This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa File: c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa (raw, json) Hash identifier: lqsnU4EmNQIM3Y5xNVwQm+caTK96utnXByFl0/Rrp80= Subject key identifier: 73:C3:E0:33:FC:EC:40:81:C6:D4:07:35:75:44:F1:25:D4:CE:53:15 Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019A7D9E4C8CE8696668B98B362FC8079A6C Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa Signing time: Thu 13 Nov 2025 14:28:37 +0000 ROA not before: Thu 13 Nov 2025 14:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 185.229.15.0/24 maxlen: 24 194.26.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:9e:4c:8c:e8:69:66:68:b9:8b:36:2f:c8:07:9a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Nov 13 14:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73c3e033fcec4081c6d407357544f125d4ce5315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:47:db:85:64:59:82:36:46:93:ef:e0:50: 9e:53:52:a7:a7:9a:f9:6d:d4:84:ce:6e:cf:eb:70: 8e:9a:fc:57:49:e6:23:78:57:2a:d2:49:ea:37:01: 2e:f2:14:33:d8:b7:f7:99:00:0b:36:21:fe:b9:97: 60:6c:a7:b3:65:11:d6:b3:52:e5:ad:0c:00:33:6f: 03:04:26:9f:3c:96:bc:13:16:3d:32:b3:94:d3:5a: 56:b0:07:16:e4:65:c5:e3:40:83:cc:b0:db:07:31: 42:9e:3b:ca:64:e2:e2:bd:aa:c7:28:86:f5:07:1e: c3:9d:a4:40:27:56:e3:fe:bb:14:4c:24:53:e3:1b: 9e:4a:a2:75:9e:46:0c:44:21:2a:33:43:c4:c7:b4: 80:16:3a:ab:64:34:bf:5e:bf:50:6c:ad:3a:b3:82: c7:ea:4e:77:42:8e:2a:11:ea:00:33:a5:91:42:56: 4e:12:a1:4e:8e:59:13:a5:78:a6:10:77:e8:5a:82: 1a:50:84:82:cc:2a:47:96:8f:b4:70:6c:ef:e6:e0: 85:4a:7b:97:84:81:c2:9e:04:36:8e:ca:11:00:96: b5:e0:17:b6:39:37:81:cd:e5:31:75:a6:51:5e:3c: 16:ef:37:4a:f3:ad:f5:e8:a9:c2:ec:97:c2:71:d9: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:E0:33:FC:EC:40:81:C6:D4:07:35:75:44:F1:25:D4:CE:53:15 X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/c8PgM_zsQIHG1Ac1dUTxJdTOUxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.15.0/24 194.26.114.0/24 Signature Algorithm: sha256WithRSAEncryption ae:e0:27:7a:56:28:69:60:a4:ea:a5:df:65:ff:e4:b9:e0:ad: 62:4b:ca:11:31:c5:46:a9:8d:0f:f6:2f:74:5b:62:c3:fa:a8: 26:4a:ef:85:ea:b8:59:41:4a:c3:b4:2e:35:9b:58:9e:3c:d0: 5f:31:95:3d:2a:7e:88:f3:0f:e5:46:2e:b2:d2:d4:3b:06:7e: 86:1a:8a:68:31:bf:78:af:43:06:7a:ab:68:93:c4:2c:8c:e1: b4:42:42:29:32:48:14:5f:33:b9:2b:cc:5c:d0:29:9c:34:0f: e4:97:9a:fb:d1:b3:9f:8b:c6:bf:dc:e8:99:e2:58:05:a1:ca: a2:ff:ea:b6:79:02:1b:a7:f8:fa:03:58:2b:94:6b:9b:2e:55: 8b:90:83:91:47:7c:e0:4b:a3:2b:11:ee:88:db:d0:87:af:ec: 2c:d0:c7:1f:db:95:5f:07:09:9a:c6:41:77:c8:e1:ee:0d:04: 4c:b7:19:73:f4:b6:bb:2c:4b:7e:f5:fe:6c:98:d4:10:9a:f1: 93:41:e6:9e:35:f4:b3:17:c7:2e:10:10:59:6b:8c:be:bf:5d: fa:2c:96:aa:a3:9f:5c:ff:9a:e2:31:c4:9a:50:6d:93:90:4f: 1a:77:c5:d6:1c:a5:b8:30:c9:23:b4:63:07:dd:d9:3e:59:2c: a2:52:d6:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp9nkyM6GlmaLmLNi/IB5psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjUxMTEzMTQyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2MzZTAzM2ZjZWM0MDgxYzZkNDA3MzU3NTQ0ZjEyNWQ0Y2U1MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9H24VkWYI2RpPv4FCeU1Knp5r5 bdSEzm7P63COmvxXSeYjeFcq0knqNwEu8hQz2Lf3mQALNiH+uZdgbKezZRHWs1Ll rQwAM28DBCafPJa8ExY9MrOU01pWsAcW5GXF40CDzLDbBzFCnjvKZOLivarHKIb1 Bx7DnaRAJ1bj/rsUTCRT4xueSqJ1nkYMRCEqM0PEx7SAFjqrZDS/Xr9QbK06s4LH 6k53Qo4qEeoAM6WRQlZOEqFOjlkTpXimEHfoWoIaUISCzCpHlo+0cGzv5uCFSnuX hIHCngQ2jsoRAJa14Be2OTeBzeUxdaZRXjwW7zdK86316KnC7JfCcdkHPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHPD4DP87ECBxtQHNXVE8SXUzlMVMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvYzhQZ01fenNRSUhHMUFjMWRVVHhKZFRPVXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueUPAwQA whpyMA0GCSqGSIb3DQEBCwUAA4IBAQCu4Cd6VihpYKTqpd9l/+S54K1iS8oRMcVG qY0P9i90W2LD+qgmSu+F6rhZQUrDtC41m1iePNBfMZU9Kn6I8w/lRi6y0tQ7Bn6G GopoMb94r0MGeqtok8QsjOG0QkIpMkgUXzO5K8xc0CmcNA/kl5r70bOfi8a/3OiZ 4lgFocqi/+q2eQIbp/j6A1grlGubLlWLkIORR3zgS6MrEe6I29CHr+ws0Mcf25Vf BwmaxkF3yOHuDQRMtxlz9La7LEt+9f5smNQQmvGTQeaeNfSzF8cuEBBZa4y+v136 LJaqo59c/5riMcSaUG2TkE8ad8XWHKW4MMkjtGMH3dk+WSyiUtYf -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:18 2025 by rpki-client