This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa File: R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa (raw, json) Hash identifier: O2XqZYJVg9I0qJHfw0FYVH2QGiz9GyNT5hxyGi4r7zA= Subject key identifier: 47:C5:4B:96:AC:55:CC:F3:7C:95:DD:93:83:45:1A:22:DB:28:60:CB Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0 Certificate serial: 019B7AC7855D05106B2789539B95AB216A73 Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 147.233.249.0/24 maxlen: 24 147.233.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:85:5d:05:10:6b:27:89:53:9b:95:ab:21:6a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47c54b96ac55ccf37c95dd9383451a22db2860cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:e2:00:9a:2e:56:83:de:50:98:7d:fb:68: cc:d6:67:a3:8d:12:b4:1f:1c:e1:67:02:9f:ca:36: 0d:52:e5:b8:0f:a4:6b:e4:2f:aa:7f:fb:f1:9b:46: 64:47:3a:4f:9b:e9:d9:c6:6e:4c:bd:32:55:b2:e1: 3a:5b:93:2d:75:7c:6a:21:14:4f:78:2b:ba:d9:1a: 31:5f:93:04:37:a1:bf:78:53:01:98:fc:e2:f1:93: 8d:d3:42:53:72:0e:30:22:f5:48:22:dd:fa:20:fe: 06:10:ac:c0:d6:52:8f:61:56:4e:8c:ea:79:97:20: f7:46:ef:f2:ba:70:e9:99:06:b1:8e:55:a7:d5:6a: b7:c7:a6:37:86:87:97:28:83:d3:b0:12:47:e2:41: b8:1c:7a:76:5a:64:9e:83:69:79:d4:96:24:52:40: 7f:af:94:63:56:f5:a0:f1:8f:56:50:83:e8:6c:48: 05:41:40:5e:8e:34:4f:0e:31:0a:a2:c8:2b:07:04: 94:a4:27:ab:16:32:13:9c:25:8a:ea:dd:5b:e3:b6: 8a:39:1a:5a:19:63:86:32:88:26:43:08:74:96:5b: af:d1:82:ef:69:ba:a8:3b:e6:66:8b:b2:e5:76:70: fa:08:da:91:0d:92:3b:bc:61:35:b9:0e:01:0e:5d: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C5:4B:96:AC:55:CC:F3:7C:95:DD:93:83:45:1A:22:DB:28:60:CB X509v3 Authority Key Identifier: keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/R8VLlqxVzPN8ld2Tg0UaItsoYMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.233.249.0-147.233.250.255 Signature Algorithm: sha256WithRSAEncryption 4c:6e:a3:43:31:0e:ba:ac:12:01:57:24:90:fb:58:5e:16:f4: 89:05:ab:da:3c:00:5c:d4:d0:b7:c4:b4:83:6b:ad:26:6e:fb: 95:38:cd:71:a9:7e:9e:29:62:ed:eb:ab:b0:c4:c5:d9:e8:3e: 74:b5:10:63:e5:1b:ef:f8:ee:9a:16:8c:63:17:c3:1e:2c:e6: 97:41:d2:fb:a0:db:46:35:97:dc:44:37:1a:25:68:62:41:5f: 97:fd:3e:f0:31:74:1f:df:83:cc:54:6f:c3:45:09:c6:a1:62: 80:ab:d2:dc:97:1c:92:db:55:0a:b6:0d:7f:4b:d0:fc:ea:0e: 11:44:5c:46:2b:1b:7b:9e:e9:2e:d4:e0:56:53:50:1f:34:82: ae:c0:2b:b2:f7:00:a7:63:08:05:e9:f7:96:19:b7:06:27:6e: 76:91:70:da:9c:05:78:38:19:e7:1a:4b:bf:75:08:eb:95:48: 0f:7b:79:5c:51:04:3c:f0:53:58:a8:ea:55:83:a6:2f:c7:56: 35:75:5b:b5:ba:b9:88:23:d4:c1:5e:8d:e4:09:69:6e:c4:34: 85:4e:b6:ff:a6:71:db:cd:85:64:7f:71:84:73:c4:af:90:2a: 8f:3d:1e:17:f8:11:cb:77:f5:aa:8e:de:bb:a4:db:71:82:ab: ff:11:0e:65 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x4VdBRBrJ4lTm5WrIWpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi MzEyZjAwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2M1NGI5NmFjNTVjY2YzN2M5NWRkOTM4MzQ1MWEyMmRiMjg2MGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycniAJouVoPeUJh9+2jM1mejjRK0 HxzhZwKfyjYNUuW4D6Rr5C+qf/vxm0ZkRzpPm+nZxm5MvTJVsuE6W5MtdXxqIRRP eCu62RoxX5MEN6G/eFMBmPzi8ZON00JTcg4wIvVIIt36IP4GEKzA1lKPYVZOjOp5 lyD3Ru/yunDpmQaxjlWn1Wq3x6Y3hoeXKIPTsBJH4kG4HHp2WmSeg2l51JYkUkB/ r5RjVvWg8Y9WUIPobEgFQUBejjRPDjEKosgrBwSUpCerFjITnCWK6t1b47aKORpa GWOGMogmQwh0lluv0YLvabqoO+Zmi7LldnD6CNqRDZI7vGE1uQ4BDl24EQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEfFS5asVczzfJXdk4NFGiLbKGDLMB8GA1UdIwQY MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt MTYyYjAyYmIxNWJkLzEvUjhWTGxxeFZ6UE44bGQyVGcwVWFJdHNvWU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACT6fkD BACT6fowDQYJKoZIhvcNAQELBQADggEBAExuo0MxDrqsEgFXJJD7WF4W9IkFq9o8 AFzU0LfEtINrrSZu+5U4zXGpfp4pYu3rq7DExdnoPnS1EGPlG+/47poWjGMXwx4s 5pdB0vug20Y1l9xENxolaGJBX5f9PvAxdB/fg8xUb8NFCcahYoCr0tyXHJLbVQq2 DX9L0PzqDhFEXEYrG3ue6S7U4FZTUB80gq7AK7L3AKdjCAXp95YZtwYnbnaRcNqc BXg4GecaS791COuVSA97eVxRBDzwU1io6lWDpi/HVjV1W7W6uYgj1MFejeQJaW7E NIVOtv+mcdvNhWR/cYRzxK+QKo89Hhf4Ect39aqO3ruk23GCq/8RDmU= -----END CERTIFICATE-----Generated at Tue Jan 20 11:23:26 2026 by rpki-client