This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/SIZsSe8MD44jUp-d4glaLGe0MeA.roa File: SIZsSe8MD44jUp-d4glaLGe0MeA.roa (raw, json) Hash identifier: BusHQ7NHSclBVbRWvHD7IDalKTfwWegpmnWvRUfVFbQ= Subject key identifier: 48:86:6C:49:EF:0C:0F:8E:23:52:9F:9D:E2:09:5A:2C:67:B4:31:E0 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B79100C30CA5D4AA5E6EECBB25AF8BC2A Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/SIZsSe8MD44jUp-d4glaLGe0MeA.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214886 IP address blocks: 185.242.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0c:30:ca:5d:4a:a5:e6:ee:cb:b2:5a:f8:bc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48866c49ef0c0f8e23529f9de2095a2c67b431e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:2b:42:50:a7:d0:31:2a:81:b4:a7:94:0f: 16:c6:b6:d2:db:d4:17:f4:bb:30:72:77:a4:e6:73: 3e:20:e8:fe:c9:b7:82:03:1d:08:ce:50:4e:ad:11: ed:2b:c5:b2:dc:4b:d5:f4:5e:47:bd:04:1f:33:d1: f7:2a:0a:69:eb:6b:7d:f1:76:50:d9:9b:7d:ab:db: 1d:bb:32:f0:6f:bb:80:99:03:36:78:bc:c6:51:df: 5b:0c:2e:e3:09:1d:f9:00:80:4f:44:84:b0:01:3a: e5:ca:04:39:b1:42:c9:db:ab:ef:5e:ff:37:1f:da: 68:f7:62:cd:7d:93:a8:18:27:fc:56:4e:ab:b4:45: 89:46:f2:2e:38:d3:29:87:a6:79:9e:5f:89:50:2a: fa:03:82:ac:8c:24:c8:80:8f:ac:b3:00:37:1a:62: f6:6f:a3:ff:9e:7a:8c:96:6f:5e:25:9d:0c:a8:0e: 32:98:e1:23:95:f5:ee:ae:4e:f2:21:63:3b:8e:a5: fc:8c:d7:0b:16:a3:af:05:de:04:15:db:9f:f8:84: 7b:c2:c1:f1:80:e2:66:b1:91:99:2a:21:0f:3e:c8: ef:27:b0:b0:67:c6:0d:cd:87:28:2a:15:c5:4f:b4: a8:8f:f7:42:74:e6:a6:ec:b1:b8:5b:ba:11:ea:92: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:6C:49:EF:0C:0F:8E:23:52:9F:9D:E2:09:5A:2C:67:B4:31:E0 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/SIZsSe8MD44jUp-d4glaLGe0MeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.20.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ac:ff:ec:02:7a:00:ef:91:cc:1a:d4:73:90:b4:cb:eb:4c: 29:53:90:de:94:ae:67:1e:fd:a0:2e:23:cf:10:62:60:4e:c0: 2e:58:ef:00:e6:27:07:a2:58:46:00:7a:aa:78:e5:31:fe:ae: 78:30:dd:0e:58:ea:d7:0c:d1:8a:fa:bb:94:2a:7a:ba:d9:ea: 10:02:d7:77:30:d2:d8:88:6d:9e:97:45:48:bd:6f:5e:bc:ab: d8:d8:30:32:88:e6:40:ba:4f:f4:87:8c:43:77:5b:53:e4:d7: 7a:87:72:c3:d6:2a:8b:d8:81:1d:a5:82:6f:cf:62:23:ee:d5: ae:02:ed:7f:0f:e2:2b:57:e6:db:ee:89:45:b1:76:d1:ce:a2: b3:21:c5:64:49:78:18:8c:76:5c:46:9f:fc:db:b5:68:cb:4b: 28:fb:25:c5:fd:57:30:ff:40:11:5e:15:2a:9c:db:12:ec:7b: f4:bb:d3:b4:7c:7f:7b:00:ee:5c:b8:60:b0:59:57:80:db:a0: 01:2c:31:9a:5b:54:5b:fd:df:cd:9b:f1:b8:63:79:9c:dc:6f: 1d:75:8a:6c:ec:bf:a6:29:cf:34:a0:06:42:6e:6f:3b:83:be: 3f:da:0e:65:18:95:14:ba:c7:31:fe:1b:dc:55:24:40:42:59: 75:4b:92:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAwwyl1Kpebuy7Ja+LwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODg2NmM0OWVmMGMwZjhlMjM1MjlmOWRlMjA5NWEyYzY3YjQzMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBYrQlCn0DEqgbSnlA8WxrbS29QX 9Lswcnek5nM+IOj+ybeCAx0IzlBOrRHtK8Wy3EvV9F5HvQQfM9H3Kgpp62t98XZQ 2Zt9q9sduzLwb7uAmQM2eLzGUd9bDC7jCR35AIBPRISwATrlygQ5sULJ26vvXv83 H9po92LNfZOoGCf8Vk6rtEWJRvIuONMph6Z5nl+JUCr6A4KsjCTIgI+sswA3GmL2 b6P/nnqMlm9eJZ0MqA4ymOEjlfXurk7yIWM7jqX8jNcLFqOvBd4EFduf+IR7wsHx gOJmsZGZKiEPPsjvJ7CwZ8YNzYcoKhXFT7Soj/dCdOam7LG4W7oR6pLyeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEiGbEnvDA+OI1KfneIJWixntDHgMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvU0lac1NlOE1ENDRqVXAtZDRnbGFMR2UwTWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufIUMA0G CSqGSIb3DQEBCwUAA4IBAQASrP/sAnoA75HMGtRzkLTL60wpU5DelK5nHv2gLiPP EGJgTsAuWO8A5icHolhGAHqqeOUx/q54MN0OWOrXDNGK+ruUKnq62eoQAtd3MNLY iG2el0VIvW9evKvY2DAyiOZAuk/0h4xDd1tT5Nd6h3LD1iqL2IEdpYJvz2Ij7tWu Au1/D+IrV+bb7olFsXbRzqKzIcVkSXgYjHZcRp/827Voy0so+yXF/Vcw/0ARXhUq nNsS7Hv0u9O0fH97AO5cuGCwWVeA26ABLDGaW1Rb/d/Nm/G4Y3mc3G8ddYps7L+m Kc80oAZCbm87g74/2g5lGJUUuscx/hvcVSRAQll1S5LO -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:21 2026 by rpki-client