This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/49PmNqo2ozi6foyeWngY9-dP7_8.roa File: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (raw, json) Hash identifier: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ= Subject key identifier: E3:D3:E6:36:AA:36:A3:38:BA:7E:8C:9E:5A:78:18:F7:E7:4F:EF:FF Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Certificate serial: 019B7F82D9D754326B7791D782E92024B93B Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/49PmNqo2ozi6foyeWngY9-dP7_8.roa Signing time: Fri 02 Jan 2026 16:20:40 +0000 ROA not before: Fri 02 Jan 2026 16:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1741 IP address blocks: 157.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d9:d7:54:32:6b:77:91:d7:82:e9:20:24:b9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314 Validity Not Before: Jan 2 16:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d3e636aa36a338ba7e8c9e5a7818f7e74fefff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:57:84:bf:32:66:6a:26:b9:b0:ab:d8:ce: 8f:44:c8:ae:28:ea:f7:35:10:d1:41:0e:e3:9e:cf: 48:99:f3:1e:95:e3:99:eb:e9:f5:ed:b2:54:0c:2b: 12:7d:62:41:a3:a3:dd:49:e5:c3:4d:a4:e1:d6:2b: 1a:da:8a:f1:23:5e:e2:82:89:4c:23:98:86:1c:b3: 7e:d8:9d:05:8b:85:56:58:4d:85:c4:2d:eb:84:af: f3:51:f8:a2:70:6c:e6:c3:0d:b9:03:6e:40:f9:b2: 3f:19:8b:2f:7f:c4:87:57:ad:98:8e:eb:32:7c:a5: 80:b9:3f:20:5c:6b:8e:13:bb:98:4f:4c:21:0f:56: 10:2d:9d:f4:ba:bb:6b:17:5f:b5:50:7f:80:58:6b: c1:6e:ca:18:9d:e8:7c:17:1c:a3:95:5b:38:b9:eb: 76:82:dc:ab:c5:66:06:0f:aa:c4:50:8d:d0:52:3f: d2:01:53:39:c0:ba:3a:a5:1a:72:70:92:22:e1:e4: 0c:f3:16:5c:c1:cc:4e:bc:30:e0:d5:0b:c6:c8:ce: a0:12:67:3d:5c:66:d6:cf:2a:24:8f:08:4f:03:45: c3:bc:1c:6f:12:c1:24:1a:af:64:43:d3:16:97:fe: 01:2b:97:e1:b7:17:32:15:05:5d:c8:78:ec:0b:ad: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D3:E6:36:AA:36:A3:38:BA:7E:8C:9E:5A:78:18:F7:E7:4F:EF:FF X509v3 Authority Key Identifier: keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/49PmNqo2ozi6foyeWngY9-dP7_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.24.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:eb:fe:57:c5:1c:cc:9c:be:70:6d:0d:a6:60:82:26:28:ed: ad:a6:a1:e2:df:1d:e5:e0:14:99:2c:2e:a2:51:b0:6e:26:cf: 4b:bf:3a:7f:c9:7d:eb:4f:e4:ee:42:aa:c6:a0:88:b6:03:69: 6b:7f:c8:84:6d:0e:72:da:cc:27:79:3f:6d:a3:72:93:28:1a: 16:a8:14:df:7e:51:e6:51:11:25:4a:19:7e:62:2c:1e:38:ab: b5:2c:19:b2:d4:b2:22:8a:eb:19:32:49:5b:f8:9e:92:fb:4a: 85:a9:31:f8:38:ed:1c:72:61:4b:89:13:89:1f:55:bf:a9:5f: fe:3e:b1:a9:b1:9c:3d:2c:28:82:c2:8f:5c:ca:d4:0d:de:5f: 83:ab:80:79:17:27:b5:1d:af:6e:da:ba:35:ac:9a:61:3c:b8: d2:02:fb:6c:60:15:19:9f:d4:1f:c7:a3:cc:3b:c9:1b:07:47: 5e:73:a6:20:cd:49:70:ad:00:f3:d3:0a:4c:cb:66:16:06:2f: e9:06:66:1b:9e:1a:0f:1b:6e:70:0c:a4:92:75:80:de:75:6b: bb:7d:e3:46:be:9e:8d:df:0d:90:6a:26:04:ec:75:48:af:b9: bf:8e:cb:a2:8a:e0:6c:21:8f:91:fd:4e:61:bb:d5:27:3f:8a: 19:b0:1d:d3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/gtnXVDJrd5HXgukgJLk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDIzOTQ1ZmY3NTYxZWU5OWQyZTI3OGU3Mzg4ZDA0NWZh ZGQzMTQwHhcNMjYwMTAyMTYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2QzZTYzNmFhMzZhMzM4YmE3ZThjOWU1YTc4MThmN2U3NGZlZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO1XhL8yZmomubCr2M6PRMiuKOr3 NRDRQQ7jns9ImfMeleOZ6+n17bJUDCsSfWJBo6PdSeXDTaTh1isa2orxI17igolM I5iGHLN+2J0Fi4VWWE2FxC3rhK/zUfiicGzmww25A25A+bI/GYsvf8SHV62Yjusy fKWAuT8gXGuOE7uYT0whD1YQLZ30urtrF1+1UH+AWGvBbsoYneh8FxyjlVs4uet2 gtyrxWYGD6rEUI3QUj/SAVM5wLo6pRpycJIi4eQM8xZcwcxOvDDg1QvGyM6gEmc9 XGbWzyokjwhPA0XDvBxvEsEkGq9kQ9MWl/4BK5fhtxcyFQVdyHjsC632dwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOPT5jaqNqM4un6Mnlp4GPfnT+//MB8GA1UdIwQY MBaAFD7SOUX/dWHumdLieOc4jQRfrdMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmIt NzczMjlhN2U3ZGZlLzEvNDlQbU5xbzJvemk2Zm95ZVduZ1k5LWRQN184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZTc2MmItZGNlYi00ZDVmLWIxZmItNzczMjlhN2U3ZGZl LzEvUHRJNVJmOTFZZTZaMHVKNDV6aU5CRi10MHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnRgwDQYJ KoZIhvcNAQELBQADggEBAEjr/lfFHMycvnBtDaZggiYo7a2moeLfHeXgFJksLqJR sG4mz0u/On/JfetP5O5CqsagiLYDaWt/yIRtDnLazCd5P22jcpMoGhaoFN9+UeZR ESVKGX5iLB44q7UsGbLUsiKK6xkySVv4npL7SoWpMfg47RxyYUuJE4kfVb+pX/4+ samxnD0sKILCj1zK1A3eX4OrgHkXJ7Udr27aujWsmmE8uNIC+2xgFRmf1B/Ho8w7 yRsHR15zpiDNSXCtAPPTCkzLZhYGL+kGZhueGg8bbnAMpJJ1gN51a7t940a+no3f DZBqJgTsdUivub+Oy6KK4Gwhj5H9TmG71Sc/ihmwHdM= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:11 2026 by rpki-client