This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/t48mXkmHCqZPmvOXE_EaAv0d4IU.roa File: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (raw, json) Hash identifier: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w= Subject key identifier: B7:8F:26:5E:49:87:0A:A6:4F:9A:F3:97:13:F1:1A:02:FD:1D:E0:85 Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EB3016C821A76A50EF4FC9448CAC Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/t48mXkmHCqZPmvOXE_EaAv0d4IU.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23655 IP address blocks: 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:30:16:c8:21:a7:6a:50:ef:4f:c9:44:8c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b78f265e49870aa64f9af39713f11a02fd1de085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:b9:34:2d:8f:f5:f9:32:04:75:54:7c:46: 7c:5f:99:85:7f:5f:af:cd:f7:45:8f:dd:fe:6f:79: ea:9c:1d:39:02:3a:e9:48:31:9d:d7:47:92:0a:a9: 27:59:61:d6:2f:fc:91:56:fe:39:7b:77:68:f5:6d: 0e:68:4c:d8:d5:6e:1c:36:e3:8e:9f:a3:e0:15:52: bb:e2:3d:6b:a3:b9:18:9d:59:91:75:a3:fa:42:96: 03:9a:41:fa:c6:86:27:c4:fa:c2:d3:da:81:04:e9: 40:ed:8d:12:86:73:e2:1c:e8:03:14:ea:79:c8:73: eb:01:18:ea:0e:e8:36:5c:c2:67:6a:37:83:cf:a9: fb:ac:1e:cd:c0:44:ed:e0:d0:e5:a0:7b:26:0c:cc: 74:b8:1b:3c:c2:81:ae:21:bd:36:c2:da:e1:fd:27: ed:8c:14:4d:ef:2c:4d:99:6b:ca:a2:40:dd:dc:1c: e8:dc:ae:32:07:df:45:d2:cd:d1:48:62:6c:fb:85: f5:1d:d7:3d:0d:1c:be:ee:b7:3c:b9:6e:bf:a1:25: ec:f3:bf:0c:a1:c9:56:da:50:82:c3:16:2b:7a:ec: 9e:3a:f4:2c:44:fa:5c:25:b2:9f:ca:de:34:79:7d: 6a:a2:dd:55:88:d9:b7:e8:62:5c:2c:29:c4:f2:89: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:26:5E:49:87:0A:A6:4F:9A:F3:97:13:F1:1A:02:FD:1D:E0:85 X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/t48mXkmHCqZPmvOXE_EaAv0d4IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/23 Signature Algorithm: sha256WithRSAEncryption 89:2a:79:2a:33:fa:f6:c3:44:d6:35:d0:c2:ed:ed:9d:a7:24: cf:6f:6e:14:6b:a5:73:f9:d5:8b:77:55:7b:49:d8:c2:10:b5: c1:be:20:43:62:c7:fc:ea:e2:01:76:ea:c1:59:48:3e:cc:c1: c8:e9:4e:2e:05:75:84:72:e0:76:e9:58:a0:7b:1d:7c:80:f2: 84:40:5c:82:c7:d7:b8:f7:d7:30:ee:58:ef:3d:91:73:58:90: 1d:1d:7a:f3:cf:0e:51:7c:d4:d3:01:2d:a6:d1:eb:af:04:7b: fe:81:2c:4d:6b:f0:d6:9a:4a:21:9a:36:77:43:bd:b0:4a:01: a9:d9:ff:7d:65:db:dc:ab:0f:b9:6b:44:f4:6f:c0:cb:34:12: 0c:6e:16:8f:ca:51:1d:a6:5d:35:1e:59:ed:fd:22:f7:e6:87: e4:fe:9d:4b:7f:e7:9d:9c:bc:6f:23:c6:19:45:67:0b:19:c6: 31:32:3d:69:66:b4:94:58:f3:ee:c5:57:71:6f:f4:c0:e8:c7: 72:f8:c8:6d:42:76:a6:38:54:cd:24:a5:c4:5f:b3:cf:ec:52: 2c:28:88:21:e9:39:89:82:39:f1:93:a4:30:9d:6a:b3:30:76: 07:ce:d0:de:12:c3:d9:80:14:71:39:30:32:7c:78:b5:3d:71: ee:f3:9d:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOswFsghp2pQ70/JRIysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzhmMjY1ZTQ5ODcwYWE2NGY5YWYzOTcxM2YxMWEwMmZkMWRlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb25NC2P9fkyBHVUfEZ8X5mFf1+v zfdFj93+b3nqnB05AjrpSDGd10eSCqknWWHWL/yRVv45e3do9W0OaEzY1W4cNuOO n6PgFVK74j1ro7kYnVmRdaP6QpYDmkH6xoYnxPrC09qBBOlA7Y0ShnPiHOgDFOp5 yHPrARjqDug2XMJnajeDz6n7rB7NwETt4NDloHsmDMx0uBs8woGuIb02wtrh/Sft jBRN7yxNmWvKokDd3Bzo3K4yB99F0s3RSGJs+4X1Hdc9DRy+7rc8uW6/oSXs878M oclW2lCCwxYreuyeOvQsRPpcJbKfyt40eX1qot1ViNm36GJcLCnE8okLwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLePJl5JhwqmT5rzlxPxGgL9HeCFMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvdDQ4bVhrbUhDcVpQbXZPWEVfRWFBdjBkNElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUfkMA0G CSqGSIb3DQEBCwUAA4IBAQCJKnkqM/r2w0TWNdDC7e2dpyTPb24Ua6Vz+dWLd1V7 SdjCELXBviBDYsf86uIBdurBWUg+zMHI6U4uBXWEcuB26Vigex18gPKEQFyCx9e4 99cw7ljvPZFzWJAdHXrzzw5RfNTTAS2m0euvBHv+gSxNa/DWmkohmjZ3Q72wSgGp 2f99Zdvcqw+5a0T0b8DLNBIMbhaPylEdpl01Hlnt/SL35ofk/p1Lf+ednLxvI8YZ RWcLGcYxMj1pZrSUWPPuxVdxb/TA6Mdy+MhtQnamOFTNJKXEX7PP7FIsKIgh6TmJ gjnxk6QwnWqzMHYHztDeEsPZgBRxOTAyfHi1PXHu853C -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:41 2026 by rpki-client