This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/s48bE7zPFBsdxI3PwTkDcvxFl10.roa File: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (raw, json) Hash identifier: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE= Subject key identifier: B3:8F:1B:13:BC:CF:14:1B:1D:C4:8D:CF:C1:39:03:72:FC:45:97:5D Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Certificate serial: 019B7AC7ED740284D4905BBC2714D07C48CC Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/s48bE7zPFBsdxI3PwTkDcvxFl10.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198367 IP address blocks: 91.234.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ed:74:02:84:d4:90:5b:bc:27:14:d0:7c:48:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38f1b13bccf141b1dc48dcfc1390372fc45975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:2d:c4:ab:7d:63:b3:66:b3:9d:41:09:3c: c8:1e:34:a0:14:87:d2:30:c9:76:fd:29:1a:d2:df: 9d:60:7d:75:d0:f6:d8:36:ec:29:ef:51:ba:9e:a5: f9:23:b1:b2:82:fe:d8:1a:40:25:88:c2:77:71:0d: 9c:c9:09:bd:1f:c0:4d:44:c8:2d:fb:04:5b:99:bd: ea:4d:77:d1:18:0d:be:2d:57:3e:9c:41:f7:6e:c6: d6:92:ef:af:39:23:0b:ca:43:a1:61:ab:fb:8c:4e: f5:d8:c5:55:9b:c7:1d:59:a2:44:a4:e9:35:85:99: 6c:61:e4:3d:3d:72:da:65:88:8f:33:de:48:35:84: 14:60:71:4c:69:49:58:39:12:3c:fb:62:df:f0:c5: c4:0d:91:08:bc:a4:11:30:db:85:f7:0c:0a:48:2f: 12:77:3b:04:07:2c:97:94:22:18:5b:12:fa:5d:e4: 8b:16:a6:e2:f1:4b:60:f1:62:ab:6b:65:eb:16:58: 30:4d:e8:79:65:13:2e:97:b7:1f:fc:87:52:f7:6e: c8:fa:0b:d8:dd:64:90:50:1f:5b:7e:16:5a:bd:f7: 0e:5d:95:6c:98:99:1c:4e:2e:af:86:7e:02:47:23: 12:08:ed:60:34:13:d3:f7:51:58:08:9a:f9:28:b2: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:1B:13:BC:CF:14:1B:1D:C4:8D:CF:C1:39:03:72:FC:45:97:5D X509v3 Authority Key Identifier: keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/s48bE7zPFBsdxI3PwTkDcvxFl10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.60.0/22 Signature Algorithm: sha256WithRSAEncryption 45:d3:e1:54:f3:cd:1e:13:41:d8:17:b8:ba:98:01:86:14:5d: 62:4c:08:12:0a:db:57:de:d6:f6:77:3f:31:2a:f8:22:8e:79: 9a:21:03:3c:0b:05:97:76:12:4c:a9:f5:71:4f:58:b8:58:f8: eb:da:91:2c:60:61:87:eb:42:42:c7:ec:ab:fa:cc:40:e9:0d: 80:bd:ee:4f:c7:e2:23:5a:3e:04:6a:4c:e6:90:94:63:4c:e3: 7c:30:5a:7f:49:db:6c:39:ae:71:fb:0d:05:83:38:4a:9b:c2: ae:24:71:fe:0d:4c:c2:0b:98:c2:4d:ac:d5:f8:04:76:38:69: 29:e4:51:77:1b:c4:4b:28:3f:f3:48:f5:07:09:d1:2d:ae:11: 5c:bb:f6:b2:b6:8a:2a:43:07:67:5d:d9:09:af:5c:9b:05:b1: 3c:18:1c:c9:10:19:49:4b:84:30:5a:fd:97:97:9a:eb:5f:5d: 3e:ae:c2:7f:72:35:e7:15:4d:75:b2:6b:19:21:4e:31:4d:fd: 67:ad:c7:09:23:21:76:c1:59:96:8c:1a:6d:6e:79:cc:20:e1: b4:a7:8b:6e:7a:a4:08:f7:fe:bd:92:d7:d5:bf:b3:62:5e:55: 6d:b3:3d:1f:78:ca:23:ef:bb:46:66:99:16:a9:7c:d8:7d:35: 96:5e:a2:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+10AoTUkFu8JxTQfEjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi M2VlYzcwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhmMWIxM2JjY2YxNDFiMWRjNDhkY2ZjMTM5MDM3MmZjNDU5NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9UtxKt9Y7Nms51BCTzIHjSgFIfS MMl2/Ska0t+dYH110PbYNuwp71G6nqX5I7Gygv7YGkAliMJ3cQ2cyQm9H8BNRMgt +wRbmb3qTXfRGA2+LVc+nEH3bsbWku+vOSMLykOhYav7jE712MVVm8cdWaJEpOk1 hZlsYeQ9PXLaZYiPM95INYQUYHFMaUlYORI8+2Lf8MXEDZEIvKQRMNuF9wwKSC8S dzsEByyXlCIYWxL6XeSLFqbi8Utg8WKra2XrFlgwTeh5ZRMul7cf/IdS927I+gvY 3WSQUB9bfhZavfcOXZVsmJkcTi6vhn4CRyMSCO1gNBPT91FYCJr5KLJPOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOPGxO8zxQbHcSNz8E5A3L8RZddMB8GA1UdIwQY MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt Mzc5NzMzYWIzOGNkLzEvczQ4YkU3elBGQnNkeEkzUHdUa0RjdnhGbDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+o8MA0G CSqGSIb3DQEBCwUAA4IBAQBF0+FU880eE0HYF7i6mAGGFF1iTAgSCttX3tb2dz8x KvgijnmaIQM8CwWXdhJMqfVxT1i4WPjr2pEsYGGH60JCx+yr+sxA6Q2Ave5Px+Ij Wj4EakzmkJRjTON8MFp/SdtsOa5x+w0FgzhKm8KuJHH+DUzCC5jCTazV+AR2OGkp 5FF3G8RLKD/zSPUHCdEtrhFcu/aytooqQwdnXdkJr1ybBbE8GBzJEBlJS4QwWv2X l5rrX10+rsJ/cjXnFU11smsZIU4xTf1nrccJIyF2wVmWjBptbnnMIOG0p4tueqQI 9/69ktfVv7NiXlVtsz0feMoj77tGZpkWqXzYfTWWXqJT -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:14 2026 by rpki-client