This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PyHODj5n0DejAoWrQZBIRXaXo6Y.roa File: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (raw, json) Hash identifier: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI= Subject key identifier: 3F:21:CE:0E:3E:67:D0:37:A3:02:85:AB:41:90:48:45:76:97:A3:A6 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59B383DE2FAE018124BF5D8EBBE43F Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PyHODj5n0DejAoWrQZBIRXaXo6Y.roa Signing time: Thu 01 Jan 2026 16:17:37 +0000 ROA not before: Thu 01 Jan 2026 16:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 85.209.217.0/24 maxlen: 24 195.206.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b3:83:de:2f:ae:01:81:24:bf:5d:8e:bb:e4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f21ce0e3e67d037a30285ab419048457697a3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:dc:5e:0d:10:f6:d2:0e:27:d8:14:af:6f: 3b:89:0f:2a:71:85:e0:22:63:af:fa:c6:ba:9b:50: 73:43:ea:17:05:04:e7:62:3f:8a:1d:75:65:cb:06: 19:d1:90:0c:b7:1e:fa:10:5b:46:12:f6:3e:41:03: 69:03:1f:46:d7:6b:a4:e8:d1:da:8e:ab:34:17:15: 7d:52:ca:9d:f0:a3:c5:19:f4:97:05:36:03:e3:c3: 2d:72:62:a8:ed:3d:22:c7:da:ff:38:ee:f0:12:72: 8b:61:6f:7c:4b:5e:c1:67:ff:a1:cb:83:a7:d5:81: 33:e6:92:3c:2f:77:91:c4:62:7b:b1:6e:a6:47:be: 43:c0:65:75:26:d5:b4:86:3c:e8:c7:2d:a6:0f:a0: 55:f9:1c:3c:b8:54:82:78:b3:be:1b:e2:e7:81:4e: ba:7d:67:c4:c5:81:d2:45:42:e5:b8:f2:80:a3:c8: fc:bf:2c:89:b2:2a:2e:1e:31:7d:59:fa:2b:9f:68: 2a:50:fb:4b:6b:d8:18:58:1e:a4:3b:7b:3d:57:71: 02:49:9b:89:93:93:4a:69:99:23:1c:db:d1:97:6e: 5d:3c:28:c7:82:06:22:86:92:9d:1e:39:85:31:ee: a8:83:b9:98:4a:37:6a:b4:87:0a:c6:28:26:f9:93: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:21:CE:0E:3E:67:D0:37:A3:02:85:AB:41:90:48:45:76:97:A3:A6 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/PyHODj5n0DejAoWrQZBIRXaXo6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.217.0/24 195.206.109.0/24 Signature Algorithm: sha256WithRSAEncryption 66:60:a7:18:3e:63:44:e3:0f:a3:8e:1c:7a:9e:c6:3b:a4:28: 90:ad:e8:4a:1f:f3:e5:66:ba:59:d8:de:db:df:5d:1c:bf:b4: 0f:45:73:2d:ca:74:66:e3:dd:14:84:d2:ee:84:5c:80:aa:8c: 32:ab:9d:d4:fa:89:d6:d8:17:ed:23:3d:5a:4d:88:cd:e7:5f: a9:25:c6:4a:04:1e:0b:07:13:4f:76:cd:1e:42:b3:24:f6:0f: 7d:6d:8f:a2:af:04:75:95:5f:97:27:40:a6:38:32:93:7f:8e: 34:91:d4:76:64:df:68:9c:14:f7:f7:18:28:a2:5e:18:8f:0e: 45:4e:45:d8:c0:6b:0c:20:41:48:7a:bb:27:d4:88:13:1f:96: ad:f0:50:8c:ca:29:65:b6:24:c4:03:77:03:16:d9:2d:c9:d7: 46:cf:09:df:97:99:cd:eb:8b:58:f9:a6:58:d5:8e:c3:09:40: 05:5a:ba:83:71:9f:40:56:6c:2b:50:07:e1:50:24:88:a3:8f: 29:2e:2f:30:1b:79:49:35:67:13:2f:96:61:75:2d:bb:f1:8d: e5:dc:68:98:7c:b6:64:76:81:1d:c9:30:26:2d:0f:2e:4c:5d: f3:31:b7:18:41:0e:aa:1f:27:70:a2:88:f1:29:2e:5b:0b:11: 0d:98:3d:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WbOD3i+uAYEkv12Ou+Q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjIxY2UwZTNlNjdkMDM3YTMwMjg1YWI0MTkwNDg0NTc2OTdhM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYjcXg0Q9tIOJ9gUr287iQ8qcYXg ImOv+sa6m1BzQ+oXBQTnYj+KHXVlywYZ0ZAMtx76EFtGEvY+QQNpAx9G12uk6NHa jqs0FxV9Usqd8KPFGfSXBTYD48MtcmKo7T0ix9r/OO7wEnKLYW98S17BZ/+hy4On 1YEz5pI8L3eRxGJ7sW6mR75DwGV1JtW0hjzoxy2mD6BV+Rw8uFSCeLO+G+LngU66 fWfExYHSRULluPKAo8j8vyyJsiouHjF9Wforn2gqUPtLa9gYWB6kO3s9V3ECSZuJ k5NKaZkjHNvRl25dPCjHggYihpKdHjmFMe6og7mYSjdqtIcKxigm+ZOzTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD8hzg4+Z9A3owKFq0GQSEV2l6OmMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvUHlIT0RqNW4wRGVqQW9XclFaQklSWGFYbzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVdHZAwQA w85tMA0GCSqGSIb3DQEBCwUAA4IBAQBmYKcYPmNE4w+jjhx6nsY7pCiQrehKH/Pl ZrpZ2N7b310cv7QPRXMtynRm490UhNLuhFyAqowyq53U+onW2BftIz1aTYjN51+p JcZKBB4LBxNPds0eQrMk9g99bY+irwR1lV+XJ0CmODKTf440kdR2ZN9onBT39xgo ol4Yjw5FTkXYwGsMIEFIersn1IgTH5at8FCMyilltiTEA3cDFtktyddGzwnfl5nN 64tY+aZY1Y7DCUAFWrqDcZ9AVmwrUAfhUCSIo48pLi8wG3lJNWcTL5ZhdS278Y3l 3GiYfLZkdoEdyTAmLQ8uTF3zMbcYQQ6qHydwoojxKS5bCxENmD16 -----END CERTIFICATE-----Generated at Mon Jan 5 03:56:30 2026 by rpki-client