This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/v88a1n77gbDXULcDTWMWWeiKOSs.roa File: v88a1n77gbDXULcDTWMWWeiKOSs.roa (raw, json) Hash identifier: uCwWaTXn9SCN1Q8WU0rPqu6C7hoOabj2vXoUWRD64+0= Subject key identifier: BF:CF:1A:D6:7E:FB:81:B0:D7:50:B7:03:4D:63:16:59:E8:8A:39:2B Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B2BE2E9DF85F8B90BB219EAB6CD5CA6D7 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/v88a1n77gbDXULcDTWMWWeiKOSs.roa Signing time: Wed 17 Dec 2025 10:37:29 +0000 ROA not before: Wed 17 Dec 2025 10:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25472 IP address blocks: 37.6.0.0/16 maxlen: 24 46.190.0.0/17 maxlen: 24 62.169.192.0/18 maxlen: 24 79.107.0.0/16 maxlen: 24 80.245.160.0/20 maxlen: 24 81.92.48.0/20 maxlen: 24 84.254.0.0/18 maxlen: 24 91.140.0.0/17 maxlen: 24 109.242.0.0/16 maxlen: 24 176.58.128.0/17 maxlen: 24 185.3.220.0/22 maxlen: 24 188.73.192.0/18 maxlen: 24 212.152.80.0/22 maxlen: 22 2a03:f000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:e2:e9:df:85:f8:b9:0b:b2:19:ea:b6:cd:5c:a6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Dec 17 10:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bfcf1ad67efb81b0d750b7034d631659e88a392b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:31:6e:b0:f4:c7:6f:d0:af:bc:2b:9b:6e: b1:ab:0c:20:0e:94:a4:8e:61:69:51:14:1b:10:dd: 67:ea:a6:ad:7f:ac:b9:4c:ea:cb:fc:34:8f:a5:ff: fa:65:c6:2a:da:dd:df:f8:e9:dc:d9:12:29:8a:31: 5c:81:fc:6b:af:36:ae:c6:3c:5d:c1:8a:bc:a5:97: e7:2a:0e:11:42:76:d1:78:c6:e0:92:6c:99:08:33: fa:d0:8c:74:ec:80:d4:70:a8:e2:d2:8e:a9:ca:61: b2:ac:d1:d6:f9:52:f3:d3:0a:06:bf:05:5e:73:67: 17:f1:46:eb:cf:ac:e0:1c:cd:5d:a2:7b:07:61:e1: 82:72:6d:9a:9c:d7:db:06:86:2e:72:22:d5:48:a7: 09:ee:90:3d:cf:5f:c7:2c:64:3b:45:a0:f6:93:a0: d8:ff:91:89:2b:0c:6d:62:c9:6d:b9:0c:70:77:85: cf:80:56:bc:80:88:f6:c7:b5:82:07:fa:e6:19:cf: 18:86:0c:07:6f:cd:70:b6:c0:00:0c:07:75:9c:9a: b7:21:09:64:df:4a:9c:b5:86:fc:bb:18:ca:b8:64: b7:75:e3:0a:35:7d:5a:bd:a6:1d:5f:47:25:48:43: b9:bb:a4:f9:6e:fc:ca:49:1e:a8:ad:7a:58:3c:b7: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:1A:D6:7E:FB:81:B0:D7:50:B7:03:4D:63:16:59:E8:8A:39:2B X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/v88a1n77gbDXULcDTWMWWeiKOSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.6.0.0/16 46.190.0.0/17 62.169.192.0/18 79.107.0.0/16 80.245.160.0/20 81.92.48.0/20 84.254.0.0/18 