This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/T0PKdpY-NmquZZ8W5q5sczFw4HU.roa File: T0PKdpY-NmquZZ8W5q5sczFw4HU.roa (raw, json) Hash identifier: hAEz18QKEFNj/3DJHuJkTiVTgl3SDPgBVi0BIoWhL64= Subject key identifier: 4F:43:CA:76:96:3E:36:6A:AE:65:9F:16:E6:AE:6C:73:31:70:E0:75 Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Certificate serial: 019B7AC88C013E93B7C520C0E47D6139213B Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/T0PKdpY-NmquZZ8W5q5sczFw4HU.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49436 IP address blocks: 185.248.188.0/22 maxlen: 22 185.248.188.0/23 maxlen: 23 185.248.190.0/24 maxlen: 24 185.248.191.0/24 maxlen: 24 2a0e:1b00::/32 maxlen: 32 2a0e:1b01::/32 maxlen: 32 2a0e:1b07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8c:01:3e:93:b7:c5:20:c0:e4:7d:61:39:21:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f43ca76963e366aae659f16e6ae6c733170e075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:32:7e:92:13:c3:5c:2c:55:ff:e1:1e:b2:01: d5:c6:af:f4:2b:d9:8c:72:d9:6e:b6:e4:bb:d9:ab: bf:3a:85:5e:87:58:2c:b5:87:92:32:39:f8:40:75: 24:33:4b:4a:a5:f0:15:01:d6:63:f3:2d:69:07:de: 9e:2e:27:16:15:66:be:5d:b3:cf:e3:86:06:ad:bd: 07:a4:3a:d9:4b:71:42:3c:d9:18:19:31:b2:1e:ab: 29:8f:37:44:7f:f9:26:32:9d:02:71:32:76:a3:f1: 0b:fe:59:54:31:10:ad:fd:c5:24:05:cb:89:16:10: 1a:21:d7:c8:5c:9c:05:14:12:af:e8:e9:41:50:81: e9:e0:f0:68:6c:69:63:03:51:0b:02:fc:21:36:09: 44:9a:2f:ce:87:b1:d7:fb:41:c5:5b:3e:e9:de:26: 55:4f:26:08:f0:0d:63:92:c1:6f:dd:c8:7b:90:68: e9:f6:aa:e1:60:89:9b:53:b6:53:f8:b6:dc:0a:57: 8d:76:d5:75:52:8c:c8:e2:7b:c1:6f:7f:9f:c5:18: 1e:a5:95:b6:67:99:ca:4e:19:58:80:70:7d:ea:d1: 5b:34:99:b2:35:b7:02:aa:b4:cb:8a:b6:0d:b5:94: 36:e2:c3:a4:a4:8e:7f:5d:28:ed:2d:0d:29:66:00: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:CA:76:96:3E:36:6A:AE:65:9F:16:E6:AE:6C:73:31:70:E0:75 X509v3 Authority Key Identifier: keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/T0PKdpY-NmquZZ8W5q5sczFw4HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.188.0/22 IPv6: 2a0e:1b00::/31 2a0e:1b07::/32 Signature Algorithm: sha256WithRSAEncryption 46:2c:e4:47:f8:8c:ca:cb:47:69:31:57:48:5b:1e:fe:e0:3e: c8:06:87:5b:c6:90:57:e1:97:bd:56:04:26:ce:c1:5a:88:84: 90:c4:f3:3e:3b:ec:82:9c:b4:35:c7:23:f2:73:e1:47:de:bd: 71:9b:56:bd:3d:40:90:10:ad:a6:cc:06:a1:29:7f:73:58:8e: 0b:a2:38:4c:75:eb:9a:2f:86:66:b6:ad:68:ee:5b:01:2a:39: 1c:13:25:2c:e5:5d:df:93:39:aa:80:fb:ab:be:1d:41:21:e1: cc:6a:d5:c9:4b:e3:de:81:d1:96:7c:42:92:80:7e:16:43:90: eb:80:51:3e:ce:17:08:29:87:0d:91:1f:df:df:3f:52:ca:f0: 9f:75:61:22:e6:71:a0:f2:62:bf:58:94:32:2c:97:6a:f5:45: 1e:71:f9:11:4b:a7:9f:18:02:5e:41:41:e1:4d:d2:08:77:d7: 1a:4b:25:1e:38:96:c1:c9:08:0b:dd:eb:5d:e8:9b:e5:5b:19: eb:60:da:58:7e:a4:04:7d:6e:cf:53:6e:ed:20:15:a8:5b:17: e0:20:fb:fc:92:3d:7a:4c:4d:a9:78:1f:09:89:69:1e:00:8a: e6:7e:64:70:4f:e7:18:ef:61:30:c8:a9:0c:4a:f7:3c:3f:d4: 97:11:1f:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6yIwBPpO3xSDA5H1hOSE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy MjRiNGYwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQzY2E3Njk2M2UzNjZhYWU2NTlmMTZlNmFlNmM3MzMxNzBlMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/DJ+khPDXCxV/+EesgHVxq/0K9mM ctlutuS72au/OoVeh1gstYeSMjn4QHUkM0tKpfAVAdZj8y1pB96eLicWFWa+XbPP 44YGrb0HpDrZS3FCPNkYGTGyHqspjzdEf/kmMp0CcTJ2o/EL/llUMRCt/cUkBcuJ FhAaIdfIXJwFFBKv6OlBUIHp4PBobGljA1ELAvwhNglEmi/Oh7HX+0HFWz7p3iZV TyYI8A1jksFv3ch7kGjp9qrhYImbU7ZT+LbcCleNdtV1UozI4nvBb3+fxRgepZW2 Z5nKThlYgHB96tFbNJmyNbcCqrTLirYNtZQ24sOkpI5/XSjtLQ0pZgABswIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFE9DynaWPjZqrmWfFuaubHMxcOB1MB8GA1UdIwQY MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt MTMwNjk4YTU5NTljLzEvVDBQS2RwWS1ObXF1Wlo4VzVxNXNjekZ3NEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCufi8MBQE AgACMA4DBQEqDhsAAwUAKg4bBzANBgkqhkiG9w0BAQsFAAOCAQEARizkR/iMystH aTFXSFse/uA+yAaHW8aQV+GXvVYEJs7BWoiEkMTzPjvsgpy0Nccj8nPhR969cZtW vT1AkBCtpswGoSl/c1iOC6I4THXrmi+GZrataO5bASo5HBMlLOVd35M5qoD7q74d QSHhzGrVyUvj3oHRlnxCkoB+FkOQ64BRPs4XCCmHDZEf398/Usrwn3VhIuZxoPJi v1iUMiyXavVFHnH5EUunnxgCXkFB4U3SCHfXGkslHjiWwckIC93rXeib5VsZ62Da WH6kBH1uz1Nu7SAVqFsX4CD7/JI9ekxNqXgfCYlpHgCK5n5kcE/nGO9hMMipDEr3 PD/UlxEfPg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:18:26 2026 by rpki-client