This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/mEFHR3ZO54gTaeeTWU5lmspVd_s.roa File: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (raw, json) Hash identifier: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE= Subject key identifier: 98:41:47:47:76:4E:E7:88:13:69:E7:93:59:4E:65:9A:CA:55:77:FB Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED681175192D66B0079D3F45FF4D3F Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/mEFHR3ZO54gTaeeTWU5lmspVd_s.roa Signing time: Thu 01 Jan 2026 14:19:20 +0000 ROA not before: Thu 01 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 87.248.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:68:11:75:19:2d:66:b0:07:9d:3f:45:ff:4d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98414747764ee7881369e793594e659aca5577fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:fe:82:eb:02:4a:9e:6f:06:d1:04:92:e4: 3f:6c:a2:28:10:33:f0:a4:c5:87:c6:79:29:13:a7: 96:c8:1e:ea:98:70:06:6d:00:f2:a5:c5:4c:ac:81: a5:19:1b:e5:cd:87:5a:f1:40:6d:5f:16:f5:2f:d5: ee:35:65:09:21:fe:fe:35:c8:da:4f:14:55:4b:60: 17:f3:fd:2a:2a:c8:20:5b:54:b8:5c:d7:05:f1:0c: 42:13:0c:f5:1c:69:d3:95:de:49:77:c4:5b:0c:39: e0:3c:2f:71:24:ff:4d:da:d5:39:1b:08:b3:cf:00: 37:88:d5:e3:e1:fe:8e:21:aa:64:12:f8:ca:a0:5e: 18:cd:08:26:07:39:d5:dd:a6:84:b1:f1:cc:ce:40: 56:ff:02:cb:66:90:90:a9:97:15:4c:42:8e:43:40: 10:ac:bb:67:73:27:81:b3:ae:cd:2f:4d:21:d6:96: 25:6c:4e:c3:9e:d8:84:93:c2:27:f8:a0:5c:1e:e2: e1:cc:17:eb:36:5b:00:d3:f1:f9:b3:4a:de:fc:fb: 44:d6:37:19:36:ed:fa:1c:95:e6:9c:00:88:fc:9e: 76:4c:37:a7:7e:da:60:41:10:8f:42:68:0a:8b:01: 01:c8:d3:96:f5:0a:f2:6d:5b:65:9d:82:24:9c:b2: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:47:47:76:4E:E7:88:13:69:E7:93:59:4E:65:9A:CA:55:77:FB X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/mEFHR3ZO54gTaeeTWU5lmspVd_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.147.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:71:94:1d:5a:23:cd:74:9c:7c:69:dd:ce:f6:5d:38:da:eb: 61:f6:3a:b2:18:4b:2b:ae:de:a2:12:98:9b:16:0a:d2:4b:80: c4:a5:38:ee:6c:87:87:e3:5b:34:36:1d:a2:25:f8:02:08:ab: 35:57:8a:0d:da:1b:f4:c0:8c:ea:f8:55:19:cb:b8:41:1d:fd: 8f:c8:0c:26:97:49:53:e1:51:5f:08:2f:93:55:9a:be:cc:37: 2b:43:3f:03:7f:2f:0c:73:42:17:56:eb:94:f3:8e:ad:88:a4: 2e:b6:76:aa:05:16:e6:b5:5a:3e:ae:fe:24:c0:11:05:84:2d: fd:00:7a:82:91:48:76:ca:6c:7c:ab:b3:07:b3:b0:98:8d:d3: 14:f0:ec:fe:ba:1c:64:6f:3d:50:80:77:62:9e:c9:bd:3b:11: cb:c8:8e:41:40:f0:fd:a6:b3:f3:2b:1e:c7:94:a9:60:f4:72: f2:48:24:10:82:66:0a:cc:95:37:70:3e:f7:b2:39:db:ac:7c: 54:a9:b3:fc:5e:86:53:1f:da:f5:66:ad:8e:1e:79:99:e2:c8: a2:f1:d4:d7:c9:af:54:b0:a8:e8:2c:6d:ee:eb:2e:d4:39:37: d0:3c:c4:33:08:c7:c8:c9:51:f7:fd:77:ed:04:82:7e:0d:87: 18:f5:b5:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WgRdRktZrAHnT9F/00/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQxNDc0Nzc2NGVlNzg4MTM2OWU3OTM1OTRlNjU5YWNhNTU3N2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweb+gusCSp5vBtEEkuQ/bKIoEDPw pMWHxnkpE6eWyB7qmHAGbQDypcVMrIGlGRvlzYda8UBtXxb1L9XuNWUJIf7+Ncja TxRVS2AX8/0qKsggW1S4XNcF8QxCEwz1HGnTld5Jd8RbDDngPC9xJP9N2tU5Gwiz zwA3iNXj4f6OIapkEvjKoF4YzQgmBznV3aaEsfHMzkBW/wLLZpCQqZcVTEKOQ0AQ rLtncyeBs67NL00h1pYlbE7DntiEk8In+KBcHuLhzBfrNlsA0/H5s0re/PtE1jcZ Nu36HJXmnACI/J52TDenftpgQRCPQmgKiwEByNOW9QrybVtlnYIknLLUKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJhBR0d2TueIE2nnk1lOZZrKVXf7MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvbUVGSFIzWk81NGdUYWVlVFdVNWxtc3BWZF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iTMA0G CSqGSIb3DQEBCwUAA4IBAQBtcZQdWiPNdJx8ad3O9l042uth9jqyGEsrrt6iEpib FgrSS4DEpTjubIeH41s0Nh2iJfgCCKs1V4oN2hv0wIzq+FUZy7hBHf2PyAwml0lT 4VFfCC+TVZq+zDcrQz8Dfy8Mc0IXVuuU846tiKQutnaqBRbmtVo+rv4kwBEFhC39 AHqCkUh2ymx8q7MHs7CYjdMU8Oz+uhxkbz1QgHdinsm9OxHLyI5BQPD9prPzKx7H lKlg9HLySCQQgmYKzJU3cD73sjnbrHxUqbP8XoZTH9r1Zq2OHnmZ4sii8dTXya9U sKjoLG3u6y7UOTfQPMQzCMfIyVH3/XftBIJ+DYcY9bXx -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client