This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/L7s0ED57mNbRMv5scEab-MWU-0g.roa File: L7s0ED57mNbRMv5scEab-MWU-0g.roa (raw, json) Hash identifier: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM= Subject key identifier: 2F:BB:34:10:3E:7B:98:D6:D1:32:FE:6C:70:46:9B:F8:C5:94:FB:48 Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b Certificate serial: 019B7AC8D953F41FAECC5E63017E5C440DCE Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/L7s0ED57mNbRMv5scEab-MWU-0g.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49824 IP address blocks: 185.46.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d9:53:f4:1f:ae:cc:5e:63:01:7e:5c:44:0d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fbb34103e7b98d6d132fe6c70469bf8c594fb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:fd:a9:f9:86:d2:8e:d1:b6:41:44:6c:96: 2d:27:83:c7:e4:63:95:98:27:0e:4b:20:b9:bc:18: 8c:e9:0e:6d:8d:19:89:7a:af:27:e0:cc:b9:20:ae: 69:57:7d:27:21:18:ec:d6:b8:6a:73:d0:6d:b9:8c: 56:a5:48:52:b3:39:f9:76:f5:ab:fb:d0:d5:87:f8: a5:9f:80:b4:49:a1:5c:01:1f:77:e7:9b:6c:2d:05: a6:e1:88:eb:05:7b:40:b9:57:25:ad:e1:94:5e:a5: 41:84:90:00:db:1a:81:2b:bc:d2:8a:5c:b1:8c:6f: 57:ee:7b:45:38:38:ad:e5:50:b7:27:f6:63:00:0f: db:ce:79:73:f7:5b:28:1e:a8:3b:17:e0:9d:42:67: dd:2a:bf:f4:e7:99:2c:b8:50:a2:74:ac:b0:7c:8b: 75:e9:e8:70:1c:90:7b:08:b9:cc:42:25:7b:57:61: a5:35:b6:7e:53:da:35:8a:bf:ca:a8:e9:06:76:ed: 8e:23:2c:8e:95:08:d7:18:19:0b:01:f0:6b:e3:4f: be:c3:be:e5:31:01:d8:a6:5d:30:ef:36:9a:9f:c9: 28:96:56:ab:59:00:9f:cb:5a:10:01:7a:bb:73:61: 09:1a:07:12:95:7e:a0:a1:72:f2:6c:80:c0:b4:84: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BB:34:10:3E:7B:98:D6:D1:32:FE:6C:70:46:9B:F8:C5:94:FB:48 X509v3 Authority Key Identifier: keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/L7s0ED57mNbRMv5scEab-MWU-0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.143.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:4b:91:16:df:0f:70:55:3e:a9:c5:36:0d:b8:5d:04:38:a6: 5c:8f:c2:c1:4e:05:3e:c4:2c:c8:f9:63:5e:18:c2:5b:55:f0: ad:4b:36:52:ec:ed:d3:b4:be:a3:e3:d6:13:a8:7a:d4:8a:3f: 65:56:c9:05:92:16:2a:a3:29:22:85:98:c0:8c:78:b3:b5:3c: 5a:42:41:11:5e:e3:48:8d:51:e9:1e:52:7b:15:84:01:6c:a4: e3:b7:1d:2b:e1:b5:7c:fd:1a:1f:37:de:aa:8d:24:36:0d:02: f5:a8:e8:cd:56:ff:cc:d3:1f:b3:03:7a:64:7d:45:1e:d5:ca: f9:55:df:4e:7b:2f:15:d1:01:9a:bd:d3:2e:02:8c:1f:9f:44: 16:55:7a:b9:78:e6:3f:55:1e:e9:56:5c:28:90:85:cf:69:b4: 0b:bf:67:98:f7:ed:74:04:e9:ee:11:f5:5e:bd:69:07:dd:7a: f6:ee:4e:1c:23:90:b2:d4:f5:13:5a:a3:8f:9a:06:d8:bb:e8: 79:2f:e7:06:00:26:b9:b1:23:55:9d:7b:ab:ca:18:e4:a1:e9: c0:f7:9e:e6:3e:f2:ac:de:c2:d9:c4:66:f7:69:87:5b:c9:fb: 1a:72:c5:92:5e:89:4c:50:83:f6:9a:1b:d5:e4:43:4f:c2:4c: 03:99:b2:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNlT9B+uzF5jAX5cRA3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi MjhkNWIwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmJiMzQxMDNlN2I5OGQ2ZDEzMmZlNmM3MDQ2OWJmOGM1OTRmYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gb9qfmG0o7RtkFEbJYtJ4PH5GOV mCcOSyC5vBiM6Q5tjRmJeq8n4My5IK5pV30nIRjs1rhqc9BtuYxWpUhSszn5dvWr +9DVh/iln4C0SaFcAR9355tsLQWm4YjrBXtAuVclreGUXqVBhJAA2xqBK7zSilyx jG9X7ntFODit5VC3J/ZjAA/bznlz91soHqg7F+CdQmfdKr/055ksuFCidKywfIt1 6ehwHJB7CLnMQiV7V2GlNbZ+U9o1ir/KqOkGdu2OIyyOlQjXGBkLAfBr40++w77l MQHYpl0w7zaan8kollarWQCfy1oQAXq7c2EJGgcSlX6goXLybIDAtITQiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+7NBA+e5jW0TL+bHBGm/jFlPtIMB8GA1UdIwQY MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt MzUzZjk4MTJiMWRiLzEvTDdzMEVENTdtTmJSTXY1c2NFYWItTVdVLTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS6PMA0G CSqGSIb3DQEBCwUAA4IBAQAeS5EW3w9wVT6pxTYNuF0EOKZcj8LBTgU+xCzI+WNe GMJbVfCtSzZS7O3TtL6j49YTqHrUij9lVskFkhYqoykihZjAjHiztTxaQkERXuNI jVHpHlJ7FYQBbKTjtx0r4bV8/RofN96qjSQ2DQL1qOjNVv/M0x+zA3pkfUUe1cr5 Vd9Oey8V0QGavdMuAowfn0QWVXq5eOY/VR7pVlwokIXPabQLv2eY9+10BOnuEfVe vWkH3Xr27k4cI5Cy1PUTWqOPmgbYu+h5L+cGACa5sSNVnXuryhjkoenA957mPvKs 3sLZxGb3aYdbyfsacsWSXolMUIP2mhvV5ENPwkwDmbLY -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:59 2026 by rpki-client