This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/RCVCqspG4nYyJlueKPZjbpopS4k.roa File: RCVCqspG4nYyJlueKPZjbpopS4k.roa (raw, json) Hash identifier: yHItQNqKEboY2QYyZ9CN1gx2hTERLcmmpIzkhN7V0sQ= Subject key identifier: 44:25:42:AA:CA:46:E2:76:32:26:5B:9E:28:F6:63:6E:9A:29:4B:89 Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8 Certificate serial: 019B7B35C461EB32B025B5F3F67EC6C1D85F Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/RCVCqspG4nYyJlueKPZjbpopS4k.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51499 IP address blocks: 46.30.248.0/21 maxlen: 24 185.233.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c4:61:eb:32:b0:25:b5:f3:f6:7e:c6:c1:d8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=442542aaca46e27632265b9e28f6636e9a294b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:88:e3:c5:3f:9a:92:28:bc:5e:cf:81:58: eb:56:d0:b3:9c:b9:8c:81:39:53:90:6f:64:d9:b1: 81:f1:dc:93:1c:0e:8e:33:9a:37:d7:14:06:93:66: 01:26:89:b7:b1:93:8d:12:94:ad:3f:28:9d:eb:5e: 35:85:0b:3e:ac:af:32:16:a2:d5:b9:fc:cd:5a:31: 0d:2f:1e:a5:a1:b7:72:0e:92:be:5b:36:e7:b6:b2: 6d:ec:ee:cb:74:b2:f1:f9:4d:c8:81:67:ef:47:88: e5:55:28:3f:5f:ec:e3:9c:f8:78:67:fa:1b:dc:5c: 4c:df:7b:c5:99:23:b9:0b:10:e3:00:84:f6:7e:84: d7:25:92:df:b5:c2:d3:dd:aa:14:88:09:0b:c8:0d: 27:6e:30:e7:be:e6:fd:bd:1b:67:f2:16:1e:de:3f: 04:52:50:a2:21:73:da:d5:0c:04:9b:64:cc:8f:5c: 29:be:5e:ae:c0:24:14:3e:c3:cf:0b:57:11:9c:2e: e7:b0:95:76:4e:a8:a5:8f:b5:6d:fc:61:9a:34:6c: e4:c5:0f:86:5c:cb:8b:42:92:f2:37:b6:7e:9c:76: 94:af:b2:f6:cd:11:3b:64:06:e4:2e:d0:63:a8:9c: a6:35:27:bf:a1:3d:72:c5:51:50:12:37:1f:b8:68: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:25:42:AA:CA:46:E2:76:32:26:5B:9E:28:F6:63:6E:9A:29:4B:89 X509v3 Authority Key Identifier: keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/RCVCqspG4nYyJlueKPZjbpopS4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.248.0/21 185.233.248.0/22 Signature Algorithm: sha256WithRSAEncryption 50:82:ab:a9:1b:bd:d4:8d:37:89:fc:0b:cd:b1:87:d6:0d:39: 51:d5:7d:5c:d9:7f:48:a4:6e:82:57:fb:1e:42:cc:2f:03:10: 8a:69:22:06:76:85:ae:a4:d2:ec:b5:71:8c:a0:f4:82:48:d5: 6e:e6:a4:5c:89:72:8c:87:8a:a8:ae:18:59:a4:74:8c:7f:7e: 3f:e0:d3:12:95:ff:94:73:b1:71:7a:1e:12:06:d1:ef:d0:30: 5e:b1:0f:3d:ad:91:ce:42:ab:33:68:3d:d5:cf:7f:68:bb:8e: 9b:b6:d7:af:d8:b7:bc:ad:93:a8:e6:3f:da:3e:c4:91:71:c7: df:f2:b4:0f:d5:22:36:14:b5:c4:1d:45:24:63:72:d8:ff:e6: e6:14:41:24:64:55:da:d7:5b:33:67:18:36:c1:43:c9:5c:e7: 04:30:96:8f:ba:08:5e:bf:ce:57:f1:cc:e0:dd:0a:73:1e:c2: 85:76:94:cb:e4:72:56:32:18:72:c8:35:1f:2d:0d:82:5e:ed: 1e:3b:2e:91:12:50:69:60:e7:e5:da:6a:31:53:0f:b8:cb:c3: 38:13:e7:4b:5b:84:85:95:64:6c:53:40:2e:7f:7a:6a:a4:2a: a4:15:84:37:a5:7a:36:69:ed:98:c0:0c:ba:7e:87:4f:ee:a8: 83:35:81:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NcRh6zKwJbXz9n7GwdhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzM5OGMwNzMyNWM0MGU3ZDc2ZDIzOTZhMWJlODVjNDJm ZGMyYzgwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDI1NDJhYWNhNDZlMjc2MzIyNjViOWUyOGY2NjM2ZTlhMjk0Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VaI48U/mpIovF7PgVjrVtCznLmM gTlTkG9k2bGB8dyTHA6OM5o31xQGk2YBJom3sZONEpStPyid6141hQs+rK8yFqLV ufzNWjENLx6lobdyDpK+WzbntrJt7O7LdLLx+U3IgWfvR4jlVSg/X+zjnPh4Z/ob 3FxM33vFmSO5CxDjAIT2foTXJZLftcLT3aoUiAkLyA0nbjDnvub9vRtn8hYe3j8E UlCiIXPa1QwEm2TMj1wpvl6uwCQUPsPPC1cRnC7nsJV2Tqilj7Vt/GGaNGzkxQ+G XMuLQpLyN7Z+nHaUr7L2zRE7ZAbkLtBjqJymNSe/oT1yxVFQEjcfuGgOhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEQlQqrKRuJ2MiZbnij2Y26aKUuJMB8GA1UdIwQY MBaAFLXDmMBzJcQOfXbSOWob6FxC/cLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUt YWYxMzdjY2IyYjY5LzEvUkNWQ3FzcEc0bll5Smx1ZUtQWmpicG9wUzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yODNlOGYtYmRhMi00OWRjLThhZmUtYWYxMzdjY2IyYjY5 LzEvdGNPWXdITWx4QTU5ZHRJNWFodm9YRUw5d3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh74AwQC uen4MA0GCSqGSIb3DQEBCwUAA4IBAQBQgqupG73UjTeJ/AvNsYfWDTlR1X1c2X9I pG6CV/seQswvAxCKaSIGdoWupNLstXGMoPSCSNVu5qRciXKMh4qorhhZpHSMf34/ 4NMSlf+Uc7Fxeh4SBtHv0DBesQ89rZHOQqszaD3Vz39ou46bttev2Le8rZOo5j/a PsSRccff8rQP1SI2FLXEHUUkY3LY/+bmFEEkZFXa11szZxg2wUPJXOcEMJaPughe v85X8czg3QpzHsKFdpTL5HJWMhhyyDUfLQ2CXu0eOy6RElBpYOfl2moxUw+4y8M4 E+dLW4SFlWRsU0Auf3pqpCqkFYQ3pXo2ae2YwAy6fodP7qiDNYFm -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:39 2026 by rpki-client