This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qLKMoebE1Wu7Ay1HQKQl0WJwKYE.roa File: qLKMoebE1Wu7Ay1HQKQl0WJwKYE.roa (raw, json) Hash identifier: V4MgBL8wtyLv5GU9Tbf96+u0EJLHTD/cQ1RYkIv6LdU= Subject key identifier: A8:B2:8C:A1:E6:C4:D5:6B:BB:03:2D:47:40:A4:25:D1:62:70:29:81 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B2B82C843BAE7AB9050B4BC187ED34D93 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qLKMoebE1Wu7Ay1HQKQl0WJwKYE.roa Signing time: Wed 17 Dec 2025 08:52:29 +0000 ROA not before: Wed 17 Dec 2025 08:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49549 IP address blocks: 89.107.10.0/24 maxlen: 24 146.19.128.0/24 maxlen: 24 146.19.207.0/24 maxlen: 24 176.126.103.0/24 maxlen: 24 178.250.187.0/24 maxlen: 24 178.250.188.0/24 maxlen: 24 178.250.191.0/24 maxlen: 24 193.0.227.0/24 maxlen: 24 193.0.229.0/24 maxlen: 24 193.0.230.0/24 maxlen: 24 193.0.239.0/24 maxlen: 24 217.114.43.0/24 maxlen: 24 217.119.129.0/24 maxlen: 24 2a0f:cdc2::/32 maxlen: 32 2a0f:cdc4::/32 maxlen: 32 2a0f:cdc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:82:c8:43:ba:e7:ab:90:50:b4:bc:18:7e:d3:4d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Dec 17 08:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8b28ca1e6c4d56bbb032d4740a425d162702981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:ca:36:e2:1d:da:80:52:7d:1f:1c:cd:2e: fe:75:16:47:83:ce:bf:74:1f:73:eb:4f:45:dc:ac: d2:00:34:95:9e:21:89:65:4c:4d:e4:14:23:34:72: e0:29:9e:3c:0c:e8:99:f8:82:3d:d2:47:83:b7:31: 7e:bb:5c:28:5c:09:c4:fd:7c:76:11:ec:71:d9:fd: ed:c5:2a:f1:11:b0:d7:17:13:3c:ab:6e:c7:65:04: e3:ea:9d:2f:88:20:fb:3b:41:e9:d7:ef:79:c6:f6: d3:27:f3:c7:2e:27:80:d2:ee:80:6e:60:ff:b4:af: 7a:5b:70:ca:d0:c1:11:bb:bc:e6:1a:40:10:e2:dd: 00:e6:46:d9:6a:61:53:35:b0:44:4a:d5:0d:8a:ee: 8a:f7:09:30:01:e3:fd:84:fb:f3:2d:26:16:9f:19: ad:77:35:44:58:11:f4:f5:65:7c:a5:8b:94:87:4e: 7e:92:7f:2c:5d:4a:5d:95:cf:c0:6c:1e:fa:01:17: ef:a4:b2:66:79:86:2e:4f:ff:b2:a1:b3:89:83:ba: cc:cf:d6:43:36:ed:1c:01:e2:d8:55:3a:2a:2b:09: 18:ba:79:8e:ca:b7:9c:22:81:12:ca:4e:04:9d:f4: df:6b:1f:2d:aa:5a:91:19:f3:22:e4:6b:74:cc:f1: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:8C:A1:E6:C4:D5:6B:BB:03:2D:47:40:A4:25:D1:62:70:29:81 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qLKMoebE1Wu7Ay1HQKQl0WJwKYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.10.0/24 146.19.128.0/24 146.19.207.0/24 176.126.103.0/24 178.250.187.0-178.250.188.255 