This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/88qLgGj10Cs_nSQp3PLGT1rngvg.roa File: 88qLgGj10Cs_nSQp3PLGT1rngvg.roa (raw, json) Hash identifier: nYU1G5sM/izSikkszbz9aOMiki4FnycpJAsPojWHOBw= Subject key identifier: F3:CA:8B:80:68:F5:D0:2B:3F:9D:24:29:DC:F2:C6:4F:5A:E7:82:F8 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019AE8DF70D75170D295F5612D6CBEA258FF Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/88qLgGj10Cs_nSQp3PLGT1rngvg.roa Signing time: Thu 04 Dec 2025 10:19:08 +0000 ROA not before: Thu 04 Dec 2025 10:19:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 178.107.32.0/19 maxlen: 19 178.107.64.0/18 maxlen: 18 185.102.192.0/22 maxlen: 22 185.102.196.0/22 maxlen: 22 185.102.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:df:70:d7:51:70:d2:95:f5:61:2d:6c:be:a2:58:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Dec 4 10:19:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3ca8b8068f5d02b3f9d2429dcf2c64f5ae782f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:87:c2:31:be:29:68:75:f4:23:58:a4:29: e6:20:a5:c8:95:de:9d:6a:83:24:13:e9:0f:c0:3b: d8:7f:31:19:7a:ba:5e:bb:3a:b9:4c:5c:d0:53:af: 7b:3b:44:c3:62:f8:b3:2b:e9:87:4b:90:06:0f:81: 20:c8:06:e9:73:67:ee:ff:c7:c9:78:4d:85:8c:53: a4:37:c0:ee:46:b7:20:82:02:a3:43:c5:10:d6:df: da:d8:36:04:ba:cd:fe:12:e5:32:fc:3d:ec:34:9e: 0d:1d:1d:5b:6f:1b:83:9c:9f:37:e9:21:03:f7:d5: 62:7b:cd:df:56:76:45:f3:e4:29:d5:6f:3e:3b:4f: cd:6a:c4:3c:d6:15:fd:37:9c:c5:b5:86:07:4f:28: 62:49:ce:3b:d2:3c:ed:44:18:d4:d8:2b:eb:30:ad: 23:d3:0c:41:e8:84:47:d3:1e:bb:04:4b:b8:29:d1: 45:d8:eb:c7:94:09:e6:cb:e7:4e:de:70:98:cb:90: 35:d7:d6:44:b0:ea:1d:16:24:fa:15:8b:45:3e:ed: 1b:7b:fa:e9:50:fa:c2:6e:9a:33:b5:65:b3:a5:e5: 04:54:51:bb:e4:ef:19:64:41:39:ee:08:5b:bc:2c: 26:9f:a2:89:04:3c:b8:91:91:5a:88:87:83:18:7c: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CA:8B:80:68:F5:D0:2B:3F:9D:24:29:DC:F2:C6:4F:5A:E7:82:F8 X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/88qLgGj10Cs_nSQp3PLGT1rngvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.107.32.0-178.107.127.255 185.102.192.0-185.102.203.255 Signature Algorithm: sha256WithRSAEncryption a2:3e:1b:cf:d2:bf:1f:6e:e9:7b:e4:13:cf:a6:ba:6c:08:5c: 4d:db:64:39:20:58:d9:9a:3c:57:e6:35:be:f6:be:83:b4:b9: e2:8c:07:cb:1b:7c:ac:81:88:cd:93:46:b8:7f:fa:ef:ec:fe: e4:f0:9e:f6:fe:eb:0d:ea:c4:d5:4c:f3:80:03:6c:c5:9f:65: 7a:19:c5:33:ff:6f:48:19:92:7c:c7:52:8b:c4:18:3a:b9:81: db:51:7b:24:32:8e:33:4b:26:e3:4d:ce:63:5d:08:1e:3e:d0: d8:28:cc:52:0b:5e:e1:c6:2b:55:fb:64:43:9a:c5:e0:1d:27: 37:57:47:ae:ef:54:75:99:a0:47:ab:28:33:39:c9:c1:4e:3b: 97:f9:85:11:12:4f:ea:c5:a6:50:57:74:2e:bf:4d:eb:9f:91: 7c:58:23:85:c0:b2:6a:e5:6d:2e:ff:41:bb:2a:5c:73:b7:f9: 29:1f:1d:6a:9f:a1:a8:c4:4b:0c:a3:7d:6d:99:46:f9:11:6b: 04:48:d3:24:4c:cb:50:be:c1:92:72:b1:89:f5:d6:6c:6c:b1: 80:3b:74:48:d3:4b:30:ef:5e:37:73:93:88:22:88:b4:5c:c3: b5:8b:39:ed:6b:8f:00:7b:5e:0e:1c:5a:9e:05:20:12:3e:72: e9:e2:c4:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZro33DXUXDSlfVhLWy+olj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMjA0MTAxOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2NhOGI4MDY4ZjVkMDJiM2Y5ZDI0MjlkY2YyYzY0ZjVhZTc4MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BSHwjG+KWh19CNYpCnmIKXIld6d aoMkE+kPwDvYfzEZerpeuzq5TFzQU697O0TDYvizK+mHS5AGD4EgyAbpc2fu/8fJ eE2FjFOkN8DuRrcgggKjQ8UQ1t/a2DYEus3+EuUy/D3sNJ4NHR1bbxuDnJ836SED 99Vie83fVnZF8+Qp1W8+O0/NasQ81hX9N5zFtYYHTyhiSc470jztRBjU2CvrMK0j 0wxB6IRH0x67BEu4KdFF2OvHlAnmy+dO3nCYy5A119ZEsOodFiT6FYtFPu0be/rp UPrCbpoztWWzpeUEVFG75O8ZZEE57ghbvCwmn6KJBDy4kZFaiIeDGHxSwwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPPKi4Bo9dArP50kKdzyxk9a54L4MB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvODhxTGdHajEwQ3NfblNRcDNQTEdUMXJuZ3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAWyayAD BAeyawAwDAMEBrlmwAMEArlmyDANBgkqhkiG9w0BAQsFAAOCAQEAoj4bz9K/H27p e+QTz6a6bAhcTdtkOSBY2Zo8V+Y1vva+g7S54owHyxt8rIGIzZNGuH/67+z+5PCe 9v7rDerE1UzzgANsxZ9lehnFM/9vSBmSfMdSi8QYOrmB21F7JDKOM0sm403OY10I Hj7Q2CjMUgte4cYrVftkQ5rF4B0nN1dHru9UdZmgR6soMznJwU47l/mFERJP6sWm UFd0Lr9N65+RfFgjhcCyauVtLv9Buypcc7f5KR8dap+hqMRLDKN9bZlG+RFrBEjT JEzLUL7BknKxifXWbGyxgDt0SNNLMO9eN3OTiCKItFzDtYs57WuPAHteDhxangUg Ej5y6eLEJw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:39:49 2025 by rpki-client