This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/7qf495NfOxhQQHgNxqK4d9dwdxc.roa File: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (raw, json) Hash identifier: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA= Subject key identifier: EE:A7:F8:F7:93:5F:3B:18:50:40:78:0D:C6:A2:B8:77:D7:70:77:17 Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Certificate serial: 019B7F153E199A62D7B99C03F6E0F3409D69 Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/7qf495NfOxhQQHgNxqK4d9dwdxc.roa Signing time: Fri 02 Jan 2026 14:20:57 +0000 ROA not before: Fri 02 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50551 IP address blocks: 185.48.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3e:19:9a:62:d7:b9:9c:03:f6:e0:f3:40:9d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea7f8f7935f3b185040780dc6a2b877d7707717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:cf:c4:73:a8:a3:4a:18:51:d5:7d:9c:d9: 9e:2d:c2:0c:d6:bd:32:9b:53:00:25:d4:b1:6e:f8: dc:a9:cd:5d:9f:22:86:b8:23:74:8b:89:bf:45:2d: 2d:16:c5:3d:33:1d:23:cf:b8:c8:48:5f:19:52:fd: c0:69:29:53:88:13:5d:44:6d:58:2c:f2:58:23:b6: 4d:87:b0:3a:b3:c2:c0:62:0e:86:43:91:4b:1f:02: 29:fa:9b:92:bc:ab:2b:f8:a2:12:cd:06:ce:32:49: e2:a8:44:0c:61:60:39:b9:9d:7d:65:cb:97:af:3a: cb:64:23:6e:b5:f9:54:48:cd:29:2c:8c:63:6e:81: 14:c8:4d:bb:db:b8:63:4d:66:b3:38:77:45:87:3c: 71:46:85:2c:44:1c:b0:14:ae:66:fa:92:97:48:4e: 7c:f3:3a:a6:f5:8b:a4:c0:e4:83:f9:70:ea:1d:0d: 82:a6:c7:da:6a:ef:c7:73:36:14:d6:1b:88:ae:d9: e9:a9:81:b9:62:83:e0:df:a5:37:d5:53:0c:52:24: 10:61:8b:ba:c8:01:06:fb:cf:b6:06:e4:b8:52:e1: 40:bf:08:79:6a:cd:62:c0:c7:f2:a0:a6:a9:76:83: 52:e9:d8:4a:3f:43:aa:a1:e6:5b:e4:c5:3a:53:30: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:F8:F7:93:5F:3B:18:50:40:78:0D:C6:A2:B8:77:D7:70:77:17 X509v3 Authority Key Identifier: keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/7qf495NfOxhQQHgNxqK4d9dwdxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.31.0/24 Signature Algorithm: sha256WithRSAEncryption 05:21:dd:57:65:ed:0e:66:0d:93:25:a9:28:fb:46:43:fe:da: d0:b8:ee:a8:25:8d:b5:f6:8e:77:6d:e3:51:5a:e3:25:c6:2a: a7:07:ac:d1:f5:52:ff:c7:d1:74:6c:aa:ed:41:30:ca:83:c6: c7:b1:23:89:56:28:b3:ab:fc:95:1c:8e:fd:39:cb:58:95:df: 0e:27:4a:b9:07:df:6b:c8:63:92:fc:e1:0f:02:e7:d7:70:ad: 34:8c:56:3a:e2:00:88:9b:af:e8:92:8c:ad:2f:72:22:86:d3: 86:f0:bd:90:37:8a:f7:20:36:43:32:b0:1f:3e:4e:31:05:cc: c4:a8:67:71:f9:a7:a5:24:43:44:34:ab:3a:13:68:06:d5:b3: b8:e4:7b:14:ff:1d:70:ab:b3:22:12:2a:13:79:28:87:2f:ab: b9:cb:6d:c4:b6:5e:e6:5a:eb:f7:2e:a8:e2:4a:f3:bd:e7:11: 64:fe:9d:91:c6:42:0c:27:4d:e1:0e:8e:76:80:ad:07:07:ac: 7f:82:45:f1:53:ae:5c:66:10:dc:37:7c:3a:cd:0b:5b:0a:09: d3:1d:20:79:0d:81:97:7c:bb:2f:15:60:12:35:3f:27:af:3e: 24:10:db:9f:b8:25:bb:68:0f:ac:a2:09:a3:56:99:1c:a7:d7: 1e:be:c8:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FT4ZmmLXuZwD9uDzQJ1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0 YjIxNzEwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWE3ZjhmNzkzNWYzYjE4NTA0MDc4MGRjNmEyYjg3N2Q3NzA3NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/7PxHOoo0oYUdV9nNmeLcIM1r0y m1MAJdSxbvjcqc1dnyKGuCN0i4m/RS0tFsU9Mx0jz7jISF8ZUv3AaSlTiBNdRG1Y LPJYI7ZNh7A6s8LAYg6GQ5FLHwIp+puSvKsr+KISzQbOMkniqEQMYWA5uZ19ZcuX rzrLZCNutflUSM0pLIxjboEUyE2727hjTWazOHdFhzxxRoUsRBywFK5m+pKXSE58 8zqm9YukwOSD+XDqHQ2Cpsfaau/HczYU1huIrtnpqYG5YoPg36U31VMMUiQQYYu6 yAEG+8+2BuS4UuFAvwh5as1iwMfyoKapdoNS6dhKP0OqoeZb5MU6UzCfywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6n+PeTXzsYUEB4DcaiuHfXcHcXMB8GA1UdIwQY MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt MWE4OWZmMTE5NjVlLzEvN3FmNDk1TmZPeGhRUUhnTnhxSzRkOWR3ZHhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAfMA0G CSqGSIb3DQEBCwUAA4IBAQAFId1XZe0OZg2TJako+0ZD/trQuO6oJY219o53beNR WuMlxiqnB6zR9VL/x9F0bKrtQTDKg8bHsSOJViizq/yVHI79OctYld8OJ0q5B99r yGOS/OEPAufXcK00jFY64gCIm6/okoytL3IihtOG8L2QN4r3IDZDMrAfPk4xBczE qGdx+aelJENENKs6E2gG1bO45HsU/x1wq7MiEioTeSiHL6u5y23Etl7mWuv3Lqji SvO95xFk/p2RxkIMJ03hDo52gK0HB6x/gkXxU65cZhDcN3w6zQtbCgnTHSB5DYGX fLsvFWASNT8nrz4kENufuCW7aA+sogmjVpkcp9cevsj/ -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:06 2026 by rpki-client