This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa File: RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa (raw, json) Hash identifier: 34EHgphrwj4YxmqwBGDa+7QYhkgQ4fOpOeCf2tXVnG4= Subject key identifier: 46:D1:A9:85:66:FE:9F:E3:4A:3E:0E:15:B1:0A:CC:64:D2:70:D5:84 Certificate issuer: /CN=fc4c512fe288ac6a63107d00414434329c43a284 Certificate serial: 019B76EABC9B0D467A2721529208456EE561 Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.248.20.0/22 maxlen: 22 2a09:f4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:9b:0d:46:7a:27:21:52:92:08:45:6e:e5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46d1a98566fe9fe34a3e0e15b10acc64d270d584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:4d:63:70:c4:a0:c1:17:3d:a1:32:a6:2f: 71:56:d1:b4:e5:7f:b3:64:ae:4a:4a:81:2c:9d:64: 41:68:f0:6a:5f:94:13:d2:ed:64:8f:25:c1:3c:26: 26:fa:9d:8d:27:1f:13:1b:eb:bf:78:0f:42:8d:00: 25:81:03:a3:f6:b7:35:89:db:4f:13:ae:a5:b0:b4: 3b:54:07:6f:68:36:03:a5:22:1f:d3:7e:ea:29:5c: 80:bd:5d:61:3e:65:97:5d:62:07:08:e5:a1:15:0f: 5e:d2:3e:cd:62:a9:c9:81:eb:b6:39:58:9b:13:84: 40:df:ed:73:be:fc:00:89:7e:ef:51:48:e5:a1:66: 71:57:7f:09:7a:c3:d9:34:95:54:34:a9:a6:04:0f: 56:a0:85:05:05:ff:bd:49:aa:a7:61:84:ae:e3:a9: 0c:1a:f2:84:2c:b4:40:0c:07:54:b6:01:c6:41:9d: 47:18:ae:fe:67:e7:35:21:b5:38:f5:0e:f0:91:f1: 16:3b:70:27:c6:70:fa:46:00:ea:a3:4b:69:16:a1: 04:f9:de:ec:9b:ca:3a:c8:73:c9:22:ac:e4:d9:a0: b3:52:5b:83:1e:8c:79:4e:ae:5a:c5:79:5c:c7:ff: 96:30:00:a8:dd:aa:ed:41:b9:f9:4f:50:a3:3e:1f: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D1:A9:85:66:FE:9F:E3:4A:3E:0E:15:B1:0A:CC:64:D2:70:D5:84 X509v3 Authority Key Identifier: keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.20.0/22 IPv6: 2a09:f4c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:aa:bd:6e:1e:fe:0f:a2:33:a4:39:f4:f0:9f:12:f7:31:3a: f2:87:9c:cb:51:41:e6:c9:d9:9e:89:55:3f:64:20:61:ed:2f: 12:17:30:76:40:d3:42:f5:31:68:ef:4b:0e:d4:4e:eb:04:57: e3:58:9c:77:5e:0d:8d:80:e4:6e:86:81:e6:b8:12:ce:46:67: a5:e5:ed:d4:98:10:00:6c:45:97:ce:04:f1:88:18:d5:0d:a0: fe:b2:25:7e:5c:36:f3:ce:63:16:77:90:65:e9:b8:64:b7:69: c6:0f:ae:bb:46:01:08:25:a7:19:85:9c:4b:61:37:cd:ae:cb: d4:89:76:a9:8d:d9:5a:51:9d:70:83:93:b7:49:2d:16:2c:55: c0:64:ba:e9:f8:ad:b1:d2:2f:a8:5d:80:88:43:ec:76:e1:5e: 7f:12:34:a5:4e:ae:2a:55:a3:cf:95:45:5a:1f:23:be:61:9a: d0:1a:76:69:82:e0:18:30:bb:0e:6f:eb:24:33:ea:2d:bd:89: f2:54:11:50:ea:5f:54:92:f4:ba:38:37:2e:cb:09:e1:d1:9b: 84:c0:db:0d:70:49:f7:75:9e:1b:01:a2:00:2a:a8:4c:d1:03: ca:ab:94:0c:40:62:ec:19:d9:b6:d7:12:f1:e2:b4:a7:12:3a: 05:ca:ee:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26rybDUZ6JyFSkghFbuVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0 M2EyODQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQxYTk4NTY2ZmU5ZmUzNGEzZTBlMTViMTBhY2M2NGQyNzBkNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtotNY3DEoMEXPaEypi9xVtG05X+z ZK5KSoEsnWRBaPBqX5QT0u1kjyXBPCYm+p2NJx8TG+u/eA9CjQAlgQOj9rc1idtP E66lsLQ7VAdvaDYDpSIf037qKVyAvV1hPmWXXWIHCOWhFQ9e0j7NYqnJgeu2OVib E4RA3+1zvvwAiX7vUUjloWZxV38JesPZNJVUNKmmBA9WoIUFBf+9SaqnYYSu46kM GvKELLRADAdUtgHGQZ1HGK7+Z+c1IbU49Q7wkfEWO3AnxnD6RgDqo0tpFqEE+d7s m8o6yHPJIqzk2aCzUluDHox5Tq5axXlcx/+WMACo3artQbn5T1CjPh/6PwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEbRqYVm/p/jSj4OFbEKzGTScNWEMB8GA1UdIwQY MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt MzE1YzAyYTU5ZmE1LzEvUnRHcGhXYi1uLU5LUGc0VnNRck1aTkp3MVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1 LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufgUMA0E AgACMAcDBQAqCfTAMA0GCSqGSIb3DQEBCwUAA4IBAQBOqr1uHv4PojOkOfTwnxL3 MTryh5zLUUHmydmeiVU/ZCBh7S8SFzB2QNNC9TFo70sO1E7rBFfjWJx3Xg2NgORu hoHmuBLORmel5e3UmBAAbEWXzgTxiBjVDaD+siV+XDbzzmMWd5Bl6bhkt2nGD667 RgEIJacZhZxLYTfNrsvUiXapjdlaUZ1wg5O3SS0WLFXAZLrp+K2x0i+oXYCIQ+x2 4V5/EjSlTq4qVaPPlUVaHyO+YZrQGnZpguAYMLsOb+skM+otvYnyVBFQ6l9UkvS6 ODcuywnh0ZuEwNsNcEn3dZ4bAaIAKqhM0QPKq5QMQGLsGdm21xLx4rSnEjoFyu7q -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:30 2026 by rpki-client