This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/48VETktm8u5cwxfi5tzhrXCS1PA.roa File: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (raw, json) Hash identifier: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk= Subject key identifier: E3:C5:44:4E:4B:66:F2:EE:5C:C3:17:E2:E6:DC:E1:AD:70:92:D4:F0 Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02 Certificate serial: 019B7E38E6EFDE4978449D8FCF92161F351A Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/48VETktm8u5cwxfi5tzhrXCS1PA.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47511 IP address blocks: 91.206.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:ef:de:49:78:44:9d:8f:cf:92:16:1f:35:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3c5444e4b66f2ee5cc317e2e6dce1ad7092d4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:fe:ea:0f:ef:3f:72:21:d8:30:31:e4:06: bf:9c:32:16:be:c4:09:12:a4:42:97:48:b5:cd:59: 94:f1:f8:4e:77:ff:8c:11:4b:08:fb:a5:e1:0e:9d: 0a:f8:9a:43:d3:af:ca:71:71:7f:e8:41:a7:f9:30: d4:b6:b7:11:88:42:da:df:8c:64:75:f5:86:35:a2: e2:58:8b:65:25:f8:71:d2:46:f9:d2:ee:36:88:0a: b1:f5:88:54:88:53:b8:c7:ac:9c:dc:30:a3:77:9a: 28:0f:ad:5c:d8:ff:7f:f4:15:25:53:8d:e9:ff:a7: 52:99:b6:5d:d4:31:35:3d:6b:35:47:bb:d7:4d:b9: bd:c7:d3:48:27:be:05:98:c4:ce:64:15:67:fd:69: 97:aa:c7:e4:d8:41:b1:c1:f5:0c:71:43:9b:00:8e: 7b:f2:65:e1:57:45:db:90:19:57:d4:3b:40:0e:62: 2e:eb:2d:0c:54:8b:2f:2d:3b:b7:98:f8:2e:7d:8b: 9e:53:ad:89:82:5e:f0:06:15:d4:8a:b3:94:0b:c7: cc:c9:7a:b0:17:37:47:7b:ac:80:ba:0d:aa:bf:a8: 6a:77:35:19:fe:c9:f1:78:a7:fb:60:69:3a:ea:c4: 8a:1a:48:97:8d:bd:29:cc:71:84:19:bd:4e:8c:5f: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C5:44:4E:4B:66:F2:EE:5C:C3:17:E2:E6:DC:E1:AD:70:92:D4:F0 X509v3 Authority Key Identifier: keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/48VETktm8u5cwxfi5tzhrXCS1PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.82.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:af:97:37:1a:9c:ae:a7:d1:b9:a1:dc:37:a3:41:b9:e5:50: 22:21:1f:bc:d5:31:14:cd:91:46:c3:f4:9e:47:ae:57:89:fc: 03:d4:c6:f6:0a:95:5a:76:51:f7:ba:5c:6d:c9:83:ee:11:ef: dd:99:4f:4e:53:da:c3:98:67:40:46:ea:69:64:90:f7:6f:88: 6a:6f:59:b4:8d:78:c9:dc:71:95:8d:03:ad:09:ed:fe:60:7f: 71:06:e9:05:41:15:43:8f:8d:39:be:48:49:f6:b3:77:c7:63: 39:8d:ed:ec:7d:73:cf:ca:23:70:d2:bd:c2:20:6c:ff:8e:21: 9d:c4:3f:48:03:aa:0b:f0:3f:1a:e9:f4:6a:51:b2:ba:58:55: 2e:89:5d:54:14:c8:fe:ea:08:d7:a8:42:6c:e3:83:95:26:c6: e0:96:cf:79:eb:6d:f1:27:1a:f3:b5:f3:d9:d0:c1:52:ef:5e: 59:b4:c8:bb:28:5f:25:dc:3e:6e:8b:2d:b9:14:5b:70:93:70: ab:f7:5d:9d:4d:cd:9b:4d:9d:33:86:38:f3:e3:49:22:d7:d8: d3:1c:60:ef:9a:82:b1:9f:bb:1c:5a:ee:21:91:b4:2e:3f:43: d4:28:1a:75:ef:51:2a:60:ee:99:8c:80:45:58:79:06:f1:6b: 42:3e:6b:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OObv3kl4RJ2Pz5IWHzUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz OWNhMDIwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2M1NDQ0ZTRiNjZmMmVlNWNjMzE3ZTJlNmRjZTFhZDcwOTJkNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnP+6g/vP3Ih2DAx5Aa/nDIWvsQJ EqRCl0i1zVmU8fhOd/+MEUsI+6XhDp0K+JpD06/KcXF/6EGn+TDUtrcRiELa34xk dfWGNaLiWItlJfhx0kb50u42iAqx9YhUiFO4x6yc3DCjd5ooD61c2P9/9BUlU43p /6dSmbZd1DE1PWs1R7vXTbm9x9NIJ74FmMTOZBVn/WmXqsfk2EGxwfUMcUObAI57 8mXhV0XbkBlX1DtADmIu6y0MVIsvLTu3mPgufYueU62Jgl7wBhXUirOUC8fMyXqw FzdHe6yAug2qv6hqdzUZ/snxeKf7YGk66sSKGkiXjb0pzHGEGb1OjF9eCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPFRE5LZvLuXMMX4ubc4a1wktTwMB8GA1UdIwQY MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt YmYyYzdhMzkwOGRhLzEvNDhWRVRrdG04dTVjd3hmaTV0emhyWENTMVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW85SMA0G CSqGSIb3DQEBCwUAA4IBAQANr5c3Gpyup9G5odw3o0G55VAiIR+81TEUzZFGw/Se R65XifwD1Mb2CpVadlH3ulxtyYPuEe/dmU9OU9rDmGdARuppZJD3b4hqb1m0jXjJ 3HGVjQOtCe3+YH9xBukFQRVDj405vkhJ9rN3x2M5je3sfXPPyiNw0r3CIGz/jiGd xD9IA6oL8D8a6fRqUbK6WFUuiV1UFMj+6gjXqEJs44OVJsbgls95623xJxrztfPZ 0MFS715ZtMi7KF8l3D5uiy25FFtwk3Cr912dTc2bTZ0zhjjz40ki19jTHGDvmoKx n7scWu4hkbQuP0PUKBp171EqYO6ZjIBFWHkG8WtCPmsu -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:32 2026 by rpki-client