This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/p3P6xF7gC4RrPiW6ha8DG2aRerQ.roa File: p3P6xF7gC4RrPiW6ha8DG2aRerQ.roa (raw, json) Hash identifier: ZG0szRx78fz1RCbunQHfzVDqEGFr7j8zEjuDYXuovjs= Subject key identifier: A7:73:FA:C4:5E:E0:0B:84:6B:3E:25:BA:85:AF:03:1B:66:91:7A:B4 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AFF21173B7961725A80E95C4470B16456 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/p3P6xF7gC4RrPiW6ha8DG2aRerQ.roa Signing time: Mon 08 Dec 2025 18:02:29 +0000 ROA not before: Mon 08 Dec 2025 18:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 88.148.69.0/24 maxlen: 24 88.148.72.0/24 maxlen: 24 88.148.78.0/24 maxlen: 24 88.148.86.0/24 maxlen: 24 88.148.89.0/24 maxlen: 24 88.148.94.0/24 maxlen: 24 88.148.107.0/24 maxlen: 24 89.32.165.0/24 maxlen: 24 89.34.120.0/24 maxlen: 24 89.44.65.0/24 maxlen: 24 89.44.67.0/24 maxlen: 24 89.44.71.0/24 maxlen: 24 89.45.240.0/24 maxlen: 24 89.45.245.0/24 maxlen: 24 94.76.139.0/24 maxlen: 24 94.76.155.0/24 maxlen: 24 94.76.177.0/24 maxlen: 24 94.76.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:21:17:3b:79:61:72:5a:80:e9:5c:44:70:b1:64:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 8 18:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a773fac45ee00b846b3e25ba85af031b66917ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:f6:ff:49:45:ee:bb:a6:6f:36:31:9a:14: 02:b0:6f:29:af:8d:2a:94:4a:2e:98:ac:f7:f9:7f: 54:d0:16:46:61:61:6c:e3:ba:a6:96:05:ec:04:f0: 74:a4:79:cc:3b:27:f4:1e:ca:83:bd:16:37:b8:7e: e3:b7:8e:62:a0:13:1b:8c:b2:d4:94:cf:e7:49:10: ea:7b:9a:d6:73:ed:a1:28:61:66:95:f6:b5:42:bb: 10:c5:90:13:9b:79:59:00:5c:fd:fc:04:82:19:c6: 78:1d:bd:3e:fa:0b:de:7e:8d:c1:26:cf:f1:8d:fd: 2c:81:8a:11:cd:35:39:d6:75:a0:0b:28:54:63:0f: 9a:ce:3d:b6:de:82:3f:c0:e8:ed:09:0c:ba:f5:69: 1d:d6:d1:92:60:cd:bf:1d:62:ec:cd:b5:03:4a:3a: 25:b2:6f:7e:b5:8d:cd:19:1c:48:24:56:13:ea:05: f2:a7:e7:cb:08:76:4d:e9:b1:02:73:39:fe:ab:bf: 65:e7:f3:5a:80:4b:52:8c:e8:ee:d8:b7:bd:66:f4: 29:65:c7:86:c8:43:61:48:2f:93:42:5b:a4:ae:cb: f5:11:55:03:af:b4:b0:24:ff:d9:19:16:9e:45:dd: 11:f7:df:53:24:62:95:dc:90:c5:3b:67:03:1a:72: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:73:FA:C4:5E:E0:0B:84:6B:3E:25:BA:85:AF:03:1B:66:91:7A:B4 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/p3P6xF7gC4RrPiW6ha8DG2aRerQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.69.0/24 88.148.72.0/24 88.148.78.0/24 88.148.86.0/24 88.148.89.0/24 88.148.94.0/24 88.148.107.0/24 