This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/88P_5DcsyqOJv06NmQcctfEM9Cc.roa File: 88P_5DcsyqOJv06NmQcctfEM9Cc.roa (raw, json) Hash identifier: T+63uTO/WTVM2uNkS/J9AUeCwG/AkMh1gjPYy4hdFow= Subject key identifier: F3:C3:FF:E4:37:2C:CA:A3:89:BF:4E:8D:99:07:1C:B5:F1:0C:F4:27 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC5A5A9E41A3E0E3452590E2D31C6 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/88P_5DcsyqOJv06NmQcctfEM9Cc.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28964 IP address blocks: 77.105.8.0/24 maxlen: 24 77.105.39.0/24 maxlen: 24 79.175.66.0/24 maxlen: 24 79.175.120.0/24 maxlen: 24 81.18.51.0/24 maxlen: 24 81.18.56.0/24 maxlen: 24 81.18.57.0/24 maxlen: 24 93.186.65.0/24 maxlen: 24 93.186.77.0/24 maxlen: 24 109.121.48.0/24 maxlen: 24 109.121.49.0/24 maxlen: 24 109.121.53.0/24 maxlen: 24 178.219.2.0/24 maxlen: 24 178.253.212.0/24 maxlen: 24 178.253.216.0/24 maxlen: 24 178.253.217.0/24 maxlen: 24 178.253.218.0/24 maxlen: 24 178.253.235.0/24 maxlen: 24 178.253.238.0/24 maxlen: 24 178.253.246.0/24 maxlen: 24 188.255.179.0/24 maxlen: 24 188.255.190.0/24 maxlen: 24 188.255.192.0/24 maxlen: 24 188.255.195.0/24 maxlen: 24 188.255.207.0/24 maxlen: 24 188.255.217.0/24 maxlen: 24 188.255.228.0/24 maxlen: 24 212.69.2.0/24 maxlen: 24 212.69.3.0/24 maxlen: 24 212.69.19.0/24 maxlen: 24 212.69.21.0/24 maxlen: 24 212.69.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c5:a5:a9:e4:1a:3e:0e:34:52:59:0e:2d:31:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c3ffe4372ccaa389bf4e8d99071cb5f10cf427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:7b:ef:e5:b0:92:ed:16:b1:97:e0:c6:ed: 84:13:69:b6:bf:10:9c:f8:52:f7:4c:28:ae:8d:cb: 81:69:27:01:13:2e:10:33:7d:eb:6c:24:44:b3:97: 9c:0f:29:2f:10:f5:48:84:0f:68:46:60:2f:7b:f7: 13:ee:0d:dd:90:67:84:ee:00:b1:f4:a2:9d:2c:8c: 3c:91:ff:40:ca:45:69:52:9f:d7:83:cd:9f:bd:c8: c4:d2:ec:95:40:a9:87:ac:6b:91:7a:92:c5:1f:28: d0:57:83:69:37:54:26:e0:da:f8:5b:1a:91:32:73: f4:0d:f4:a0:b7:4a:d5:e8:6a:93:7e:64:ba:79:5e: 63:bc:75:da:26:1d:e6:a6:18:62:d6:49:02:d1:c7: a6:b6:77:ec:22:71:ae:63:63:1d:26:b0:b2:a2:96: 03:5a:b4:db:b8:2e:15:1d:a7:f2:34:a9:b0:b2:24: 93:8d:16:d1:c0:89:22:38:9d:84:61:6e:1a:61:df: 5f:57:a2:9f:7b:86:61:cd:11:69:ad:a4:47:36:e5: 1f:8d:e4:3b:9e:5b:c8:09:10:1f:fa:19:fe:0c:60: 76:61:42:f6:5d:28:96:57:73:81:21:3e:82:c0:fa: 73:ea:3d:db:da:73:ae:d6:72:1a:f5:ba:9b:52:58: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C3:FF:E4:37:2C:CA:A3:89:BF:4E:8D:99:07:1C:B5:F1:0C:F4:27 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/88P_5DcsyqOJv06NmQcctfEM9Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.8.0/24 77.105.39.0/24 79.175.66.0/24 79.175.120.0/24 81.18.51.0/24 81.18.56.0/23 93.186.65.0/24 93.186.77.0/24 109.121.48.0/23 109.121.53.0/24 178.219.2.0/24 178.253.212.0/24 178.253.216.0-178.253.218.255 178.253.235.0/24 178.253.238.0/24 178.253.246.0/24 188.255.179.0/24 188.255.190.0/24 188.255.192.0/24 188.255.195.0/24 188.255.207.0/24 188.255.217.0/24 188.255.228.0/24 212.69.2.0/23 212.69.19.0/24 212.69.21.0/24 212.69.30.