178.250.191.0/24 193.0.227.0/24 193.0.229.0-193.0.230.255 193.0.239.0/24 217.114.43.0/24 217.119.129.0/24 IPv6: 2a0f:cdc2::/32 2a0f:cdc4::/31 Signature Algorithm: sha256WithRSAEncryption 44:ec:9a:20:4a:88:3f:18:b9:55:e9:60:45:6e:32:af:fe:d8: b1:f1:9f:fb:e8:9e:21:f3:48:fe:71:05:de:65:02:94:17:71: 1e:79:74:b6:10:c5:6f:3d:db:59:68:ae:3c:82:da:6a:aa:c5: cd:06:5a:92:6c:3f:19:f5:76:4b:2c:2c:04:2d:d1:f1:68:20: 6d:1c:7f:22:ab:d0:9c:be:e5:2f:ed:4c:7b:b2:90:83:c2:d0: 76:f9:3c:03:ea:10:90:20:ec:fc:24:37:aa:bd:30:15:63:8d: cc:cd:f3:0b:31:48:30:a0:0d:45:20:3a:f5:bd:7d:99:ac:fa: 0d:00:13:1a:ba:98:9f:1e:35:7a:8f:bd:e1:c6:5f:3f:f6:85: fc:02:6b:68:6f:f8:c0:dc:b2:42:bc:fa:8b:c7:46:a0:87:8f: 00:e1:24:db:3f:34:6b:84:a3:c7:99:33:5e:11:0e:93:18:66: e5:91:20:57:b3:ef:26:47:ed:a5:76:c7:33:06:5e:64:3f:29: 20:54:cb:07:f4:71:4e:af:0a:38:6a:ed:9f:d8:42:85:fd:70: b0:1a:5c:37:61:00:9d:bd:6b:08:83:ba:e9:19:10:4d:2a:53: ef:d9:b2:f4:7c:94:4b:56:a6:7d:5e:f4:a5:5f:8d:4f:f0:84: d7:27:91:56 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZsrgshDuuerkFC0vBh+002TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUxMjE3MDg1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIyOGNhMWU2YzRkNTZiYmIwMzJkNDc0MGE0MjVkMTYyNzAyOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjXKNuId2oBSfR8czS7+dRZHg86/ dB9z609F3KzSADSVniGJZUxN5BQjNHLgKZ48DOiZ+II90keDtzF+u1woXAnE/Xx2 Eexx2f3txSrxEbDXFxM8q27HZQTj6p0viCD7O0Hp1+95xvbTJ/PHLieA0u6AbmD/ tK96W3DK0MERu7zmGkAQ4t0A5kbZamFTNbBEStUNiu6K9wkwAeP9hPvzLSYWnxmt dzVEWBH09WV8pYuUh05+kn8sXUpdlc/AbB76ARfvpLJmeYYuT/+yobOJg7rMz9ZD Nu0cAeLYVToqKwkYunmOyrecIoESyk4EnfTfax8tqlqRGfMi5Gt0zPGLFQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFKiyjKHmxNVruwMtR0CkJdFicCmBMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvcUxLTW9lYkUxV3U3QXkxSFFLUWwwV0p3S1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwWAQCAAEwUgMEAFlrCgME AJITgAMEAJITzwMEALB+ZzAMAwQAsvq7AwQAsvq8AwQAsvq/AwQAwQDjMAwDBADB AOUDBADBAOYDBADBAO8DBADZcisDBADZd4EwFAQCAAIwDgMFACoPzcIDBQEqD83E MA0GCSqGSIb3DQEBCwUAA4IBAQBE7JogSog/GLlV6WBFbjKv/tix8Z/76J4h80j+ cQXeZQKUF3EeeXS2EMVvPdtZaK48gtpqqsXNBlqSbD8Z9XZLLCwELdHxaCBtHH8i q9CcvuUv7Ux7spCDwtB2+TwD6hCQIOz8JDeqvTAVY43MzfMLMUgwoA1FIDr1vX2Z rPoNABMaupifHjV6j73hxl8/9oX8Amtob/jA3LJCvPqLx0agh48A4STbPzRrhKPH mTNeEQ6TGGblkSBXs+8mR+2ldsczBl5kPykgVMsH9HFOrwo4au2f2EKF/XCwGlw3 YQCdvWsIg7rpGRBNKlPv2bL0fJRLVqZ9XvSlX41P8ITXJ5FW -----END CERTIFICATE-----Generated at Sun Dec 21 04:49:51 2025 by rpki-client