This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/47pEOcmY00O0DUGgL3Q3yGiCQHE.roa File: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (raw, json) Hash identifier: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI= Subject key identifier: E3:BA:44:39:C9:98:D3:43:B4:0D:41:A0:2F:74:37:C8:68:82:40:71 Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019B7DC94DD01D11B77BA0E7E370EFFC2AA3 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/47pEOcmY00O0DUGgL3Q3yGiCQHE.roa Signing time: Fri 02 Jan 2026 08:18:23 +0000 ROA not before: Fri 02 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 812 IP address blocks: 66.220.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:4d:d0:1d:11:b7:7b:a0:e7:e3:70:ef:fc:2a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Jan 2 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ba4439c998d343b40d41a02f7437c868824071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:e7:29:c7:eb:b7:09:4c:de:cf:ed:60:a6: e5:7d:38:63:97:fb:0f:33:89:e8:94:2f:24:14:5a: 6c:4c:43:aa:03:a3:72:2d:ca:ea:1c:90:b4:1d:a4: 2d:d9:b4:af:34:4b:70:7a:2b:1b:04:18:a4:2d:f9: d3:cb:40:79:e5:9a:09:5a:00:b3:24:77:ca:ed:48: 0d:b4:32:ff:e8:75:25:52:cb:67:d7:57:7b:6b:e4: 65:91:76:fa:36:7a:d3:56:ba:97:4d:d2:25:e2:28: eb:25:d5:ed:a2:27:2f:8b:ba:a4:6c:1e:b9:63:94: 2b:40:3d:06:3e:a3:41:61:55:e6:97:b7:03:88:53: 31:a8:4b:4a:70:cb:17:40:36:c2:d8:48:dc:44:6c: eb:1f:c9:8d:bf:b6:2c:02:8c:b0:ce:7d:fb:b2:c3: f0:b8:38:ab:93:da:c0:8b:cc:fa:21:1e:0d:9e:9e: 49:6a:81:f7:82:50:37:76:8d:05:6b:ea:f1:d4:0f: 1c:8a:39:b8:3d:73:05:bd:df:2e:af:28:19:dd:85: c9:fd:2b:95:15:76:fb:e2:f0:2d:79:2f:9d:7b:e5: 8a:22:7c:40:83:d7:f1:d7:5b:e8:33:bd:92:5c:a5: 6a:2e:f6:e9:05:5a:4b:4b:8e:77:31:a0:6e:8e:b0: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BA:44:39:C9:98:D3:43:B4:0D:41:A0:2F:74:37:C8:68:82:40:71 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/47pEOcmY00O0DUGgL3Q3yGiCQHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.220.47.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:79:be:88:cd:cb:a2:75:54:a0:0d:3e:a3:e2:f8:d9:99:1e: e2:5d:f1:cf:61:77:ae:f9:77:a4:25:27:4f:4c:d1:2b:b7:6c: 7a:bf:99:9e:4d:8d:bf:c4:63:b2:db:f4:48:c1:1c:a9:cc:fa: 95:af:a5:f2:d4:a0:bb:8c:59:ee:8c:04:cb:52:cb:f0:1e:b5: 06:45:a5:4f:75:b2:8e:b2:38:92:f1:11:53:ae:0e:8c:89:1d: e1:39:ef:13:aa:de:41:ab:b1:11:b6:e9:65:cb:20:d1:8f:bd: eb:39:84:f7:7e:b7:52:f5:ed:3e:54:24:ab:e0:1c:b5:57:c3: 8e:c1:05:e7:35:84:14:1b:fd:5a:c4:a3:f0:5e:f9:68:9d:c0: 23:3e:41:df:6f:cd:e7:c8:4d:6e:22:65:5d:f6:93:e2:c0:70: 58:93:a2:a7:81:36:23:41:f8:e4:4f:1f:33:26:17:02:2f:88: 38:61:27:6e:98:8a:20:26:9e:f2:a9:a5:62:b4:25:3c:30:13: 22:b8:20:34:d7:2b:79:c7:82:70:97:03:fe:ec:b2:2d:ea:fd: 60:2e:fb:98:9c:ce:1f:36:6d:3e:49:50:f0:6a:50:2b:01:18: ca:92:ff:f6:93:22:f2:ba:fc:40:08:6a:e5:e3:37:67:f3:da: eb:bd:45:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yU3QHRG3e6Dn43Dv/CqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMTAyMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2JhNDQzOWM5OThkMzQzYjQwZDQxYTAyZjc0MzdjODY4ODI0MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHnKcfrtwlM3s/tYKblfThjl/sP M4nolC8kFFpsTEOqA6NyLcrqHJC0HaQt2bSvNEtweisbBBikLfnTy0B55ZoJWgCz JHfK7UgNtDL/6HUlUstn11d7a+RlkXb6NnrTVrqXTdIl4ijrJdXtoicvi7qkbB65 Y5QrQD0GPqNBYVXml7cDiFMxqEtKcMsXQDbC2EjcRGzrH8mNv7YsAoywzn37ssPw uDirk9rAi8z6IR4Nnp5JaoH3glA3do0Fa+rx1A8cijm4PXMFvd8urygZ3YXJ/SuV FXb74vAteS+de+WKInxAg9fx11voM72SXKVqLvbpBVpLS453MaBujrA/1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOO6RDnJmNNDtA1BoC90N8hogkBxMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvNDdwRU9jbVkwME8wRFVHZ0wzUTN5R2lDUUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwvMA0G CSqGSIb3DQEBCwUAA4IBAQB/eb6IzcuidVSgDT6j4vjZmR7iXfHPYXeu+XekJSdP TNErt2x6v5meTY2/xGOy2/RIwRypzPqVr6Xy1KC7jFnujATLUsvwHrUGRaVPdbKO sjiS8RFTrg6MiR3hOe8Tqt5Bq7ERtullyyDRj73rOYT3frdS9e0+VCSr4By1V8OO wQXnNYQUG/1axKPwXvloncAjPkHfb83nyE1uImVd9pPiwHBYk6KngTYjQfjkTx8z JhcCL4g4YSdumIogJp7yqaVitCU8MBMiuCA01yt5x4JwlwP+7LIt6v1gLvuYnM4f Nm0+SVDwalArARjKkv/2kyLyuvxACGrl4zdn89rrvUXh -----END CERTIFICATE-----Generated at Mon Jan 19 11:24:42 2026 by rpki-client