This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/D8_eG48OW6KTp26GJ6dPuCrbe9k.roa File: D8_eG48OW6KTp26GJ6dPuCrbe9k.roa (raw, json) Hash identifier: y4YVcTUw8cnpbik4Awi3bWFPCsLj+DXF2oG1Oqkip1c= Subject key identifier: 0F:CF:DE:1B:8F:0E:5B:A2:93:A7:6E:86:27:A7:4F:B8:2A:DB:7B:D9 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69FEED408A38A3F784E8342FE4B83 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/D8_eG48OW6KTp26GJ6dPuCrbe9k.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 88.148.35.0/24 maxlen: 24 88.148.40.0/23 maxlen: 23 88.148.44.0/24 maxlen: 24 88.148.45.0/24 maxlen: 24 88.148.55.0/24 maxlen: 24 88.148.95.0/24 maxlen: 24 88.148.109.0/24 maxlen: 24 88.148.117.0/24 maxlen: 24 94.76.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9f:ee:d4:08:a3:8a:3f:78:4e:83:42:fe:4b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fcfde1b8f0e5ba293a76e8627a74fb82adb7bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:6e:72:ef:42:d7:c4:23:b7:07:02:86:78: a1:34:3d:a1:21:89:65:01:ac:2c:04:81:8f:39:2d: 22:f2:2a:c0:86:40:8a:a3:29:78:19:8e:e0:bb:fd: 99:e1:80:83:fc:02:60:1a:35:96:e5:81:b6:48:42: e8:23:92:f2:bb:97:30:5d:45:64:fd:62:ab:24:1d: e0:07:fb:e6:90:fd:65:f6:5a:e6:d9:89:12:bf:d2: 08:63:1b:4c:72:ae:ac:77:c8:97:46:0d:b0:3f:d2: 15:0f:6c:87:07:71:dd:72:2c:29:0c:58:89:1f:15: 43:ff:0e:b3:88:04:08:2a:48:a9:2a:ee:a5:99:91: 6e:a2:5c:71:c0:c3:98:57:05:66:c7:e0:6e:be:31: a3:6f:d3:b8:d9:56:75:26:4c:d9:96:c7:b4:3b:4c: 8b:a3:0e:b6:48:37:1a:a0:f6:74:a9:dd:53:c4:d5: 5d:cc:30:fc:eb:fe:02:b6:93:44:83:04:96:8a:bc: 07:14:54:d8:f4:72:89:60:a1:93:fc:65:fa:3e:f9: 29:8a:48:a7:3a:5f:82:99:95:2a:90:14:86:69:96: eb:4c:1a:4f:69:63:2a:1d:6f:9e:d7:77:41:df:90: 49:c0:f3:a6:f9:08:e4:16:ae:71:4d:50:a6:72:24: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CF:DE:1B:8F:0E:5B:A2:93:A7:6E:86:27:A7:4F:B8:2A:DB:7B:D9 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/D8_eG48OW6KTp26GJ6dPuCrbe9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.35.0/24 88.148.40.0/23 88.148.44.0/23 88.148.55.0/24 88.148.95.0/24 88.148.109.0/24 88.148.117.0/24 94.76.158.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b5:82:b0:0f:25:27:f3:d7:83:99:10:14:94:f6:f0:46:6b: 41:10:0d:f8:df:db:b1:c2:e0:80:24:0e:61:24:be:48:7d:11: 61:96:ce:ff:2c:a8:81:84:52:e4:64:72:a9:68:59:1e:36:94: 6d:9d:82:16:71:b2:18:f5:a5:3c:d5:12:75:cf:07:d8:22:01: 43:31:86:db:d7:02:ba:0e:d1:47:bf:ef:05:f6:4d:f6:d1:ae: b0:2f:72:e5:7a:9b:48:91:03:8c:1c:9c:4c:4e:2d:f8:51:02: 26:59:67:8b:e0:e1:85:bf:1a:93:a4:4d:3b:e9:91:00:62:84: 76:89:ea:2e:74:7f:ac:53:57:70:7f:af:c2:06:3d:45:8b:a5: 19:64:e8:7c:a2:4c:57:dc:b8:6b:8d:d8:f3:1e:de:28:bb:a0: a6:66:04:d1:a9:e4:35:1c:52:dc:36:ae:1b:0d:ff:3c:5a:9d: 92:0e:61:db:31:6a:f7:ed:3e:1c:13:7c:8b:dd:fa:7f:77:e5: 4f:f4:c7:77:69:6e:8a:12:92:65:f9:22:45:fd:5e:46:af:b0: 32:b8:01:78:19:05:e2:c1:a4:5b:63:ff:9d:04:a8:e0:0d:d7: 20:de:1d:5c:de:f5:08:42:19:50:c8:e9:e6:6b:28:89:0d:c4: af:73:65:23 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3xp/u1Aijij94ToNC/kuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmNmZGUxYjhmMGU1YmEyOTNhNzZlODYyN2E3NGZiODJhZGI3YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUlucu9C18QjtwcChnihND2hIYll AawsBIGPOS0i8irAhkCKoyl4GY7gu/2Z4YCD/AJgGjWW5YG2SELoI5Lyu5cwXUVk /WKrJB3gB/vmkP1l9lrm2YkSv9IIYxtMcq6sd8iXRg2wP9IVD2yHB3HdciwpDFiJ HxVD/w6ziAQIKkipKu6lmZFuolxxwMOYVwVmx+BuvjGjb9O42VZ1JkzZlse0O0yL ow62SDcaoPZ0qd1TxNVdzDD86/4CtpNEgwSWirwHFFTY9HKJYKGT/GX6Pvkpikin Ol+CmZUqkBSGaZbrTBpPaWMqHW+e13dB35BJwPOm+QjkFq5xTVCmciTTUQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFA/P3huPDluik6duhienT7gq23vZMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvRDhfZUc0OE9XNktUcDI2R0o2ZFB1Q3JiZTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAWJQjAwQB WJQoAwQBWJQsAwQAWJQ3AwQAWJRfAwQAWJRtAwQAWJR1AwQAXkyeMA0GCSqGSIb3 DQEBCwUAA4IBAQAttYKwDyUn89eDmRAUlPbwRmtBEA3439uxwuCAJA5hJL5IfRFh ls7/LKiBhFLkZHKpaFkeNpRtnYIWcbIY9aU81RJ1zwfYIgFDMYbb1wK6DtFHv+8F 9k320a6wL3LleptIkQOMHJxMTi34UQImWWeL4OGFvxqTpE076ZEAYoR2ieoudH+s U1dwf6/CBj1Fi6UZZOh8okxX3LhrjdjzHt4ou6CmZgTRqeQ1HFLcNq4bDf88Wp2S DmHbMWr37T4cE3yL3fp/d+VP9Md3aW6KEpJl+SJF/V5Gr7AyuAF4GQXiwaRbY/+d BKjgDdcg3h1c3vUIQhlQyOnmayiJDcSvc2Uj -----END CERTIFICATE-----Generated at Sun Jan 18 04:09:27 2026 by rpki-client