This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/cA3aNPgSvOncWgLq6bBFasg5G0s.roa File: cA3aNPgSvOncWgLq6bBFasg5G0s.roa (raw, json) Hash identifier: QhdH/rusqlTfEwtA92QrkPPt5X2EYpI1lbZsumMOaWg= Subject key identifier: 70:0D:DA:34:F8:12:BC:E9:DC:5A:02:EA:E9:B0:45:6A:C8:39:1B:4B Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517 Certificate serial: 019B7E380038804C5A5D0EA2613ECFCA7716 Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/cA3aNPgSvOncWgLq6bBFasg5G0s.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.236.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:00:38:80:4c:5a:5d:0e:a2:61:3e:cf:ca:77:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=700dda34f812bce9dc5a02eae9b0456ac8391b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:2b:f2:99:5c:7c:45:05:52:c3:f5:f4:11: 9d:6e:ea:50:cf:3a:08:7f:de:9a:61:ba:db:63:4b: 16:21:19:1d:78:f7:4f:13:64:11:f5:ce:1e:87:79: d1:19:01:cf:ae:3f:e6:a6:fb:1c:c5:01:b7:77:8f: 02:b4:a5:01:ac:12:8d:da:2c:c4:d5:9a:07:db:49: b4:ed:be:56:87:1f:48:8a:5a:28:9d:de:c4:60:72: ec:50:4f:7e:70:08:27:84:9a:3e:31:4b:fc:9f:63: 67:39:64:2c:8b:f0:4d:2e:85:79:d9:13:b3:16:a6: e8:d5:d7:9c:eb:96:cc:63:e8:fc:f0:74:2c:0e:82: 3b:c7:cd:e9:57:e3:1e:55:5a:c8:e0:96:23:4f:b5: 5c:46:c1:06:f9:29:be:f4:6b:b7:a6:36:a4:15:43: 14:40:53:fb:39:b7:da:1b:68:57:b4:7f:ae:95:05: aa:3b:6a:93:2f:41:f1:51:8f:12:83:2c:8f:33:40: 83:40:b6:9c:37:db:04:06:4f:40:86:af:e7:64:70: ba:02:aa:a1:2b:ea:42:5a:35:02:bb:ac:ff:b7:a9: ed:94:c9:4a:54:ea:83:04:6f:73:55:42:bd:5d:66: 85:52:63:ee:91:7c:1e:1c:63:85:bf:86:b2:7f:a5: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:DA:34:F8:12:BC:E9:DC:5A:02:EA:E9:B0:45:6A:C8:39:1B:4B X509v3 Authority Key Identifier: keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/cA3aNPgSvOncWgLq6bBFasg5G0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.142.0/24 Signature Algorithm: sha256WithRSAEncryption 26:fc:bd:ab:13:ba:60:d5:fe:fc:d1:52:18:fb:1d:ef:5c:95: 13:19:f4:5c:83:41:a5:bc:d5:c6:db:cb:0e:61:21:1e:4e:f6: 8c:c1:98:80:aa:6c:8d:e5:6d:8e:b7:11:89:ce:c3:8d:09:55: 73:69:55:d1:88:21:e8:0b:3d:80:9a:6f:f1:ff:f0:a5:71:bb: 12:c7:86:4c:f4:6f:8c:70:e0:41:fb:de:67:18:2e:86:12:28: 71:ed:91:a5:ac:aa:08:d3:c1:6c:99:db:42:a9:89:29:65:52: 7a:f4:93:50:88:12:48:34:a8:0c:74:c7:f2:2f:4d:b0:9e:ab: 14:88:b8:f7:87:ee:c0:21:83:8e:6c:2c:15:18:1c:9a:4d:a8: 86:78:f6:c5:2e:c8:cc:bf:d6:6f:eb:c9:fc:70:39:90:fe:89: 50:7b:33:25:66:d8:00:0f:2d:d3:5a:cc:94:4b:6b:b0:d5:54: 12:1c:d2:94:70:b2:6f:29:5a:57:d0:35:72:74:5d:da:2e:f3: 1e:52:ee:a3:53:40:a4:af:9f:9b:3a:4b:34:c0:d1:58:89:2a: e9:ef:0a:19:a9:32:4d:b0:2b:39:4a:90:84:ba:97:0e:75:a5: 37:f1:19:9e:ad:4b:22:32:16:6a:a0:37:23:8e:8a:4d:52:fa: 68:a6:40:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OAA4gExaXQ6iYT7PyncWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk ZDQ1MTcwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDBkZGEzNGY4MTJiY2U5ZGM1YTAyZWFlOWIwNDU2YWM4MzkxYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBEr8plcfEUFUsP19BGdbupQzzoI f96aYbrbY0sWIRkdePdPE2QR9c4eh3nRGQHPrj/mpvscxQG3d48CtKUBrBKN2izE 1ZoH20m07b5Whx9Iiloond7EYHLsUE9+cAgnhJo+MUv8n2NnOWQsi/BNLoV52ROz Fqbo1dec65bMY+j88HQsDoI7x83pV+MeVVrI4JYjT7VcRsEG+Sm+9Gu3pjakFUMU QFP7ObfaG2hXtH+ulQWqO2qTL0HxUY8SgyyPM0CDQLacN9sEBk9Ahq/nZHC6Aqqh K+pCWjUCu6z/t6ntlMlKVOqDBG9zVUK9XWaFUmPukXweHGOFv4ayf6Vf+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAN2jT4Erzp3FoC6umwRWrIORtLMB8GA1UdIwQY MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt YjlmMDVlMzE1MjNhLzEvY0EzYU5QZ1N2T25jV2dMcTZiQkZhc2c1RzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueyOMA0G CSqGSIb3DQEBCwUAA4IBAQAm/L2rE7pg1f780VIY+x3vXJUTGfRcg0GlvNXG28sO YSEeTvaMwZiAqmyN5W2OtxGJzsONCVVzaVXRiCHoCz2Amm/x//ClcbsSx4ZM9G+M cOBB+95nGC6GEihx7ZGlrKoI08FsmdtCqYkpZVJ69JNQiBJINKgMdMfyL02wnqsU iLj3h+7AIYOObCwVGByaTaiGePbFLsjMv9Zv68n8cDmQ/olQezMlZtgADy3TWsyU S2uw1VQSHNKUcLJvKVpX0DVydF3aLvMeUu6jU0Ckr5+bOks0wNFYiSrp7woZqTJN sCs5SpCEupcOdaU38RmerUsiMhZqoDcjjopNUvpopkAm -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client