This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CswGKxkqLF2K56RMZcAVfe9a0EU.roa File: CswGKxkqLF2K56RMZcAVfe9a0EU.roa (raw, json) Hash identifier: hewKf3yw07raHqllDTQ2zpeQ/c61PGbRWAmkSyR4Mm4= Subject key identifier: 0A:CC:06:2B:19:2A:2C:5D:8A:E7:A4:4C:65:C0:15:7D:EF:5A:D0:45 Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Certificate serial: 019B77C71E4B6211D58EF3D65776ED8E670A Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CswGKxkqLF2K56RMZcAVfe9a0EU.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62095 IP address blocks: 185.48.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:4b:62:11:d5:8e:f3:d6:57:76:ed:8e:67:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0acc062b192a2c5d8ae7a44c65c0157def5ad045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:a0:df:1d:ec:09:ef:c4:87:a9:fc:be:ae: 99:a1:70:98:73:8b:00:89:29:aa:e8:cd:2f:8f:6e: d4:aa:7d:d3:90:c5:da:9e:72:78:42:0c:df:52:79: e9:b2:35:c8:b1:76:49:d0:78:8b:74:fa:4c:79:6f: bd:b6:05:d5:63:04:d6:5e:80:09:2d:ed:71:bd:13: ad:2c:f1:89:a8:5c:44:07:67:6f:d2:d3:11:07:27: ca:75:d7:c7:37:d2:da:fb:65:59:17:ec:1e:d9:9b: fd:51:f7:cd:c1:cc:01:dd:40:34:09:ac:b8:97:d2: e5:2d:5e:22:06:8b:50:bd:fa:56:5c:96:2c:f5:2a: 5a:e4:26:e2:02:c1:be:c1:c7:0f:20:03:90:14:86: b1:f0:10:c1:cb:41:23:d7:39:e9:5b:30:7e:46:65: 0b:07:3b:c2:2a:07:86:53:69:19:cb:62:84:1d:2e: 84:8f:f1:9a:83:be:6e:18:85:ae:2b:12:b2:0d:35: 2f:0a:4f:69:a5:60:0b:d3:d9:67:47:03:6c:2e:f0: d0:f4:07:88:a7:26:8c:ad:70:37:44:b1:2b:4d:c6: ad:75:e9:71:0b:98:5b:4a:91:30:ef:8e:5f:7a:42: e6:7f:92:20:83:6c:04:78:39:ff:49:d8:c5:2a:a3: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CC:06:2B:19:2A:2C:5D:8A:E7:A4:4C:65:C0:15:7D:EF:5A:D0:45 X509v3 Authority Key Identifier: keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/CswGKxkqLF2K56RMZcAVfe9a0EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.24.0/24 Signature Algorithm: sha256WithRSAEncryption b4:8d:69:c3:ef:c5:39:2d:94:52:c9:c6:13:80:a7:db:9c:98: 60:36:08:d0:3d:af:12:18:6d:23:93:ed:26:aa:c7:b1:89:28: 3b:9b:49:80:0c:ac:e7:ed:36:97:41:c1:99:92:92:a0:7d:9b: 69:55:6f:06:e1:1c:1b:b1:56:1c:d0:0f:6d:30:93:f2:db:fe: d3:61:c5:30:ea:58:02:2f:72:12:ff:40:46:c3:25:e2:4e:0e: 54:c4:1c:30:a4:20:f6:d9:4d:b0:f5:80:94:87:5d:f8:8b:fa: 66:ff:82:25:70:12:50:af:01:73:91:18:2a:d1:67:9c:30:5c: 12:b1:7c:be:b2:8e:1f:c9:43:c2:e8:23:6e:63:ec:7e:f1:87: 06:0b:db:75:3c:e1:45:e8:3f:a8:36:10:28:98:4a:6b:98:a3: 18:55:bf:b6:4c:2e:04:d7:18:a9:5e:5c:e2:f7:a5:5a:81:47: 5a:fc:95:4a:76:c2:80:f6:3a:8e:b3:c1:31:26:08:ec:38:b6: af:4b:5a:91:88:4f:6b:9b:c4:7a:71:76:20:8d:13:52:17:65: c9:46:70:75:44:d1:75:14:72:2b:73:7c:b6:8b:91:6f:4c:d2: e8:fa:66:65:48:bd:20:26:62:85:46:1e:cd:9e:91:31:ae:9c: e3:3f:03:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx5LYhHVjvPWV3btjmcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk OGM4OGQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNjMDYyYjE5MmEyYzVkOGFlN2E0NGM2NWMwMTU3ZGVmNWFkMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDOg3x3sCe/Eh6n8vq6ZoXCYc4sA iSmq6M0vj27Uqn3TkMXannJ4QgzfUnnpsjXIsXZJ0HiLdPpMeW+9tgXVYwTWXoAJ Le1xvROtLPGJqFxEB2dv0tMRByfKddfHN9La+2VZF+we2Zv9UffNwcwB3UA0Cay4 l9LlLV4iBotQvfpWXJYs9Spa5CbiAsG+wccPIAOQFIax8BDBy0Ej1znpWzB+RmUL BzvCKgeGU2kZy2KEHS6Ej/Gag75uGIWuKxKyDTUvCk9ppWAL09lnRwNsLvDQ9AeI pyaMrXA3RLErTcatdelxC5hbSpEw745fekLmf5Igg2wEeDn/SdjFKqNZkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFArMBisZKixdiuekTGXAFX3vWtBFMB8GA1UdIwQY MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt ODM4NmU3MGJkYzU4LzEvQ3N3R0t4a3FMRjJLNTZSTVpjQVZmZTlhMEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4 LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAYMA0G CSqGSIb3DQEBCwUAA4IBAQC0jWnD78U5LZRSycYTgKfbnJhgNgjQPa8SGG0jk+0m qsexiSg7m0mADKzn7TaXQcGZkpKgfZtpVW8G4RwbsVYc0A9tMJPy2/7TYcUw6lgC L3IS/0BGwyXiTg5UxBwwpCD22U2w9YCUh134i/pm/4IlcBJQrwFzkRgq0WecMFwS sXy+so4fyUPC6CNuY+x+8YcGC9t1POFF6D+oNhAomEprmKMYVb+2TC4E1xipXlzi 96VagUda/JVKdsKA9jqOs8ExJgjsOLavS1qRiE9rm8R6cXYgjRNSF2XJRnB1RNF1 FHIrc3y2i5FvTNLo+mZlSL0gJmKFRh7NnpExrpzjPwPX -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:46 2026 by rpki-client