This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa File: rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa (raw, json) Hash identifier: YE/iZ6y3DFs2Aj9gfYd2A/ANh76BH41kT6FkdNGSzDE= Subject key identifier: AC:E9:F8:B0:85:87:B7:AA:C2:50:DB:8B:C6:83:6F:8F:E5:F9:11:B7 Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019B7CECC1043DC582CF11DF0D094785AD71 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57037 IP address blocks: 146.247.96.0/19 maxlen: 24 2a01:b180::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c1:04:3d:c5:82:cf:11:df:0d:09:47:85:ad:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ace9f8b08587b7aac250db8bc6836f8fe5f911b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:7e:a4:c1:20:3b:7d:de:f7:51:7c:32:e3: 75:88:b6:40:b2:af:b9:67:bd:f2:88:b0:40:8d:07: 3b:c6:ec:f2:ee:d3:c4:83:cc:76:e0:ca:47:0c:2b: 71:e3:96:e5:ad:84:c1:6f:48:5e:ca:73:76:a7:ed: 91:6f:86:aa:22:75:10:fc:02:59:15:a2:5a:56:87: 6e:c6:d7:45:38:8c:50:59:33:40:f0:f6:09:9f:4a: ee:3e:1e:82:81:4a:da:63:38:cc:8e:5e:db:f7:57: 5c:f5:12:9f:a4:43:94:42:a8:15:e6:f3:8a:61:ec: 42:1b:60:93:b6:b0:0a:87:2e:26:f3:f9:86:41:f8: 54:6e:a5:1b:73:24:b7:2f:ad:67:4d:d1:ed:43:23: 45:de:49:45:8d:a3:2c:00:4d:e5:66:da:7d:fb:13: c3:04:8b:d9:5c:9b:f3:7e:be:36:e2:a4:b4:8d:2a: f8:c2:0a:c6:5c:45:71:ad:2c:0c:84:60:8c:72:8a: cc:04:0c:5e:40:83:73:32:d9:98:56:d8:1c:33:ef: 33:03:13:a1:f4:25:bc:37:a2:25:57:46:7e:aa:43: a2:36:a9:be:ba:c3:03:d1:26:71:71:e2:dc:1f:35: de:f1:88:18:05:23:13:17:01:ed:c4:b7:d6:e9:1a: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E9:F8:B0:85:87:B7:AA:C2:50:DB:8B:C6:83:6F:8F:E5:F9:11:B7 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rOn4sIWHt6rCUNuLxoNvj-X5Ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.96.0/19 IPv6: 2a01:b180::/29 Signature Algorithm: sha256WithRSAEncryption 06:31:96:2d:ba:fe:64:36:82:a3:7f:71:79:b6:06:7b:f8:3a: 41:b4:c6:2f:a3:29:89:33:b6:93:eb:53:e3:34:a6:a3:b0:a1: ed:ff:2d:82:f4:0c:ba:5b:80:0d:31:95:1b:af:18:21:22:ae: 45:a0:9f:fb:59:e8:f3:dc:32:2e:c8:a1:5e:de:db:a2:db:29: 60:45:36:6e:ad:37:c2:4d:da:cd:2d:33:a9:3b:e6:bf:fc:92: e8:4e:6b:7e:1b:08:ca:ec:c4:a8:d2:2b:b5:0b:b4:9d:2d:fc: 24:8a:30:0a:6b:4f:ce:0e:9c:a1:02:9f:02:2d:98:f5:82:86: 91:9d:66:48:33:34:38:1a:12:d2:c3:67:35:b4:af:b2:c0:fd: d3:90:c6:0b:d8:44:4d:56:0a:a2:31:00:00:b4:4b:c5:17:50: 2e:18:54:39:12:5b:0a:b9:b5:63:50:27:d0:58:e1:f2:2d:0e: a6:fd:a6:6a:0c:19:46:70:98:28:a3:c2:fd:fb:c8:57:af:34: 4f:0f:7a:ad:9e:64:13:d2:a8:ef:42:b7:4d:bd:4e:69:6b:ec: b0:64:a4:24:f3:50:0c:1c:65:a5:49:df:02:68:c6:a2:42:e8: c2:6f:2d:ef:14:92:76:f6:ee:35:d9:26:58:6a:09:c2:14:a1: 74:f8:43:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87MEEPcWCzxHfDQlHha1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2U5ZjhiMDg1ODdiN2FhYzI1MGRiOGJjNjgzNmY4ZmU1ZjkxMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3N+pMEgO33e91F8MuN1iLZAsq+5 Z73yiLBAjQc7xuzy7tPEg8x24MpHDCtx45blrYTBb0heynN2p+2Rb4aqInUQ/AJZ FaJaVoduxtdFOIxQWTNA8PYJn0ruPh6CgUraYzjMjl7b91dc9RKfpEOUQqgV5vOK YexCG2CTtrAKhy4m8/mGQfhUbqUbcyS3L61nTdHtQyNF3klFjaMsAE3lZtp9+xPD BIvZXJvzfr424qS0jSr4wgrGXEVxrSwMhGCMcorMBAxeQINzMtmYVtgcM+8zAxOh 9CW8N6IlV0Z+qkOiNqm+usMD0SZxceLcHzXe8YgYBSMTFwHtxLfW6RoM0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKzp+LCFh7eqwlDbi8aDb4/l+RG3MB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvck9uNHNJV0h0NnJDVU51THhvTnZqLVg1RWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFkvdgMA0E AgACMAcDBQMqAbGAMA0GCSqGSIb3DQEBCwUAA4IBAQAGMZYtuv5kNoKjf3F5tgZ7 +DpBtMYvoymJM7aT61PjNKajsKHt/y2C9Ay6W4ANMZUbrxghIq5FoJ/7Wejz3DIu yKFe3tui2ylgRTZurTfCTdrNLTOpO+a//JLoTmt+GwjK7MSo0iu1C7SdLfwkijAK a0/ODpyhAp8CLZj1goaRnWZIMzQ4GhLSw2c1tK+ywP3TkMYL2ERNVgqiMQAAtEvF F1AuGFQ5ElsKubVjUCfQWOHyLQ6m/aZqDBlGcJgoo8L9+8hXrzRPD3qtnmQT0qjv QrdNvU5pa+ywZKQk81AMHGWlSd8CaMaiQujCby3vFJJ29u412SZYagnCFKF0+ENL -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:11 2026 by rpki-client