This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa File: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (raw, json) Hash identifier: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q= Subject key identifier: 79:AF:5C:E3:B9:CB:84:1E:E7:AC:33:ED:30:F7:73:92:0C:6B:FC:D4 Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Certificate serial: 019B7F14E6FC5FD409F0B7B760B07EA1F378 Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202210 IP address blocks: 185.48.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e6:fc:5f:d4:09:f0:b7:b7:60:b0:7e:a1:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79af5ce3b9cb841ee7ac33ed30f773920c6bfcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:02:bf:0d:8a:2d:ca:79:5c:b0:db:e2:06: 22:84:15:f1:ee:f0:7b:31:fd:a1:1d:9a:95:da:7d: 5d:84:9c:44:21:37:f0:93:92:1c:3d:bd:df:05:75: 6e:2e:fe:12:d9:29:e2:6c:e4:83:69:ed:a7:a4:9c: bf:4d:c3:90:73:b0:54:29:84:5b:f9:3b:aa:a8:81: b3:5c:0a:de:d1:14:99:7e:c2:26:69:02:4c:3a:88: e0:4b:05:a0:5c:0b:53:5c:4c:28:56:ae:d5:0a:d8: 9d:52:66:8e:f2:c0:44:54:a4:8c:f1:7d:ce:3f:f8: c3:fa:7a:48:00:52:09:cf:48:96:7a:69:d2:d4:b3: f4:e2:04:2c:e6:3a:38:ae:45:9f:ac:8a:54:8f:8f: 55:c0:72:c1:7e:7f:24:15:43:41:97:75:ee:17:ae: c4:86:05:23:82:ed:83:c4:c8:da:80:68:40:02:ed: 8f:e2:25:d5:92:3e:d4:17:fd:fb:ec:ec:37:37:51: 88:00:fa:19:6e:81:33:85:af:c1:93:a6:4f:b0:fd: 0f:4a:7c:06:06:6c:87:2e:6f:6a:a2:e9:38:c0:56: ae:54:c9:fd:0a:4d:70:e9:c1:7c:02:55:37:bb:db: 01:e3:ac:f4:17:1f:42:6a:a5:37:8e:1e:ff:7b:e7: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:5C:E3:B9:CB:84:1E:E7:AC:33:ED:30:F7:73:92:0C:6B:FC:D4 X509v3 Authority Key Identifier: keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.90.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0c:e3:90:18:14:35:9c:0c:4f:cd:fc:70:a6:fb:3f:1d:63: 44:b1:89:6d:d2:31:70:9c:5e:d3:e9:33:ad:5c:a3:fb:33:61: 18:56:de:44:ec:70:58:78:82:16:74:89:92:9b:a2:1b:45:b1: cf:08:6e:e0:3c:e9:0b:f4:b5:20:f1:48:e4:a0:c6:db:6d:f1: 00:94:c6:5c:72:2a:b0:f8:74:07:36:71:21:10:f3:de:68:9d: ef:4c:1c:27:d3:3f:42:e2:6d:29:c7:c6:22:5d:d0:80:5c:40: c2:c6:97:ba:80:3f:b9:ee:6c:35:6f:67:66:97:1f:c7:c7:2d: 88:dd:3a:5f:b9:51:17:8b:1b:c8:c8:30:58:a1:c0:b6:59:f8: 26:27:98:58:1e:ad:35:a8:90:c8:c5:d1:5c:20:da:69:f8:a6: 03:3b:ff:6a:5c:4c:e9:a1:23:ec:05:32:78:18:40:2f:c1:c0: 00:a7:5a:5d:30:e9:c9:ee:e6:55:dd:eb:0d:e5:82:8b:b6:6c: 34:d2:d9:b5:fc:7d:0b:c7:0a:51:ce:8b:05:88:0c:a1:7f:b6: f5:84:d7:6f:ea:bb:cf:84:d4:37:de:90:e1:b9:59:25:e9:11: e4:14:53:3a:07:c1:da:be:ef:81:a7:f9:bf:cd:43:ac:d9:a4: b2:fb:6a:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FOb8X9QJ8Le3YLB+ofN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz OTFjYTgwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWFmNWNlM2I5Y2I4NDFlZTdhYzMzZWQzMGY3NzM5MjBjNmJmY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YwCvw2KLcp5XLDb4gYihBXx7vB7 Mf2hHZqV2n1dhJxEITfwk5IcPb3fBXVuLv4S2SnibOSDae2npJy/TcOQc7BUKYRb +TuqqIGzXAre0RSZfsImaQJMOojgSwWgXAtTXEwoVq7VCtidUmaO8sBEVKSM8X3O P/jD+npIAFIJz0iWemnS1LP04gQs5jo4rkWfrIpUj49VwHLBfn8kFUNBl3XuF67E hgUjgu2DxMjagGhAAu2P4iXVkj7UF/377Ow3N1GIAPoZboEzha/Bk6ZPsP0PSnwG BmyHLm9qouk4wFauVMn9Ck1w6cF8AlU3u9sB46z0Fx9CaqU3jh7/e+cTpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmvXOO5y4Qe56wz7TD3c5IMa/zUMB8GA1UdIwQY MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt ZDQxODE1M2EzMGE2LzEvZWE5YzQ3bkxoQjduckRQdE1QZHprZ3hyX05RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2 LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTBaMA0G CSqGSIb3DQEBCwUAA4IBAQBFDOOQGBQ1nAxPzfxwpvs/HWNEsYlt0jFwnF7T6TOt XKP7M2EYVt5E7HBYeIIWdImSm6IbRbHPCG7gPOkL9LUg8UjkoMbbbfEAlMZcciqw +HQHNnEhEPPeaJ3vTBwn0z9C4m0px8YiXdCAXEDCxpe6gD+57mw1b2dmlx/Hxy2I 3TpfuVEXixvIyDBYocC2WfgmJ5hYHq01qJDIxdFcINpp+KYDO/9qXEzpoSPsBTJ4 GEAvwcAAp1pdMOnJ7uZV3esN5YKLtmw00tm1/H0LxwpRzosFiAyhf7b1hNdv6rvP hNQ33pDhuVkl6RHkFFM6B8Havu+Bp/m/zUOs2aSy+2pi -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:30 2026 by rpki-client