This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/T5FYecDL9dYudSF4znOqL3xO-3I.roa File: T5FYecDL9dYudSF4znOqL3xO-3I.roa (raw, json) Hash identifier: tGYqIZRK3jsFGjXl9JsU630t/v5iPjAOq7gYJouPhLY= Subject key identifier: 4F:91:58:79:C0:CB:F5:D6:2E:75:21:78:CE:73:AA:2F:7C:4E:FB:72 Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019B7DC988F91D1FDA6DA0C3EA9CFFDDB02F Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/T5FYecDL9dYudSF4znOqL3xO-3I.roa Signing time: Fri 02 Jan 2026 08:18:38 +0000 ROA not before: Fri 02 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30742 IP address blocks: 185.48.220.0/22 maxlen: 22 2a01:9ba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:88:f9:1d:1f:da:6d:a0:c3:ea:9c:ff:dd:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Jan 2 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f915879c0cbf5d62e752178ce73aa2f7c4efb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:cf:d8:91:1f:be:3e:aa:af:fd:ee:a8:ba: aa:7a:ed:81:45:60:a2:a2:4c:e3:2c:24:84:3e:7c: 84:87:b8:14:6c:ba:8e:02:5d:38:3d:fb:ab:b7:01: 23:56:0c:a2:f7:7d:c4:18:cc:10:09:33:73:1c:a8: 8a:d9:03:ea:fc:74:b5:31:3b:35:3f:77:00:46:a5: 53:95:cc:59:cc:00:1c:da:f0:15:49:fb:30:13:21: 58:5f:b7:df:bf:bc:5a:c6:ad:6b:6d:ed:e9:92:e1: cd:19:ac:0f:77:25:6b:d9:7a:c7:13:86:28:e1:6e: 59:89:ef:58:67:7f:ae:95:f9:70:e4:5c:b6:79:0a: 1d:38:68:6c:2f:7d:0f:98:5c:6b:a9:11:2b:6c:ee: 24:df:74:f5:4c:9a:1a:0e:02:c7:b5:04:9a:f0:a7: 2c:e3:48:50:b5:f1:92:75:05:04:ad:a4:30:85:00: f3:c1:38:29:dd:d4:37:f5:b2:83:e1:a4:80:38:4b: e0:1e:60:63:ee:dd:32:be:01:16:5a:c4:f2:ad:7d: 25:32:9d:71:50:d7:98:1f:f3:82:3a:0e:5c:47:fd: 81:b7:69:62:cb:13:3f:23:41:4b:da:28:f6:09:31: 9a:51:b0:a6:d1:9f:ce:aa:df:1c:c1:52:30:e4:37: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:91:58:79:C0:CB:F5:D6:2E:75:21:78:CE:73:AA:2F:7C:4E:FB:72 X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/T5FYecDL9dYudSF4znOqL3xO-3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.220.0/22 IPv6: 2a01:9ba0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:94:7b:57:e8:32:3a:73:31:c0:4b:a2:c2:44:c1:19:55:4c: 85:80:b3:e2:a9:1f:1e:1b:5b:76:df:67:ab:11:78:54:06:87: 25:97:23:02:d8:00:ca:27:d8:fa:3a:c6:3e:9d:7c:94:7f:8d: ec:ca:c5:7f:16:52:56:51:ba:3d:be:a0:80:f2:0f:d4:28:24: f1:09:10:00:16:95:30:de:3b:15:9f:18:f8:32:4c:10:bb:b9: 0d:04:15:76:06:e5:5a:4e:cb:ef:28:c2:8d:d9:a1:4d:68:5c: 8a:34:5e:2e:5c:8e:d3:aa:63:9e:a2:4b:a4:98:7c:96:b3:7e: ff:22:44:78:93:9a:0f:6b:8a:2f:54:88:67:97:bb:15:eb:76: 15:fb:48:49:7a:4f:bc:7e:ab:53:58:58:22:02:56:53:8d:7b: 1f:67:0b:5b:e0:d0:37:35:b4:d2:43:14:d3:7a:b0:13:70:5e: 1e:43:61:11:ed:04:f1:c6:93:b6:9e:ec:44:28:35:be:25:a5: 38:f6:8a:88:07:41:4a:65:33:d4:29:d7:fe:6e:9e:8b:5f:83: b0:36:fb:18:f7:42:39:ab:ed:10:bb:2a:b0:36:f9:60:b5:95: c7:47:07:09:67:da:3f:45:7a:08:c8:ce:bc:d8:53:8b:d2:44: 9d:0c:4f:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yYj5HR/abaDD6pz/3bAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjYwMTAyMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjkxNTg3OWMwY2JmNWQ2MmU3NTIxNzhjZTczYWEyZjdjNGVmYjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskjP2JEfvj6qr/3uqLqqeu2BRWCi okzjLCSEPnyEh7gUbLqOAl04PfurtwEjVgyi933EGMwQCTNzHKiK2QPq/HS1MTs1 P3cARqVTlcxZzAAc2vAVSfswEyFYX7ffv7xaxq1rbe3pkuHNGawPdyVr2XrHE4Yo 4W5Zie9YZ3+ulflw5Fy2eQodOGhsL30PmFxrqRErbO4k33T1TJoaDgLHtQSa8Kcs 40hQtfGSdQUEraQwhQDzwTgp3dQ39bKD4aSAOEvgHmBj7t0yvgEWWsTyrX0lMp1x UNeYH/OCOg5cR/2Bt2liyxM/I0FL2ij2CTGaUbCm0Z/Oqt8cwVIw5De2RwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE+RWHnAy/XWLnUheM5zqi98TvtyMB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvVDVGWWVjREw5ZFl1ZFNGNHpuT3FMM3hPLTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTDcMA0E AgACMAcDBQAqAZugMA0GCSqGSIb3DQEBCwUAA4IBAQANlHtX6DI6czHAS6LCRMEZ VUyFgLPiqR8eG1t232erEXhUBocllyMC2ADKJ9j6OsY+nXyUf43sysV/FlJWUbo9 vqCA8g/UKCTxCRAAFpUw3jsVnxj4MkwQu7kNBBV2BuVaTsvvKMKN2aFNaFyKNF4u XI7TqmOeokukmHyWs37/IkR4k5oPa4ovVIhnl7sV63YV+0hJek+8fqtTWFgiAlZT jXsfZwtb4NA3NbTSQxTTerATcF4eQ2ER7QTxxpO2nuxEKDW+JaU49oqIB0FKZTPU Kdf+bp6LX4OwNvsY90I5q+0QuyqwNvlgtZXHRwcJZ9o/RXoIyM682FOL0kSdDE8q -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:50 2026 by rpki-client