This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T8KxvnEE0ykjkTKH_YXGQNliOrI.roa File: T8KxvnEE0ykjkTKH_YXGQNliOrI.roa (raw, json) Hash identifier: odOP/ko0cK3XmwFhmQ6aone0PEjauTjJ1ag9vYkfeYg= Subject key identifier: 4F:C2:B1:BE:71:04:D3:29:23:91:32:87:FD:85:C6:40:D9:62:3A:B2 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019A77D40FFC35F138DF7CF553EF7CE01EAE Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T8KxvnEE0ykjkTKH_YXGQNliOrI.roa Signing time: Wed 12 Nov 2025 11:29:37 +0000 ROA not before: Wed 12 Nov 2025 11:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 77.76.4.0/22 maxlen: 22 78.128.2.0/23 maxlen: 23 78.128.10.0/23 maxlen: 23 78.128.12.0/22 maxlen: 22 78.128.16.0/20 maxlen: 20 78.128.41.0/24 maxlen: 24 78.128.52.0/22 maxlen: 22 78.128.56.0/22 maxlen: 22 78.128.82.0/23 maxlen: 23 78.128.84.0/22 maxlen: 22 78.128.88.0/22 maxlen: 22 78.128.97.0/24 maxlen: 24 78.128.100.0/22 maxlen: 22 78.128.104.0/22 maxlen: 22 78.128.116.0/23 maxlen: 23 78.142.10.0/23 maxlen: 23 78.142.12.0/22 maxlen: 22 78.142.31.0/24 maxlen: 24 82.118.237.0/24 maxlen: 24 83.222.190.0/23 maxlen: 23 84.201.224.0/20 maxlen: 20 91.148.162.0/23 maxlen: 23 91.148.164.0/23 maxlen: 23 91.148.169.0/24 maxlen: 24 91.148.170.0/23 maxlen: 23 91.148.172.0/22 maxlen: 22 91.148.176.0/21 maxlen: 21 130.185.227.0/24 maxlen: 24 130.185.234.0/24 maxlen: 24 185.81.120.0/23 maxlen: 23 193.24.240.0/22 maxlen: 22 193.200.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:d4:0f:fc:35:f1:38:df:7c:f5:53:ef:7c:e0:1e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Nov 12 11:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fc2b1be7104d32923913287fd85c640d9623ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:4c:c3:4b:57:05:0f:9d:ac:3d:c3:a5:2e: 5f:ce:85:43:9d:3a:82:18:c5:11:3e:6f:be:3f:50: 90:90:28:02:f1:0f:d4:bd:5e:c9:d3:23:37:01:22: 3d:68:ee:11:7d:b1:e2:4a:d1:09:5d:5e:c7:98:61: 02:ee:dd:52:9f:f5:1f:38:98:ee:be:20:99:7c:89: eb:a2:00:32:eb:f3:25:09:ab:a7:40:03:41:fa:24: 29:31:90:89:e8:ad:49:b5:58:40:19:0c:fe:de:49: 4b:bb:02:4c:50:39:66:9d:b1:b1:bc:5d:72:d7:13: 0f:9a:d5:97:b3:1e:7c:ec:2d:5b:db:42:2c:e8:bc: 48:75:4e:fe:5c:08:ae:db:f6:21:74:c0:3d:c7:a2: 16:ea:a6:25:c2:00:a0:fb:de:b1:60:e2:b7:a6:c5: 3d:3f:6a:b9:8b:b1:e1:3a:d9:ec:35:4b:4e:6a:ad: 6f:01:5d:6d:c8:de:f9:07:07:9f:b7:7d:95:13:16: 1c:3f:7a:de:8c:46:b4:35:a9:1e:b1:58:e8:54:74: fd:38:15:70:68:2f:88:9c:42:a0:5e:cb:a4:45:c5: 2c:a2:b7:b1:9d:ed:4f:e3:6a:ef:7d:f3:59:c2:89: 05:e4:bf:22:71:66:bc:61:92:c7:a5:c2:dc:78:fc: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C2:B1:BE:71:04:D3:29:23:91:32:87:FD:85:C6:40:D9:62:3A:B2 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T8KxvnEE0ykjkTKH_YXGQNliOrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.4.0/22 78.128.2.0/23 78.128.10.0-78.128.31.255 78.128.41.0/24 78.128.52.0-78.128.59.255 78.128.82.0-78.128.91.255 78.128.97.0/24 78.128.100.0-78.128.107.255 78.128.116.0/23 78.142.10.0-78.142.15.255 78.142.31.0/24 82.118.237.0/24 83.222.190.0/23 84.201.224.0/20 91.148.162.0-91.148.165.255 91.148.169.0-91.148.183.255 130.185.227.0/24 130.185.234.0/24 185.81.120.0/23 193.24.240.0/22 193.200.14.