This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/T_p7BFSEu2MaqBtsnhljtCR6GqY.roa File: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (raw, json) Hash identifier: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0= Subject key identifier: 4F:FA:7B:04:54:84:BB:63:1A:A8:1B:6C:9E:19:63:B4:24:7A:1A:A6 Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b Certificate serial: 019B7C7F2EA36D4F737EB80E5CC1876325FC Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/T_p7BFSEu2MaqBtsnhljtCR6GqY.roa Signing time: Fri 02 Jan 2026 02:17:48 +0000 ROA not before: Fri 02 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.113.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2e:a3:6d:4f:73:7e:b8:0e:5c:c1:87:63:25:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b Validity Not Before: Jan 2 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ffa7b045484bb631aa81b6c9e1963b4247a1aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:1d:1d:33:3d:97:12:fe:44:34:ec:2a:17: 9e:08:31:dd:82:3c:4b:0b:f8:c4:62:b0:7e:51:d8: 9f:f9:72:b9:35:59:b9:e0:37:a3:ce:76:b4:66:ff: 73:91:16:4d:a8:03:5c:b2:48:c5:56:83:a4:3a:7b: 96:52:50:70:ad:26:00:3b:63:6f:77:84:23:80:47: fb:d1:a6:7b:1c:3a:12:86:6d:ef:43:70:28:1c:45: 9f:ba:b9:96:54:e5:95:69:a2:21:d9:09:63:37:e8: 0a:b0:aa:a3:d2:31:36:d6:30:63:8a:d7:4e:22:92: f8:5a:89:41:b5:56:30:60:42:ce:37:73:e2:4e:d6: d5:09:26:e8:e9:ae:9d:df:91:8b:91:b3:4c:d1:4c: 69:c4:1f:f2:f6:20:2b:c3:54:3f:36:77:18:c4:5b: f7:b7:02:e5:84:bc:9a:25:80:2a:6c:93:c7:dc:1e: 3a:f1:f5:33:8e:8e:09:20:4d:95:bb:dd:c8:bf:01: ec:d6:bc:bc:99:98:0b:82:8c:e3:67:c1:c5:4e:8d: af:8a:f7:07:93:b5:2d:f3:1a:55:bc:23:7d:3c:a0: 01:30:44:17:83:b3:64:95:05:ae:a4:e3:61:65:c5: ac:fc:7e:45:a3:2a:db:c2:e8:5e:65:b5:26:28:cd: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FA:7B:04:54:84:BB:63:1A:A8:1B:6C:9E:19:63:B4:24:7A:1A:A6 X509v3 Authority Key Identifier: keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/T_p7BFSEu2MaqBtsnhljtCR6GqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.248.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d4:e8:4d:05:cd:36:26:ae:5e:74:83:c5:35:10:b7:5c:9e: b9:74:e2:ad:d8:0f:61:5d:d8:e4:12:61:7e:68:e6:f1:26:68: b6:2c:3b:f5:09:14:55:45:f7:fb:4f:62:6d:b3:f6:e9:10:1f: 08:1f:6d:81:5f:c0:5b:fe:1c:11:e2:39:0c:6b:c9:d4:5f:08: 0d:90:a9:93:36:d3:da:6c:19:00:08:37:ce:e5:05:b6:61:03: bb:9c:9d:05:ef:51:17:f7:72:2e:52:2e:81:62:76:cc:70:e6: 9f:76:0f:6c:72:d8:bf:b7:76:86:74:4c:8e:09:a2:97:fe:d6: 40:51:e9:78:4a:a1:6f:17:b8:4e:a1:e8:c9:57:47:a0:e8:0e: aa:6c:bd:8b:15:66:7b:91:c5:44:79:53:66:08:0d:68:98:ec: c3:4c:dc:ad:bd:ee:22:92:aa:8f:5e:63:e7:39:c7:6b:84:3c: a9:2e:a8:09:0a:b9:8d:ff:42:8d:bb:ab:7c:45:ae:fd:bb:95: 0d:a8:e3:4e:ad:c5:42:a1:fe:3e:f9:ac:c3:bc:d4:ac:33:bb: 41:78:a8:ca:c5:d8:7e:56:9a:64:d3:b2:d4:f3:33:e6:de:3a: dc:7a:d3:16:6a:76:8a:de:c0:72:aa:46:99:88:93:c5:ed:42: 4c:82:b0:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fy6jbU9zfrgOXMGHYyX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl ZTc2N2IwHhcNMjYwMTAyMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmZhN2IwNDU0ODRiYjYzMWFhODFiNmM5ZTE5NjNiNDI0N2ExYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAodHTM9lxL+RDTsKheeCDHdgjxL C/jEYrB+Udif+XK5NVm54Dejzna0Zv9zkRZNqANcskjFVoOkOnuWUlBwrSYAO2Nv d4QjgEf70aZ7HDoShm3vQ3AoHEWfurmWVOWVaaIh2QljN+gKsKqj0jE21jBjitdO IpL4WolBtVYwYELON3PiTtbVCSbo6a6d35GLkbNM0UxpxB/y9iArw1Q/NncYxFv3 twLlhLyaJYAqbJPH3B468fUzjo4JIE2Vu93IvwHs1ry8mZgLgozjZ8HFTo2vivcH k7Ut8xpVvCN9PKABMEQXg7NklQWupONhZcWs/H5FoyrbwuheZbUmKM34cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/6ewRUhLtjGqgbbJ4ZY7QkehqmMB8GA1UdIwQY MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct ZjQ2OGVlMzMxNDc0LzEvVF9wN0JGU0V1Mk1hcUJ0c25obGp0Q1I2R3FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0 LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXH4MA0G CSqGSIb3DQEBCwUAA4IBAQBY1OhNBc02Jq5edIPFNRC3XJ65dOKt2A9hXdjkEmF+ aObxJmi2LDv1CRRVRff7T2Jts/bpEB8IH22BX8Bb/hwR4jkMa8nUXwgNkKmTNtPa bBkACDfO5QW2YQO7nJ0F71EX93IuUi6BYnbMcOafdg9scti/t3aGdEyOCaKX/tZA Uel4SqFvF7hOoejJV0eg6A6qbL2LFWZ7kcVEeVNmCA1omOzDTNytve4ikqqPXmPn OcdrhDypLqgJCrmN/0KNu6t8Ra79u5UNqONOrcVCof4++azDvNSsM7tBeKjKxdh+ Vppk07LU8zPm3jrcetMWanaK3sByqkaZiJPF7UJMgrCe -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:58 2026 by rpki-client