This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/0BsOVzhVk1MKdipne8qaIMaKsew.roa File: 0BsOVzhVk1MKdipne8qaIMaKsew.roa (raw, json) Hash identifier: GWXgVGFzyZitQdapoQ6ExT2SefdF2ctk1Wka/DqT424= Subject key identifier: D0:1B:0E:57:38:55:93:53:0A:76:2A:67:7B:CA:9A:20:C6:8A:B1:EC Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Certificate serial: 019B76EB329975460CE95C816FBBAB6480C1 Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/0BsOVzhVk1MKdipne8qaIMaKsew.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213593 IP address blocks: 198.212.48.0/24 maxlen: 24 2001:678:d2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:32:99:75:46:0c:e9:5c:81:6f:bb:ab:64:80:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d01b0e57385593530a762a677bca9a20c68ab1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9c:6f:57:41:b4:b9:9a:8d:d3:bc:8b:1a:f6: 11:55:8f:a2:bc:21:38:6a:8a:36:9e:89:1e:34:ee: 3e:f1:be:1d:d0:d1:f6:bf:2c:bf:66:84:02:90:a7: 40:82:c9:e8:b9:86:2c:bc:f7:c3:cd:40:53:a3:49: 30:bc:d9:dc:b5:4d:ab:24:20:4b:cb:30:d5:a9:fb: 6e:61:24:5c:38:9c:0d:c6:6a:88:0b:55:18:bc:d1: f0:f1:49:12:20:99:34:ee:e7:a1:e3:34:cf:f8:51: 59:b1:70:50:30:aa:ba:e8:04:54:26:16:86:df:61: f3:c2:f8:7a:48:f1:be:18:77:e1:e4:fb:b7:9b:64: 83:42:5d:39:88:3b:84:8d:c6:6f:9c:70:ef:ee:46: d5:29:8c:e3:d8:e3:cc:d6:96:6d:4c:be:60:0a:1c: ab:bc:35:2e:ea:24:dd:09:a3:fe:27:80:d8:92:19: 8b:03:bf:65:75:3d:33:e9:ae:6e:f0:81:7e:79:f4: 6d:88:cd:5c:2e:b3:d6:48:2a:00:96:27:93:74:e1: de:c0:01:5a:90:88:87:49:15:a8:9d:ad:10:c5:14: 99:e3:04:93:57:5e:6a:b7:cb:84:bf:c8:00:38:4e: 69:2b:74:eb:f9:9e:4c:2a:9d:b6:bc:61:8d:5c:88: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1B:0E:57:38:55:93:53:0A:76:2A:67:7B:CA:9A:20:C6:8A:B1:EC X509v3 Authority Key Identifier: keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/0BsOVzhVk1MKdipne8qaIMaKsew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.212.48.0/24 IPv6: 2001:678:d2c::/48 Signature Algorithm: sha256WithRSAEncryption 64:e3:92:27:b1:1c:8f:c1:0c:4f:5c:51:e2:d7:b8:86:32:f9: 6d:fa:75:00:d1:94:f3:96:13:39:52:03:d5:94:00:9a:9d:a2: 65:6c:c7:69:4e:79:ed:79:db:ef:d4:4c:48:fd:7f:67:35:d3: 74:e2:e0:26:02:7e:53:cd:c0:12:d3:e4:89:7e:28:49:a3:4a: 23:e3:23:db:b9:0f:55:dd:f7:e2:b6:b4:6c:6c:e7:34:2b:e1: aa:6e:e0:47:3c:7b:80:44:6b:81:b9:28:d2:b8:94:2f:1f:e7: 51:f9:2e:c8:1d:7b:a9:ba:a2:fb:09:c9:ca:3a:20:63:60:4e: 76:3d:3b:0b:16:8a:07:04:f9:e2:12:7f:0c:88:b7:84:63:ea: 87:8f:71:ee:bf:3d:b3:a5:fe:af:f3:55:dd:8d:27:72:2c:34: 13:d1:ec:43:af:29:a9:b6:a5:c6:ee:48:40:01:3d:d7:7f:87: 04:e5:1a:a0:0e:69:53:f3:a8:fe:87:13:b2:4a:67:cc:80:aa: d0:59:b2:73:b6:16:08:a3:51:68:38:aa:6b:d7:af:ae:17:c9: dd:b2:4d:d7:c9:79:cd:ed:c4:82:a1:f5:3b:c8:00:e7:2f:a3: 66:bc:e4:69:37:8f:a0:72:d1:a2:b5:4e:01:10:66:38:cc:8c: 18:48:ec:d4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26zKZdUYM6VyBb7urZIDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3 MDVmNTgwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDFiMGU1NzM4NTU5MzUzMGE3NjJhNjc3YmNhOWEyMGM2OGFiMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pxvV0G0uZqN07yLGvYRVY+ivCE4 aoo2nokeNO4+8b4d0NH2vyy/ZoQCkKdAgsnouYYsvPfDzUBTo0kwvNnctU2rJCBL yzDVqftuYSRcOJwNxmqIC1UYvNHw8UkSIJk07ueh4zTP+FFZsXBQMKq66ARUJhaG 32Hzwvh6SPG+GHfh5Pu3m2SDQl05iDuEjcZvnHDv7kbVKYzj2OPM1pZtTL5gChyr vDUu6iTdCaP+J4DYkhmLA79ldT0z6a5u8IF+efRtiM1cLrPWSCoAlieTdOHewAFa kIiHSRWona0QxRSZ4wSTV15qt8uEv8gAOE5pK3Tr+Z5MKp22vGGNXIj/bwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNAbDlc4VZNTCnYqZ3vKmiDGirHsMB8GA1UdIwQY MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt MDZmYWYxNDk2NjkzLzEvMEJzT1Z6aFZrMU1LZGlwbmU4cWFJTWFLc2V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxtQwMA8E AgACMAkDBwAgAQZ4DSwwDQYJKoZIhvcNAQELBQADggEBAGTjkiexHI/BDE9cUeLX uIYy+W36dQDRlPOWEzlSA9WUAJqdomVsx2lOee152+/UTEj9f2c103Ti4CYCflPN wBLT5Il+KEmjSiPjI9u5D1Xd9+K2tGxs5zQr4apu4Ec8e4BEa4G5KNK4lC8f51H5 Lsgde6m6ovsJyco6IGNgTnY9OwsWigcE+eISfwyIt4Rj6oePce6/PbOl/q/zVd2N J3IsNBPR7EOvKam2pcbuSEABPdd/hwTlGqAOaVPzqP6HE7JKZ8yAqtBZsnO2Fgij UWg4qmvXr64Xyd2yTdfJec3txIKh9TvIAOcvo2a85Gk3j6By0aK1TgEQZjjMjBhI 7NQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:43 2026 by rpki-client