This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/bKLPz97n1fyeQY7tRgFpUGwaGko.roa File: bKLPz97n1fyeQY7tRgFpUGwaGko.roa (raw, json) Hash identifier: FI1BN6cDTbhHTXeu2LM7vTppLhImBVy2yuzHdJKMz2g= Subject key identifier: 6C:A2:CF:CF:DE:E7:D5:FC:9E:41:8E:ED:46:01:69:50:6C:1A:1A:4A Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Certificate serial: 019B02CA958B37DB97A5607A60C67ACE33E0 Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/bKLPz97n1fyeQY7tRgFpUGwaGko.roa Signing time: Tue 09 Dec 2025 11:06:29 +0000 ROA not before: Tue 09 Dec 2025 11:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205784 IP address blocks: 88.210.29.0/24 maxlen: 24 88.210.49.0/24 maxlen: 24 94.142.248.0/24 maxlen: 24 213.109.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:ca:95:8b:37:db:97:a5:60:7a:60:c6:7a:ce:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Validity Not Before: Dec 9 11:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ca2cfcfdee7d5fc9e418eed460169506c1a1a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:90:50:0d:1b:6d:eb:42:cc:47:59:13:f7: 56:81:69:66:9d:63:1e:33:be:78:81:9a:53:35:01: a9:cc:16:d6:1c:bc:27:42:3f:d9:fe:37:a2:7b:3e: ce:59:28:da:21:6a:b1:63:13:82:0b:72:61:6a:8d: c0:af:9b:b5:5f:14:5e:24:e0:92:b2:22:87:ec:0d: 39:38:e6:d3:33:01:04:e1:eb:9b:b7:67:c1:70:6f: 08:eb:26:7e:87:1d:41:12:13:53:e8:d2:64:3e:fa: c8:db:0b:76:d9:b6:00:34:65:12:db:f2:7d:6c:80: df:0b:77:93:af:98:46:e0:8c:0a:2b:87:b7:5d:dd: 13:dd:24:38:a6:18:e0:01:9d:35:12:b0:e6:0f:c6: 77:c8:b7:b9:0a:09:5b:72:8c:07:9a:49:5b:76:a4: e0:28:30:8f:94:98:c4:2e:55:90:d1:bd:6c:b2:3d: c1:3b:f4:d7:5b:3f:5c:c7:14:99:a2:12:37:99:6c: 35:17:8e:7f:f8:f5:b5:ca:66:15:52:be:d9:ae:e7: 8e:64:4d:ce:51:a9:f0:44:6c:28:73:27:d1:44:04: 38:6a:3a:73:1c:0f:a0:32:11:85:b4:99:ae:df:04: c6:ea:4b:d6:f0:62:5b:6f:10:ad:51:0e:78:4b:54: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A2:CF:CF:DE:E7:D5:FC:9E:41:8E:ED:46:01:69:50:6C:1A:1A:4A X509v3 Authority Key Identifier: keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/bKLPz97n1fyeQY7tRgFpUGwaGko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.29.0/24 88.210.49.0/24 94.142.248.0/24 213.109.145.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c4:0f:29:c5:6a:97:2d:0b:0f:ce:5e:2f:ce:84:56:93:18: 87:3b:76:28:76:4c:ee:6c:e2:d9:04:35:2d:d9:71:be:3e:18: b4:77:c6:2e:48:19:9a:40:ad:58:8f:5a:93:c9:54:18:37:75: d7:44:53:d8:53:df:25:83:c0:c4:cd:e8:7b:0f:94:1b:bd:05: c3:e6:94:12:d5:2c:8c:5b:f0:73:bf:a7:8f:17:1a:7e:21:2e: 10:63:80:fa:4f:0b:9c:0c:2b:ff:40:13:35:12:c6:27:f2:39: 22:2c:0a:6b:81:86:01:6f:8f:b1:d3:c0:4f:54:15:6d:65:91: 50:80:2d:1d:bc:68:42:b3:8b:ad:95:ce:59:b0:e6:fa:fc:1a: 1b:38:59:62:60:8f:d8:aa:ac:76:2d:fb:16:40:b5:48:18:75: 4e:cc:a0:91:1a:4f:e5:6a:ba:e2:79:a5:61:77:c7:97:3d:2c: 0c:3f:88:b2:08:46:d9:14:b3:ef:5b:81:dc:7d:b1:18:a9:4c: ba:eb:d6:ea:4a:0c:c9:25:bb:ec:3b:cb:73:e1:13:5e:a4:e6: 96:e8:16:7b:7b:6e:d7:27:db:77:f4:a6:36:70:63:6f:7b:9f: e8:7d:87:fa:35:51:80:74:f8:47:76:b2:f9:b4:2c:64:5d:53: 41:1c:83:e4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsCypWLN9uXpWB6YMZ6zjPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOGRmNTJhZGZlMmZjZTZhZTk2ZjZmZTA1ZDE0MDg5ZTAy NDdjZWUwHhcNMjUxMjA5MTEwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2EyY2ZjZmRlZTdkNWZjOWU0MThlZWQ0NjAxNjk1MDZjMWExYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRiQUA0bbetCzEdZE/dWgWlmnWMe M754gZpTNQGpzBbWHLwnQj/Z/jeiez7OWSjaIWqxYxOCC3Jhao3Ar5u1XxReJOCS siKH7A05OObTMwEE4eubt2fBcG8I6yZ+hx1BEhNT6NJkPvrI2wt22bYANGUS2/J9 bIDfC3eTr5hG4IwKK4e3Xd0T3SQ4phjgAZ01ErDmD8Z3yLe5CglbcowHmklbdqTg KDCPlJjELlWQ0b1ssj3BO/TXWz9cxxSZohI3mWw1F45/+PW1ymYVUr7ZrueOZE3O UanwRGwocyfRRAQ4ajpzHA+gMhGFtJmu3wTG6kvW8GJbbxCtUQ54S1SXWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGyiz8/e59X8nkGO7UYBaVBsGhpKMB8GA1UdIwQY MBaAFM+N9Srf4vzmrpb2/gXRQIngJHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTIt Zjc5N2UxZjU0NGQ5LzEvYktMUHo5N24xZnllUVk3dFJnRnBVR3dhR2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTItZjc5N2UxZjU0NGQ5 LzEvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNIdAwQA WNIxAwQAXo74AwQA1W2RMA0GCSqGSIb3DQEBCwUAA4IBAQATxA8pxWqXLQsPzl4v zoRWkxiHO3YodkzubOLZBDUt2XG+Phi0d8YuSBmaQK1Yj1qTyVQYN3XXRFPYU98l g8DEzeh7D5QbvQXD5pQS1SyMW/Bzv6ePFxp+IS4QY4D6TwucDCv/QBM1EsYn8jki LAprgYYBb4+x08BPVBVtZZFQgC0dvGhCs4utlc5ZsOb6/BobOFliYI/Yqqx2LfsW QLVIGHVOzKCRGk/larrieaVhd8eXPSwMP4iyCEbZFLPvW4HcfbEYqUy669bqSgzJ JbvsO8tz4RNepOaW6BZ7e27XJ9t39KY2cGNve5/ofYf6NVGAdPhHdrL5tCxkXVNB HIPk -----END CERTIFICATE-----Generated at Thu Dec 25 05:11:03 2025 by rpki-client