This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa File: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (raw, json) Hash identifier: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y= Subject key identifier: BF:8F:01:F0:3D:9C:C7:A5:5F:9F:44:16:BB:13:40:5A:65:74:3D:C6 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F59D236B048A5B69FDDB260C3E7A Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35219 IP address blocks: 185.64.64.0/22 maxlen: 24 185.185.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:9d:23:6b:04:8a:5b:69:fd:db:26:0c:3e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8f01f03d9cc7a55f9f4416bb13405a65743dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:ab:19:06:85:3d:a0:2b:cb:d0:08:00:7e: 01:d5:f9:ff:a7:25:9e:b6:8e:67:07:9d:e2:69:34: b1:e9:03:8d:f3:9a:6a:34:9e:37:53:a8:9e:c8:69: d4:5a:92:73:c5:9e:a7:4d:13:63:01:da:1c:ee:e9: f3:35:c4:b3:f5:3c:e9:ff:5b:15:fc:08:b1:b0:aa: 35:26:00:ea:60:b5:97:3c:a9:58:95:a7:18:0d:1d: 85:ec:45:8f:05:0e:70:88:72:ee:9c:67:c8:07:07: a1:f6:d9:95:45:60:8f:81:92:cc:80:08:92:1c:49: dc:79:1a:e2:26:b2:2d:b8:6c:6e:bd:ec:0c:c3:90: ae:7d:45:f7:c1:40:49:5d:10:57:9a:7c:e6:0a:4c: b3:da:13:cc:9b:b9:77:fc:db:93:70:d0:95:5a:9b: da:b9:18:51:5b:71:3e:1f:66:13:eb:d9:2b:db:f9: 1c:5a:0d:4b:66:bf:2e:b4:06:1b:3c:e6:1e:94:37: ea:ff:ae:89:88:a6:19:71:24:be:2f:e7:e7:ec:2b: 1f:07:04:99:11:b8:b7:c3:64:6f:2b:32:e8:70:4b: fb:34:d3:6a:ef:a5:b8:4c:a8:2c:29:6d:67:70:97: 3c:38:28:82:47:20:8d:e6:fa:ca:9f:72:3f:b7:a6: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:01:F0:3D:9C:C7:A5:5F:9F:44:16:BB:13:40:5A:65:74:3D:C6 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.64.0/22 185.185.228.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:f4:be:cd:20:91:2c:0f:40:12:57:e1:fa:01:3f:6c:27:73: 47:ea:ea:ff:f4:8e:a7:55:e6:bc:dc:64:4f:d6:1b:54:7f:7d: da:64:11:a0:58:40:43:fc:71:3e:a7:61:3f:df:cf:69:52:00: bd:f9:99:9c:b7:43:18:80:80:18:2d:ad:e6:db:1a:ca:f2:45: 96:a5:2d:5f:08:47:c1:f4:74:72:a6:20:d5:76:05:54:af:29: fc:5d:b5:eb:45:1e:fc:97:66:f4:be:ca:cb:0e:26:63:b0:36: 81:0b:ee:51:de:b0:62:e6:21:17:5c:76:78:26:1e:ec:a6:53: d2:e1:b0:df:e6:0f:0c:28:b2:a2:57:51:b3:64:1c:17:92:cc: 1f:39:d0:0d:11:0a:ad:c2:f4:bc:35:d0:0e:50:c1:8f:ad:dc: 93:e0:77:93:91:9a:d3:56:f6:ef:ad:80:be:16:a9:0a:6e:f4: 0f:3c:86:ac:9c:9f:87:b4:9e:92:23:c4:40:0a:1f:01:8d:a3: 94:86:cf:06:07:41:c4:b6:99:1a:65:16:19:ec:b5:20:6b:0e: 5f:8f:7b:a5:80:37:bf:15:5e:b9:c2:ca:9c:3a:4a:75:22:28: ba:32:dc:dd:19:27:16:8e:83:00:f8:f5:7c:6f:55:7d:54:74: dd:b9:9f:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NPWdI2sEiltp/dsmDD56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjhmMDFmMDNkOWNjN2E1NWY5ZjQ0MTZiYjEzNDA1YTY1NzQzZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rKrGQaFPaAry9AIAH4B1fn/pyWe to5nB53iaTSx6QON85pqNJ43U6ieyGnUWpJzxZ6nTRNjAdoc7unzNcSz9Tzp/1sV /AixsKo1JgDqYLWXPKlYlacYDR2F7EWPBQ5wiHLunGfIBweh9tmVRWCPgZLMgAiS HEnceRriJrItuGxuvewMw5CufUX3wUBJXRBXmnzmCkyz2hPMm7l3/NuTcNCVWpva uRhRW3E+H2YT69kr2/kcWg1LZr8utAYbPOYelDfq/66JiKYZcSS+L+fn7CsfBwSZ Ebi3w2RvKzLocEv7NNNq76W4TKgsKW1ncJc8OCiCRyCN5vrKn3I/t6YYwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL+PAfA9nMelX59EFrsTQFpldD3GMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvdjQ4QjhEMmN4NlZmbjBRV3V4TkFXbVYwUGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUBAAwQA ubnkMA0GCSqGSIb3DQEBCwUAA4IBAQA79L7NIJEsD0ASV+H6AT9sJ3NH6ur/9I6n Vea83GRP1htUf33aZBGgWEBD/HE+p2E/389pUgC9+Zmct0MYgIAYLa3m2xrK8kWW pS1fCEfB9HRypiDVdgVUryn8XbXrRR78l2b0vsrLDiZjsDaBC+5R3rBi5iEXXHZ4 Jh7splPS4bDf5g8MKLKiV1GzZBwXkswfOdANEQqtwvS8NdAOUMGPrdyT4HeTkZrT VvbvrYC+FqkKbvQPPIasnJ+HtJ6SI8RACh8BjaOUhs8GB0HEtpkaZRYZ7LUgaw5f j3ulgDe/FV65wsqcOkp1Iii6MtzdGScWjoMA+PV8b1V9VHTduZ8E -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:03 2026 by rpki-client