3b:19:f3:45:ab: 6c:e9:88:e6:d9:22:cd:df:2e:d0:3b:ff:2d:ed:40: ba:2a:b4:8f:b8:09:88:38:06:fb:bc:2a:62:64:d9: 88:12:38:f7:ba:32:ea:b6:36:6b:4a:ba:b5:1b:6e: 01:26:2f:36:9b:98:4c:0a:22:35:ed:b5:01:3d:fe: bf:e5:f2:36:b2:8b:49:80:84:c1:73:64:5e:4f:3a: 7e:17:a1:f3:ff:9c:1a:fb:a8:fb:41:a2:27:c8:06: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:CB:38:0F:08:46:B9:47:89:D5:43:F6:42:2D:F2:DB:35:6D:04 X509v3 Authority Key Identifier: keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/j43LOA8IRrlHidVD9kIt8ts1bQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.28.0/22 IPv6: 2a09:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 45:75:bd:76:81:d8:56:99:43:9c:42:0a:88:87:13:af:07:c4: 35:76:b9:21:a8:53:e7:9b:fe:80:08:34:76:e6:33:d7:0f:17: 6a:d7:c7:04:ee:98:5d:9c:c2:25:4f:2e:95:e5:7d:8e:02:dc: 7a:79:75:bd:95:0b:e1:aa:c3:bc:6c:b7:5a:71:56:9f:17:11: 1d:12:16:cb:29:01:eb:2a:e2:9d:01:88:4e:72:3a:b1:35:e9: 49:eb:db:5a:a7:18:4a:9b:08:eb:a2:e1:a8:dc:4f:1a:d2:c5: d4:ed:48:b7:36:a6:91:18:bf:cf:6a:c4:62:fd:19:bc:28:83: 28:ea:e9:e2:da:56:41:9b:50:06:3e:ea:c7:29:35:08:62:5e: bf:81:67:3b:26:25:f8:35:77:64:8b:d7:20:1d:f1:61:d3:49: 40:d7:10:84:15:b3:0c:b4:4f:57:91:20:b1:a4:34:39:1f:41: d0:d6:21:ac:ed:d7:db:26:06:55:d6:42:13:56:fb:de:4c:63: af:42:bd:07:34:d7:a8:6d:56:96:c4:cb:bd:b9:77:b1:43:cf: 9d:76:7e:0e:1d:b5:64:8f:cd:b2:07:64:3d:6c:44:50:09:76: a2:07:53:89:ad:40:60:d7:36:ac:70:67:c7:43:18:9f:88:83: 96:44:c5:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrGQvv0QPe8O2QGbyDDbb3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4 YTVlM2IwHhcNMjUxMTI3MTcwMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjhkY2IzODBmMDg0NmI5NDc4OWQ1NDNmNjQyMmRmMmRiMzU2ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZC0l07ReEOtP/vmgd/OVIONz/lP htwXZXegh4Rp7vIxn/N+Lg7xVFURC9VButC5t+zqe+Zq++U6xOlxkHjMpEa6vO4C w+UStlgImPfEzmrsH1+EFPPtClfjjndjgReR7cMBXvLd7JgIVPR/a3EmPwLXsILn 3Ojq9vj8svTuj1P9jhlx5pY90vofP0ygV/47ARyguf3B3p5byfO9ZWqiOxnzRats 6Yjm2SLN3y7QO/8t7UC6KrSPuAmIOAb7vCpiZNmIEjj3ujLqtjZrSrq1G24BJi82 m5hMCiI17bUBPf6/5fI2sotJgITBc2ReTzp+F6Hz/5wa+6j7QaInyAaDWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI+NyzgPCEa5R4nVQ/ZCLfLbNW0EMB8GA1UdIwQY MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt YzJiYTI0NjUzZjdiLzEvajQzTE9BOElScmxIaWRWRDlrSXQ4dHMxYlFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWNYcMA0E AgACMAcDBQMqCYsAMA0GCSqGSIb3DQEBCwUAA4IBAQBFdb12gdhWmUOcQgqIhxOv B8Q1drkhqFPnm/6ACDR25jPXDxdq18cE7phdnMIlTy6V5X2OAtx6eXW9lQvhqsO8 bLdacVafFxEdEhbLKQHrKuKdAYhOcjqxNelJ69tapxhKmwjrouGo3E8a0sXU7Ui3 NqaRGL/PasRi/Rm8KIMo6uni2lZBm1AGPurHKTUIYl6/gWc7JiX4NXdki9cgHfFh 00lA1xCEFbMMtE9XkSCxpDQ5H0HQ1iGs7dfbJgZV1kITVvveTGOvQr0HNNeobVaW xMu9uXexQ8+ddn4OHbVkj82yB2Q9bERQCXaiB1OJrUBg1zascGfHQxifiIOWRMVv -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:17 2025 by rpki-client