This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/PUmRbcQEHO-1E9MjUNB1G27jvC4.roa File: PUmRbcQEHO-1E9MjUNB1G27jvC4.roa (raw, json) Hash identifier: 1b5K13lRJVgXMES2Ogtx5dT9HxojliDTCamL4LINRu4= Subject key identifier: 3D:49:91:6D:C4:04:1C:EF:B5:13:D3:23:50:D0:75:1B:6E:E3:BC:2E Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d Certificate serial: 019B77C68C555B3314D4A3920ED25BD3BB22 Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/PUmRbcQEHO-1E9MjUNB1G27jvC4.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197890 IP address blocks: 185.94.252.0/24 maxlen: 24 185.94.253.0/24 maxlen: 24 2a03:e300::/32 maxlen: 32 2a06:4580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:55:5b:33:14:d4:a3:92:0e:d2:5b:d3:bb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d49916dc4041cefb513d32350d0751b6ee3bc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:fd:d7:df:0c:39:c2:1a:c6:e3:92:4f:29: 37:98:53:4e:ab:22:9a:e7:bc:37:ed:b0:c5:02:84: 97:67:e6:40:31:4a:45:17:d7:10:80:1c:15:90:7b: 15:71:62:be:14:8f:3b:5f:98:08:90:66:e8:95:fe: c4:6f:8e:75:c9:7a:6a:a0:25:c8:46:80:c6:2b:91: 4f:71:55:19:00:72:8a:eb:a1:25:d8:65:7d:ac:92: ae:d5:f2:84:be:26:70:17:8d:e9:c6:4c:5e:0c:82: 5c:14:43:42:ae:43:99:f7:77:82:53:ee:af:18:4f: 1d:13:a0:06:90:de:f8:3b:c0:a1:95:f3:9a:ea:99: 02:ba:cd:07:a8:a9:57:79:37:6c:2c:d4:62:10:bd: b4:9d:cc:b3:17:a5:56:17:75:9b:69:6b:8d:32:39: 18:f1:94:2a:11:06:71:0a:f7:b7:a8:d1:d5:9a:2e: 42:f6:4e:dd:74:28:09:9a:27:7b:15:75:4c:d9:ec: ec:04:b8:67:bb:07:18:d3:93:78:18:3d:52:80:9c: f9:50:3c:c8:0d:b0:ee:95:8c:37:9a:13:cc:c6:fa: 58:fc:85:9c:55:e5:cc:a2:32:b8:f5:bc:f8:d4:78: 07:b0:97:2e:09:91:12:16:c7:0c:3e:ea:e3:23:8b: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:91:6D:C4:04:1C:EF:B5:13:D3:23:50:D0:75:1B:6E:E3:BC:2E X509v3 Authority Key Identifier: keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/PUmRbcQEHO-1E9MjUNB1G27jvC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.252.0/23 IPv6: 2a03:e300::/32 2a06:4580::/29 Signature Algorithm: sha256WithRSAEncryption 1a:bd:f5:03:ba:c0:b8:b3:9a:db:35:a5:71:cf:11:1c:9c:51: 45:fa:2a:a7:f4:38:54:90:1e:8d:4b:6a:82:87:81:5d:72:9c: e4:ff:54:24:60:6c:54:59:8f:73:37:79:04:46:c3:fc:18:ea: dc:e0:a6:59:bb:32:f7:13:6a:c0:76:a9:b3:64:83:6f:b4:35: 42:f8:7d:ec:08:3d:7c:67:02:64:ef:fb:28:61:f6:5d:69:88: b2:c2:85:a4:e6:a8:78:f3:da:41:d1:19:ac:17:10:aa:46:3d: 2c:f3:26:15:2d:7d:38:46:85:2c:3b:ed:18:66:f6:48:47:3a: 34:cb:4b:36:f8:c4:47:85:78:0a:c1:e8:a7:9b:8a:c7:61:8e: e6:ec:5b:5b:62:8b:c3:8e:f9:2b:52:5c:3c:47:9a:49:f5:db: 14:7b:9c:cc:04:13:72:1b:c2:a5:b6:14:69:4d:9a:4c:3f:b9: 1e:d6:bb:ab:e3:a6:54:6a:7b:eb:ea:2c:01:0d:ca:e2:cc:33: 59:88:50:1c:ae:f3:f0:4a:da:c9:bd:16:49:d0:85:f4:bb:25: 82:30:63:29:19:7b:70:15:11:48:c1:10:e0:b4:f9:e4:d6:5c: a5:cc:6f:0e:09:68:15:62:90:57:a7:c6:46:a6:7b:1c:34:2f: c8:e0:d7:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3xoxVWzMU1KOSDtJb07siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTY5ZGRjMjlhMDViMmM0NWVlM2NjNWEyMzQwYjJlNGM2 ZGFkNWQwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQ5OTE2ZGM0MDQxY2VmYjUxM2QzMjM1MGQwNzUxYjZlZTNiYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtL9198MOcIaxuOSTyk3mFNOqyKa 57w37bDFAoSXZ+ZAMUpFF9cQgBwVkHsVcWK+FI87X5gIkGbolf7Eb451yXpqoCXI RoDGK5FPcVUZAHKK66El2GV9rJKu1fKEviZwF43pxkxeDIJcFENCrkOZ93eCU+6v GE8dE6AGkN74O8ChlfOa6pkCus0HqKlXeTdsLNRiEL20ncyzF6VWF3WbaWuNMjkY 8ZQqEQZxCve3qNHVmi5C9k7ddCgJmid7FXVM2ezsBLhnuwcY05N4GD1SgJz5UDzI DbDulYw3mhPMxvpY/IWcVeXMojK49bz41HgHsJcuCZESFscMPurjI4u8SwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFD1JkW3EBBzvtRPTI1DQdRtu47wuMB8GA1UdIwQY MBaAFBfmndwpoFssRe48xaI0Cy5Mba1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYt ZTcxNzY3ODZmNzRhLzEvUFVtUmJjUUVITy0xRTlNalVOQjFHMjdqdkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYtZTcxNzY3ODZmNzRh LzEvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQBuV78MBQE AgACMA4DBQAqA+MAAwUDKgZFgDANBgkqhkiG9w0BAQsFAAOCAQEAGr31A7rAuLOa 2zWlcc8RHJxRRfoqp/Q4VJAejUtqgoeBXXKc5P9UJGBsVFmPczd5BEbD/Bjq3OCm Wbsy9xNqwHaps2SDb7Q1Qvh97Ag9fGcCZO/7KGH2XWmIssKFpOaoePPaQdEZrBcQ qkY9LPMmFS19OEaFLDvtGGb2SEc6NMtLNvjER4V4CsHop5uKx2GO5uxbW2KLw475 K1JcPEeaSfXbFHuczAQTchvCpbYUaU2aTD+5Hta7q+OmVGp76+osAQ3K4swzWYhQ HK7z8Erayb0WSdCF9LslgjBjKRl7cBURSMEQ4LT55NZcpcxvDgloFWKQV6fGRqZ7 HDQvyODXZA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client