This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f48PcR1XWlYgaD7NiDKBqtpKXcs.roa File: f48PcR1XWlYgaD7NiDKBqtpKXcs.roa (raw, json) Hash identifier: 3mNj4UK6tKVdejoFLlTY96AsweRxLY9heSu4rIQB+YI= Subject key identifier: 7F:8F:0F:71:1D:57:5A:56:20:68:3E:CD:88:32:81:AA:DA:4A:5D:CB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A333A58DFACE9462C2A87A184F4E47 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f48PcR1XWlYgaD7NiDKBqtpKXcs.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207459 IP address blocks: 193.149.28.0/24 maxlen: 24 193.149.29.0/24 maxlen: 24 193.149.30.0/24 maxlen: 24 193.149.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:33:a5:8d:fa:ce:94:62:c2:a8:7a:18:4f:4e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f8f0f711d575a5620683ecd883281aada4a5dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:af:f6:d5:05:d5:9f:00:d7:ac:b5:d0:57: 41:1d:3b:c9:47:c6:3b:44:ee:22:96:d6:23:21:f9: 10:7a:1d:dc:f3:e6:cf:d1:fc:25:79:f6:ba:f1:7c: e2:94:44:9e:5b:a5:f8:0d:e6:ca:6a:2a:32:1c:3e: 09:f5:48:96:e0:99:6b:8e:63:4f:8c:09:9c:6b:69: c0:68:9e:6f:5e:e7:90:26:b9:d3:e6:e8:0b:84:d2: 78:02:d1:9d:ff:9b:c5:2e:c7:ce:dd:fb:de:a8:53: f8:ef:26:f3:19:5f:09:7e:46:1f:8a:ed:4e:03:15: 08:e7:44:df:7b:cb:52:7e:7a:56:97:47:30:f5:ef: 0b:4d:09:13:3e:1c:83:07:57:f5:4f:7b:8c:fd:55: 20:38:34:8b:32:f8:df:d5:ee:57:f2:aa:97:4d:a1: b5:16:c8:cf:87:d9:43:84:e2:a8:ba:6a:35:84:11: 52:e5:1d:51:07:16:f2:90:37:1e:d2:0c:2f:44:a1: 23:67:8a:bf:be:65:8c:c4:b8:88:92:d5:c6:a3:66: d7:e5:f5:1f:bb:df:2c:29:6e:37:46:06:35:ff:26: c7:e4:cf:2b:43:38:ea:b3:c6:cb:66:92:a2:9b:4d: 3e:23:01:3c:4b:79:e1:21:31:2f:92:f1:22:81:df: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:0F:71:1D:57:5A:56:20:68:3E:CD:88:32:81:AA:DA:4A:5D:CB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f48PcR1XWlYgaD7NiDKBqtpKXcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:cc:b9:de:c0:e5:c5:83:fb:44:c2:41:98:e1:10:b4:80:bb: e6:34:04:65:c6:cc:48:28:be:21:ad:35:40:bb:68:c9:98:e9: a7:8a:93:62:8a:83:91:25:9a:98:83:ee:da:5d:a9:b4:63:b0: 50:51:c7:e8:43:63:5a:14:ce:af:5a:fe:bf:83:e7:fe:2d:8b: c8:16:18:84:71:7a:54:86:cf:8d:8d:8f:dc:13:b4:fa:0d:8a: be:d5:67:ac:6b:ec:d2:6d:c5:f0:b9:8f:e0:fd:1c:2f:25:23: 62:e6:9a:b9:fe:5d:d8:10:e1:fd:a0:70:14:73:88:e8:ed:b7: 4c:82:ed:b5:17:44:85:bb:c9:bb:81:2f:0b:77:f9:53:92:0b: 32:89:f0:cb:ba:2d:a1:b9:dd:ed:52:28:59:0f:72:69:c9:23: f4:7f:81:dd:ae:f4:4f:4d:0d:4d:ea:f0:59:b4:55:ff:5c:2f: 59:01:aa:12:20:7c:0d:bd:d7:37:48:06:02:2c:4f:93:84:70: 3f:1d:dc:0a:17:8c:29:38:5e:17:80:b0:24:e3:f2:c8:1e:b0: 3d:6a:1c:65:90:f5:20:6f:55:d5:44:95:de:6e:84:63:00:1e: 52:2f:49:98:7c:09:39:93:79:69:dd:34:68:7b:35:ed:c3:e6: 0e:48:f9:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozOljfrOlGLCqHoYT05HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjhmMGY3MTFkNTc1YTU2MjA2ODNlY2Q4ODMyODFhYWRhNGE1ZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleqv9tUF1Z8A16y10FdBHTvJR8Y7 RO4iltYjIfkQeh3c8+bP0fwlefa68XzilESeW6X4DebKaioyHD4J9UiW4JlrjmNP jAmca2nAaJ5vXueQJrnT5ugLhNJ4AtGd/5vFLsfO3fveqFP47ybzGV8JfkYfiu1O AxUI50Tfe8tSfnpWl0cw9e8LTQkTPhyDB1f1T3uM/VUgODSLMvjf1e5X8qqXTaG1 FsjPh9lDhOKoumo1hBFS5R1RBxbykDce0gwvRKEjZ4q/vmWMxLiIktXGo2bX5fUf u98sKW43RgY1/ybH5M8rQzjqs8bLZpKim00+IwE8S3nhITEvkvEigd9qwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+PD3EdV1pWIGg+zYgygaraSl3LMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZjQ4UGNSMVhXbFlnYUQ3TmlES0JxdHBLWGNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZUcMA0G CSqGSIb3DQEBCwUAA4IBAQBuzLnewOXFg/tEwkGY4RC0gLvmNARlxsxIKL4hrTVA u2jJmOmnipNiioORJZqYg+7aXam0Y7BQUcfoQ2NaFM6vWv6/g+f+LYvIFhiEcXpU hs+NjY/cE7T6DYq+1Wesa+zSbcXwuY/g/RwvJSNi5pq5/l3YEOH9oHAUc4jo7bdM gu21F0SFu8m7gS8Ld/lTkgsyifDLui2hud3tUihZD3JpySP0f4HdrvRPTQ1N6vBZ tFX/XC9ZAaoSIHwNvdc3SAYCLE+ThHA/HdwKF4wpOF4XgLAk4/LIHrA9ahxlkPUg b1XVRJXeboRjAB5SL0mYfAk5k3lp3TRoezXtw+YOSPlI -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:57 2026 by rpki-client