This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/48esUEjzOBICw-DAm0mO74jcC50.roa File: 48esUEjzOBICw-DAm0mO74jcC50.roa (raw, json) Hash identifier: gMR9bADhJEei6lcf6w7gc94Lp3W0Rts74YHyQSE5Nn4= Subject key identifier: E3:C7:AC:50:48:F3:38:12:02:C3:E0:C0:9B:49:8E:EF:88:DC:0B:9D Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1 Certificate serial: 019B7F825DC74D3BCCA107E2033434A50666 Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/48esUEjzOBICw-DAm0mO74jcC50.roa Signing time: Fri 02 Jan 2026 16:20:08 +0000 ROA not before: Fri 02 Jan 2026 16:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212530 IP address blocks: 45.13.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:5d:c7:4d:3b:cc:a1:07:e2:03:34:34:a5:06:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1 Validity Not Before: Jan 2 16:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3c7ac5048f3381202c3e0c09b498eef88dc0b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:13:55:ee:51:57:39:f1:fd:0c:a9:d9:2d: 19:d1:ed:48:08:0b:fb:c8:27:38:69:6a:76:ef:3b: 4a:86:e4:ce:c5:48:fd:1e:49:ab:80:99:61:4a:d2: 60:82:f0:f2:92:8f:b7:25:2f:c0:36:a6:75:13:ef: f0:a1:30:97:d2:b0:e2:ca:9a:e2:29:06:e0:f1:37: 31:9d:e3:22:0c:1a:bd:72:a3:20:f9:a3:54:00:fd: 32:00:96:d4:06:46:58:3b:bf:92:a8:76:76:04:37: c1:cd:b9:11:a8:a6:7c:79:f3:7b:9b:93:b1:1f:b8: fa:16:37:da:76:66:ff:16:1f:62:a4:4b:35:05:14: d4:c6:fb:3e:77:b3:34:11:2b:f4:fd:68:74:46:7f: a3:1f:78:5b:d3:f2:0b:62:d9:3e:45:35:9b:fc:05: 65:a3:b7:13:37:2a:45:40:4a:fa:21:03:2b:9d:51: 1d:8b:6e:ee:7a:94:4f:8e:4b:f1:9e:27:21:3d:ff: b7:81:76:cf:29:0b:fe:d0:61:f9:e0:c5:71:64:c0: bd:39:69:38:f6:ea:eb:d9:79:0b:54:bd:e8:43:5e: 24:51:d6:3a:cf:fb:c7:9d:8d:51:31:21:64:9e:f1: d1:58:5c:54:85:1a:c2:30:09:32:03:b6:f1:51:cd: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C7:AC:50:48:F3:38:12:02:C3:E0:C0:9B:49:8E:EF:88:DC:0B:9D X509v3 Authority Key Identifier: keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/48esUEjzOBICw-DAm0mO74jcC50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.112.0/22 Signature Algorithm: sha256WithRSAEncryption a6:dc:77:3e:c2:70:54:af:c1:2d:31:3e:91:25:fe:37:55:ae: 6a:bc:d6:b1:3b:83:08:cd:40:34:1b:74:65:e2:ea:79:86:37: cc:32:15:d3:c2:82:c0:a4:3d:4c:96:01:1e:07:30:0e:82:d4: ae:8a:4e:d3:c1:c4:26:95:4c:48:e4:2f:5a:63:57:c6:d7:f9: 40:38:40:ce:a1:e1:08:84:e5:ba:0d:03:4b:e5:01:a5:88:76: cf:6f:6f:52:40:fd:2e:31:9d:1d:65:96:85:b9:dc:b1:7c:e4: 05:ba:cb:5b:77:31:d3:1f:60:3a:bd:cf:7c:22:35:72:e7:30: 6d:c6:ed:66:02:76:2b:aa:ac:b4:36:0a:f2:d0:ed:59:a8:5d: 8b:8f:f6:66:e2:f5:96:57:c2:1b:17:cd:47:36:29:d1:ad:e8: 4b:b4:b0:a0:53:52:ec:34:06:d7:94:3f:12:58:5c:bc:a0:e9: 4d:ea:e5:05:01:9c:10:7a:fd:70:81:ff:05:e3:8d:ae:68:ef: 4b:78:71:87:2c:3d:29:3b:96:bf:da:07:07:b7:10:41:11:83: 1c:a7:90:8e:8b:4b:6d:81:b3:65:7c:7b:89:db:6d:5a:a9:cd: be:47:ce:90:dd:4c:43:3e:0d:ca:8b:46:32:40:00:2f:aa:6b: 7c:5f:57:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gl3HTTvMoQfiAzQ0pQZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDU3ZTc0YWFkMjFhYmNmMTMzNzRmNTkxNWIxYTdlODI3 ZDRlYTEwHhcNMjYwMTAyMTYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2M3YWM1MDQ4ZjMzODEyMDJjM2UwYzA5YjQ5OGVlZjg4ZGMwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ToTVe5RVznx/Qyp2S0Z0e1ICAv7 yCc4aWp27ztKhuTOxUj9HkmrgJlhStJggvDyko+3JS/ANqZ1E+/woTCX0rDiypri KQbg8TcxneMiDBq9cqMg+aNUAP0yAJbUBkZYO7+SqHZ2BDfBzbkRqKZ8efN7m5Ox H7j6Fjfadmb/Fh9ipEs1BRTUxvs+d7M0ESv0/Wh0Rn+jH3hb0/ILYtk+RTWb/AVl o7cTNypFQEr6IQMrnVEdi27uepRPjkvxnichPf+3gXbPKQv+0GH54MVxZMC9OWk4 9urr2XkLVL3oQ14kUdY6z/vHnY1RMSFknvHRWFxUhRrCMAkyA7bxUc0ElQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPHrFBI8zgSAsPgwJtJju+I3AudMB8GA1UdIwQY MBaAFPYFfnSq0hq88TN09ZFbGn6CfU6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgt MGE5YTFmMWM5ODljLzEvNDhlc1VFanpPQklDdy1EQW0wbU83NGpjQzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zYWUxZGUtYmQ1Yy00YTE3LTlmYTgtMGE5YTFmMWM5ODlj LzEvOWdWLWRLclNHcnp4TTNUMWtWc2Fmb0o5VHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1wMA0G CSqGSIb3DQEBCwUAA4IBAQCm3Hc+wnBUr8EtMT6RJf43Va5qvNaxO4MIzUA0G3Rl 4up5hjfMMhXTwoLApD1MlgEeBzAOgtSuik7TwcQmlUxI5C9aY1fG1/lAOEDOoeEI hOW6DQNL5QGliHbPb29SQP0uMZ0dZZaFudyxfOQFustbdzHTH2A6vc98IjVy5zBt xu1mAnYrqqy0Ngry0O1ZqF2Lj/Zm4vWWV8IbF81HNinRrehLtLCgU1LsNAbXlD8S WFy8oOlN6uUFAZwQev1wgf8F442uaO9LeHGHLD0pO5a/2gcHtxBBEYMcp5COi0tt gbNlfHuJ221aqc2+R86Q3UxDPg3Ki0YyQAAvqmt8X1fU -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:40 2026 by rpki-client