This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PeACFRzbqNg73GPInX-i49BNtHM.roa File: PeACFRzbqNg73GPInX-i49BNtHM.roa (raw, json) Hash identifier: so0IXS+T3rWA07JEuNq7WJWAoqVF14IBJdyXjwBvRmQ= Subject key identifier: 3D:E0:02:15:1C:DB:A8:D8:3B:DC:63:C8:9D:7F:A2:E3:D0:4D:B4:73 Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Certificate serial: 019B7E37F2A8A2AB347085B03D118054FEBC Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PeACFRzbqNg73GPInX-i49BNtHM.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205900 IP address blocks: 185.154.48.0/24 maxlen: 24 185.154.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f2:a8:a2:ab:34:70:85:b0:3d:11:80:54:fe:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de002151cdba8d83bdc63c89d7fa2e3d04db473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:62:f3:f0:aa:f8:41:79:73:18:2f:56:32: e9:2f:73:af:f5:e5:bf:44:b3:13:d1:fd:03:d8:e3: 09:53:96:4e:39:7e:49:1d:51:6f:da:2f:2a:e4:1d: 89:a0:7a:04:35:75:0b:72:30:8a:b8:22:74:dd:f8: b7:b0:91:39:ae:26:fd:46:55:cc:e5:17:84:b5:97: d3:b4:d7:d7:da:34:0d:b2:1d:82:1b:cb:32:31:70: 4b:a3:35:a2:39:3b:bb:5e:54:5e:11:56:d7:bb:a8: 73:b5:7d:4e:3c:2b:0d:24:c7:01:b3:bc:34:43:38: a1:db:51:ad:12:a4:4e:1d:b3:30:28:98:33:4a:92: 99:ee:71:87:68:a0:b0:86:68:d9:36:20:99:29:27: 52:15:b9:c4:2c:28:36:93:d1:31:e9:e7:5b:02:35: 1a:2b:f2:94:47:39:80:79:be:21:c9:ee:b2:fc:ec: 78:a3:7c:e6:a1:72:77:3c:8d:5d:33:17:b1:d4:39: d4:79:1a:ce:96:10:90:82:f9:51:77:cb:b1:fe:2f: 60:09:e0:63:b9:e7:27:68:e7:a3:c6:81:27:75:82: b4:25:ee:a2:f8:bb:3b:38:4c:4f:bd:2a:4a:4d:57: a0:59:93:ab:6f:2d:f2:ba:6b:1d:dc:ec:dc:32:eb: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:02:15:1C:DB:A8:D8:3B:DC:63:C8:9D:7F:A2:E3:D0:4D:B4:73 X509v3 Authority Key Identifier: keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/PeACFRzbqNg73GPInX-i49BNtHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.48.0/23 Signature Algorithm: sha256WithRSAEncryption 51:0b:26:1d:66:93:b3:0c:a5:44:a3:62:0d:2d:13:c3:d8:c2: 74:0e:f4:9b:fa:fb:fc:a5:bc:13:b4:df:a7:1f:94:1d:56:2a: 82:e2:fe:56:db:a7:02:41:7d:fb:eb:b5:cd:31:7c:86:1c:22: 85:08:9c:c5:83:86:cb:90:93:18:44:58:81:e6:27:fc:cf:33: 07:96:b0:7d:1d:d4:82:14:5f:68:d8:c5:67:22:8e:fd:0c:3c: 7b:18:2d:c7:42:82:5d:25:37:e2:4f:d0:98:64:0f:ea:72:eb: 5a:39:10:6b:68:86:4c:74:40:9c:ce:49:5a:18:d2:52:5b:66: 9b:f4:de:ab:a1:83:8e:ad:9a:fe:79:fd:18:35:b4:94:af:f1: 57:d6:21:38:cb:bb:2b:b2:7f:68:23:35:42:ae:47:a4:fa:e8: e1:98:6b:49:70:e2:85:ac:8d:8a:a6:c5:b3:e2:fc:45:cc:95: 1f:e7:71:07:79:2f:c9:ed:7e:dd:8c:e6:14:9f:16:03:86:f1: 3e:bb:6a:aa:36:12:fc:74:5b:a8:28:10:9f:b9:cc:fd:09:88: 28:ca:fe:01:6b:63:22:6f:2d:11:eb:09:fa:d0:51:08:c5:10: b2:36:76:72:9d:79:73:03:38:c3:9a:83:97:44:16:07:06:e6: 56:6e:68:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/Kooqs0cIWwPRGAVP68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDRkYWY4NThiN2IwMGI1MWNiYjk0YWZiMjhmMDNlYTIx ZTQxMWQwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGUwMDIxNTFjZGJhOGQ4M2JkYzYzYzg5ZDdmYTJlM2QwNGRiNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNi8/Cq+EF5cxgvVjLpL3Ov9eW/ RLMT0f0D2OMJU5ZOOX5JHVFv2i8q5B2JoHoENXULcjCKuCJ03fi3sJE5rib9RlXM 5ReEtZfTtNfX2jQNsh2CG8syMXBLozWiOTu7XlReEVbXu6hztX1OPCsNJMcBs7w0 Qzih21GtEqROHbMwKJgzSpKZ7nGHaKCwhmjZNiCZKSdSFbnELCg2k9Ex6edbAjUa K/KURzmAeb4hye6y/Ox4o3zmoXJ3PI1dMxex1DnUeRrOlhCQgvlRd8ux/i9gCeBj uecnaOejxoEndYK0Je6i+Ls7OExPvSpKTVegWZOrby3yumsd3OzcMusfywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3gAhUc26jYO9xjyJ1/ouPQTbRzMB8GA1UdIwQY MBaAFGkE2vhYt7ALUcu5Svso8D6iHkEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQt OGFkMWQwZjgwMjE3LzEvUGVBQ0ZSemJxTmc3M0dQSW5YLWk0OUJOdEhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xODM2NTYtMGRjNS00YTk0LWFlNmQtOGFkMWQwZjgwMjE3 LzEvYVFUYS1GaTNzQXRSeTdsSy15andQcUllUVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZowMA0G CSqGSIb3DQEBCwUAA4IBAQBRCyYdZpOzDKVEo2INLRPD2MJ0DvSb+vv8pbwTtN+n H5QdViqC4v5W26cCQX3767XNMXyGHCKFCJzFg4bLkJMYRFiB5if8zzMHlrB9HdSC FF9o2MVnIo79DDx7GC3HQoJdJTfiT9CYZA/qcutaORBraIZMdECczklaGNJSW2ab 9N6roYOOrZr+ef0YNbSUr/FX1iE4y7srsn9oIzVCrkek+ujhmGtJcOKFrI2KpsWz 4vxFzJUf53EHeS/J7X7djOYUnxYDhvE+u2qqNhL8dFuoKBCfucz9CYgoyv4Ba2Mi by0R6wn60FEIxRCyNnZynXlzAzjDmoOXRBYHBuZWbmhV -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:07 2026 by rpki-client