This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/49TpBZIbyHobsWcoh4oSwqHHj24.roa File: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (raw, json) Hash identifier: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU= Subject key identifier: E3:D4:E9:05:92:1B:C8:7A:1B:B1:67:28:87:8A:12:C2:A1:C7:8F:6E Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019B78A3036DBBBB497EEF15D7ACE1947D4E Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/49TpBZIbyHobsWcoh4oSwqHHj24.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208299 IP address blocks: 185.161.218.0/24 maxlen: 24 185.161.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:6d:bb:bb:49:7e:ef:15:d7:ac:e1:94:7d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d4e905921bc87a1bb16728878a12c2a1c78f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:a5:a8:97:5f:63:bc:d2:06:6c:93:d8:7a: a3:53:b9:90:ac:31:49:b9:47:e0:d0:4f:3f:3a:a4: 37:6c:da:c4:fa:d2:a3:6c:85:b3:20:f5:f4:78:a8: 68:44:25:e3:c8:a7:f5:00:09:81:0c:4c:4f:e8:94: f9:fc:70:71:28:9d:f5:8a:ba:bc:c7:44:b7:98:5a: be:c3:2f:d3:e0:42:59:7a:b6:9c:c1:3d:d8:6e:a1: af:71:13:de:60:8d:74:5d:60:22:30:a0:8f:6b:3c: 1b:96:c6:5c:ec:f4:d3:0a:e6:5a:d8:87:0c:a7:ff: c1:9d:71:d2:c8:70:0b:39:ca:76:c0:a5:07:75:de: 97:9d:c9:92:b6:d7:b0:31:98:19:26:ae:ce:85:0e: 45:96:06:63:79:4a:7a:96:01:e7:c8:2c:15:f3:2f: d1:1f:6f:65:90:b7:2a:83:71:8e:c5:e1:4d:9c:7c: e4:27:ab:fb:2f:d2:7f:79:d9:fd:3f:b5:3c:c4:73: 81:6e:46:f4:24:b3:84:b6:9f:13:a9:ba:c3:b7:32: 0b:79:a3:69:d0:d4:45:98:7b:b7:38:63:7f:fd:71: af:8c:79:d4:1e:cb:fc:db:08:16:b7:cf:0b:b4:b2: df:1a:44:45:97:68:ff:49:fb:a8:13:0f:2e:a6:da: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:E9:05:92:1B:C8:7A:1B:B1:67:28:87:8A:12:C2:A1:C7:8F:6E X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/49TpBZIbyHobsWcoh4oSwqHHj24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.218.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:ee:6f:51:96:02:ac:ee:b2:06:05:dc:3d:4e:b4:79:99:ed: ce:d8:0b:c4:e4:c7:f6:bb:5f:5d:20:d8:db:a4:ee:e1:3a:88: cb:6e:18:7d:ed:88:90:56:8f:2e:b2:2d:ea:e1:36:91:af:1a: d1:88:f3:8a:a1:63:48:8f:fa:c4:d6:f2:e7:b6:d1:38:36:d8: 0d:da:3d:53:c9:da:f9:91:f6:de:2b:38:43:e1:25:d6:87:14: 48:78:fc:8e:f0:36:c3:3d:68:8f:8f:b9:10:38:2e:6c:ce:b0: bb:86:af:02:e5:33:a7:8b:dc:6a:c3:2c:5e:49:ea:63:66:87: 4e:a6:79:5b:43:95:22:f8:e8:f3:2a:ee:77:41:a3:57:ad:fb: e5:c9:89:21:e8:ea:0a:32:f4:53:73:c2:ac:37:11:48:e8:c3: 93:34:66:f0:ea:a3:1a:a0:e1:79:ee:57:5e:f4:5d:15:c7:32: 24:72:92:b4:44:45:50:2c:51:c4:79:6d:75:a0:3d:33:14:40: 93:59:04:8c:b7:f8:02:d1:2f:4d:69:00:75:05:84:a1:e6:b4: 19:9d:0c:99:b4:04:41:7f:8a:e7:ee:71:00:e3:4f:29:0f:1b: 44:e1:f7:0a:29:80:87:76:d0:6c:82:80:12:61:18:4d:ec:43: 06:de:de:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owNtu7tJfu8V16zhlH1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q0ZTkwNTkyMWJjODdhMWJiMTY3Mjg4NzhhMTJjMmExYzc4ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpKlqJdfY7zSBmyT2HqjU7mQrDFJ uUfg0E8/OqQ3bNrE+tKjbIWzIPX0eKhoRCXjyKf1AAmBDExP6JT5/HBxKJ31irq8 x0S3mFq+wy/T4EJZeracwT3YbqGvcRPeYI10XWAiMKCPazwblsZc7PTTCuZa2IcM p//BnXHSyHALOcp2wKUHdd6XncmSttewMZgZJq7OhQ5FlgZjeUp6lgHnyCwV8y/R H29lkLcqg3GOxeFNnHzkJ6v7L9J/edn9P7U8xHOBbkb0JLOEtp8TqbrDtzILeaNp 0NRFmHu3OGN//XGvjHnUHsv82wgWt88LtLLfGkRFl2j/SfuoEw8uptoKCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPU6QWSG8h6G7FnKIeKEsKhx49uMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvNDlUcEJaSWJ5SG9ic1djb2g0b1N3cUhIajI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaHaMA0G CSqGSIb3DQEBCwUAA4IBAQCL7m9RlgKs7rIGBdw9TrR5me3O2AvE5Mf2u19dINjb pO7hOojLbhh97YiQVo8usi3q4TaRrxrRiPOKoWNIj/rE1vLnttE4NtgN2j1Tydr5 kfbeKzhD4SXWhxRIePyO8DbDPWiPj7kQOC5szrC7hq8C5TOni9xqwyxeSepjZodO pnlbQ5Ui+OjzKu53QaNXrfvlyYkh6OoKMvRTc8KsNxFI6MOTNGbw6qMaoOF57lde 9F0VxzIkcpK0REVQLFHEeW11oD0zFECTWQSMt/gC0S9NaQB1BYSh5rQZnQyZtARB f4rn7nEA408pDxtE4fcKKYCHdtBsgoASYRhN7EMG3t5U -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:01 2026 by rpki-client