This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/348GlYel7WKf7j6VpPBbdI2F0AY.roa File: 348GlYel7WKf7j6VpPBbdI2F0AY.roa (raw, json) Hash identifier: 8CB29xF2GvA/FLxPFcEF5rA4l97+T5SM5ICvhUC1S3w= Subject key identifier: DF:8F:06:95:87:A5:ED:62:9F:EE:3E:95:A4:F0:5B:74:8D:85:D0:06 Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288 Certificate serial: 019B7C805272F27C7D69A7014D4A6561BE2D Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/348GlYel7WKf7j6VpPBbdI2F0AY.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205452 IP address blocks: 185.218.40.0/22 maxlen: 24 2a0b:d2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:52:72:f2:7c:7d:69:a7:01:4d:4a:65:61:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2922520b67b1abf7c403afa2235534326272288 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8f069587a5ed629fee3e95a4f05b748d85d006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:9a:42:87:b5:3f:1a:5d:3d:7a:f9:01:f2: f8:fd:3f:03:99:98:1d:f9:86:9f:ff:03:29:e5:a2: 73:79:0a:fc:0b:59:6a:17:fb:29:15:8e:a9:9f:3e: b9:2a:57:8f:32:f4:89:84:9d:5e:dd:88:81:b7:6d: 52:52:28:5c:75:49:3d:d1:9d:50:c2:5e:a4:82:cf: 78:3e:bd:b5:28:cd:18:8b:7a:f6:f9:30:8f:31:9d: 20:be:51:9c:a8:d5:58:cf:12:25:40:f1:2e:52:8f: ff:6a:54:2e:1c:15:89:b6:46:a2:00:81:ef:f9:f0: 0b:d5:44:ed:da:16:61:7b:5e:e2:96:35:69:7a:46: a6:8e:aa:bf:c6:c8:77:9c:11:b5:ae:2d:7f:ba:97: fd:54:4b:b9:ba:63:20:1f:10:bd:62:f3:b3:e9:20: 50:5c:62:09:72:b5:1f:93:ee:cf:bd:5d:cd:5e:c7: 90:9c:46:e7:6f:33:0f:61:a4:3e:6e:8e:7e:a9:cc: a3:3a:91:2e:a3:cb:62:63:56:9c:3c:96:f7:c1:a8: 3e:ec:ec:a8:b9:54:8e:8e:61:be:77:7b:9a:d4:fc: ba:68:48:da:e7:68:5e:e8:c9:35:e4:3f:b3:8b:90: 53:1f:2b:f6:da:4d:fe:97:57:01:50:b9:61:34:d3: 78:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8F:06:95:87:A5:ED:62:9F:EE:3E:95:A4:F0:5B:74:8D:85:D0:06 X509v3 Authority Key Identifier: keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/348GlYel7WKf7j6VpPBbdI2F0AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.40.0/22 IPv6: 2a0b:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 24:6e:fc:84:03:e7:b6:49:ef:99:42:e3:19:8b:71:03:c5:e5: 54:d6:88:a4:4f:3d:1b:00:36:e6:db:a0:bc:d9:c6:7a:42:38: 7d:03:d0:8e:a8:d4:f2:ea:5a:57:eb:5c:fb:dc:e3:a3:89:06: 87:84:46:13:96:24:7a:4d:f6:68:08:ba:4d:0a:8a:fe:a1:81: c8:5e:b4:38:5f:97:1a:a4:74:15:c8:6b:c6:3e:89:21:42:69: 3c:c6:7e:49:e1:77:33:ff:63:5b:f9:2f:7f:fb:82:d4:18:e9: 8e:16:9e:8b:01:4e:c4:97:e6:2a:11:4a:d9:52:1f:62:0b:b8: e9:67:ed:ca:a1:20:09:25:e3:90:f3:33:ef:9a:c8:3e:d1:c5: 29:63:33:32:1d:67:c6:83:b3:d2:fe:5c:a9:62:b3:ed:57:b2: 3f:35:a6:46:6a:50:42:43:cc:94:9f:36:bb:83:97:af:cb:ba: 34:50:b5:0e:cf:f9:f6:1c:d9:13:91:fc:35:5d:d0:77:b4:24: 4e:86:45:70:e4:dd:0d:a9:12:01:2a:a5:8e:8e:5a:41:4f:4c: e3:c8:04:76:fc:d3:f2:ec:40:08:27:10:93:77:91:20:a0:bb: 2d:74:f6:6d:73:ba:33:38:af:57:65:9b:4f:0c:99:ff:d6:22: 01:44:63:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gFJy8nx9aacBTUplYb4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy NzIyODgwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjhmMDY5NTg3YTVlZDYyOWZlZTNlOTVhNGYwNWI3NDhkODVkMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBiaQoe1PxpdPXr5AfL4/T8DmZgd +Yaf/wMp5aJzeQr8C1lqF/spFY6pnz65KlePMvSJhJ1e3YiBt21SUihcdUk90Z1Q wl6kgs94Pr21KM0Yi3r2+TCPMZ0gvlGcqNVYzxIlQPEuUo//alQuHBWJtkaiAIHv +fAL1UTt2hZhe17iljVpekamjqq/xsh3nBG1ri1/upf9VEu5umMgHxC9YvOz6SBQ XGIJcrUfk+7PvV3NXseQnEbnbzMPYaQ+bo5+qcyjOpEuo8tiY1acPJb3wag+7Oyo uVSOjmG+d3ua1Py6aEja52he6Mk15D+zi5BTHyv22k3+l1cBULlhNNN44wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN+PBpWHpe1in+4+laTwW3SNhdAGMB8GA1UdIwQY MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt NTAwYWJkOTNiOWQ0LzEvMzQ4R2xZZWw3V0tmN2o2VnBQQmJkSTJGMEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0 LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudooMA0E AgACMAcDBQMqC9LAMA0GCSqGSIb3DQEBCwUAA4IBAQAkbvyEA+e2Se+ZQuMZi3ED xeVU1oikTz0bADbm26C82cZ6Qjh9A9COqNTy6lpX61z73OOjiQaHhEYTliR6TfZo CLpNCor+oYHIXrQ4X5capHQVyGvGPokhQmk8xn5J4Xcz/2Nb+S9/+4LUGOmOFp6L AU7El+YqEUrZUh9iC7jpZ+3KoSAJJeOQ8zPvmsg+0cUpYzMyHWfGg7PS/lypYrPt V7I/NaZGalBCQ8yUnza7g5evy7o0ULUOz/n2HNkTkfw1XdB3tCROhkVw5N0NqRIB KqWOjlpBT0zjyAR2/NPy7EAIJxCTd5EgoLstdPZtc7ozOK9XZZtPDJn/1iIBRGMr -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:21 2026 by rpki-client