This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m48ct0oaZ_QStpMwtpHYOM5v9sQ.roa File: m48ct0oaZ_QStpMwtpHYOM5v9sQ.roa (raw, json) Hash identifier: DRfmFaDEWEJUgiXB8ty8Mf9UM+58PTBE8cStq2VKoHQ= Subject key identifier: 9B:8F:1C:B7:4A:1A:67:F4:12:B6:93:30:B6:91:D8:38:CE:6F:F6:C4 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FA302057C899DB16010CD7FE4BC8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m48ct0oaZ_QStpMwtpHYOM5v9sQ.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43068 IP address blocks: 93.123.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fa:30:20:57:c8:99:db:16:01:0c:d7:fe:4b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b8f1cb74a1a67f412b69330b691d838ce6ff6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:3a:f9:6c:1c:5a:f4:da:32:58:82:6a:fb: 9e:70:4b:6b:12:da:2a:c5:dd:ab:c1:89:81:e1:ea: 5d:64:de:0f:1e:0c:12:b1:31:e0:58:14:a3:ce:6a: 83:e8:b0:85:34:d5:ba:a1:36:5e:88:9d:38:ec:1b: d2:89:27:23:14:b5:f2:52:21:9d:27:91:43:7f:2d: 6b:5c:a5:54:9f:10:29:e3:7a:88:5f:db:c0:c0:34: c3:09:3d:94:68:39:8d:e6:7b:45:2d:4f:a4:61:2a: f3:9a:c5:a2:f6:91:96:2e:58:d4:36:4d:bf:68:05: 3d:dc:70:70:cd:10:11:c0:59:ae:9b:00:45:4d:45: c2:04:be:34:10:e8:64:31:ad:e2:2e:9e:ff:35:47: 7c:4c:88:9c:d7:45:2f:12:82:82:80:7b:71:01:2c: cb:33:26:57:25:c0:6f:76:10:31:32:c3:1a:41:a7: 79:87:c7:22:fe:1d:06:3a:62:a9:f8:5d:55:38:78: c6:5d:8b:5e:32:2b:c6:7a:74:a1:36:8c:d0:39:5c: cf:2c:96:9d:e4:54:29:67:dd:f7:85:ef:00:0f:3a: fa:6e:35:2a:81:e3:e1:9d:94:1c:e2:a4:64:3f:5c: 4b:cf:88:ec:8e:4f:41:89:60:a0:90:fb:6f:d3:d6: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8F:1C:B7:4A:1A:67:F4:12:B6:93:30:B6:91:D8:38:CE:6F:F6:C4 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m48ct0oaZ_QStpMwtpHYOM5v9sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.48.0/20 Signature Algorithm: sha256WithRSAEncryption 96:79:2c:77:01:63:1f:77:ba:f0:b6:84:a6:95:a3:36:39:bb: 31:02:d6:bb:71:0c:49:e4:44:8c:0d:03:bd:e5:41:4f:33:19: 37:97:2b:8d:82:dc:cd:aa:33:c7:8e:1d:38:8c:f8:0f:b8:c4: cb:dd:1b:62:62:91:cd:c3:06:30:c6:2b:2d:dc:52:a4:f6:28: ee:33:f7:76:b1:f7:7e:c4:50:c7:a7:0d:f6:c2:35:27:30:a7: 4d:01:ae:36:0c:e1:c0:a9:60:a4:6a:12:f4:81:a1:21:7a:42: 82:4b:c0:c1:8f:95:92:74:1d:8a:fd:b2:ae:7e:0d:98:0c:c0: 26:f3:ee:71:72:40:e3:c0:c0:17:6a:28:6e:d6:33:56:b6:20: 59:53:4f:03:d1:18:86:1d:5e:f8:09:ce:6c:de:cb:9e:de:5f: 35:78:f0:c8:c0:b0:9e:f0:f2:78:9d:77:de:86:d1:19:7e:91: e7:9e:c4:bc:59:f5:f1:6f:a4:3e:c8:36:57:55:50:5a:98:17: 53:0b:03:5d:02:69:41:94:94:a3:d2:5a:fa:2a:2b:9e:55:93: 47:da:dd:d7:8f:ec:d1:01:43:eb:c7:40:93:df:9a:cf:21:52: b1:07:12:22:46:f1:18:43:a7:76:1c:0d:93:5d:03:9b:40:42: b1:b2:14:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovowIFfImdsWAQzX/kvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjhmMWNiNzRhMWE2N2Y0MTJiNjkzMzBiNjkxZDgzOGNlNmZmNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowM6+WwcWvTaMliCavuecEtrEtoq xd2rwYmB4epdZN4PHgwSsTHgWBSjzmqD6LCFNNW6oTZeiJ047BvSiScjFLXyUiGd J5FDfy1rXKVUnxAp43qIX9vAwDTDCT2UaDmN5ntFLU+kYSrzmsWi9pGWLljUNk2/ aAU93HBwzRARwFmumwBFTUXCBL40EOhkMa3iLp7/NUd8TIic10UvEoKCgHtxASzL MyZXJcBvdhAxMsMaQad5h8ci/h0GOmKp+F1VOHjGXYteMivGenShNozQOVzPLJad 5FQpZ933he8ADzr6bjUqgePhnZQc4qRkP1xLz4jsjk9BiWCgkPtv09ZmuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuPHLdKGmf0EraTMLaR2DjOb/bEMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbTQ4Y3Qwb2FaX1FTdHBNd3RwSFlPTTV2OXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXXswMA0G CSqGSIb3DQEBCwUAA4IBAQCWeSx3AWMfd7rwtoSmlaM2ObsxAta7cQxJ5ESMDQO9 5UFPMxk3lyuNgtzNqjPHjh04jPgPuMTL3RtiYpHNwwYwxist3FKk9ijuM/d2sfd+ xFDHpw32wjUnMKdNAa42DOHAqWCkahL0gaEhekKCS8DBj5WSdB2K/bKufg2YDMAm 8+5xckDjwMAXaihu1jNWtiBZU08D0RiGHV74Cc5s3sue3l81ePDIwLCe8PJ4nXfe htEZfpHnnsS8WfXxb6Q+yDZXVVBamBdTCwNdAmlBlJSj0lr6KiueVZNH2t3Xj+zR AUPrx0CT35rPIVKxBxIiRvEYQ6d2HA2TXQObQEKxshR6 -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:33 2026 by rpki-client