This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/R98-3MxUCEXE69Fz60_XSqvCP5E.roa File: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (raw, json) Hash identifier: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI= Subject key identifier: 47:DF:3E:DC:CC:54:08:45:C4:EB:D1:73:EB:4F:D7:4A:AB:C2:3F:91 Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Certificate serial: 019B7C13294587CB5760D539EB662C3237EE Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/R98-3MxUCEXE69Fz60_XSqvCP5E.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58075 IP address blocks: 45.150.244.0/22 maxlen: 24 109.175.228.0/22 maxlen: 24 176.56.44.0/22 maxlen: 24 185.233.216.0/24 maxlen: 24 185.248.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:29:45:87:cb:57:60:d5:39:eb:66:2c:32:37:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47df3edccc540845c4ebd173eb4fd74aabc23f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:04:64:8d:57:60:97:fe:aa:dd:0f:d6:4f: 7e:b3:76:ef:2c:94:49:44:18:a1:81:23:4f:18:1c: c1:3f:e9:ad:5b:65:65:05:75:ed:15:51:c4:85:4f: 21:e7:e8:75:f0:b0:a8:d3:fb:c1:b7:6e:5c:1b:8e: 07:ab:5e:b9:61:bf:f4:74:d3:a5:7f:fd:ea:b4:69: d2:b6:f9:7f:8d:bf:79:82:e4:e8:5e:59:9d:05:78: b2:a5:6e:52:da:e2:80:e5:21:7f:98:67:00:de:6e: 71:d9:4d:04:04:e8:42:1d:d0:22:f4:0d:cd:a5:5e: 3b:f9:82:d6:91:0f:45:b9:80:66:15:f3:d0:93:1e: 40:ef:06:c3:07:51:81:f7:e2:14:68:07:d9:80:e2: 68:b7:b4:32:e7:e6:b3:39:34:eb:18:d4:f8:b2:b2: 53:d6:7e:3c:0f:ef:36:42:17:1f:2f:f0:ee:5d:ad: 49:db:96:2b:0d:f2:0c:ba:b3:cf:e2:c5:9d:27:74: 00:c9:2b:31:df:11:34:62:77:e6:db:2e:31:5d:f7: 30:8e:b2:81:5a:64:36:99:0c:7d:75:86:f7:ca:73: 84:ed:6d:82:cf:dc:73:00:b5:76:33:41:4e:00:2e: 0a:21:ef:82:33:47:6a:14:ab:41:d2:05:a8:ef:fd: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DF:3E:DC:CC:54:08:45:C4:EB:D1:73:EB:4F:D7:4A:AB:C2:3F:91 X509v3 Authority Key Identifier: keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/R98-3MxUCEXE69Fz60_XSqvCP5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.244.0/22 109.175.228.0/22 176.56.44.0/22 185.233.216.0/24 185.248.236.0/22 Signature Algorithm: sha256WithRSAEncryption 69:83:42:0e:53:45:4f:45:88:a5:c9:fb:49:8a:0b:dc:52:73: 36:b0:07:6d:eb:7b:19:f4:e5:53:3d:73:d9:54:40:95:c3:0b: 2a:85:b6:b4:7e:c4:35:e0:92:0c:ff:15:a9:34:7a:94:1c:c9: 29:fb:77:c2:90:5d:f9:5b:ce:da:91:25:fd:44:8b:30:c7:21: d0:5d:df:6f:3a:4a:d2:d5:07:3b:32:b0:04:81:c5:47:a4:eb: ba:9a:d8:9c:fd:3f:dd:95:fb:e0:bc:b7:0c:91:8e:1d:b1:ef: 1d:4f:e4:95:3a:c4:e7:bb:7b:71:ff:fc:80:02:0f:cf:95:48: 34:d8:9d:91:bc:a0:1d:cb:66:08:53:a7:8a:d2:5e:a8:dd:95: f7:ea:52:8d:b0:50:ae:50:c5:41:09:dc:f4:42:97:6d:f5:d4: 2f:de:63:22:36:63:4d:83:bf:5a:73:9c:03:14:a2:4e:a9:7b: 25:b6:c9:01:5e:e8:16:64:9f:02:bb:3b:1a:f3:d1:d1:3d:50: e8:ce:94:98:ed:82:86:4d:bf:14:1a:25:90:f1:8c:e7:06:3e: 32:5c:60:be:f5:90:91:62:d6:bf:85:59:bc:76:7f:be:a5:a1: 1c:e7:e2:e7:d5:af:34:c6:9c:6a:d6:01:6a:ac:62:3b:c9:7b: 92:f5:6c:64 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EylFh8tXYNU562YsMjfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2 OTBmZjIwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RmM2VkY2NjNTQwODQ1YzRlYmQxNzNlYjRmZDc0YWFiYzIzZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4cEZI1XYJf+qt0P1k9+s3bvLJRJ RBihgSNPGBzBP+mtW2VlBXXtFVHEhU8h5+h18LCo0/vBt25cG44Hq165Yb/0dNOl f/3qtGnStvl/jb95guToXlmdBXiypW5S2uKA5SF/mGcA3m5x2U0EBOhCHdAi9A3N pV47+YLWkQ9FuYBmFfPQkx5A7wbDB1GB9+IUaAfZgOJot7Qy5+azOTTrGNT4srJT 1n48D+82QhcfL/DuXa1J25YrDfIMurPP4sWdJ3QAySsx3xE0Ynfm2y4xXfcwjrKB WmQ2mQx9dYb3ynOE7W2Cz9xzALV2M0FOAC4KIe+CM0dqFKtB0gWo7/2fewIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEffPtzMVAhFxOvRc+tP10qrwj+RMB8GA1UdIwQY MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt MTBkZDk1MmUyNDEyLzEvUjk4LTNNeFVDRVhFNjlGejYwX1hTcXZDUDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLZb0AwQC ba/kAwQCsDgsAwQAuenYAwQCufjsMA0GCSqGSIb3DQEBCwUAA4IBAQBpg0IOU0VP RYilyftJigvcUnM2sAdt63sZ9OVTPXPZVECVwwsqhba0fsQ14JIM/xWpNHqUHMkp +3fCkF35W87akSX9RIswxyHQXd9vOkrS1Qc7MrAEgcVHpOu6mtic/T/dlfvgvLcM kY4dse8dT+SVOsTnu3tx//yAAg/PlUg02J2RvKAdy2YIU6eK0l6o3ZX36lKNsFCu UMVBCdz0Qpdt9dQv3mMiNmNNg79ac5wDFKJOqXsltskBXugWZJ8Cuzsa89HRPVDo zpSY7YKGTb8UGiWQ8YznBj4yXGC+9ZCRYta/hVm8dn++paEc5+Ln1a80xpxq1gFq rGI7yXuS9Wxk -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:46 2026 by rpki-client