This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/PHHmlI_lozSBsIeTe7D4ho8MMgk.roa File: PHHmlI_lozSBsIeTe7D4ho8MMgk.roa (raw, json) Hash identifier: Q0/1mQZnoW0veYxUY+kdm56TFO9WzQm4B7+icQrGOc4= Subject key identifier: 3C:71:E6:94:8F:E5:A3:34:81:B0:87:93:7B:B0:F8:86:8F:0C:32:09 Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Certificate serial: 019B7CECBECBF9E80BF89450978E1ED015ED Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/PHHmlI_lozSBsIeTe7D4ho8MMgk.roa Signing time: Fri 02 Jan 2026 04:17:28 +0000 ROA not before: Fri 02 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48388 IP address blocks: 91.209.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:be:cb:f9:e8:0b:f8:94:50:97:8e:1e:d0:15:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c71e6948fe5a33481b087937bb0f8868f0c3209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:97:d0:de:ea:fe:82:63:72:8b:91:25:58: 67:cf:54:a9:a9:08:0a:85:68:ea:ce:7a:17:13:67: 06:d9:b5:1f:d6:d2:4c:ed:84:44:35:56:28:05:13: 4a:fc:6b:9d:7f:ef:c3:83:3b:80:71:c6:00:4f:e9: 16:cd:34:7b:d7:3b:df:e4:45:d8:d5:12:d8:f3:e3: aa:33:38:5a:77:df:c4:70:04:9f:63:9e:61:a5:40: 51:c3:14:34:29:dd:06:38:1f:ff:2d:3f:7f:44:e1: 23:4a:31:1f:f5:c1:58:95:ed:78:01:cc:7b:e5:da: 70:dc:2b:b3:40:d9:8c:92:8c:bb:b3:4c:c7:93:ed: e3:1c:11:2c:fe:8b:9d:5d:b5:a9:59:eb:1a:23:12: bc:12:44:7d:cb:e7:e1:09:d3:b6:a0:79:87:9b:50: 5b:66:54:dc:31:aa:50:9a:01:f8:06:b9:a8:66:cb: d2:ae:46:96:57:e3:8f:90:74:8e:ef:2d:ea:70:cd: ed:cd:9e:c7:41:68:1b:40:fc:c1:b7:e4:46:7e:cc: 37:c7:78:91:44:d5:35:86:5d:74:69:5e:56:80:24: 10:b5:a9:cc:85:23:78:28:9c:11:4c:4e:7d:cc:1e: e2:6d:ba:00:28:c9:43:07:5d:d9:fe:ac:ee:95:da: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:71:E6:94:8F:E5:A3:34:81:B0:87:93:7B:B0:F8:86:8F:0C:32:09 X509v3 Authority Key Identifier: keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/PHHmlI_lozSBsIeTe7D4ho8MMgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.132.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5c:f5:d8:28:8c:eb:88:9b:96:a5:2f:fc:53:88:89:cc:70: f7:5a:89:00:90:14:10:a3:95:5f:ad:60:7a:25:3b:c6:54:15: aa:02:79:8b:60:16:5f:62:c5:6d:31:18:29:92:72:ae:c5:cf: 90:70:4e:6a:be:89:7f:72:68:52:67:01:ad:6f:33:dd:45:1a: 73:08:0f:57:d5:a7:4f:7a:9c:c8:eb:cb:cc:44:f1:bf:f8:54: 01:0b:66:e8:bb:78:37:91:29:2b:18:29:3b:1b:a5:f3:96:30: 2b:0b:3f:ef:c7:99:0b:14:8a:1c:7f:29:8e:02:07:ec:e1:83: 2e:0e:ee:6a:bd:a3:61:6b:64:86:98:89:96:4d:b2:6c:1a:01: 86:bc:72:9b:ff:26:bd:3e:7f:76:24:d7:cd:25:92:9b:82:ba: a1:89:b4:3c:44:dc:49:69:16:31:2a:69:f0:f7:f8:34:9a:5d: 51:5e:ea:0a:0b:d3:87:de:97:ea:41:76:50:71:6b:4a:98:73: d2:d0:b0:1a:67:75:a3:20:7a:78:cb:fb:ae:fa:cd:68:c2:e1: 98:ac:0d:fc:fb:79:09:14:cb:dd:97:73:1e:46:8e:94:95:de: bc:6b:dd:0d:c7:f6:e3:f5:b6:cb:77:2f:05:98:7e:73:58:d5: a2:0f:fe:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87L7L+egL+JRQl44e0BXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh ZDZiZTYwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzcxZTY5NDhmZTVhMzM0ODFiMDg3OTM3YmIwZjg4NjhmMGMzMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAeX0N7q/oJjcouRJVhnz1SpqQgK hWjqznoXE2cG2bUf1tJM7YRENVYoBRNK/Gudf+/DgzuAccYAT+kWzTR71zvf5EXY 1RLY8+OqMzhad9/EcASfY55hpUBRwxQ0Kd0GOB//LT9/ROEjSjEf9cFYle14Acx7 5dpw3CuzQNmMkoy7s0zHk+3jHBEs/oudXbWpWesaIxK8EkR9y+fhCdO2oHmHm1Bb ZlTcMapQmgH4BrmoZsvSrkaWV+OPkHSO7y3qcM3tzZ7HQWgbQPzBt+RGfsw3x3iR RNU1hl10aV5WgCQQtanMhSN4KJwRTE59zB7ibboAKMlDB13Z/qzuldoJUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxx5pSP5aM0gbCHk3uw+IaPDDIJMB8GA1UdIwQY MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt OThiZjQyODlkZjNiLzEvUEhIbWxJX2xvelNCc0llVGU3RDRobzhNTWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GEMA0G CSqGSIb3DQEBCwUAA4IBAQBrXPXYKIzriJuWpS/8U4iJzHD3WokAkBQQo5VfrWB6 JTvGVBWqAnmLYBZfYsVtMRgpknKuxc+QcE5qvol/cmhSZwGtbzPdRRpzCA9X1adP epzI68vMRPG/+FQBC2bou3g3kSkrGCk7G6XzljArCz/vx5kLFIocfymOAgfs4YMu Du5qvaNha2SGmImWTbJsGgGGvHKb/ya9Pn92JNfNJZKbgrqhibQ8RNxJaRYxKmnw 9/g0ml1RXuoKC9OH3pfqQXZQcWtKmHPS0LAaZ3WjIHp4y/uu+s1owuGYrA38+3kJ FMvdl3MeRo6Uld68a90Nx/bj9bbLdy8FmH5zWNWiD/7s -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:24 2026 by rpki-client