This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/Sa_vDBEAm82qmKkKwf2aI8quPD8.roa File: Sa_vDBEAm82qmKkKwf2aI8quPD8.roa (raw, json) Hash identifier: qBNhicMBIUuHH+gEIMRgRVoASaPTsbzdmeqUpjYn+jQ= Subject key identifier: 49:AF:EF:0C:11:00:9B:CD:AA:98:A9:0A:C1:FD:9A:23:CA:AE:3C:3F Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1 Certificate serial: 019B7A5AC947F780AD8DD3A888D6A77E8B6E Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/Sa_vDBEAm82qmKkKwf2aI8quPD8.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202392 IP address blocks: 194.62.148.0/24 maxlen: 24 194.62.149.0/24 maxlen: 24 194.62.150.0/24 maxlen: 24 194.62.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c9:47:f7:80:ad:8d:d3:a8:88:d6:a7:7e:8b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49afef0c11009bcdaa98a90ac1fd9a23caae3c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:0b:39:09:6b:fc:28:be:5a:14:f8:e1:73: ed:00:91:57:cf:79:25:53:2f:b5:cb:f2:ee:0a:9b: 57:aa:1b:97:71:44:c6:a8:32:58:45:3b:2f:90:04: 4c:78:87:f6:af:dd:e2:fd:21:f5:0a:31:4e:5c:0f: fd:7a:e1:c1:09:4f:87:7e:ca:51:0b:60:36:8c:54: 85:4f:3e:be:58:4c:50:fc:95:13:44:1c:5e:78:81: 77:07:ca:e1:f0:4e:a6:1c:73:0e:90:8a:48:10:0f: cc:12:d2:44:85:40:61:c2:8d:b4:bd:91:73:d0:b9: df:48:25:fd:f1:9a:55:ed:36:da:a9:db:82:4d:88: 17:ca:cd:cd:08:4d:ed:ec:ce:38:6e:d2:d8:9a:69: 7b:80:e2:5c:48:74:6b:d0:63:04:46:79:a3:a5:5a: 62:89:1b:ef:6b:6e:3f:b5:48:e1:95:02:8f:c7:a4: 90:c7:6a:db:f8:dd:a7:14:f5:88:e6:07:a1:d9:b5: a4:9f:2a:ea:e0:0a:d6:6f:e8:26:a3:1b:55:80:a0: 42:c0:36:f4:dd:3a:df:e8:86:bf:66:68:04:da:97: ec:3c:4d:a2:81:eb:fd:db:0b:84:50:da:e1:23:1f: 89:30:d2:79:e7:74:31:dd:43:c5:f5:14:73:37:25: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:EF:0C:11:00:9B:CD:AA:98:A9:0A:C1:FD:9A:23:CA:AE:3C:3F X509v3 Authority Key Identifier: keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/Sa_vDBEAm82qmKkKwf2aI8quPD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.148.0/22 Signature Algorithm: sha256WithRSAEncryption 76:13:7f:90:bf:c7:0d:a7:ad:78:fc:74:b8:64:82:7d:a2:00: 28:fb:3f:f3:be:07:14:b6:76:c0:fb:06:8b:7c:41:a5:17:bd: 6f:da:14:13:4e:d6:d8:64:e3:44:6c:0a:37:4f:a8:45:d0:75: 22:6e:7d:9c:92:50:ba:93:18:9d:47:6b:7d:fd:58:38:f8:37: 10:2b:a8:24:dc:7f:5e:f0:58:eb:5b:8e:89:17:63:33:56:83: 2a:06:2b:2f:ba:ef:33:f8:bb:4a:82:ff:18:00:58:38:dc:7d: 25:7c:6d:8a:71:2d:80:20:6d:a8:6e:0e:e4:07:0d:0e:08:68: 5d:e2:84:4b:e6:0b:4b:e2:2f:57:26:47:f5:8a:b2:b4:a6:ed: 91:91:49:51:2e:ba:08:12:71:a1:ed:49:b4:4f:a9:cb:9e:15: 04:90:ca:db:f4:db:c0:85:a2:9f:02:b9:09:90:e3:31:4f:b3: ba:bc:48:5e:8b:e4:f6:47:ec:04:07:fa:32:45:57:de:61:74: b2:1c:70:51:66:2a:09:31:68:4a:cb:da:21:b5:e8:a1:4d:68: ca:e8:b7:09:fb:43:cb:6d:fd:19:4c:22:a2:40:1c:8f:7d:c4: d7:8f:92:24:1e:80:30:65:85:64:79:11:7f:a3:9c:06:0e:74: 24:2f:7f:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WslH94CtjdOoiNanfotuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzNjYWU4NjU1NTY4NzMyNDMxOWQxMjI2OTM4YzcwM2Vl NGVkYzEwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWFmZWYwYzExMDA5YmNkYWE5OGE5MGFjMWZkOWEyM2NhYWUzYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/gLOQlr/Ci+WhT44XPtAJFXz3kl Uy+1y/LuCptXqhuXcUTGqDJYRTsvkARMeIf2r93i/SH1CjFOXA/9euHBCU+HfspR C2A2jFSFTz6+WExQ/JUTRBxeeIF3B8rh8E6mHHMOkIpIEA/MEtJEhUBhwo20vZFz 0LnfSCX98ZpV7TbaqduCTYgXys3NCE3t7M44btLYmml7gOJcSHRr0GMERnmjpVpi iRvva24/tUjhlQKPx6SQx2rb+N2nFPWI5geh2bWknyrq4ArWb+gmoxtVgKBCwDb0 3Trf6Ia/ZmgE2pfsPE2igev92wuEUNrhIx+JMNJ553Qx3UPF9RRzNyUpYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEmv7wwRAJvNqpipCsH9miPKrjw/MB8GA1UdIwQY MBaAFJDDyuhlVWhzJDGdEiaTjHA+5O3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01QSzZHVlZhSE1rTVowU0pwT01jRDdrN2NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82NGRiMjQtYmMzNi00Y2ExLWFiMDIt YjEzOWIyYTNmZTQ5LzEvU2FfdkRCRUFtODJxbUtrS3dmMmFJOHF1UEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC82NGRiMjQtYmMzNi00Y2ExLWFiMDItYjEzOWIyYTNmZTQ5 LzEva01QSzZHVlZhSE1rTVowU0pwT01jRDdrN2NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj6UMA0G CSqGSIb3DQEBCwUAA4IBAQB2E3+Qv8cNp614/HS4ZIJ9ogAo+z/zvgcUtnbA+waL fEGlF71v2hQTTtbYZONEbAo3T6hF0HUibn2cklC6kxidR2t9/Vg4+DcQK6gk3H9e 8FjrW46JF2MzVoMqBisvuu8z+LtKgv8YAFg43H0lfG2KcS2AIG2obg7kBw0OCGhd 4oRL5gtL4i9XJkf1irK0pu2RkUlRLroIEnGh7Um0T6nLnhUEkMrb9NvAhaKfArkJ kOMxT7O6vEhei+T2R+wEB/oyRVfeYXSyHHBRZioJMWhKy9ohteihTWjK6LcJ+0PL bf0ZTCKiQByPfcTXj5IkHoAwZYVkeRF/o5wGDnQkL39L -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:03 2026 by rpki-client