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:e5:1b:09:cf:ce:25:10:ec:84:b9:13:b2:a5:89:a8:51:aa: a0:4b:ed:27:82:0a:db:d7:44:7e:9f:6a:b0:36:07:2b:51:84: 20:7a:2c:f2:38:2d:ea:19:4d:57:db:7b:17:d1:97:e6:63:96: 0a:42:a4:ff:9e:86:1f:37:3d:a8:ef:ef:d0:fa:af:78:72:23: e7:15:31:41:70:62:14:8c:ea:7b:ce:94:e5:c8:32:1f:b1:fe: b4:cb:14:9c:18:1b:fc:c1:7f:4a:51:3f:d4:b2:89:8f:03:f3: 0d:8a:10:26:38:e9:26:dd:c6:81:c9:cb:11:4d:52:26:20:87: 03:3a:39:08:52:94:39:12:c7:cd:dd:15:98:6d:4f:26:a9:9b: dd:0a:d6:01:37:5b:ac:a7:f9:e7:61:c3:fd:83:d4:de:45:1d: 27:ec:39:c8:e0:37:ea:00:cd:04:0f:ad:29:e2:98:b5:a1:95: 2c:03:ec:4f:60:51:86:4a:ac:aa:36:d0:b4:8f:36:ad:38:f7: 60:3c:7e:97:03:25:75:3d:70:1f:05:59:2a:ce:83:64:9d:e4: 45:66:ce:00:f7:13:81:7b:37:73:ca:0c:2f:ec:d6:2c:1b:88: fa:6b:34:80:6a:94:bf:e1:e6:17:8d:af:cb:9e:04:7a:b8:86: 9a:b9:a8:e3 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZp31A/8NfE433z1U+984B6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjUxMTEyMTEyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmMyYjFiZTcxMDRkMzI5MjM5MTMyODdmZDg1YzY0MGQ5NjIzYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVxMw0tXBQ+drD3DpS5fzoVDnTqC GMURPm++P1CQkCgC8Q/UvV7J0yM3ASI9aO4RfbHiStEJXV7HmGEC7t1Sn/UfOJju viCZfInrogAy6/MlCaunQANB+iQpMZCJ6K1JtVhAGQz+3klLuwJMUDlmnbGxvF1y 1xMPmtWXsx587C1b20Is6LxIdU7+XAiu2/YhdMA9x6IW6qYlwgCg+96xYOK3psU9 P2q5i7HhOtnsNUtOaq1vAV1tyN75Bweft32VExYcP3rejEa0NakesVjoVHT9OBVw aC+InEKgXsukRcUsorexne1P42rvffNZwokF5L8icWa8YZLHpcLcePx0iQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFE/Csb5xBNMpI5Eyh/2FxkDZYjqyMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvVDhLeHZuRUUweWtqa1RLSF9ZWEdRTmxpT3JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAJN TAQDBAFOgAIwDAMEAU6ACgMEBU6AAAMEAE6AKTAMAwQCToA0AwQCToA4MAwDBAFO gFIDBAJOgFgDBABOgGEwDAMEAk6AZAMEAk6AaAMEAU6AdDAMAwQBTo4KAwQETo4A AwQATo4fAwQAUnbtAwQBU96+AwQEVMngMAwDBAFblKIDBAFblKQwDAMEAFuUqQME A1uUsAMEAIK54wMEAIK56gMEAblReAMEAsEY8AMEAcHIDjANBgkqhkiG9w0BAQsF AAOCAQEAauUbCc/OJRDshLkTsqWJqFGqoEvtJ4IK29dEfp9qsDYHK1GEIHos8jgt 6hlNV9t7F9GX5mOWCkKk/56GHzc9qO/v0PqveHIj5xUxQXBiFIzqe86U5cgyH7H+ tMsUnBgb/MF/SlE/1LKJjwPzDYoQJjjpJt3GgcnLEU1SJiCHAzo5CFKUORLHzd0V mG1PJqmb3QrWATdbrKf552HD/YPU3kUdJ+w5yOA36gDNBA+tKeKYtaGVLAPsT2BR hkqsqjbQtI82rTj3YDx+lwMldT1wHwVZKs6DZJ3kRWbOAPcTgXs3c8oML+zWLBuI +ms0gGqUv+HmF42vy54EeriGmrmo4w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:36 2025 by rpki-client