89.32.165.0/24 89.34.120.0/24 89.44.65.0/24 89.44.67.0/24 89.44.71.0/24 89.45.240.0/24 89.45.245.0/24 94.76.139.0/24 94.76.155.0/24 94.76.177.0/24 94.76.189.0/24 Signature Algorithm: sha256WithRSAEncryption d3:3d:86:6d:23:14:45:cc:73:b0:85:22:74:d4:02:38:3e:1a: af:6f:32:8f:b3:0e:f7:8a:91:c3:c9:39:ae:34:ad:89:e8:e0: 05:f2:32:6c:9b:96:cc:a0:41:4d:5d:80:fb:b6:fd:b5:bd:fd: bb:4b:0c:0c:51:19:10:4c:f6:7b:f0:96:46:4e:1a:5f:88:af: 3f:af:11:02:34:44:eb:57:69:d2:6f:27:b7:6a:0d:29:06:99: 37:18:ea:b2:ba:a0:a2:00:1d:64:be:db:20:66:b2:0e:1a:5f: a3:23:fd:95:ff:53:a4:0c:48:e7:fb:d6:96:91:d5:07:3d:ae: 8e:cd:30:c8:9a:c8:b3:b4:e2:7c:e5:b7:1d:1d:c0:14:14:93: d2:2b:53:e5:cf:c2:37:30:b8:a6:10:5c:d0:26:82:2d:47:ce: cc:23:de:ae:82:62:4a:e0:bc:64:14:5d:bf:7d:e8:ac:b8:8d: 4f:28:77:02:4d:e9:12:83:a3:50:49:08:d7:cc:8e:27:56:c6: 78:3d:8a:99:30:df:85:6f:8f:d4:e0:2c:31:4b:69:44:33:03: 16:60:d7:36:5d:6a:66:9d:9b:a6:58:ba:a9:2c:8f:5d:82:5e: c8:6d:8d:2d:17:85:52:a8:f1:c4:2e:d5:db:65:70:08:f5:28: ea:25:90:32 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZr/IRc7eWFyWoDpXERwsWRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjA4MTgwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzczZmFjNDVlZTAwYjg0NmIzZTI1YmE4NWFmMDMxYjY2OTE3YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji72/0lF7rumbzYxmhQCsG8pr40q lEoumKz3+X9U0BZGYWFs47qmlgXsBPB0pHnMOyf0HsqDvRY3uH7jt45ioBMbjLLU lM/nSRDqe5rWc+2hKGFmlfa1QrsQxZATm3lZAFz9/ASCGcZ4Hb0++gvefo3BJs/x jf0sgYoRzTU51nWgCyhUYw+azj223oI/wOjtCQy69Wkd1tGSYM2/HWLszbUDSjol sm9+tY3NGRxIJFYT6gXyp+fLCHZN6bECczn+q79l5/NagEtSjOju2Le9ZvQpZceG yENhSC+TQlukrsv1EVUDr7SwJP/ZGRaeRd0R999TJGKV3JDFO2cDGnKujQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFKdz+sRe4AuEaz4luoWvAxtmkXq0MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvcDNQNnhGN2dDNFJyUGlXNmhhOERHMmFSZXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAFiURQME AFiUSAMEAFiUTgMEAFiUVgMEAFiUWQMEAFiUXgMEAFiUawMEAFkgpQMEAFkieAME AFksQQMEAFksQwMEAFksRwMEAFkt8AMEAFkt9QMEAF5MiwMEAF5MmwMEAF5MsQME AF5MvTANBgkqhkiG9w0BAQsFAAOCAQEA0z2GbSMURcxzsIUidNQCOD4ar28yj7MO 94qRw8k5rjStiejgBfIybJuWzKBBTV2A+7b9tb39u0sMDFEZEEz2e/CWRk4aX4iv P68RAjRE61dp0m8nt2oNKQaZNxjqsrqgogAdZL7bIGayDhpfoyP9lf9TpAxI5/vW lpHVBz2ujs0wyJrIs7TifOW3HR3AFBST0itT5c/CNzC4phBc0CaCLUfOzCPeroJi SuC8ZBRdv33orLiNTyh3Ak3pEoOjUEkI18yOJ1bGeD2KmTDfhW+P1OAsMUtpRDMD FmDXNl1qZp2bpli6qSyPXYJeyG2NLReFUqjxxC7V22VwCPUo6iWQMg== -----END CERTIFICATE-----Generated at Thu Dec 11 16:42:09 2025 by rpki-client