This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/49LVYnP73rA79wdiuJHMdcdFkIQ.roa File: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (raw, json) Hash identifier: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c= Subject key identifier: E3:D2:D5:62:73:FB:DE:B0:3B:F7:07:62:B8:91:CC:75:C7:45:90:84 Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Certificate serial: 019B79ED114880AB86906D5E6E9B65E1F351 Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/49LVYnP73rA79wdiuJHMdcdFkIQ.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209620 IP address blocks: 185.184.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:11:48:80:ab:86:90:6d:5e:6e:9b:65:e1:f3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d2d56273fbdeb03bf70762b891cc75c7459084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:fa:06:78:00:03:f7:4b:42:0b:f7:06:fd: c7:e0:0d:d5:fb:45:c5:2e:dd:5c:9f:5b:88:2a:bc: 84:c9:18:ff:fc:1f:65:0c:2d:11:1f:8c:43:0d:11: cc:3f:e3:41:ef:02:d8:64:8d:af:45:09:b9:1a:a8: ab:a8:fc:43:ff:7a:c1:f2:60:ba:b6:d3:58:01:b8: 02:32:bd:ab:9a:12:d5:e3:6e:de:bf:4e:5e:5c:49: 6b:0b:64:41:ed:3e:99:bd:0d:ae:0e:6a:df:5f:52: 54:b4:72:1a:d5:03:ba:bc:a0:44:5d:43:bc:e6:21: d1:d4:b3:d9:b6:ba:0e:3b:64:74:de:76:7a:87:74: d9:82:46:19:8c:d7:6b:fd:96:11:8e:a8:57:08:df: 51:37:b0:73:aa:96:ba:12:03:ae:a4:bb:4d:7f:21: 5f:f2:33:ed:83:0c:72:8d:cf:01:25:69:3c:55:de: 5b:6e:56:12:8e:fa:73:89:ce:3b:0a:44:85:a0:bc: 82:75:39:64:67:5b:b4:6a:b3:dc:42:9e:86:07:b9: 5b:a6:c0:21:07:86:ea:62:81:b9:53:8d:39:cb:d1: 08:d4:18:c4:5c:1d:d5:53:03:ec:31:87:59:41:d3: 56:d2:ab:99:0e:d8:c1:ac:28:7e:df:23:91:60:64: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:D5:62:73:FB:DE:B0:3B:F7:07:62:B8:91:CC:75:C7:45:90:84 X509v3 Authority Key Identifier: keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/49LVYnP73rA79wdiuJHMdcdFkIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.213.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:80:37:39:8c:a7:29:74:f8:e0:0b:db:ff:12:92:d7:db:c7: 88:e6:8b:fd:90:cc:96:ad:5e:10:6f:d9:d0:aa:54:9b:5f:43: 05:82:8e:57:75:62:79:d0:13:43:11:e8:52:d2:34:4e:fc:8c: 80:21:d0:e8:51:51:36:84:21:c3:1c:e2:0a:e9:eb:58:29:ad: f3:5b:a8:d4:5e:31:f3:b8:4d:d9:6c:df:39:4e:08:91:e3:3c: f5:13:60:8f:7f:c3:e2:b5:8b:ff:6e:3e:b7:99:55:1e:49:ac: 64:33:11:f4:9f:c3:6d:e7:bf:66:8c:88:15:f7:08:c5:9b:97: 0a:46:f7:e5:70:a2:ba:81:b7:1d:e0:f9:61:cd:03:3a:bc:e6: 48:39:78:1b:50:7b:9e:87:3d:dd:4c:17:8a:f4:d1:44:c3:6e: 4c:9f:0c:c8:a2:9c:1f:ee:d4:2a:ee:2a:04:1d:8a:47:06:8e: 35:16:7b:5c:62:7a:03:e9:5b:41:26:61:84:f6:64:30:4e:1b: c2:f2:0e:d0:b0:ad:16:56:62:5c:34:4e:b2:36:49:90:ca:be: 78:74:6a:e1:73:01:04:31:41:f5:65:95:cf:3c:3f:17:d5:0d: 65:a2:25:fc:e3:c3:6c:4f:90:ac:02:60:3a:f5:e8:9b:9b:25: 9f:be:8d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RFIgKuGkG1ebptl4fNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm OGFjOTgwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2QyZDU2MjczZmJkZWIwM2JmNzA3NjJiODkxY2M3NWM3NDU5MDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhj6BngAA/dLQgv3Bv3H4A3V+0XF Lt1cn1uIKryEyRj//B9lDC0RH4xDDRHMP+NB7wLYZI2vRQm5GqirqPxD/3rB8mC6 ttNYAbgCMr2rmhLV427ev05eXElrC2RB7T6ZvQ2uDmrfX1JUtHIa1QO6vKBEXUO8 5iHR1LPZtroOO2R03nZ6h3TZgkYZjNdr/ZYRjqhXCN9RN7Bzqpa6EgOupLtNfyFf 8jPtgwxyjc8BJWk8Vd5bblYSjvpzic47CkSFoLyCdTlkZ1u0arPcQp6GB7lbpsAh B4bqYoG5U405y9EI1BjEXB3VUwPsMYdZQdNW0quZDtjBrCh+3yORYGQBYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPS1WJz+96wO/cHYriRzHXHRZCEMB8GA1UdIwQY MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt NDA3ZTNmZTYzOTQ1LzEvNDlMVlluUDczckE3OXdkaXVKSE1kY2RGa0lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1 LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubjVMA0G CSqGSIb3DQEBCwUAA4IBAQB6gDc5jKcpdPjgC9v/EpLX28eI5ov9kMyWrV4Qb9nQ qlSbX0MFgo5XdWJ50BNDEehS0jRO/IyAIdDoUVE2hCHDHOIK6etYKa3zW6jUXjHz uE3ZbN85TgiR4zz1E2CPf8PitYv/bj63mVUeSaxkMxH0n8Nt579mjIgV9wjFm5cK RvflcKK6gbcd4PlhzQM6vOZIOXgbUHuehz3dTBeK9NFEw25MnwzIopwf7tQq7ioE HYpHBo41FntcYnoD6VtBJmGE9mQwThvC8g7QsK0WVmJcNE6yNkmQyr54dGrhcwEE MUH1ZZXPPD8X1Q1loiX848NsT5CsAmA69eibmyWfvo2V -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:42 2026 by rpki-client