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:97:64:71:d5:25:97:78:ca:b3:fd:de:f0:c3:e9:e7:0f:99: 2f:fd:18:30:b9:f8:14:2a:6d:d0:b3:b9:1e:d5:f5:09:34:f8: 35:1f:76:f0:da:54:a6:1b:78:1f:40:32:13:07:9b:1a:96:d0: d8:0f:fd:c7:e7:8c:52:61:58:91:5d:07:a6:8d:50:b4:93:77: 3c:e2:15:d1:6c:74:c2:78:64:95:d6:49:8a:48:21:dd:44:f0: 19:2c:36:78:4e:ec:16:04:53:da:91:41:a1:2c:13:3c:41:07: 4a:54:d2:f4:4f:a1:49:83:84:c2:d5:dd:c9:64:f2:c3:4c:8c: 96:8d:38:cb:32:c4:c2:9d:1d:a2:17:5f:a7:f3:10:a4:60:d9: 50:f7:07:f1:7c:70:57:3d:9d:ab:60:09:94:7b:1b:79:43:8c: 77:00:2e:4b:31:35:4c:cd:df:3d:a6:10:f7:e7:dc:cf:0c:c9: 0f:93:f4:5b:ee:24:92:33:bb:eb:d7:45:e2:a5:e2:e3:26:6f: 83:ff:f0:db:fc:7c:ed:4d:8f:7b:a9:f1:99:6a:55:26:3b:99: c9:d0:8a:be:3e:56:f7:4a:80:b3:54:05:72:24:ec:54:8e:ea: cb:82:2d:2a:0a:66:46:90:74:c0:d9:25:e6:8c:63:15:b1:b0: 63:0f:24:4b -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt5fsWlqeQaPg40UlkOLTHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MzZmZlNDM3MmNjYWEzODliZjRlOGQ5OTA3MWNiNWYxMGNmNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5p77+Wwku0WsZfgxu2EE2m2vxCc +FL3TCiujcuBaScBEy4QM33rbCREs5ecDykvEPVIhA9oRmAve/cT7g3dkGeE7gCx 9KKdLIw8kf9AykVpUp/Xg82fvcjE0uyVQKmHrGuRepLFHyjQV4NpN1Qm4Nr4WxqR MnP0DfSgt0rV6GqTfmS6eV5jvHXaJh3mphhi1kkC0cemtnfsInGuY2MdJrCyopYD WrTbuC4VHafyNKmwsiSTjRbRwIkiOJ2EYW4aYd9fV6Kfe4ZhzRFpraRHNuUfjeQ7 nlvICRAf+hn+DGB2YUL2XSiWV3OBIT6CwPpz6j3b2nOu1nIa9bqbUlhyyQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFPPD/+Q3LMqjib9OjZkHHLXxDPQnMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvODhQXzVEY3N5cU9KdjA2Tm1RY2N0ZkVNOUNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBABN aQgDBABNaScDBABPr0IDBABPr3gDBABREjMDBAFREjgDBABdukEDBABduk0DBAFt eTADBABteTUDBACy2wIDBACy/dQwDAMEA7L92AMEALL92gMEALL96wMEALL97gME ALL99gMEALz/swMEALz/vgMEALz/wAMEALz/wwMEALz/zwMEALz/2QMEALz/5AME AdRFAgMEANRFEwMEANRFFQMEANRFHjANBgkqhkiG9w0BAQsFAAOCAQEATZdkcdUl l3jKs/3e8MPp5w+ZL/0YMLn4FCpt0LO5HtX1CTT4NR928NpUpht4H0AyEwebGpbQ 2A/9x+eMUmFYkV0Hpo1QtJN3POIV0Wx0wnhkldZJikgh3UTwGSw2eE7sFgRT2pFB oSwTPEEHSlTS9E+hSYOEwtXdyWTyw0yMlo04yzLEwp0dohdfp/MQpGDZUPcH8Xxw Vz2dq2AJlHsbeUOMdwAuSzE1TM3fPaYQ9+fczwzJD5P0W+4kkjO769dF4qXi4yZv g//w2/x87U2Pe6nxmWpVJjuZydCKvj5W90qAs1QFciTsVI7qy4ItKgpmRpB0wNkl 5oxjFbGwYw8kSw== -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:22 2026 by rpki-client