This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/PmriDi-WvBl3kjT0AM3ALEKea5I.roa File: PmriDi-WvBl3kjT0AM3ALEKea5I.roa (raw, json) Hash identifier: u9rxEgE545cfyGzOPy0zoc1yKGIybLe5UkFP7WY/8Xs= Subject key identifier: 3E:6A:E2:0E:2F:96:BC:19:77:92:34:F4:00:CD:C0:2C:42:9E:6B:92 Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa Certificate serial: 019B7758C3B732862FFDDCBE94CC8B38FFA8 Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/PmriDi-WvBl3kjT0AM3ALEKea5I.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200485 IP address blocks: 185.104.156.0/22 maxlen: 22 185.104.156.0/24 maxlen: 24 185.104.157.0/24 maxlen: 24 185.104.158.0/24 maxlen: 24 185.104.159.0/24 maxlen: 24 2a06:4200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:b7:32:86:2f:fd:dc:be:94:cc:8b:38:ff:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e6ae20e2f96bc19779234f400cdc02c429e6b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:9d:d9:92:86:e6:c8:f7:fc:a2:87:26:49: a8:9e:8e:e0:24:e9:7f:79:12:ab:5f:b9:a9:38:05: 08:51:0f:f8:ef:71:03:f0:31:65:91:07:3e:ec:d3: 11:7c:77:2c:ec:ad:39:e5:0c:6a:c1:d8:54:a8:53: a7:5a:88:78:4c:0e:e8:08:49:28:3d:d1:8f:73:d6: bc:a8:48:97:b6:18:3a:a6:cd:83:7b:d0:ea:4d:e8: 1f:44:95:a2:38:c1:47:64:98:4f:fd:96:a8:2d:68: d3:37:87:a1:87:a7:8c:0d:88:4c:ec:d4:94:72:ba: 90:87:50:20:19:54:f9:fb:b4:af:38:30:b7:4d:f9: f7:53:6c:0e:27:5f:d2:23:9d:72:a1:11:f2:8a:ef: 83:bb:e7:49:da:b4:4b:fb:40:48:bb:e2:72:b1:49: 77:a7:1e:de:8e:a6:96:eb:e9:fb:7d:56:b4:5e:56: d2:91:f2:15:bb:f6:8f:86:bb:b2:bc:00:0a:47:57: 24:22:d4:78:cf:ab:9c:29:0e:ae:84:ba:ba:25:89: c2:72:2a:77:70:92:0a:e1:5e:e9:92:7a:1d:60:67: d9:8e:08:78:40:63:95:44:9e:34:78:d3:d3:a2:96: db:e0:3d:34:14:41:64:f5:f7:f9:54:25:8d:5f:86: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6A:E2:0E:2F:96:BC:19:77:92:34:F4:00:CD:C0:2C:42:9E:6B:92 X509v3 Authority Key Identifier: keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/PmriDi-WvBl3kjT0AM3ALEKea5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.156.0/22 IPv6: 2a06:4200::/29 Signature Algorithm: sha256WithRSAEncryption 67:42:0e:77:98:6f:df:ec:70:d9:bf:98:56:89:bd:0e:71:a6: 7f:a8:13:e3:c6:d5:89:61:a7:ed:55:a6:72:6f:0f:db:15:dc: 6e:4b:9f:12:6c:de:3e:e7:c4:ff:2c:f6:52:a5:cd:e9:a7:14: c5:45:80:7f:fc:7c:08:4c:e3:eb:99:d9:d2:85:73:3d:08:76: 57:10:88:62:2a:83:53:89:7b:62:5b:c5:96:6b:47:6d:7a:98: 2b:2b:54:46:ac:07:fd:65:0f:c6:ac:68:b7:e8:c1:d1:73:35: b4:3c:b0:e1:4d:ae:0d:11:bc:04:ce:d4:c6:d0:ad:bf:2d:8b: 05:f8:97:8f:ce:b0:dc:92:c6:f3:56:bb:30:34:19:90:cd:b3: 05:78:77:05:61:cc:d3:f3:22:29:34:fd:55:3d:ad:71:54:66: b0:ac:32:e0:c5:4f:05:33:e9:40:eb:54:8a:d7:8c:28:3f:fa: 37:31:71:e5:95:4b:fd:48:bf:80:2b:2b:b3:11:27:78:ec:bd: c3:bd:7b:14:a4:d3:a0:93:0d:a3:c0:35:47:15:9d:f0:0e:04: 83:08:2e:01:90:03:35:5d:13:d3:70:64:da:4d:a8:b9:e3:37: 38:41:68:a0:87:7f:21:a6:02:cb:1d:2b:12:87:2c:67:48:10: 94:ec:11:d3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WMO3MoYv/dy+lMyLOP+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NDNhNTM4MWRjZTI4NzdiYmMzNTFhNjg0ZWZjZWNkZDYx M2UzYWEwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTZhZTIwZTJmOTZiYzE5Nzc5MjM0ZjQwMGNkYzAyYzQyOWU2YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlqd2ZKG5sj3/KKHJkmono7gJOl/ eRKrX7mpOAUIUQ/473ED8DFlkQc+7NMRfHcs7K055QxqwdhUqFOnWoh4TA7oCEko PdGPc9a8qEiXthg6ps2De9DqTegfRJWiOMFHZJhP/ZaoLWjTN4ehh6eMDYhM7NSU crqQh1AgGVT5+7SvODC3Tfn3U2wOJ1/SI51yoRHyiu+Du+dJ2rRL+0BIu+JysUl3 px7ejqaW6+n7fVa0XlbSkfIVu/aPhruyvAAKR1ckItR4z6ucKQ6uhLq6JYnCcip3 cJIK4V7pknodYGfZjgh4QGOVRJ40eNPTopbb4D00FEFk9ff5VCWNX4ZuNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD5q4g4vlrwZd5I09ADNwCxCnmuSMB8GA1UdIwQY MBaAFHhDpTgdzih3u8NRpoTvzs3WE+OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAt MDczMTljNzI4Y2EyLzEvUG1yaURpLVd2Qmwza2pUMEFNM0FMRUtlYTVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAtMDczMTljNzI4Y2Ey LzEvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWicMA0E AgACMAcDBQMqBkIAMA0GCSqGSIb3DQEBCwUAA4IBAQBnQg53mG/f7HDZv5hWib0O caZ/qBPjxtWJYaftVaZybw/bFdxuS58SbN4+58T/LPZSpc3ppxTFRYB//HwITOPr mdnShXM9CHZXEIhiKoNTiXtiW8WWa0dtepgrK1RGrAf9ZQ/GrGi36MHRczW0PLDh Ta4NEbwEztTG0K2/LYsF+JePzrDcksbzVrswNBmQzbMFeHcFYczT8yIpNP1VPa1x VGawrDLgxU8FM+lA61SK14woP/o3MXHllUv9SL+AKyuzESd47L3DvXsUpNOgkw2j wDVHFZ3wDgSDCC4BkAM1XRPTcGTaTai54zc4QWigh38hpgLLHSsShyxnSBCU7BHT -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:29 2026 by rpki-client