This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/C2alc4W0qUaR_O2dT6t7YsOa3tU.roa File: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (raw, json) Hash identifier: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U= Subject key identifier: 0B:66:A5:73:85:B4:A9:46:91:FC:ED:9D:4F:AB:7B:62:C3:9A:DE:D5 Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Certificate serial: 019B7758D6CE3F6A1EFEFDFB8931D50437DF Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/C2alc4W0qUaR_O2dT6t7YsOa3tU.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211535 IP address blocks: 148.222.248.0/22 maxlen: 22 148.222.248.0/24 maxlen: 24 148.222.249.0/24 maxlen: 24 148.222.250.0/24 maxlen: 24 148.222.251.0/24 maxlen: 24 2a14:8400::/32 maxlen: 32 2a14:8400:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d6:ce:3f:6a:1e:fe:fd:fb:89:31:d5:04:37:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b66a57385b4a94691fced9d4fab7b62c39aded5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:85:19:68:0e:3e:be:e6:a1:10:c3:7b:6d: 80:af:3a:3b:95:0c:7b:1a:59:27:d3:27:fc:0e:1b: 47:ab:7f:52:0d:5a:a9:b9:cb:58:5f:00:74:8f:84: c2:37:d6:37:45:9b:fc:dc:71:ca:d0:ff:f5:41:f5: 61:0a:86:a4:cb:17:3a:14:54:40:64:06:d7:e0:d4: d3:6f:dc:0c:d3:a7:ee:68:4c:f6:8a:85:81:26:57: cd:70:90:4a:2a:41:93:5e:89:d0:0d:06:50:7f:5b: 39:d9:a3:7f:e6:54:69:f3:7e:26:d8:b5:e6:ff:11: 50:d9:1a:ec:33:61:3e:b4:da:07:5b:68:cc:e8:d3: 75:c4:de:a7:0d:68:6d:d9:d2:65:b4:fc:47:24:f9: 3d:3b:77:74:be:f3:cb:d2:3f:be:8e:7a:09:a2:25: 59:a6:66:f3:69:31:b5:ce:81:44:89:49:22:76:dd: f7:84:6f:1e:3a:94:f9:f1:e7:06:0d:56:87:6f:4c: 02:52:d9:de:15:3a:d8:a2:81:77:d9:eb:7e:df:74: 63:2b:1b:79:90:b2:80:25:5c:fd:77:5c:a1:56:02: 81:ce:53:b9:37:39:25:96:c7:69:60:08:34:52:47: eb:38:9a:ba:c8:24:c9:a1:13:07:89:60:bf:28:4e: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:A5:73:85:B4:A9:46:91:FC:ED:9D:4F:AB:7B:62:C3:9A:DE:D5 X509v3 Authority Key Identifier: keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/C2alc4W0qUaR_O2dT6t7YsOa3tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.222.248.0/22 IPv6: 2a14:8400::/32 Signature Algorithm: sha256WithRSAEncryption 0d:b5:22:a1:64:00:4b:e5:a3:9f:db:f3:60:98:45:03:73:cd: 9c:50:e3:ef:a0:9c:40:41:70:19:93:9a:1c:18:1a:82:e9:98: 6e:2b:1c:10:c3:c0:8a:24:8a:bc:34:18:f9:38:15:35:71:36: dc:34:48:9b:a0:61:49:b3:5c:2d:8a:f6:98:9f:bf:53:f2:12: c7:56:56:ea:eb:e1:9e:a1:a1:c5:97:88:5a:65:f5:2e:56:75: 0c:1b:7b:be:c1:55:ad:80:bd:90:de:06:77:85:b0:d5:2a:2e: 2c:b1:b1:3c:e7:f1:8f:24:6d:09:98:f5:df:98:56:78:c2:e4: 73:d6:6d:d0:1b:da:d3:08:cc:1a:62:94:d9:fd:a2:d7:60:a0: 07:a5:2b:b7:19:12:6a:48:1f:14:a6:54:83:bd:34:73:8c:a9: 3c:60:0d:d9:ee:c9:00:a6:f3:cd:f2:1a:b5:f5:5e:4d:ae:97: 20:24:12:65:2e:25:83:a2:f9:03:16:12:09:fd:f3:ab:77:4d: 3d:86:19:68:28:93:4d:b3:c6:31:20:ac:a0:0c:39:43:e3:1c: db:eb:68:e3:a7:0d:97:46:6e:53:37:ce:4f:19:32:00:0d:25: d9:d4:f2:14:6a:c3:d5:f0:f4:08:6c:8c:6f:7d:47:4e:1e:74: f4:9f:bc:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WNbOP2oe/v37iTHVBDffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0 MmI4NDQwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjY2YTU3Mzg1YjRhOTQ2OTFmY2VkOWQ0ZmFiN2I2MmMzOWFkZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCyFGWgOPr7moRDDe22Arzo7lQx7 Glkn0yf8DhtHq39SDVqpuctYXwB0j4TCN9Y3RZv83HHK0P/1QfVhCoakyxc6FFRA ZAbX4NTTb9wM06fuaEz2ioWBJlfNcJBKKkGTXonQDQZQf1s52aN/5lRp834m2LXm /xFQ2RrsM2E+tNoHW2jM6NN1xN6nDWht2dJltPxHJPk9O3d0vvPL0j++jnoJoiVZ pmbzaTG1zoFEiUkidt33hG8eOpT58ecGDVaHb0wCUtneFTrYooF32et+33RjKxt5 kLKAJVz9d1yhVgKBzlO5NzkllsdpYAg0UkfrOJq6yCTJoRMHiWC/KE5yOQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAtmpXOFtKlGkfztnU+re2LDmt7VMB8GA1UdIwQY MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt NzBjNTg5ZGQyMTcxLzEvQzJhbGM0VzBxVWFSX08yZFQ2dDdZc09hM3RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQClN74MA0E AgACMAcDBQAqFIQAMA0GCSqGSIb3DQEBCwUAA4IBAQANtSKhZABL5aOf2/NgmEUD c82cUOPvoJxAQXAZk5ocGBqC6ZhuKxwQw8CKJIq8NBj5OBU1cTbcNEiboGFJs1wt ivaYn79T8hLHVlbq6+GeoaHFl4haZfUuVnUMG3u+wVWtgL2Q3gZ3hbDVKi4ssbE8 5/GPJG0JmPXfmFZ4wuRz1m3QG9rTCMwaYpTZ/aLXYKAHpSu3GRJqSB8UplSDvTRz jKk8YA3Z7skApvPN8hq19V5NrpcgJBJlLiWDovkDFhIJ/fOrd009hhloKJNNs8Yx IKygDDlD4xzb62jjpw2XRm5TN85PGTIADSXZ1PIUasPV8PQIbIxvfUdOHnT0n7yT -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:44 2026 by rpki-client