This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8BDwtg4WogHr_t622bk6AZLxHf8.roa File: 8BDwtg4WogHr_t622bk6AZLxHf8.roa (raw, json) Hash identifier: jGu8B7Udmymq+0EP+ky2AfA0GK/9z6xL7Kug80+RJkA= Subject key identifier: F0:10:F0:B6:0E:16:A2:01:EB:FE:DE:B6:D9:B9:3A:01:92:F1:1D:FF Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019AE61E7C7AC06740629DA9BF3C7C21DF61 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8BDwtg4WogHr_t622bk6AZLxHf8.roa Signing time: Wed 03 Dec 2025 21:29:08 +0000 ROA not before: Wed 03 Dec 2025 21:29:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214128 IP address blocks: 88.214.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:1e:7c:7a:c0:67:40:62:9d:a9:bf:3c:7c:21:df:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 3 21:29:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f010f0b60e16a201ebfedeb6d9b93a0192f11dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:27:06:85:16:fd:fa:32:da:d5:0a:e6:6a: 6d:4a:83:c7:f7:33:78:a0:17:7e:c8:0e:8c:5c:fc: 1e:dd:09:c5:83:ed:35:56:31:07:1a:61:b6:8b:4a: fb:ec:bd:a6:c2:26:5f:9c:76:0a:1a:24:00:d5:6a: 0f:0e:d4:8e:c7:e8:5a:40:89:24:4b:cb:28:01:59: 96:6f:42:f5:8f:7f:a3:ff:75:ba:5f:cc:7c:9c:64: 82:66:eb:d9:50:e4:f0:65:bd:b9:7e:b1:6f:83:7c: 1f:23:19:77:8d:9d:06:3b:c6:95:08:08:71:f7:b3: 65:eb:88:b5:16:5d:35:14:9a:4b:c3:38:ac:82:08: c4:e4:f3:ea:81:e8:52:b5:fe:e4:c4:26:2d:b5:cb: 9b:16:d8:f7:30:39:e5:e2:7f:2a:92:d0:af:02:98: f0:33:30:f0:3c:1f:2c:99:49:75:59:bd:1c:e3:57: 71:ac:18:85:39:24:fa:14:47:c7:27:de:44:80:25: 5d:ac:58:cc:51:c2:0e:15:f1:8e:75:1a:70:08:98: 26:45:44:ef:14:b9:cf:52:19:38:90:42:95:07:3e: 07:d4:6c:11:a3:d7:d6:a6:e6:90:91:23:7c:73:ff: 8f:61:49:e3:0e:ad:09:8c:4d:a7:ed:3c:49:36:d9: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:F0:B6:0E:16:A2:01:EB:FE:DE:B6:D9:B9:3A:01:92:F1:1D:FF X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8BDwtg4WogHr_t622bk6AZLxHf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.55.0/24 Signature Algorithm: sha256WithRSAEncryption 40:3b:b2:c9:2b:59:2f:c6:83:d5:ab:d3:21:8a:49:1c:d3:a1: 44:f8:16:be:aa:5a:0d:19:a0:8f:44:9d:b0:3e:53:4a:af:26: b0:d6:29:ad:57:5f:03:e4:80:66:85:08:5d:e7:5e:5f:e0:3c: 4c:90:2b:ee:19:9f:ba:ec:4c:e0:28:08:54:a0:ca:f7:51:7c: 11:bd:1a:c4:4b:fd:a3:c7:2f:7e:bd:d7:e7:68:08:70:94:a1: 22:81:65:a6:e2:5c:bf:9c:5e:40:68:82:66:48:a8:e9:a6:7c: 2e:2d:35:3e:ea:95:c3:bc:e1:98:38:72:06:ff:f2:2b:ea:1e: 60:7f:6e:33:df:fe:e3:35:75:32:3e:a0:98:24:af:ce:3b:13: c8:b8:99:46:65:e5:f5:a3:98:e0:21:f5:6b:32:fb:ab:0c:66: 27:74:d6:00:e8:92:63:7b:6b:d7:df:65:85:6e:a8:b8:7d:08: 20:6a:5d:eb:e1:82:4a:41:ee:2a:d4:49:ba:2a:0b:df:d7:9e: c0:8a:ef:85:c2:af:c0:e5:b9:b8:ae:9e:2b:e3:93:29:7d:97: 2b:e1:30:b7:0d:89:3b:7a:2a:12:8d:0e:ef:3d:dd:41:b8:cf: cd:0a:f2:e8:fc:90:6b:cb:86:7c:e9:eb:10:b1:6a:7a:27:f3: 01:86:50:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrmHnx6wGdAYp2pvzx8Id9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjAzMjEyOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDEwZjBiNjBlMTZhMjAxZWJmZWRlYjZkOWI5M2EwMTkyZjExZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDYnBoUW/foy2tUK5mptSoPH9zN4 oBd+yA6MXPwe3QnFg+01VjEHGmG2i0r77L2mwiZfnHYKGiQA1WoPDtSOx+haQIkk S8soAVmWb0L1j3+j/3W6X8x8nGSCZuvZUOTwZb25frFvg3wfIxl3jZ0GO8aVCAhx 97Nl64i1Fl01FJpLwzisggjE5PPqgehStf7kxCYttcubFtj3MDnl4n8qktCvApjw MzDwPB8smUl1Wb0c41dxrBiFOST6FEfHJ95EgCVdrFjMUcIOFfGOdRpwCJgmRUTv FLnPUhk4kEKVBz4H1GwRo9fWpuaQkSN8c/+PYUnjDq0JjE2n7TxJNtnTNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPAQ8LYOFqIB6/7ettm5OgGS8R3/MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvOEJEd3RnNFdvZ0hyX3Q2MjJiazZBWkx4SGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNY3MA0G CSqGSIb3DQEBCwUAA4IBAQBAO7LJK1kvxoPVq9Mhikkc06FE+Ba+qloNGaCPRJ2w PlNKryaw1imtV18D5IBmhQhd515f4DxMkCvuGZ+67EzgKAhUoMr3UXwRvRrES/2j xy9+vdfnaAhwlKEigWWm4ly/nF5AaIJmSKjppnwuLTU+6pXDvOGYOHIG//Ir6h5g f24z3/7jNXUyPqCYJK/OOxPIuJlGZeX1o5jgIfVrMvurDGYndNYA6JJje2vX32WF bqi4fQggal3r4YJKQe4q1Em6Kgvf157Aiu+Fwq/A5bm4rp4r45MpfZcr4TC3DYk7 eioSjQ7vPd1BuM/NCvLo/JBry4Z86esQsWp6J/MBhlCZ -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:28 2025 by rpki-client