This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/PSJHF0T7csTccKL_3bcCSL4cmds.roa File: PSJHF0T7csTccKL_3bcCSL4cmds.roa (raw, json) Hash identifier: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs= Subject key identifier: 3D:22:47:17:44:FB:72:C4:DC:70:A2:FF:DD:B7:02:48:BE:1C:99:DB Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B783483D6BC7A0A601DB0F03CADF163DB Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/PSJHF0T7csTccKL_3bcCSL4cmds.roa Signing time: Thu 01 Jan 2026 06:17:46 +0000 ROA not before: Thu 01 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200896 IP address blocks: 185.92.84.0/24 maxlen: 24 185.92.85.0/24 maxlen: 24 185.92.86.0/24 maxlen: 24 185.92.87.0/24 maxlen: 24 2a05:f140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:83:d6:bc:7a:0a:60:1d:b0:f0:3c:ad:f1:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Jan 1 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d22471744fb72c4dc70a2ffddb70248be1c99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:35:1a:87:2b:d1:71:af:75:b5:5f:56:ea: 2e:2b:91:c3:c5:ba:e8:25:37:4d:f6:e7:7e:f8:ab: 7b:33:78:dc:9d:3b:ee:7a:b2:58:80:50:39:18:30: 59:a9:dd:5d:9b:18:80:57:37:1c:20:c7:dd:ed:9b: 7f:39:91:ef:0b:43:a6:0d:a2:55:0a:6e:8e:f0:51: 31:2c:fd:9c:d1:49:54:f1:85:d5:f6:73:5a:5e:9a: 14:81:cb:03:3e:2c:e4:a6:1e:86:ef:7c:a2:bd:23: 4e:93:f6:f0:53:3a:98:02:a1:93:ef:fb:be:03:aa: 12:00:39:13:ba:0b:e9:d6:2c:d2:ce:aa:a9:68:f2: 79:68:d2:b2:09:b2:c0:97:9c:bc:08:3a:ed:10:c9: 3a:cd:8a:1e:2c:fd:f1:47:27:38:12:c9:3c:c1:24: af:47:f3:1e:11:5f:93:a4:b1:5b:bd:4b:43:35:4d: e9:6e:6e:7c:f2:19:f0:8a:f2:26:04:61:89:24:68: d1:27:76:1d:82:cb:b0:16:79:70:a3:ce:b8:f1:4c: 53:ab:b8:d5:21:d0:1b:02:97:c3:65:b1:f2:de:53: b6:60:c8:7d:cd:f7:d9:a0:b6:21:5f:d2:d6:83:9f: 48:e3:1c:c0:28:35:1d:16:5f:ae:d2:58:7a:3c:c9: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:47:17:44:FB:72:C4:DC:70:A2:FF:DD:B7:02:48:BE:1C:99:DB X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/PSJHF0T7csTccKL_3bcCSL4cmds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.84.0/22 IPv6: 2a05:f140::/29 Signature Algorithm: sha256WithRSAEncryption 7b:cf:6b:92:44:10:e3:7b:b2:57:9a:53:fe:13:28:3e:3a:b1: 12:e6:ba:33:46:af:45:08:52:85:d3:6a:c7:95:5c:5e:04:3e: 8f:61:d2:b0:c9:57:bb:aa:73:8d:59:b2:ca:5e:f7:43:42:ba: 9d:0c:40:55:c5:b7:cd:52:7a:3b:8f:08:e6:88:2b:04:39:2c: d2:f1:c2:f7:b5:ea:47:e1:49:57:81:fc:f4:d2:72:a1:38:a4: db:19:07:a3:9d:bd:66:c7:45:1a:34:8f:cf:7d:86:55:19:8b: e3:ec:d5:da:55:ba:f6:4c:68:9f:30:fd:1a:19:1f:90:ed:b5: ae:3b:50:72:d2:a4:18:7e:a1:13:12:1c:f4:d9:7e:6c:41:6a: e7:ca:52:bd:2d:b9:67:e2:d1:f8:2d:f9:c5:77:30:18:93:1e: f2:c9:4a:38:2a:49:19:2f:cd:86:c7:aa:6a:29:1f:ff:2d:b0: 69:54:3e:05:9f:71:d8:55:ef:61:9c:85:be:bd:80:4b:b1:3e: ed:65:f9:86:33:e3:61:5b:84:9e:1c:7d:26:67:03:49:e0:5c: f6:e6:2a:47:e6:b2:d4:c1:83:10:0e:13:66:06:ad:b5:c9:b2: f2:a2:4d:0a:00:43:80:52:94:0e:b0:92:18:50:01:c3:dc:36: c4:b1:4a:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NIPWvHoKYB2w8Dyt8WPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDIyNDcxNzQ0ZmI3MmM0ZGM3MGEyZmZkZGI3MDI0OGJlMWM5OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWU1Gocr0XGvdbVfVuouK5HDxbro JTdN9ud++Kt7M3jcnTvuerJYgFA5GDBZqd1dmxiAVzccIMfd7Zt/OZHvC0OmDaJV Cm6O8FExLP2c0UlU8YXV9nNaXpoUgcsDPizkph6G73yivSNOk/bwUzqYAqGT7/u+ A6oSADkTugvp1izSzqqpaPJ5aNKyCbLAl5y8CDrtEMk6zYoeLP3xRyc4Esk8wSSv R/MeEV+TpLFbvUtDNU3pbm588hnwivImBGGJJGjRJ3YdgsuwFnlwo8648UxTq7jV IdAbApfDZbHy3lO2YMh9zffZoLYhX9LWg59I4xzAKDUdFl+u0lh6PMlUPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD0iRxdE+3LE3HCi/923Aki+HJnbMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvUFNKSEYwVDdjc1RjY0tMXzNiY0NTTDRjbWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVxUMA0E AgACMAcDBQMqBfFAMA0GCSqGSIb3DQEBCwUAA4IBAQB7z2uSRBDje7JXmlP+Eyg+ OrES5rozRq9FCFKF02rHlVxeBD6PYdKwyVe7qnONWbLKXvdDQrqdDEBVxbfNUno7 jwjmiCsEOSzS8cL3tepH4UlXgfz00nKhOKTbGQejnb1mx0UaNI/PfYZVGYvj7NXa Vbr2TGifMP0aGR+Q7bWuO1By0qQYfqETEhz02X5sQWrnylK9Lbln4tH4LfnFdzAY kx7yyUo4KkkZL82Gx6pqKR//LbBpVD4Fn3HYVe9hnIW+vYBLsT7tZfmGM+NhW4Se HH0mZwNJ4Fz25ipH5rLUwYMQDhNmBq21ybLyok0KAEOAUpQOsJIYUAHD3DbEsUpH -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:58 2026 by rpki-client