This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/tD3EeMEBT3yEWBttpsWGl0bRetk.roa File: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (raw, json) Hash identifier: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s= Subject key identifier: B4:3D:C4:78:C1:01:4F:7C:84:58:1B:6D:A6:C5:86:97:46:D1:7A:D9 Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d Certificate serial: 019B77C67424E8BA8BDC345F273CBACA731A Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/tD3EeMEBT3yEWBttpsWGl0bRetk.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12798 IP address blocks: 185.82.48.0/24 maxlen: 24 185.82.50.0/24 maxlen: 24 185.82.51.0/24 maxlen: 24 212.22.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:24:e8:ba:8b:dc:34:5f:27:3c:ba:ca:73:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585c19915455835457413ef222a7d375b29901d Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43dc478c1014f7c84581b6da6c5869746d17ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:fe:44:f0:cc:47:a4:22:eb:f2:9f:ff:7f: 92:93:76:a5:e8:99:04:c6:93:64:14:25:3f:2a:f6: 4a:05:a6:40:7e:44:24:d7:4d:c9:09:ef:e4:82:36: 2c:0a:6e:46:4b:1a:43:cc:45:60:8b:3a:31:aa:16: b1:98:d8:da:40:9c:0a:6d:82:f1:e8:2c:ae:06:bc: 72:49:46:f9:d6:77:4f:8a:ad:4f:fc:b6:f4:f6:3b: 42:6b:a6:67:03:e0:13:23:39:27:dd:6a:58:3b:39: b2:a0:02:52:b2:39:3f:ad:a1:e8:8c:61:0c:f8:aa: fd:c3:6f:76:be:7c:c3:6b:d2:c4:8f:70:8d:c9:d7: 06:18:ea:2b:98:d3:69:1d:76:6a:40:3b:47:ca:f7: a3:a8:ca:25:21:a4:ee:1f:9b:bb:b5:bf:ee:c3:3b: 29:3e:fb:78:76:bc:b1:3e:a5:a7:b5:62:bb:23:4f: 51:90:7f:88:2a:a4:81:96:e1:0a:58:e8:66:21:bf: 90:f0:0a:d8:6a:3b:10:97:07:d6:ec:2d:74:c2:2b: 29:9e:78:77:fa:5a:d3:69:67:fa:60:ed:fe:0e:88: 00:f1:aa:3a:7e:96:c6:3f:96:ba:14:f0:40:14:e7: 58:8b:63:dc:3b:b4:40:2d:55:e0:24:b6:39:35:f9: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:C4:78:C1:01:4F:7C:84:58:1B:6D:A6:C5:86:97:46:D1:7A:D9 X509v3 Authority Key Identifier: keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/tD3EeMEBT3yEWBttpsWGl0bRetk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.48.0/24 185.82.50.0/23 212.22.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:e7:52:f3:51:a4:72:f6:fe:8f:ae:27:08:ab:33:d7:5b:52: cc:f0:be:01:67:2b:66:b7:d8:f5:02:94:9d:91:79:eb:be:ad: ca:81:11:48:76:0a:17:42:bf:73:ef:66:89:da:3e:ed:8e:c8: e4:e0:80:fb:d1:7c:38:ac:24:c4:c2:0d:92:15:66:80:7f:a9: b9:87:3c:18:1e:05:28:81:ee:c2:1c:c2:3e:64:6f:a4:84:27: 0e:3e:55:ae:23:06:cc:d3:b9:5d:5d:4e:f4:c6:ba:97:11:71: 3f:ed:92:16:8f:76:3b:b0:e1:70:db:66:fb:94:e1:65:5b:f6: 56:94:21:b4:c6:d9:8c:36:da:bb:9e:76:ee:f5:34:3b:3d:b6: e7:23:31:42:d8:2f:ed:c3:15:06:d9:0a:01:2c:72:c8:6b:43: 3b:34:d3:77:ab:7d:ab:0e:3f:94:4c:26:a4:2a:3c:79:9b:94: 85:f4:e5:f8:0d:a8:11:d1:09:04:0d:36:ca:cf:af:09:24:48: 72:17:08:38:98:38:86:4e:67:32:63:2a:e7:d1:87:99:46:d1: f8:01:b1:f2:b3:d1:27:ce:f5:02:80:69:37:63:8b:94:cb:86: 92:29:14:18:63:33:e6:a8:08:08:9a:56:1e:3a:73:fb:09:88: b2:2e:01:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xnQk6LqL3DRfJzy6ynMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy OTkwMWQwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDNkYzQ3OGMxMDE0ZjdjODQ1ODFiNmRhNmM1ODY5NzQ2ZDE3YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfD+RPDMR6Qi6/Kf/3+Sk3al6JkE xpNkFCU/KvZKBaZAfkQk103JCe/kgjYsCm5GSxpDzEVgizoxqhaxmNjaQJwKbYLx 6CyuBrxySUb51ndPiq1P/Lb09jtCa6ZnA+ATIzkn3WpYOzmyoAJSsjk/raHojGEM +Kr9w292vnzDa9LEj3CNydcGGOormNNpHXZqQDtHyvejqMolIaTuH5u7tb/uwzsp Pvt4dryxPqWntWK7I09RkH+IKqSBluEKWOhmIb+Q8ArYajsQlwfW7C10wispnnh3 +lrTaWf6YO3+DogA8ao6fpbGP5a6FPBAFOdYi2PcO7RALVXgJLY5Nfkh2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLQ9xHjBAU98hFgbbabFhpdG0XrZMB8GA1UdIwQY MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt NzcyOTE4ZmZmNTQ0LzEvdEQzRWVNRUJUM3lFV0J0dHBzV0dsMGJSZXRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0 LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVIwAwQB uVIyAwQF1BbgMA0GCSqGSIb3DQEBCwUAA4IBAQAe51LzUaRy9v6PricIqzPXW1LM 8L4BZytmt9j1ApSdkXnrvq3KgRFIdgoXQr9z72aJ2j7tjsjk4ID70Xw4rCTEwg2S FWaAf6m5hzwYHgUoge7CHMI+ZG+khCcOPlWuIwbM07ldXU70xrqXEXE/7ZIWj3Y7 sOFw22b7lOFlW/ZWlCG0xtmMNtq7nnbu9TQ7PbbnIzFC2C/twxUG2QoBLHLIa0M7 NNN3q32rDj+UTCakKjx5m5SF9OX4DagR0QkEDTbKz68JJEhyFwg4mDiGTmcyYyrn 0YeZRtH4AbHys9EnzvUCgGk3Y4uUy4aSKRQYYzPmqAgImlYeOnP7CYiyLgFL -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:39 2026 by rpki-client