This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/IQ8FAOOJByrHSMChSBlZ88iHvt0.roa File: IQ8FAOOJByrHSMChSBlZ88iHvt0.roa (raw, json) Hash identifier: lJpaXIYxGHP0owQ3ZjIzWZPx1+jN3QXVVl27UeQeST0= Subject key identifier: 21:0F:05:00:E3:89:07:2A:C7:48:C0:A1:48:19:59:F3:C8:87:BE:DD Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33 Certificate serial: 019B78A369B23A9B30880BF0BC62C18A2E5C Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/IQ8FAOOJByrHSMChSBlZ88iHvt0.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206022 IP address blocks: 185.48.140.0/24 maxlen: 24 185.48.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:69:b2:3a:9b:30:88:0b:f0:bc:62:c1:8a:2e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210f0500e389072ac748c0a1481959f3c887bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:5b:f0:55:06:ec:4f:56:77:af:9b:d4:65: 20:7a:70:4b:39:6f:a5:39:d6:40:80:07:dc:77:7c: eb:17:ea:c7:fe:88:a1:01:e8:c8:1e:48:18:3e:90: 70:99:95:64:3a:f0:f3:70:13:04:b8:35:7e:0c:cc: ca:45:26:f0:d7:36:45:54:46:79:a1:77:f0:dc:7e: 72:af:5a:36:91:4a:dc:2d:92:07:25:0d:38:d0:79: 49:23:06:fa:5a:d1:98:85:e3:79:f5:71:34:e3:79: 77:05:79:a3:7c:79:1c:43:04:33:27:48:a0:fa:34: 39:92:b6:3f:b8:45:52:45:cd:b9:89:12:33:bb:4a: 44:68:7a:2e:47:75:4f:03:02:fb:ce:5c:65:02:d7: 7a:e2:74:06:1e:83:2b:2c:d6:76:69:7d:d1:75:fa: 0a:4f:6c:2b:c6:84:48:a1:fd:32:84:91:ff:54:9d: e4:ce:ea:b4:ff:6d:e6:6b:d9:56:8d:86:78:37:fe: 7a:8a:57:3a:90:c3:0a:ad:67:a0:b9:8d:33:e9:bb: b7:a4:72:5b:6c:33:50:84:3c:33:c5:e3:bd:b3:0c: 82:bc:6e:b0:32:bc:d3:35:b0:05:14:ae:2f:9f:a3: ae:85:31:d9:8c:ce:97:57:cf:65:e8:ac:9b:f8:30: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0F:05:00:E3:89:07:2A:C7:48:C0:A1:48:19:59:F3:C8:87:BE:DD X509v3 Authority Key Identifier: keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/IQ8FAOOJByrHSMChSBlZ88iHvt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.140.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:fb:74:39:24:eb:77:d6:d7:b1:19:03:6b:86:5e:25:99:7b: fc:40:ec:f5:c8:b8:41:2c:80:9a:dc:4a:cc:a2:2e:a0:31:ab: 38:e0:16:b4:04:20:3e:11:10:17:02:d4:c1:ff:80:95:4b:be: 3b:88:59:47:e8:44:30:6a:7b:2c:2d:ce:09:b1:1c:08:6a:1e: 1e:9d:f3:05:3b:b1:45:ba:9a:c3:8d:3f:0e:1d:40:16:3d:cd: 66:66:97:d6:de:d4:96:59:72:b9:bd:55:2e:22:1e:95:de:7a: d9:f8:48:de:a1:b9:74:a4:f7:48:a2:11:bd:e0:43:36:ad:cd: 14:25:6d:c2:15:f0:93:f5:c7:d1:ad:0f:e7:71:72:de:a0:70: f9:09:74:95:a2:b9:0c:45:0a:68:21:8d:25:0d:b8:c7:8a:59: d6:47:01:0c:6e:b1:85:2c:2b:4d:da:5f:d6:94:74:9b:ad:f6: 24:06:4a:47:05:ba:74:96:ed:d2:02:b4:b1:2c:b9:5d:18:40: 05:81:d4:ea:2a:df:54:3d:f8:34:10:da:71:16:9f:de:b1:65: 88:d7:46:d7:30:3c:11:73:29:97:f6:f2:1e:2e:70:8a:12:bd: 6a:9b:24:36:9e:af:3e:74:8c:6e:16:34:06:65:7f:ab:d8:f6: 6c:41:41:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2myOpswiAvwvGLBii5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDUzMmI0Zjc0M2NmOTVjYmVjMTg2ODFiYTY3YWM1ZGI4 NTRmMzMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBmMDUwMGUzODkwNzJhYzc0OGMwYTE0ODE5NTlmM2M4ODdiZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZxb8FUG7E9Wd6+b1GUgenBLOW+l OdZAgAfcd3zrF+rH/oihAejIHkgYPpBwmZVkOvDzcBMEuDV+DMzKRSbw1zZFVEZ5 oXfw3H5yr1o2kUrcLZIHJQ040HlJIwb6WtGYheN59XE043l3BXmjfHkcQwQzJ0ig +jQ5krY/uEVSRc25iRIzu0pEaHouR3VPAwL7zlxlAtd64nQGHoMrLNZ2aX3RdfoK T2wrxoRIof0yhJH/VJ3kzuq0/23ma9lWjYZ4N/56ilc6kMMKrWeguY0z6bu3pHJb bDNQhDwzxeO9swyCvG6wMrzTNbAFFK4vn6OuhTHZjM6XV89l6Kyb+DCUawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEPBQDjiQcqx0jAoUgZWfPIh77dMB8GA1UdIwQY MBaAFJJFMrT3Q8+Vy+wYaBumesXbhU8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzIt MzhlZDcxNTU5OTVjLzEvSVE4RkFPT0pCeXJIU01DaFNCbFo4OGlIdnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yYjlmMDEtYTU2ZS00YmU5LWFkMzItMzhlZDcxNTU5OTVj LzEva2tVeXRQZER6NVhMN0Job0c2WjZ4ZHVGVHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTCMMA0G CSqGSIb3DQEBCwUAA4IBAQCf+3Q5JOt31texGQNrhl4lmXv8QOz1yLhBLICa3ErM oi6gMas44Ba0BCA+ERAXAtTB/4CVS747iFlH6EQwanssLc4JsRwIah4enfMFO7FF uprDjT8OHUAWPc1mZpfW3tSWWXK5vVUuIh6V3nrZ+Ejeobl0pPdIohG94EM2rc0U JW3CFfCT9cfRrQ/ncXLeoHD5CXSVorkMRQpoIY0lDbjHilnWRwEMbrGFLCtN2l/W lHSbrfYkBkpHBbp0lu3SArSxLLldGEAFgdTqKt9UPfg0ENpxFp/esWWI10bXMDwR cymX9vIeLnCKEr1qmyQ2nq8+dIxuFjQGZX+r2PZsQUG0 -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:11 2026 by rpki-client