This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/A1D00v3A4CQZLEI4nsAImmP-iFw.roa File: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (raw, json) Hash identifier: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0= Subject key identifier: 03:50:F4:D2:FD:C0:E0:24:19:2C:42:38:9E:C0:08:9A:63:FE:88:5C Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Certificate serial: 019B79109B26F5875388F9C6AAA13825B250 Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/A1D00v3A4CQZLEI4nsAImmP-iFw.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204344 IP address blocks: 185.252.48.0/22 maxlen: 22 2a0c:20c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9b:26:f5:87:53:88:f9:c6:aa:a1:38:25:b2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0350f4d2fdc0e024192c42389ec0089a63fe885c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:36:ca:9e:b5:02:ab:86:52:14:9b:7c:b9: 74:73:c0:56:38:73:c3:bb:a1:97:6c:b8:c4:eb:75: f1:7f:52:f3:1a:50:9f:93:dc:72:26:07:a6:09:08: 31:eb:41:ac:93:d8:51:2d:18:af:92:ff:aa:ac:e8: 79:e3:a8:03:c4:5c:ca:c6:bd:84:17:d7:23:63:c1: 53:08:cb:3f:7e:46:eb:16:5d:99:56:b1:9f:f2:51: a3:bc:76:4a:cc:f3:ff:4a:66:4e:8a:4e:22:24:c6: f0:f6:a8:78:0f:90:d2:48:b9:13:4e:68:f9:2f:f6: 3f:0b:84:a3:57:af:e6:cd:a3:b2:06:90:5f:d1:2c: 18:43:d6:cf:28:af:a2:4c:64:93:7a:be:25:24:e5: 64:00:c1:64:8b:af:0f:67:ed:a9:88:5b:85:0b:e1: 75:75:34:65:7d:b2:4a:b6:d8:2e:49:37:69:ac:41: bf:2f:bf:dc:9b:03:10:5f:74:2e:16:8c:24:d3:70: 73:87:b4:dd:04:4a:8d:9f:2d:40:a9:27:07:33:7b: 58:e0:41:6d:8d:2b:37:d6:de:9e:9d:c2:84:e4:ba: ce:eb:bc:e6:64:0e:c0:f1:af:eb:8a:2f:9f:be:c1: ba:8a:35:45:3b:3a:7b:88:be:32:a3:c8:d7:1a:9d: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:F4:D2:FD:C0:E0:24:19:2C:42:38:9E:C0:08:9A:63:FE:88:5C X509v3 Authority Key Identifier: keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/A1D00v3A4CQZLEI4nsAImmP-iFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.48.0/22 IPv6: 2a0c:20c0::/29 Signature Algorithm: sha256WithRSAEncryption ac:90:c1:7a:3c:ee:fe:08:cb:a4:93:e5:5c:93:4e:bf:a2:ac: c2:e9:76:06:84:30:95:9c:36:6b:a0:99:3f:a2:a6:2f:80:99: 81:e6:8b:26:4e:8a:4d:d6:e9:a4:0a:22:b3:c7:e4:a9:b6:f5: 8d:a6:00:ef:52:83:18:7a:d9:d9:74:6f:f1:67:b7:7a:c4:b3: 24:28:97:d1:16:d7:90:83:1f:36:29:75:0f:ad:7d:f3:17:31: b8:7d:47:7c:2a:c5:e5:bf:29:27:52:09:1c:b8:53:24:4b:e6: 59:89:08:61:2c:84:ca:33:e8:f4:cd:8b:9e:96:14:f9:83:e3: 37:97:61:fc:2f:30:4b:1a:a4:b9:5c:fc:69:e1:7c:c9:f1:b5: 0a:6c:4a:1d:a9:6f:1c:83:c7:c7:bc:a6:ab:55:46:89:56:df: be:41:42:72:28:c0:62:0e:91:91:02:cb:91:30:1c:06:9a:0f: bd:8e:1f:89:96:a5:f9:8f:a6:45:29:34:8f:4b:cd:5a:d0:e8: ae:c8:33:a0:9b:4f:bd:e0:a5:51:e8:49:14:55:29:fc:6b:27: 7f:6b:7e:c0:71:91:c8:49:b6:36:81:d3:95:12:89:75:bd:06: 4c:58:f7:85:d2:ae:d7:7e:7c:55:01:57:8d:36:95:fd:d9:93: ee:a2:b1:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EJsm9YdTiPnGqqE4JbJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODA1YzVmZTM0NTAyODdkY2RlNmFkZTBkOWM5NTU4YmE2 MTVlMzIwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzUwZjRkMmZkYzBlMDI0MTkyYzQyMzg5ZWMwMDg5YTYzZmU4ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBQ2yp61AquGUhSbfLl0c8BWOHPD u6GXbLjE63Xxf1LzGlCfk9xyJgemCQgx60Gsk9hRLRivkv+qrOh546gDxFzKxr2E F9cjY8FTCMs/fkbrFl2ZVrGf8lGjvHZKzPP/SmZOik4iJMbw9qh4D5DSSLkTTmj5 L/Y/C4SjV6/mzaOyBpBf0SwYQ9bPKK+iTGSTer4lJOVkAMFki68PZ+2piFuFC+F1 dTRlfbJKttguSTdprEG/L7/cmwMQX3QuFowk03Bzh7TdBEqNny1AqScHM3tY4EFt jSs31t6encKE5LrO67zmZA7A8a/rii+fvsG6ijVFOzp7iL4yo8jXGp2xxQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFANQ9NL9wOAkGSxCOJ7ACJpj/ohcMB8GA1UdIwQY MBaAFOWAXF/jRQKH3N5q3g2clVi6YV4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTIt NTk1MzA3ZjQ3MTEwLzEvQTFEMDB2M0E0Q1FaTEVJNG5zQUltbVAtaUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNGRjM2MtZWNhYi00MzZkLWFjNTItNTk1MzA3ZjQ3MTEw LzEvNVlCY1gtTkZBb2ZjM21yZURaeVZXTHBoWGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufwwMA0E AgACMAcDBQMqDCDAMA0GCSqGSIb3DQEBCwUAA4IBAQCskMF6PO7+CMukk+Vck06/ oqzC6XYGhDCVnDZroJk/oqYvgJmB5osmTopN1umkCiKzx+SptvWNpgDvUoMYetnZ dG/xZ7d6xLMkKJfRFteQgx82KXUPrX3zFzG4fUd8KsXlvyknUgkcuFMkS+ZZiQhh LITKM+j0zYuelhT5g+M3l2H8LzBLGqS5XPxp4XzJ8bUKbEodqW8cg8fHvKarVUaJ Vt++QUJyKMBiDpGRAsuRMBwGmg+9jh+JlqX5j6ZFKTSPS81a0OiuyDOgm0+94KVR 6EkUVSn8ayd/a37AcZHISbY2gdOVEol1vQZMWPeF0q7XfnxVAVeNNpX92ZPuorE4 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:37 2026 by rpki-client