This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/M8LXMZl36E9x_u1hgBXprwim-Xo.roa File: M8LXMZl36E9x_u1hgBXprwim-Xo.roa (raw, json) Hash identifier: jfo88yC1004DLH8yvbxNuNrVELZRrvbkyGohjnl520k= Subject key identifier: 33:C2:D7:31:99:77:E8:4F:71:FE:ED:61:80:15:E9:AF:08:A6:F9:7A Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0 Certificate serial: 019B0EDE51EE0762CAADBB802FF161C13FCD Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/M8LXMZl36E9x_u1hgBXprwim-Xo.roa Signing time: Thu 11 Dec 2025 19:23:29 +0000 ROA not before: Thu 11 Dec 2025 19:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202505 IP address blocks: 84.54.14.0/24 maxlen: 24 86.104.14.0/24 maxlen: 24 89.43.78.0/24 maxlen: 24 176.98.42.0/24 maxlen: 24 176.98.43.0/24 maxlen: 24 185.81.152.0/24 maxlen: 24 185.81.153.0/24 maxlen: 24 185.81.154.0/24 maxlen: 24 185.81.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:de:51:ee:07:62:ca:ad:bb:80:2f:f1:61:c1:3f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Validity Not Before: Dec 11 19:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=33c2d7319977e84f71feed618015e9af08a6f97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:b2:ce:1a:f6:9d:cc:50:94:ad:65:72:c2: 7e:ed:c2:b1:50:95:2d:cf:59:83:31:1e:b9:98:e4: 98:b6:aa:58:bd:b1:b9:73:de:27:c5:8b:a7:80:fe: 9f:3e:02:74:79:dd:1a:65:0d:c3:aa:a9:ed:fa:c5: 6d:3a:6b:b8:eb:0a:70:3c:a4:fd:87:6a:ee:5f:ad: 02:63:b1:63:7c:ad:7a:0c:90:5f:dc:ec:8c:11:de: 8a:28:7e:45:73:73:be:7d:d9:85:e5:da:4f:01:d1: 4f:67:49:91:33:72:fa:10:a1:f3:68:6a:f9:d0:20: df:38:62:ac:8e:5a:84:39:9a:1c:bb:46:e3:fa:df: c8:7c:7d:9b:66:5f:86:d4:db:5c:8b:4a:70:22:2a: dd:92:20:cf:b3:f2:12:c1:b9:fe:96:6a:98:b2:24: 19:a8:d6:f6:6d:ff:29:88:9f:f9:95:19:69:74:08: 6b:3d:80:45:9c:ba:a4:ea:da:81:a2:b3:d7:59:5f: 76:ca:68:e0:59:e8:c3:73:a8:54:35:01:eb:67:e4: ac:fd:1f:ae:fc:ea:28:c6:01:42:e5:7c:b1:6e:51: 91:71:30:5e:3e:e3:eb:54:a0:d6:b6:4f:06:4a:f9: b6:17:c9:e1:06:2f:88:ee:49:e0:1b:98:57:58:79: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:D7:31:99:77:E8:4F:71:FE:ED:61:80:15:E9:AF:08:A6:F9:7A X509v3 Authority Key Identifier: keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/M8LXMZl36E9x_u1hgBXprwim-Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.14.0/24 86.104.14.0/24 89.43.78.0/24 176.98.42.0/23 185.81.152.0/22 Signature Algorithm: sha256WithRSAEncryption 57:b2:75:b3:85:dd:71:2a:65:d3:c3:68:d7:8c:cc:0d:99:97: 99:02:0a:14:3a:ac:21:86:9a:41:2f:2d:5f:e3:4d:52:9a:22: 74:7c:f2:4a:10:7f:8c:d1:bb:60:99:1c:1c:7e:89:a3:90:8b: 33:0c:1e:1d:67:da:c7:c3:85:a6:ec:a9:bb:98:93:dd:a4:eb: a0:32:2f:e1:83:6f:f1:14:c7:3f:66:0b:17:4f:74:f5:2c:41: 32:64:1b:fc:7f:91:8e:b4:b3:01:c1:be:5d:1f:4f:50:8f:c7: 5a:cc:7c:cc:8e:33:b7:78:23:31:fb:14:02:7e:35:62:94:ff: d2:7a:41:ba:7b:a8:9c:09:c0:36:81:e5:70:13:47:8c:d8:a4: dc:3b:06:54:4f:97:b8:a1:94:25:e2:4e:0e:80:4d:8b:d0:5a: 28:99:da:6f:b4:18:41:f5:33:3f:05:33:58:84:42:d0:1d:bb: f8:e2:e0:7d:1f:04:98:13:e2:7e:7a:f5:91:2a:46:28:56:2e: 3d:de:f3:97:71:48:92:8f:65:08:92:e2:86:14:2a:51:41:a7: 82:85:ef:2c:62:37:91:9b:1c:c2:6f:b5:34:4c:38:17:90:42: 75:04:ad:84:77:79:3a:c8:4a:21:8e:97:cc:a0:48:96:d6:be: f3:ab:53:70 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsO3lHuB2LKrbuAL/FhwT/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx NzgzZDAwHhcNMjUxMjExMTkyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2MyZDczMTk5NzdlODRmNzFmZWVkNjE4MDE1ZTlhZjA4YTZmOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgCyzhr2ncxQlK1lcsJ+7cKxUJUt z1mDMR65mOSYtqpYvbG5c94nxYungP6fPgJ0ed0aZQ3Dqqnt+sVtOmu46wpwPKT9 h2ruX60CY7FjfK16DJBf3OyMEd6KKH5Fc3O+fdmF5dpPAdFPZ0mRM3L6EKHzaGr5 0CDfOGKsjlqEOZocu0bj+t/IfH2bZl+G1Ntci0pwIirdkiDPs/ISwbn+lmqYsiQZ qNb2bf8piJ/5lRlpdAhrPYBFnLqk6tqBorPXWV92ymjgWejDc6hUNQHrZ+Ss/R+u /OooxgFC5XyxblGRcTBePuPrVKDWtk8GSvm2F8nhBi+I7kngG5hXWHk4tQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDPC1zGZd+hPcf7tYYAV6a8Ipvl6MB8GA1UdIwQY MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt NjI2NTUyMWY2ZGY3LzEvTThMWE1abDM2RTl4X3UxaGdCWHByd2ltLVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3 LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVDYOAwQA VmgOAwQAWStOAwQBsGIqAwQCuVGYMA0GCSqGSIb3DQEBCwUAA4IBAQBXsnWzhd1x KmXTw2jXjMwNmZeZAgoUOqwhhppBLy1f401SmiJ0fPJKEH+M0btgmRwcfomjkIsz DB4dZ9rHw4Wm7Km7mJPdpOugMi/hg2/xFMc/ZgsXT3T1LEEyZBv8f5GOtLMBwb5d H09Qj8dazHzMjjO3eCMx+xQCfjVilP/SekG6e6icCcA2geVwE0eM2KTcOwZUT5e4 oZQl4k4OgE2L0FoomdpvtBhB9TM/BTNYhELQHbv44uB9HwSYE+J+evWRKkYoVi49 3vOXcUiSj2UIkuKGFCpRQaeChe8sYjeRmxzCb7U0TDgXkEJ1BK2Ed3k6yEohjpfM oEiW1r7zq1Nw -----END CERTIFICATE-----Generated at Fri Dec 12 10:27:43 2025 by rpki-client