This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/ON48mzQU_ZkOuAlZyHAa9FLTToE.roa File: ON48mzQU_ZkOuAlZyHAa9FLTToE.roa (raw, json) Hash identifier: TGKZsRuel7PSpfKiU9Wd7dmrbOAx1arJ02E3xTpIfM8= Subject key identifier: 38:DE:3C:9B:34:14:FD:99:0E:B8:09:59:C8:70:1A:F4:52:D3:4E:81 Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc Certificate serial: 019B7C800A54BF1E47AF6CE90F8D0E37A658 Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/ON48mzQU_ZkOuAlZyHAa9FLTToE.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51057 IP address blocks: 109.235.232.0/21 maxlen: 21 192.145.76.0/22 maxlen: 22 2a0c:600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0a:54:bf:1e:47:af:6c:e9:0f:8d:0e:37:a6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38de3c9b3414fd990eb80959c8701af452d34e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:0c:3b:99:cb:aa:bc:9c:3f:c1:2b:fb:0e: 8a:cd:2a:7f:56:38:c3:98:42:46:63:3d:20:e0:65: ec:be:16:7b:58:2a:3b:f3:ab:23:ff:47:13:70:a4: 11:96:1f:7c:38:df:3d:a6:65:de:b4:7f:a5:e8:a7: 70:27:98:d5:63:0d:dd:db:ef:ee:69:fa:59:cf:a5: 1c:a9:20:d7:56:ac:50:0a:a0:5e:24:d4:08:b0:d5: 7a:7e:a7:5e:a7:05:27:e7:de:bf:3b:74:5c:ff:7c: af:8d:04:f8:0e:88:b8:3f:33:36:1e:8e:a3:a5:31: 77:5f:4a:48:0e:f5:68:b2:04:ff:10:ba:db:11:86: 5e:55:48:b9:de:98:e9:6c:7d:3c:5d:b9:16:2d:69: f1:79:fa:a5:3c:fb:f3:b6:a8:a1:7f:90:9e:7a:65: a3:5f:46:d6:30:0b:91:b5:9d:e7:6a:90:36:9f:f3: 85:62:3a:e7:a0:6e:df:d7:e3:42:84:c1:64:a3:02: 6e:e9:42:7c:b4:48:98:ba:22:71:ce:2e:77:e6:d5: 29:85:ca:3f:54:1c:11:8e:65:b0:1e:49:5c:47:b1: 55:f5:dc:a3:cf:e3:f1:53:d7:62:94:4f:cb:85:00: 3d:4f:4e:04:39:d6:13:73:12:21:f9:69:af:a2:cf: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:3C:9B:34:14:FD:99:0E:B8:09:59:C8:70:1A:F4:52:D3:4E:81 X509v3 Authority Key Identifier: keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/ON48mzQU_ZkOuAlZyHAa9FLTToE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.235.232.0/21 192.145.76.0/22 IPv6: 2a0c:600::/29 Signature Algorithm: sha256WithRSAEncryption 92:2a:95:25:6c:1d:27:d8:42:43:eb:22:b9:79:29:2e:dd:33: b7:a2:c1:ef:cf:01:0a:94:0e:35:66:1e:c5:55:5f:27:3a:df: 15:4d:fb:b0:c8:e1:5b:21:a0:95:ce:b0:b3:cd:5c:65:c3:ce: 41:15:dd:f5:73:59:93:03:9b:12:08:61:3b:85:b8:40:43:dc: 65:b6:ce:d8:44:24:16:90:8f:18:90:10:e2:3c:03:03:21:2e: 9d:bb:0d:77:44:d5:a3:6b:bc:d5:4d:a8:86:63:dc:11:c2:6e: 17:9e:b2:7a:96:94:c7:f6:d7:87:02:63:66:94:65:f9:36:73: a2:f4:5d:50:5e:d9:0f:c1:5e:69:9b:50:b7:2f:48:4d:ec:aa: 43:63:f9:6a:88:77:cc:8c:fe:e7:b1:cc:00:f7:82:db:5e:8a: c4:28:7a:2b:dd:07:f5:c1:3d:62:20:60:3e:0a:f9:01:12:3e: 7a:c1:87:b8:65:d7:2a:d3:a3:82:49:ac:41:59:27:6e:f9:74: 03:31:40:8e:39:08:b2:6a:58:cb:7d:ee:ea:a7:31:57:1c:92: eb:2b:1e:79:c4:b4:54:01:bd:e1:f4:4c:0a:65:79:54:e0:83: 97:24:71:2b:75:1b:5f:95:11:5f:3a:13:80:31:04:0e:c9:f2: 7d:4e:2f:f7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gApUvx5Hr2zpD40ON6ZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNzA2MWMyMGQ0ZjA5NzYxM2FjMDMxMzIzN2E2ZGYyYmIy Y2I1ZGMwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGRlM2M5YjM0MTRmZDk5MGViODA5NTljODcwMWFmNDUyZDM0ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqkMO5nLqrycP8Er+w6KzSp/VjjD mEJGYz0g4GXsvhZ7WCo786sj/0cTcKQRlh98ON89pmXetH+l6KdwJ5jVYw3d2+/u afpZz6UcqSDXVqxQCqBeJNQIsNV6fqdepwUn596/O3Rc/3yvjQT4Doi4PzM2Ho6j pTF3X0pIDvVosgT/ELrbEYZeVUi53pjpbH08XbkWLWnxefqlPPvztqihf5CeemWj X0bWMAuRtZ3napA2n/OFYjrnoG7f1+NChMFkowJu6UJ8tEiYuiJxzi535tUphco/ VBwRjmWwHklcR7FV9dyjz+PxU9dilE/LhQA9T04EOdYTcxIh+Wmvos8SAQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDjePJs0FP2ZDrgJWchwGvRS006BMB8GA1UdIwQY MBaAFP1wYcINTwl2E6wDEyN6bfK7LLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1hCaHdnMVBDWFlUckFNVEkzcHQ4cnNzdGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zMmUzZDMtOWE4ZC00NjUzLTk0ZmEt YTIwMTk5ODgzMzBmLzEvT040OG16UVVfWmtPdUFsWnlIQWE5RkxUVG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zMmUzZDMtOWE4ZC00NjUzLTk0ZmEtYTIwMTk5ODgzMzBm LzEvX1hCaHdnMVBDWFlUckFNVEkzcHQ4cnNzdGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbevoAwQC wJFMMA0EAgACMAcDBQMqDAYAMA0GCSqGSIb3DQEBCwUAA4IBAQCSKpUlbB0n2EJD 6yK5eSku3TO3osHvzwEKlA41Zh7FVV8nOt8VTfuwyOFbIaCVzrCzzVxlw85BFd31 c1mTA5sSCGE7hbhAQ9xlts7YRCQWkI8YkBDiPAMDIS6duw13RNWja7zVTaiGY9wR wm4XnrJ6lpTH9teHAmNmlGX5NnOi9F1QXtkPwV5pm1C3L0hN7KpDY/lqiHfMjP7n scwA94LbXorEKHor3Qf1wT1iIGA+CvkBEj56wYe4Zdcq06OCSaxBWSdu+XQDMUCO OQiyaljLfe7qpzFXHJLrKx55xLRUAb3h9EwKZXlU4IOXJHErdRtflRFfOhOAMQQO yfJ9Ti/3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:10 2026 by rpki-client