This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa File: Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa (raw, json) Hash identifier: u+Yzk3JpAwQ1sKYO8qin8N8gxyReMldlGNxfGvAoYCU= Subject key identifier: 3D:FF:19:4F:86:3C:B8:01:C1:26:4E:08:BC:BE:82:4E:2B:A5:E9:0A Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019A80D6462964D21FD166DE96018D28C24E Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa Signing time: Fri 14 Nov 2025 05:28:37 +0000 ROA not before: Fri 14 Nov 2025 05:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50053 IP address blocks: 88.214.53.0/24 maxlen: 24 217.147.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:80:d6:46:29:64:d2:1f:d1:66:de:96:01:8d:28:c2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Nov 14 05:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dff194f863cb801c1264e08bcbe824e2ba5e90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:48:09:7c:58:ef:79:d5:35:39:c1:77:1c: 52:0a:91:be:4e:a8:37:7a:ba:e1:cb:ff:72:68:43: fc:4f:38:35:fd:36:f3:aa:91:a5:2c:72:f6:0a:3f: 9a:3b:1e:95:fa:4a:ff:63:5d:f7:5b:50:e5:2a:79: 19:e7:68:e6:cf:45:3a:1e:b9:11:48:4d:9d:bd:51: 1f:69:25:28:1c:1e:74:a9:a0:f7:61:f8:da:83:79: 88:d4:4e:60:fc:2a:45:6a:85:67:cb:4b:95:ac:8e: 97:46:61:c7:5c:0f:d2:2c:1c:d7:db:92:d0:47:24: 99:9e:5c:8e:82:fb:78:5c:82:c4:1b:b3:4a:5e:5f: ac:fc:4c:be:35:b5:d0:a3:68:06:02:1e:65:4e:48: 13:27:2a:12:34:02:50:8c:f5:e2:dc:eb:4f:c6:05: f7:0f:cc:8e:9c:62:02:6c:ba:e6:6a:e8:39:ba:23: 8b:42:c1:26:55:26:c7:25:d1:ed:bf:63:82:d9:6a: 09:8b:84:94:99:6f:70:91:9d:e2:3d:07:12:6b:19: b9:50:fd:9a:22:94:1c:b5:73:6c:ab:86:69:30:e1: ca:c6:4d:eb:8c:f1:63:3f:ec:5e:bd:e9:85:53:8b: 08:f8:a1:3c:65:37:29:f9:f6:83:2a:6a:93:43:37: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FF:19:4F:86:3C:B8:01:C1:26:4E:08:BC:BE:82:4E:2B:A5:E9:0A X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Pf8ZT4Y8uAHBJk4IvL6CTiul6Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.53.0/24 217.147.15.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:e2:8e:1f:3f:bc:10:2d:2f:50:fa:b8:7a:af:46:9a:4b:d4: 54:0f:c8:75:be:c6:a4:3b:9a:1a:f4:3f:c5:35:96:04:00:09: 56:6e:9b:2a:7d:83:2c:72:de:d4:06:b0:9e:20:80:e0:b8:16: 2e:01:cb:f7:e7:75:c6:8e:78:55:07:a5:8c:28:16:10:63:76: 18:0d:34:e4:8b:b0:02:40:dc:c3:0f:7e:d3:8b:3f:66:f9:ca: 2c:ec:74:7c:56:87:a9:e3:de:1d:0b:55:6b:db:03:06:ea:a8: fc:11:18:f8:e7:54:b7:59:a6:79:4d:55:4e:5f:0e:7d:42:fc: 9e:7d:88:1a:ea:58:cd:cd:6d:70:f5:59:0a:46:77:8a:de:7c: c0:a8:f7:4f:9b:95:47:29:67:37:c9:af:4f:df:4c:bb:e0:a9: 2d:3d:e4:6a:ea:f7:96:54:62:63:be:25:ec:88:0d:28:8c:f9: 3f:b3:93:0f:31:f3:2b:33:d3:c8:bb:7f:fa:05:71:d7:34:cc: 8d:0a:04:e2:0a:c1:4d:bc:a1:3f:1d:29:b7:45:24:d6:10:b3: b6:dd:4c:fa:0d:4e:9c:c1:db:a3:43:9e:74:81:4c:6e:54:b1: a8:e1:88:c2:d7:0c:0b:e2:f2:9c:d3:84:1a:93:d1:2a:49:6d: 66:35:53:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqA1kYpZNIf0WbelgGNKMJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMTE0MDUyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGZmMTk0Zjg2M2NiODAxYzEyNjRlMDhiY2JlODI0ZTJiYTVlOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGpICXxY73nVNTnBdxxSCpG+Tqg3 errhy/9yaEP8Tzg1/TbzqpGlLHL2Cj+aOx6V+kr/Y133W1DlKnkZ52jmz0U6HrkR SE2dvVEfaSUoHB50qaD3Yfjag3mI1E5g/CpFaoVny0uVrI6XRmHHXA/SLBzX25LQ RySZnlyOgvt4XILEG7NKXl+s/Ey+NbXQo2gGAh5lTkgTJyoSNAJQjPXi3OtPxgX3 D8yOnGICbLrmaug5uiOLQsEmVSbHJdHtv2OC2WoJi4SUmW9wkZ3iPQcSaxm5UP2a IpQctXNsq4ZpMOHKxk3rjPFjP+xevemFU4sI+KE8ZTcp+faDKmqTQzclqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD3/GU+GPLgBwSZOCLy+gk4rpekKMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvUGY4WlQ0WTh1QUhCSms0SXZMNkNUaXVsNlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNY1AwQA 2ZMPMA0GCSqGSIb3DQEBCwUAA4IBAQBr4o4fP7wQLS9Q+rh6r0aaS9RUD8h1vsak O5oa9D/FNZYEAAlWbpsqfYMsct7UBrCeIIDguBYuAcv353XGjnhVB6WMKBYQY3YY DTTki7ACQNzDD37Tiz9m+cos7HR8Voep494dC1Vr2wMG6qj8ERj451S3WaZ5TVVO Xw59QvyefYga6ljNzW1w9VkKRneK3nzAqPdPm5VHKWc3ya9P30y74KktPeRq6veW VGJjviXsiA0ojPk/s5MPMfMrM9PIu3/6BXHXNMyNCgTiCsFNvKE/HSm3RSTWELO2 3Uz6DU6cwdujQ550gUxuVLGo4YjC1wwL4vKc04Qak9EqSW1mNVMA -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:07 2025 by rpki-client