This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/B1STsfdesV5NfTBKRKCVN2ABrCw.roa File: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (raw, json) Hash identifier: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0= Subject key identifier: 07:54:93:B1:F7:5E:B1:5E:4D:7D:30:4A:44:A0:95:37:60:01:AC:2C Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Certificate serial: 019B77589054961375DE1AB9665213BAC837 Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/B1STsfdesV5NfTBKRKCVN2ABrCw.roa Signing time: Thu 01 Jan 2026 02:17:31 +0000 ROA not before: Thu 01 Jan 2026 02:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 185.248.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:90:54:96:13:75:de:1a:b9:66:52:13:ba:c8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=075493b1f75eb15e4d7d304a44a095376001ac2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:e7:08:3e:02:51:63:c0:24:45:9b:34:41: 44:e5:26:93:e1:98:b8:54:5e:c5:9d:c3:0d:77:23: e4:2e:23:95:79:13:36:13:b1:80:9d:41:f4:49:15: ce:e0:bf:02:9d:5b:bf:43:79:62:76:e4:7b:22:73: 3c:d7:b8:a2:14:48:0c:72:e3:c2:61:a8:df:aa:ba: 33:c1:e4:19:da:29:e0:b2:fd:06:dd:ac:6b:e3:71: 28:af:ef:67:74:e9:bb:9f:74:7e:af:76:7f:90:99: 64:84:87:97:f3:75:1f:e7:40:7c:cb:91:83:60:fc: c5:8d:9f:0c:45:6b:04:55:bc:47:2b:a3:55:81:9c: eb:c6:51:bf:80:cb:6e:a9:c0:64:4e:1e:10:c2:9a: 79:f7:41:fb:67:d5:df:5c:78:3a:7b:bd:c8:14:e7: a3:1c:bf:ce:20:8b:fc:5b:2a:db:96:0d:51:9e:89: 9e:9c:d6:40:af:68:6e:50:b2:54:d1:f5:9e:0e:8e: fe:5e:b1:39:ae:d4:7e:d7:9c:4c:b7:15:a9:49:6b: b3:d1:00:51:74:97:96:e8:23:8a:45:d9:ea:88:00: 77:c6:b2:de:49:fd:be:04:6c:b8:72:4d:ff:ac:55: 60:bc:d4:27:f8:c8:a3:ae:ab:05:7a:05:19:53:d1: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:93:B1:F7:5E:B1:5E:4D:7D:30:4A:44:A0:95:37:60:01:AC:2C X509v3 Authority Key Identifier: keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/B1STsfdesV5NfTBKRKCVN2ABrCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.48.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:f5:50:11:b5:8a:b9:bf:62:ff:4b:fd:da:8d:32:9a:b8:e2: 1c:ef:e7:65:97:1d:80:9d:f6:aa:b3:df:e7:78:fd:47:61:4b: f6:2c:e6:1c:47:b7:dd:cf:1e:ec:09:05:f8:3c:ea:89:ef:a7: d2:be:06:1e:c6:1d:8e:3d:6d:2e:0c:94:28:88:51:c7:31:59: 09:11:2a:04:fe:2c:95:94:e9:ca:cb:66:5a:59:b4:d2:41:75: 14:a2:5f:fd:ab:92:78:56:81:c1:db:55:73:2e:19:2d:da:35: 4d:62:b0:3f:93:a0:41:14:e5:73:33:56:94:e0:e1:7e:12:cc: ff:7b:91:26:6f:e5:37:8c:1a:ca:fd:73:3b:9a:b1:7b:f5:11: 8b:ed:57:48:65:f4:69:0f:9d:29:e1:5c:40:5d:f7:f3:c5:7c: 4f:b0:8e:ca:39:c4:af:d1:d5:2a:de:6d:d2:66:49:72:6e:a7: 21:e6:07:be:70:ab:31:aa:52:20:9d:0a:3a:f4:7f:0c:5b:fc: 07:e9:ce:b2:f3:01:80:9e:66:12:06:83:dc:49:a1:82:01:70: 86:db:81:4f:06:ab:49:8d:87:c5:ad:a5:59:09:f0:cf:8f:92: cf:d8:4b:a5:89:3b:55:42:e3:a8:54:67:24:b6:32:d8:b8:6f: e4:e2:4e:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJBUlhN13hq5ZlITusg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj MWFlM2QwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU0OTNiMWY3NWViMTVlNGQ3ZDMwNGE0NGEwOTUzNzYwMDFhYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjnCD4CUWPAJEWbNEFE5SaT4Zi4 VF7FncMNdyPkLiOVeRM2E7GAnUH0SRXO4L8CnVu/Q3liduR7InM817iiFEgMcuPC YajfqrozweQZ2ingsv0G3axr43Eor+9ndOm7n3R+r3Z/kJlkhIeX83Uf50B8y5GD YPzFjZ8MRWsEVbxHK6NVgZzrxlG/gMtuqcBkTh4Qwpp590H7Z9XfXHg6e73IFOej HL/OIIv8Wyrblg1RnomenNZAr2huULJU0fWeDo7+XrE5rtR+15xMtxWpSWuz0QBR dJeW6COKRdnqiAB3xrLeSf2+BGy4ck3/rFVgvNQn+MijrqsFegUZU9FhfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdUk7H3XrFeTX0wSkSglTdgAawsMB8GA1UdIwQY MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt NTEzODdkMTYwYmE5LzEvQjFTVHNmZGVzVjVOZlRCS1JLQ1ZOMkFCckN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5 LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufgwMA0G CSqGSIb3DQEBCwUAA4IBAQAM9VARtYq5v2L/S/3ajTKauOIc7+dllx2Anfaqs9/n eP1HYUv2LOYcR7fdzx7sCQX4POqJ76fSvgYexh2OPW0uDJQoiFHHMVkJESoE/iyV lOnKy2ZaWbTSQXUUol/9q5J4VoHB21VzLhkt2jVNYrA/k6BBFOVzM1aU4OF+Esz/ e5Emb+U3jBrK/XM7mrF79RGL7VdIZfRpD50p4VxAXffzxXxPsI7KOcSv0dUq3m3S Zklybqch5ge+cKsxqlIgnQo69H8MW/wH6c6y8wGAnmYSBoPcSaGCAXCG24FPBqtJ jYfFraVZCfDPj5LP2EuliTtVQuOoVGcktjLYuG/k4k5T -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:03 2026 by rpki-client