This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa File: z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa (raw, json) Hash identifier: GmD2v7t0pIsrh27JBf/zFN4lRzjdZKNMPUUOE0IIN3c= Subject key identifier: CF:9A:C5:C6:09:C2:9D:A3:C9:1F:56:BB:2C:3E:45:2F:6C:DA:1A:CF Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32 Certificate serial: 019B797EA624485F974DB7645AA268422BD4 Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199728 IP address blocks: 185.48.112.0/24 maxlen: 24 185.48.113.0/24 maxlen: 24 185.48.114.0/23 maxlen: 23 2a04:adc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:24:48:5f:97:4d:b7:64:5a:a2:68:42:2b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf9ac5c609c29da3c91f56bb2c3e452f6cda1acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:f6:89:16:ad:6b:84:90:34:70:8b:34:be: cd:36:fe:c8:e4:cd:b0:03:1e:a0:e6:a0:38:4a:b3: a2:9e:bd:3f:74:04:71:1a:06:66:81:08:d2:ec:a5: ba:47:92:51:e6:b2:f0:e5:17:da:b5:5d:84:26:ac: d8:4a:62:2d:d6:05:ab:44:b4:9b:cc:b4:67:b5:15: df:de:72:4d:6a:6a:f3:0c:8c:6e:25:7c:cb:45:a3: b1:4a:e4:1b:7b:6d:4b:56:43:77:b3:ff:40:51:c7: cd:10:a3:ee:2c:a3:1d:8c:b4:ea:e6:c5:28:93:eb: 8a:35:d6:63:5b:1a:af:b2:61:ae:7b:ac:68:b9:1f: 54:73:39:bd:bb:04:4f:e8:31:66:7a:87:1a:e8:5f: 2c:8c:95:bf:69:b2:cc:9f:b5:88:3c:db:a3:ce:bc: 26:bf:40:69:e7:7a:c8:0d:f4:2f:ba:6d:5b:68:8a: 21:3d:c4:eb:13:cf:17:d4:b3:cb:fb:f3:db:28:3c: 42:ee:85:ab:d2:cf:34:a5:b3:e5:d9:d1:36:75:b5: a5:93:87:5f:b4:91:5c:ba:25:0d:0c:03:44:e6:2e: ac:c6:aa:07:d0:d9:36:f6:32:68:7d:30:02:6f:ed: e1:4a:ab:2a:77:2b:63:bf:c8:72:f6:08:18:22:2d: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:C5:C6:09:C2:9D:A3:C9:1F:56:BB:2C:3E:45:2F:6C:DA:1A:CF X509v3 Authority Key Identifier: keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.112.0/22 IPv6: 2a04:adc0::/29 Signature Algorithm: sha256WithRSAEncryption 5c:5a:35:1a:6f:b2:7c:d1:d4:75:89:16:bc:49:1b:8a:00:0d: d7:57:91:e8:d9:3b:90:56:9d:b7:8c:e5:09:eb:24:f2:b4:2b: ce:9d:63:95:2b:eb:09:86:f3:28:8f:6e:62:da:4d:e4:ec:a3: 74:2b:8f:94:25:d0:f9:25:3a:f3:ae:ff:c4:2d:3f:ca:7c:56: 5b:9f:c4:30:48:48:d4:5d:64:49:ea:df:76:e8:4b:1a:8d:56: 16:e1:94:f5:3d:85:f9:b5:89:ff:f0:86:5c:46:93:64:3f:d4: 42:e2:12:45:01:40:5c:8e:db:58:17:ae:e2:22:3a:65:47:01: 30:ee:42:6c:1a:de:64:77:46:47:0a:5e:bf:e2:97:76:c0:e1: f2:15:fc:ba:d5:23:a0:16:4c:8d:41:5b:41:fe:41:54:da:69: 8a:4c:a2:a5:e8:08:25:43:11:d9:6f:f2:a3:ea:63:84:1f:c2: c7:6f:3b:3e:73:e1:d1:f2:77:2f:5c:49:73:7c:cc:e9:a9:68: 53:fa:fc:9d:6f:de:a8:d3:b5:b6:1e:4c:c5:fc:d6:33:19:87: 36:9a:15:4d:71:52:2f:c2:f8:c7:e3:aa:e1:e5:c8:f7:75:0e: 3a:61:dc:ee:45:ba:b2:1e:17:70:37:e4:2c:e3:ac:71:cf:ec: 01:23:d6:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fqYkSF+XTbdkWqJoQivUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWEzOTZmNGRlMzU1ZGE4ZGMwNzlhMWU4ODVlMGMzMzc1 ZWNlMzIwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjlhYzVjNjA5YzI5ZGEzYzkxZjU2YmIyYzNlNDUyZjZjZGExYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRb2iRata4SQNHCLNL7NNv7I5M2w Ax6g5qA4SrOinr0/dARxGgZmgQjS7KW6R5JR5rLw5RfatV2EJqzYSmIt1gWrRLSb zLRntRXf3nJNamrzDIxuJXzLRaOxSuQbe21LVkN3s/9AUcfNEKPuLKMdjLTq5sUo k+uKNdZjWxqvsmGue6xouR9Uczm9uwRP6DFmeoca6F8sjJW/abLMn7WIPNujzrwm v0Bp53rIDfQvum1baIohPcTrE88X1LPL+/PbKDxC7oWr0s80pbPl2dE2dbWlk4df tJFcuiUNDANE5i6sxqoH0Nk29jJofTACb+3hSqsqdytjv8hy9ggYIi07GwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM+axcYJwp2jyR9Wuyw+RS9s2hrPMB8GA1UdIwQY MBaAFK/qOW9N41XajcB5oeiF4MM3Xs4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQt ZjVkYmRmNzIyZjVkLzEvejVyRnhnbkNuYVBKSDFhN0xENUZMMnphR3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZTNmN2ItYzc4Zi00NjYzLWJmMWQtZjVkYmRmNzIyZjVk LzEvci1vNWIwM2pWZHFOd0htaDZJWGd3emRlempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTBwMA0E AgACMAcDBQMqBK3AMA0GCSqGSIb3DQEBCwUAA4IBAQBcWjUab7J80dR1iRa8SRuK AA3XV5Ho2TuQVp23jOUJ6yTytCvOnWOVK+sJhvMoj25i2k3k7KN0K4+UJdD5JTrz rv/ELT/KfFZbn8QwSEjUXWRJ6t926EsajVYW4ZT1PYX5tYn/8IZcRpNkP9RC4hJF AUBcjttYF67iIjplRwEw7kJsGt5kd0ZHCl6/4pd2wOHyFfy61SOgFkyNQVtB/kFU 2mmKTKKl6AglQxHZb/Kj6mOEH8LHbzs+c+HR8ncvXElzfMzpqWhT+vydb96o07W2 HkzF/NYzGYc2mhVNcVIvwvjH46rh5cj3dQ46YdzuRbqyHhdwN+Qs46xxz+wBI9Zf -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:00 2026 by rpki-client