This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/B0MLkq51N2DB1BgdY1eQ56es0fs.roa File: B0MLkq51N2DB1BgdY1eQ56es0fs.roa (raw, json) Hash identifier: V/PvhApArnjFZZY5kt89Eh8Mg1SnorBBms+yQHl9/1Y= Subject key identifier: 07:43:0B:92:AE:75:37:60:C1:D4:18:1D:63:57:90:E7:A7:AC:D1:FB Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Certificate serial: 019B7D5CAFFFDF30CDFE1C8E042322F920C3 Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/B0MLkq51N2DB1BgdY1eQ56es0fs.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 185.238.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:af:ff:df:30:cd:fe:1c:8e:04:23:22:f9:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07430b92ae753760c1d4181d635790e7a7acd1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:33:e3:29:63:13:2e:34:81:0c:da:e5:92: ac:a5:5b:31:94:24:bd:c6:af:d2:60:fd:2d:56:25: 0b:74:f4:90:75:08:a9:a5:6d:89:63:9e:fb:d4:04: 97:46:9b:3b:31:4e:91:48:64:b4:c2:9e:ae:ef:e2: c7:b4:8d:f9:a9:67:3b:a1:27:3d:4c:5a:41:89:8d: a1:66:53:3f:3f:39:35:bc:ce:74:f7:a2:aa:dd:e6: 6c:d6:97:a5:ad:24:5b:cd:6d:4a:1f:ef:cb:a6:e0: 4c:5a:8d:5b:b3:13:86:a6:f2:a8:26:c0:0b:5f:41: b2:87:92:18:4c:03:17:8c:26:5e:6a:40:20:78:e4: b5:97:06:e1:63:3b:9d:ec:4a:dd:b4:cc:1c:05:1c: 81:f9:10:69:ed:c1:08:4a:67:16:73:5b:3e:aa:62: 0d:41:dd:07:58:0c:ff:9a:92:97:b5:70:9e:0c:77: 87:25:01:91:41:4e:89:3a:b2:7c:95:3d:fe:90:75: 1b:b8:55:4f:cb:96:b5:7d:db:9c:7c:f4:77:15:f6: 39:ee:1b:5e:6a:43:b0:b2:c6:16:5d:47:83:2c:6f: f5:83:65:96:f6:02:2a:4c:99:5c:8b:c0:11:59:1c: a7:dd:73:00:87:52:05:66:93:8c:9d:64:17:62:7c: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:0B:92:AE:75:37:60:C1:D4:18:1D:63:57:90:E7:A7:AC:D1:FB X509v3 Authority Key Identifier: keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/B0MLkq51N2DB1BgdY1eQ56es0fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:e8:5f:15:49:e6:0e:96:ea:44:9b:4e:b4:44:ff:c2:e0:08: 30:90:02:a7:e2:0b:5d:8f:7d:c1:db:32:24:40:19:00:63:ce: fe:bc:ac:5f:8e:76:56:86:90:75:ed:53:f8:2c:a6:5c:01:52: f3:a4:4d:ee:dd:6b:ce:b4:8e:ba:59:82:5f:c2:78:dc:ca:7d: 99:6d:f3:7b:6f:f7:cf:14:81:e3:7b:8d:9d:a4:f6:0f:c6:0e: 3c:4e:2d:9e:87:a7:21:10:5f:b4:c0:e3:91:52:2b:f4:2c:e4: ec:28:88:5c:c9:56:92:7b:21:b0:51:60:84:05:5e:fc:50:5d: 6d:49:04:a5:28:0e:8e:03:d9:a3:d5:9e:5b:a7:83:61:e5:2e: f5:33:b5:ef:43:07:1c:9b:0a:4d:46:e6:59:47:2c:af:a3:67: b1:f7:9c:0f:da:ad:86:c2:ab:e4:69:ab:5c:20:22:4c:c1:f0: 25:69:44:f2:77:4d:30:72:ad:72:31:81:d9:96:57:33:0b:cd: bb:0f:05:d2:93:f7:0d:04:0b:44:24:57:34:2d:29:4d:f3:70: c9:7b:cc:7b:2b:06:bd:cb:92:3e:22:b8:b6:b3:8c:5b:fb:b1: 92:37:c2:e9:e4:28:ed:66:ed:f5:87:01:d4:c7:05:7e:0d:77: 88:ae:4f:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XK//3zDN/hyOBCMi+SDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDBhODRiYWIzZGVmNDFkNmFhYTkwMjhkZTdhNDc1ZDMy ZDEyYmQwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzQzMGI5MmFlNzUzNzYwYzFkNDE4MWQ2MzU3OTBlN2E3YWNkMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwz4yljEy40gQza5ZKspVsxlCS9 xq/SYP0tViULdPSQdQippW2JY5771ASXRps7MU6RSGS0wp6u7+LHtI35qWc7oSc9 TFpBiY2hZlM/Pzk1vM5096Kq3eZs1pelrSRbzW1KH+/LpuBMWo1bsxOGpvKoJsAL X0Gyh5IYTAMXjCZeakAgeOS1lwbhYzud7ErdtMwcBRyB+RBp7cEISmcWc1s+qmIN Qd0HWAz/mpKXtXCeDHeHJQGRQU6JOrJ8lT3+kHUbuFVPy5a1fducfPR3FfY57hte akOwssYWXUeDLG/1g2WW9gIqTJlci8ARWRyn3XMAh1IFZpOMnWQXYnwswwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdDC5KudTdgwdQYHWNXkOenrNH7MB8GA1UdIwQY MBaAFOPQqEurPe9B1qqpAo3npHXTLRK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTkt MTBlYjhhZGZlYTdlLzEvQjBNTGtxNTFOMkRCMUJnZFkxZVE1NmVzMGZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTktMTBlYjhhZGZlYTdl LzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6NMA0G CSqGSIb3DQEBCwUAA4IBAQAO6F8VSeYOlupEm060RP/C4AgwkAKn4gtdj33B2zIk QBkAY87+vKxfjnZWhpB17VP4LKZcAVLzpE3u3WvOtI66WYJfwnjcyn2ZbfN7b/fP FIHje42dpPYPxg48Ti2eh6chEF+0wOORUiv0LOTsKIhcyVaSeyGwUWCEBV78UF1t SQSlKA6OA9mj1Z5bp4Nh5S71M7XvQwccmwpNRuZZRyyvo2ex95wP2q2Gwqvkaatc ICJMwfAlaUTyd00wcq1yMYHZllczC827DwXSk/cNBAtEJFc0LSlN83DJe8x7Kwa9 y5I+Iri2s4xb+7GSN8Lp5CjtZu31hwHUxwV+DXeIrk/6 -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:57 2026 by rpki-client