This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/CWmIJrz3eJQXe7jBCiM8trXjQw4.roa File: CWmIJrz3eJQXe7jBCiM8trXjQw4.roa (raw, json) Hash identifier: 8R85mUeKMUe1bwmttxvnk61t2dt7oCB940nQaMbkHeI= Subject key identifier: 09:69:88:26:BC:F7:78:94:17:7B:B8:C1:0A:23:3C:B6:B5:E3:43:0E Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019B327B2457F12F291722F734ABDBB164F9 Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/CWmIJrz3eJQXe7jBCiM8trXjQw4.roa Signing time: Thu 18 Dec 2025 17:21:29 +0000 ROA not before: Thu 18 Dec 2025 17:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42216 IP address blocks: 185.129.18.0/24 maxlen: 24 185.129.19.0/24 maxlen: 24 185.165.76.0/24 maxlen: 24 194.99.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:7b:24:57:f1:2f:29:17:22:f7:34:ab:db:b1:64:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Dec 18 17:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09698826bcf77894177bb8c10a233cb6b5e3430e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:4f:d1:e7:fd:30:20:4a:98:86:1a:f6:99: c4:05:5e:9d:9b:09:a3:52:ff:29:7b:bb:00:f9:1d: da:87:24:bf:44:a1:f3:bb:57:6f:91:88:a0:39:0e: c4:78:9d:ad:da:6c:45:d4:6f:2c:16:65:f1:ff:80: 90:38:d2:9b:37:dd:2a:ea:05:3c:cc:de:28:9c:6b: fc:f0:b9:d2:88:21:d4:8e:ad:f0:2a:6d:4d:a1:17: 29:9b:b9:9b:2e:c9:c3:dd:20:fd:b7:66:16:b9:70: a0:73:61:73:f4:a4:14:d9:bd:d9:7a:f6:4b:40:59: dc:f4:5a:c0:c2:3f:d4:8c:67:ae:a9:b1:38:c1:05: 7e:bb:7e:c2:b2:fb:fb:11:87:19:23:bc:67:6b:fd: ea:9c:2f:27:44:74:66:5c:14:62:8c:1d:3d:77:06: 02:54:44:e2:fb:ac:d2:53:85:13:3f:66:d2:52:5a: da:9e:88:e3:04:6f:9f:c6:2a:86:d3:09:50:b9:1b: 17:72:89:e2:1e:70:7f:c9:2c:11:1f:0d:06:23:b0: 7b:e6:c4:14:8f:19:01:bb:a6:03:1e:01:49:31:ba: 68:5d:27:37:3e:9e:cb:fa:2c:65:05:fa:5e:26:70: 05:60:e9:23:e3:c2:6b:7c:fe:18:13:61:11:4a:27: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:69:88:26:BC:F7:78:94:17:7B:B8:C1:0A:23:3C:B6:B5:E3:43:0E X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/CWmIJrz3eJQXe7jBCiM8trXjQw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.18.0/23 185.165.76.0/24 194.99.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:dc:fd:dd:d0:2c:ad:fb:10:6c:37:2f:c7:e9:18:bc:b8:e5: 4e:bf:73:b5:93:29:6d:02:43:e1:af:71:31:77:b0:35:8e:16: 93:f0:17:e2:83:f6:2b:bf:89:8e:8e:4f:ae:6b:3a:3a:40:9d: cb:77:67:18:53:75:6b:a7:aa:b7:1d:6f:76:38:2d:da:ac:51: bc:6e:fb:40:f8:c5:38:71:82:9a:c2:15:ce:08:d8:f6:d1:94: 79:f1:07:db:34:4f:e5:3f:2b:8f:5c:99:4c:1d:53:ed:91:79: 3a:4f:6c:60:c5:78:1e:0e:28:72:d7:4c:47:eb:30:1e:88:d3: 79:47:77:aa:b2:b0:70:db:c5:53:87:e8:33:63:64:2c:b2:4f: bf:d2:10:8c:3f:9c:62:42:7a:63:85:13:1a:00:1a:dd:6b:e9: 4c:54:aa:6e:75:ed:c5:41:97:4b:61:0d:d7:ae:fd:d4:e9:1d: 4f:56:31:30:4c:d1:4b:e2:31:1e:5c:35:e2:49:04:d6:f9:2b: fe:2f:f9:8f:57:0b:df:4e:46:04:c8:41:bc:5f:21:7d:d0:d4: 52:3b:ee:70:97:17:76:70:ec:70:2f:7c:9a:6d:5a:a4:6a:03: 2e:e5:3a:58:df:86:ea:5c:1f:41:d1:d8:bd:d3:cd:79:5b:c1: 54:d3:2d:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsyeyRX8S8pFyL3NKvbsWT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjUxMjE4MTcyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTY5ODgyNmJjZjc3ODk0MTc3YmI4YzEwYTIzM2NiNmI1ZTM0MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA195P0ef9MCBKmIYa9pnEBV6dmwmj Uv8pe7sA+R3ahyS/RKHzu1dvkYigOQ7EeJ2t2mxF1G8sFmXx/4CQONKbN90q6gU8 zN4onGv88LnSiCHUjq3wKm1NoRcpm7mbLsnD3SD9t2YWuXCgc2Fz9KQU2b3ZevZL QFnc9FrAwj/UjGeuqbE4wQV+u37Csvv7EYcZI7xna/3qnC8nRHRmXBRijB09dwYC VETi+6zSU4UTP2bSUlranojjBG+fxiqG0wlQuRsXconiHnB/ySwRHw0GI7B75sQU jxkBu6YDHgFJMbpoXSc3Pp7L+ixlBfpeJnAFYOkj48JrfP4YE2ERSifBoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAlpiCa893iUF3u4wQojPLa140MOMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvQ1dtSUpyejNlSlFYZTdqQkNpTTh0clhqUXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuYESAwQA uaVMAwQAwmNKMA0GCSqGSIb3DQEBCwUAA4IBAQAL3P3d0Cyt+xBsNy/H6Ri8uOVO v3O1kyltAkPhr3Exd7A1jhaT8Bfig/Yrv4mOjk+uazo6QJ3Ld2cYU3Vrp6q3HW92 OC3arFG8bvtA+MU4cYKawhXOCNj20ZR58QfbNE/lPyuPXJlMHVPtkXk6T2xgxXge Dihy10xH6zAeiNN5R3eqsrBw28VTh+gzY2Qssk+/0hCMP5xiQnpjhRMaABrda+lM VKpude3FQZdLYQ3Xrv3U6R1PVjEwTNFL4jEeXDXiSQTW+Sv+L/mPVwvfTkYEyEG8 XyF90NRSO+5wlxd2cOxwL3yabVqkagMu5TpY34bqXB9B0di90815W8FU0y3F -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:26 2025 by rpki-client