This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/R48K96yi_NTgRX4KtqsQkdz8i00.roa File: R48K96yi_NTgRX4KtqsQkdz8i00.roa (raw, json) Hash identifier: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs= Subject key identifier: 47:8F:0A:F7:AC:A2:FC:D4:E0:45:7E:0A:B6:AB:10:91:DC:FC:8B:4D Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Certificate serial: 019B79ED3152E1F2E5F3866FE169F7A87941 Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/R48K96yi_NTgRX4KtqsQkdz8i00.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 192.251.230.0/24 maxlen: 24 193.0.129.0/24 maxlen: 24 193.0.184.0/24 maxlen: 24 193.0.212.0/24 maxlen: 24 2a0f:7ac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:31:52:e1:f2:e5:f3:86:6f:e1:69:f7:a8:79:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=478f0af7aca2fcd4e0457e0ab6ab1091dcfc8b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:44:17:e1:14:b8:e2:1b:ac:99:d0:5c:a2: 9d:5c:a1:c6:88:d5:2b:cf:58:18:37:e1:36:97:9e: 9c:41:f2:4c:c0:e6:db:46:ad:5c:3e:fe:9a:59:85: 96:8c:d6:5a:17:cd:63:64:c2:7e:39:b0:69:42:88: d9:d9:12:c9:cd:07:67:20:38:e5:17:ae:45:a1:ce: de:c8:69:22:99:75:92:b2:68:1f:e9:bb:d2:8f:61: e2:ef:5f:5e:ed:d1:2f:e8:3a:98:11:21:dd:97:94: 16:3c:cb:07:fb:59:db:06:37:3f:d7:dd:67:7a:a1: 48:1c:c3:70:3e:fc:4d:a7:c7:3b:6d:99:f5:16:e3: f0:a3:80:0c:94:51:34:5a:e9:56:db:83:cd:1d:78: 61:cb:42:45:50:45:0e:26:aa:38:2d:6a:6e:1c:ff: 2d:c1:d3:af:1c:09:b1:b9:ed:15:e5:7f:1f:30:fd: 59:c4:0e:b7:ef:b2:36:f6:d1:0a:55:09:1d:84:af: 06:a8:d7:12:9e:fc:69:bf:d9:7e:ba:a6:21:1b:58: 7f:4f:48:72:8f:a7:ab:dc:63:d3:4f:4c:0d:87:e9: fd:3d:74:3e:68:b2:85:20:b1:9a:7a:18:f3:c4:a3: 03:f3:14:32:78:3a:b2:3c:ba:8f:d6:68:c9:98:60: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:0A:F7:AC:A2:FC:D4:E0:45:7E:0A:B6:AB:10:91:DC:FC:8B:4D X509v3 Authority Key Identifier: keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/R48K96yi_NTgRX4KtqsQkdz8i00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.251.230.0/24 193.0.129.0/24 193.0.184.0/24 193.0.212.0/24 IPv6: 2a0f:7ac0::/29 Signature Algorithm: sha256WithRSAEncryption 29:9c:7c:8b:06:d3:2d:98:f6:2f:3f:75:a9:a4:ce:85:e0:dc: 91:58:77:5f:9b:3c:9f:87:1f:7b:68:f1:38:43:65:3f:61:8f: 04:9d:79:ce:23:3f:2d:ee:f0:af:85:9b:59:bf:83:66:f3:78: a8:18:c7:0c:a6:0c:ad:17:cf:a2:71:4b:0c:0d:c9:f0:89:ec: f8:ec:17:ee:12:48:27:4f:78:b1:af:2b:12:68:c3:ae:cf:54: 90:47:03:72:fa:aa:98:ef:1f:56:26:9b:21:41:e0:65:61:db: c6:b9:cc:0d:49:fb:f7:c7:20:a8:f6:24:98:ba:a7:d2:11:7a: 25:d6:ea:17:60:51:cf:d4:ce:b2:bf:21:94:3e:f0:c5:eb:1a: 68:20:b0:ee:4e:81:6e:f2:40:11:36:68:ef:bf:5a:4b:f6:95: 36:d4:1a:9a:1e:e7:53:2d:d8:3e:12:be:b8:68:73:1b:4e:5c: 59:6b:51:72:ad:e0:9e:94:f4:53:83:d6:89:6a:b9:dc:e4:a2: 31:59:ac:b8:6e:22:62:48:89:27:be:d5:7c:04:01:f0:47:fa: 5b:32:2b:0e:06:32:4c:57:c4:87:88:f3:3a:76:eb:cf:7c:fe: a5:5f:c4:40:cd:36:90:72:eb:80:36:2d:61:60:4c:0a:82:e6: e0:fe:98:30 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57TFS4fLl84Zv4Wn3qHlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl ODk0MjkwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhmMGFmN2FjYTJmY2Q0ZTA0NTdlMGFiNmFiMTA5MWRjZmM4YjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNEF+EUuOIbrJnQXKKdXKHGiNUr z1gYN+E2l56cQfJMwObbRq1cPv6aWYWWjNZaF81jZMJ+ObBpQojZ2RLJzQdnIDjl F65Foc7eyGkimXWSsmgf6bvSj2Hi719e7dEv6DqYESHdl5QWPMsH+1nbBjc/191n eqFIHMNwPvxNp8c7bZn1FuPwo4AMlFE0WulW24PNHXhhy0JFUEUOJqo4LWpuHP8t wdOvHAmxue0V5X8fMP1ZxA6377I29tEKVQkdhK8GqNcSnvxpv9l+uqYhG1h/T0hy j6er3GPTT0wNh+n9PXQ+aLKFILGaehjzxKMD8xQyeDqyPLqP1mjJmGCi6QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEePCvesovzU4EV+CrarEJHc/ItNMB8GA1UdIwQY MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt NmJkODAyMmQyZWFlLzEvUjQ4Szk2eWlfTlRnUlg0S3Rxc1FrZHo4aTAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwPvmAwQA wQCBAwQAwQC4AwQAwQDUMA0EAgACMAcDBQMqD3rAMA0GCSqGSIb3DQEBCwUAA4IB AQApnHyLBtMtmPYvP3WppM6F4NyRWHdfmzyfhx97aPE4Q2U/YY8EnXnOIz8t7vCv hZtZv4Nm83ioGMcMpgytF8+icUsMDcnwiez47BfuEkgnT3ixrysSaMOuz1SQRwNy +qqY7x9WJpshQeBlYdvGucwNSfv3xyCo9iSYuqfSEXol1uoXYFHP1M6yvyGUPvDF 6xpoILDuToFu8kARNmjvv1pL9pU21BqaHudTLdg+Er64aHMbTlxZa1FyreCelPRT g9aJarnc5KIxWay4biJiSIknvtV8BAHwR/pbMisOBjJMV8SHiPM6duvPfP6lX8RA zTaQcuuANi1hYEwKgubg/pgw -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:56 2026 by rpki-client