This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/48KczKek8aoXkkGGAiKbD1eo4WU.roa File: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (raw, json) Hash identifier: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs= Subject key identifier: E3:C2:9C:CC:A7:A4:F1:AA:17:92:41:86:02:22:9B:0F:57:A8:E1:65 Certificate issuer: /CN=e9c4cd4118ddffee56e885663795547a1de3f98a Certificate serial: 019B7758E3F00765300C4D52747643E99232 Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/48KczKek8aoXkkGGAiKbD1eo4WU.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35426 IP address blocks: 85.208.144.0/22 maxlen: 22 2a09:8740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e3:f0:07:65:30:0c:4d:52:74:76:43:e9:92:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3c29ccca7a4f1aa1792418602229b0f57a8e165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:b6:66:fd:7a:fa:34:07:1f:f3:41:28:3b: 93:d6:0f:af:19:1b:03:ef:da:fb:23:c1:85:48:6f: 6b:1d:40:52:84:80:77:93:61:f3:9b:1c:22:83:69: 60:a2:a3:91:a5:21:b7:de:45:54:61:02:e3:40:86: 14:6a:3b:09:8e:73:0c:77:ad:e5:56:2f:42:e7:e5: 7e:2f:e7:84:14:10:e3:02:c6:11:59:0b:89:eb:93: 7b:a6:74:2b:05:1e:fc:a8:c9:f5:a9:7f:bb:4d:86: 96:00:5c:b4:e7:01:bd:ff:8f:8d:45:22:3d:37:db: 83:33:bc:95:bd:ad:79:9e:6b:56:eb:e2:35:4b:f0: 53:5e:68:17:07:3b:b1:19:ac:6e:c8:2d:a3:6b:0c: cc:8a:73:e2:8a:d0:39:52:eb:73:d3:04:8f:de:f0: b9:29:aa:b8:30:e2:e5:45:dc:18:41:59:63:26:46: f0:d3:a8:71:4e:b8:4d:5b:31:f7:45:55:b9:a6:68: 32:a0:75:07:30:a2:5a:af:ea:20:f0:2f:f9:76:57: 7b:5b:af:e0:13:a7:85:64:c3:93:59:8a:e8:72:f6: 75:35:a1:16:42:2c:fa:da:2f:8e:0b:77:db:c3:b0: 9e:36:77:e9:86:d0:3b:de:81:e9:1b:c8:3e:f3:99: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C2:9C:CC:A7:A4:F1:AA:17:92:41:86:02:22:9B:0F:57:A8:E1:65 X509v3 Authority Key Identifier: keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/48KczKek8aoXkkGGAiKbD1eo4WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.144.0/22 IPv6: 2a09:8740::/29 Signature Algorithm: sha256WithRSAEncryption 85:cf:0d:aa:3b:dc:5a:39:7b:d4:89:4f:9d:e3:3d:c3:65:c7: 39:6c:ff:c5:b0:5a:7f:69:02:3e:7b:c1:38:9d:5d:b0:b2:1d: 4b:95:54:3a:e9:91:79:e7:8e:61:ae:cd:41:d7:e2:bc:27:33: e5:c7:b7:6b:34:9f:68:e3:aa:9e:1f:0e:fc:ae:0b:24:d1:36: 6d:aa:fa:a4:8e:99:e3:03:01:94:87:dd:bc:7b:5d:b4:4b:21: 2a:bf:0b:c6:18:99:24:c9:01:92:a9:cb:4c:93:81:aa:36:e5: 41:db:a2:40:2b:c1:c2:6f:49:da:1c:f5:22:83:f5:dc:e5:b4: 2c:a6:b7:49:55:5d:ab:80:6e:01:a0:0e:d9:1f:ac:00:9e:13: a6:29:bd:44:b5:da:c7:df:97:79:46:82:de:c3:6f:69:6d:67: 78:27:d6:bc:3e:c0:49:4b:78:cc:67:6a:26:30:73:ed:df:b8: e4:d2:e6:1a:0a:a6:d7:1d:8a:0e:82:61:e2:2d:47:d6:8c:d8: 55:60:bd:22:5e:93:fb:84:3f:78:83:39:35:4e:61:16:a8:1f: 1b:83:80:08:16:1e:34:22:85:68:23:4a:ab:16:59:53:26:c0: 1a:7f:a4:a6:43:43:2e:6b:e5:b7:d5:e5:13:a9:96:92:80:e5: 2d:5a:2a:fa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WOPwB2UwDE1SdHZD6ZIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YzRjZDQxMThkZGZmZWU1NmU4ODU2NjM3OTU1NDdhMWRl M2Y5OGEwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2MyOWNjY2E3YTRmMWFhMTc5MjQxODYwMjIyOWIwZjU3YThlMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnG2Zv16+jQHH/NBKDuT1g+vGRsD 79r7I8GFSG9rHUBShIB3k2Hzmxwig2lgoqORpSG33kVUYQLjQIYUajsJjnMMd63l Vi9C5+V+L+eEFBDjAsYRWQuJ65N7pnQrBR78qMn1qX+7TYaWAFy05wG9/4+NRSI9 N9uDM7yVva15nmtW6+I1S/BTXmgXBzuxGaxuyC2jawzMinPiitA5Uutz0wSP3vC5 Kaq4MOLlRdwYQVljJkbw06hxTrhNWzH3RVW5pmgyoHUHMKJar+og8C/5dld7W6/g E6eFZMOTWYrocvZ1NaEWQiz62i+OC3fbw7CeNnfphtA73oHpG8g+85neKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOPCnMynpPGqF5JBhgIimw9XqOFlMB8GA1UdIwQY MBaAFOnEzUEY3f/uVuiFZjeVVHod4/mKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQt NmNiMmQzYjQ0MzdjLzEvNDhLY3pLZWs4YW9Ya2tHR0FpS2JEMWVvNFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZjdkYTQtMzYzMS00YjAzLWJhODQtNmNiMmQzYjQ0Mzdj LzEvNmNUTlFSamRfLTVXNklWbU41VlVlaDNqLVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdCQMA0E AgACMAcDBQMqCYdAMA0GCSqGSIb3DQEBCwUAA4IBAQCFzw2qO9xaOXvUiU+d4z3D Zcc5bP/FsFp/aQI+e8E4nV2wsh1LlVQ66ZF5545hrs1B1+K8JzPlx7drNJ9o46qe Hw78rgsk0TZtqvqkjpnjAwGUh928e120SyEqvwvGGJkkyQGSqctMk4GqNuVB26JA K8HCb0naHPUig/Xc5bQsprdJVV2rgG4BoA7ZH6wAnhOmKb1EtdrH35d5RoLew29p bWd4J9a8PsBJS3jMZ2omMHPt37jk0uYaCqbXHYoOgmHiLUfWjNhVYL0iXpP7hD94 gzk1TmEWqB8bg4AIFh40IoVoI0qrFllTJsAaf6SmQ0Mua+W31eUTqZaSgOUtWir6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:13 2026 by rpki-client