This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ECxH2a5FRaH5MCuaRqAQQ4UsxXo.roa File: ECxH2a5FRaH5MCuaRqAQQ4UsxXo.roa (raw, json) Hash identifier: F/m2nob31Nj/LbKEXNlSAZO/nBOq6RGmBXQbAMsqiaM= Subject key identifier: 10:2C:47:D9:AE:45:45:A1:F9:30:2B:9A:46:A0:10:43:85:2C:C5:7A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AC64F7C17F60B2C43DCFE7735E2EFA26D Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ECxH2a5FRaH5MCuaRqAQQ4UsxXo.roa Signing time: Thu 27 Nov 2025 17:14:49 +0000 ROA not before: Thu 27 Nov 2025 17:14:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 88.148.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4f:7c:17:f6:0b:2c:43:dc:fe:77:35:e2:ef:a2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Nov 27 17:14:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=102c47d9ae4545a1f9302b9a46a01043852cc57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:35:46:0f:40:d3:5a:a2:70:22:60:4e:9d: 69:b6:85:8c:06:1f:75:5d:43:89:db:19:fb:37:62: 6e:66:73:0e:51:39:f2:fe:e8:1b:f3:93:ac:3a:12: cd:3b:1f:e6:71:73:7a:47:ae:88:63:f1:38:45:ce: ea:72:c6:ea:c8:b3:4a:1b:ec:ae:5a:20:94:1e:ca: ce:ae:d4:0d:bd:19:43:2a:70:30:85:2a:75:47:e2: 26:82:ec:52:a7:99:d9:a7:a8:dd:53:13:25:fc:10: 7f:39:f0:60:65:56:70:13:59:eb:66:e7:86:59:d4: ea:ed:c0:4b:e0:04:e3:a1:8c:a4:f1:df:ad:ef:7c: a3:14:80:4d:49:51:66:3c:41:44:44:4c:1f:36:52: 03:7b:b5:c9:54:db:ea:7e:03:fa:39:7e:d5:29:3f: 3d:8f:57:48:75:ea:66:3f:43:1a:b8:6b:fb:6e:61: f6:48:b2:bb:ef:b9:1f:4d:29:af:47:56:7f:b2:67: 2b:9a:34:70:f6:57:0e:2b:3a:8c:31:f0:b1:e4:78: 64:1c:9a:bd:7a:a5:ff:aa:69:9f:a4:18:5f:91:40: f2:99:b7:f5:58:8a:4b:76:c6:0c:8e:f4:10:62:6d: ff:80:38:bd:e8:71:61:3b:36:f7:29:47:2d:22:e7: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:47:D9:AE:45:45:A1:F9:30:2B:9A:46:A0:10:43:85:2C:C5:7A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ECxH2a5FRaH5MCuaRqAQQ4UsxXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.34.0/24 Signature Algorithm: sha256WithRSAEncryption b1:9f:84:c2:94:92:0a:ad:09:9f:60:b9:47:23:f2:b2:72:eb: 53:12:a0:ba:af:3d:b9:00:ac:4a:00:cb:ad:89:0a:ca:b5:84: c9:ff:05:a1:3a:ab:3b:dc:08:72:82:7e:3f:16:43:19:8d:6b: a9:e7:78:5e:f7:1c:d4:bb:32:ca:4c:e3:89:5e:ff:89:d4:b0: 85:f6:03:f5:09:b4:27:de:f5:50:7a:81:4a:b4:5d:67:f7:35: 59:72:11:77:c7:b6:4b:bd:18:81:08:5c:a0:18:61:81:f3:c5: da:3f:d6:ad:2d:4f:ab:cc:0b:b3:93:65:7a:14:fc:ac:7e:79: 3c:4a:89:b7:2d:d0:97:92:95:74:c5:2a:6d:52:5d:94:ae:6d: 3a:3e:71:cd:a4:50:d5:6e:03:4e:a1:21:8a:71:e0:93:b7:a6: 32:8a:e0:11:91:ed:c5:e9:aa:8d:5a:97:72:00:5c:63:87:0d: 2f:60:cc:d5:4f:5d:10:cf:06:f1:2d:13:e5:01:e6:6b:50:42: 9f:76:2c:f8:a0:a2:68:26:31:a4:f7:b3:7d:1a:db:78:df:2a: 42:cd:e0:66:3b:b1:b8:5c:23:a0:d2:e3:a2:96:0b:93:75:08: 90:9e:f7:a2:f2:16:e2:23:aa:75:fb:30:d8:5e:16:60:1b:17: 12:34:84:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGT3wX9gssQ9z+dzXi76JtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMTI3MTcxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJjNDdkOWFlNDU0NWExZjkzMDJiOWE0NmEwMTA0Mzg1MmNjNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFI1Rg9A01qicCJgTp1ptoWMBh91 XUOJ2xn7N2JuZnMOUTny/ugb85OsOhLNOx/mcXN6R66IY/E4Rc7qcsbqyLNKG+yu WiCUHsrOrtQNvRlDKnAwhSp1R+ImguxSp5nZp6jdUxMl/BB/OfBgZVZwE1nrZueG WdTq7cBL4ATjoYyk8d+t73yjFIBNSVFmPEFEREwfNlIDe7XJVNvqfgP6OX7VKT89 j1dIdepmP0MauGv7bmH2SLK777kfTSmvR1Z/smcrmjRw9lcOKzqMMfCx5HhkHJq9 eqX/qmmfpBhfkUDymbf1WIpLdsYMjvQQYm3/gDi96HFhOzb3KUctIudSIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAsR9muRUWh+TArmkagEEOFLMV6MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvRUN4SDJhNUZSYUg1TUN1YVJxQVFRNFVzeFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJQiMA0G CSqGSIb3DQEBCwUAA4IBAQCxn4TClJIKrQmfYLlHI/KycutTEqC6rz25AKxKAMut iQrKtYTJ/wWhOqs73Ahygn4/FkMZjWup53he9xzUuzLKTOOJXv+J1LCF9gP1CbQn 3vVQeoFKtF1n9zVZchF3x7ZLvRiBCFygGGGB88XaP9atLU+rzAuzk2V6FPysfnk8 Som3LdCXkpV0xSptUl2Urm06PnHNpFDVbgNOoSGKceCTt6YyiuARke3F6aqNWpdy AFxjhw0vYMzVT10QzwbxLRPlAeZrUEKfdiz4oKJoJjGk97N9Gtt43ypCzeBmO7G4 XCOg0uOilguTdQiQnvei8hbiI6p1+zDYXhZgGxcSNIRn -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:11 2025 by rpki-client