91.140.0.0/17 109.242.0.0/16 176.58.128.0/17 185.3.220.0/22 188.73.192.0/18 212.152.80.0/22 IPv6: 2a03:f000::/29 Signature Algorithm: sha256WithRSAEncryption 9e:77:1e:05:07:68:dd:30:94:4e:87:b7:fd:cf:d3:cf:08:ee: b3:39:1a:1c:fe:40:87:2f:ce:bb:01:4b:96:bc:db:d6:b8:24: 8f:d1:7d:66:8a:0b:d2:5b:d9:91:c2:74:bb:af:a4:8b:85:c5: 50:bd:ee:d1:e3:be:f9:00:f3:03:21:4d:8c:28:5b:4c:6c:0d: 90:c4:24:36:d8:72:69:c7:fb:b1:09:80:69:4b:59:3c:80:f3: da:46:50:05:0b:83:95:74:3e:f4:00:6a:0c:70:86:6f:45:38: 92:be:c4:02:5a:a8:81:49:4b:d9:36:9a:7b:fe:0a:ed:f6:e1: 6b:f0:4e:97:2c:ac:16:c3:f9:b4:df:fc:07:b9:f6:87:24:a4: 81:57:a5:47:ed:27:ca:d5:37:03:05:02:c9:42:29:69:57:25: d6:14:54:6e:d3:ae:63:2c:b8:51:0b:b6:d0:70:a6:0b:5b:28: 42:4c:4f:f9:8f:d9:6c:39:59:68:7a:30:67:f9:c1:f4:52:87: 99:c3:06:df:2e:d8:a3:64:f4:3d:dd:09:44:19:3f:cf:ae:40: 97:82:10:f8:2c:9e:df:b8:0a:40:06:fa:85:2e:63:04:38:8a: 36:5a:dc:fc:db:9f:1e:af:c6:31:8b:47:fb:8e:5f:58:e4:f4: b3:0b:dd:5f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZsr4unfhfi5C7IZ6rbNXKbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMjE3MTAzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNmMWFkNjdlZmI4MWIwZDc1MGI3MDM0ZDYzMTY1OWU4OGEzOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEQxbrD0x2/Qr7wrm26xqwwgDpSk jmFpURQbEN1n6qatf6y5TOrL/DSPpf/6ZcYq2t3f+Onc2RIpijFcgfxrrzauxjxd wYq8pZfnKg4RQnbReMbgkmyZCDP60Ix07IDUcKji0o6pymGyrNHW+VLz0woGvwVe c2cX8Ubrz6zgHM1donsHYeGCcm2anNfbBoYuciLVSKcJ7pA9z1/HLGQ7RaD2k6DY /5GJKwxtYsltuQxwd4XPgFa8gIj2x7WCB/rmGc8YhgwHb81wtsAADAd1nJq3IQlk 30qctYb8uxjKuGS3deMKNX1avaYdX0clSEO5u6T5bvzKSR6orXpYPLeKxwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFL/PGtZ++4Gw11C3A01jFlnoijkrMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvdjg4YTFuNzdnYkRYVUxjRFRXTVdXZWlLT1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBRBAIAATBLAwMAJQYDBAcu vgADBAY+qcADAwBPawMEBFD1oAMEBFFcMAMEBlT+AAMEB1uMAAMDAG3yAwQHsDqA AwQCuQPcAwQGvEnAAwQC1JhQMA0EAgACMAcDBQMqA/AAMA0GCSqGSIb3DQEBCwUA A4IBAQCedx4FB2jdMJROh7f9z9PPCO6zORoc/kCHL867AUuWvNvWuCSP0X1migvS W9mRwnS7r6SLhcVQve7R4775APMDIU2MKFtMbA2QxCQ22HJpx/uxCYBpS1k8gPPa RlAFC4OVdD70AGoMcIZvRTiSvsQCWqiBSUvZNpp7/grt9uFr8E6XLKwWw/m03/wH ufaHJKSBV6VH7SfK1TcDBQLJQilpVyXWFFRu065jLLhRC7bQcKYLWyhCTE/5j9ls OVloejBn+cH0UoeZwwbfLtijZPQ93QlEGT/PrkCXghD4LJ7fuApABvqFLmMEOIo2 Wtz8258er8Yxi0f7jl9Y5PSzC91f -----END CERTIFICATE-----Generated at Thu Dec 18 23:03:35 2025 by rpki-client