This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/l0yUF1IRmtUQWgAm0m-qwhJJad8.roa File: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (raw, json) Hash identifier: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE= Subject key identifier: 97:4C:94:17:52:11:9A:D5:10:5A:00:26:D2:6F:AA:C2:12:49:69:DF Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Certificate serial: 019BB6602AD24461005036A12FC08A80BD72 Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/l0yUF1IRmtUQWgAm0m-qwhJJad8.roa Signing time: Tue 13 Jan 2026 08:01:54 +0000 ROA not before: Tue 13 Jan 2026 08:01:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211908 IP address blocks: 194.39.228.0/24 maxlen: 24 194.39.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:60:2a:d2:44:61:00:50:36:a1:2f:c0:8a:80:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a Validity Not Before: Jan 13 08:01:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=974c941752119ad5105a0026d26faac2124969df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:68:25:5a:78:86:41:0c:ef:48:4c:79:12: f8:d4:a4:1a:2b:be:bb:6c:ea:77:a2:71:1d:00:99: a6:31:97:f0:2b:2c:ad:26:48:ab:51:03:af:69:99: ea:b9:9b:6c:65:79:52:03:ae:41:fe:0a:1a:df:f4: 60:bc:03:a1:02:63:e5:cf:3b:d3:a3:dd:03:1b:aa: df:ba:01:a5:82:c6:9b:b7:c7:0b:77:98:79:1c:d4: 00:40:c7:21:50:d1:e0:3d:f5:f3:f6:20:e6:65:f2: 52:98:4a:09:c0:a8:04:08:db:30:ef:8f:1f:33:64: bf:7e:42:02:e7:c5:07:9d:6f:07:55:9f:f5:13:83: 51:e4:f1:81:0b:72:6f:2d:6a:02:58:55:43:9b:3c: 63:24:df:37:ac:ea:58:ca:c7:07:3e:72:c4:b4:91: 41:7b:89:9b:c4:4e:97:10:76:fe:15:db:2f:07:ca: 4b:12:24:28:6d:a2:fe:e7:a1:a5:1d:a7:d0:95:c5: ab:6c:77:01:0d:50:dc:f9:0e:1b:79:07:26:11:db: e0:08:5f:1d:ea:a1:78:7d:c0:df:38:43:9d:00:48: fa:80:2f:4d:3e:81:01:1b:13:c5:21:1a:6f:fb:c2: 8b:76:ee:c9:86:f9:71:f5:06:d9:8c:a5:9c:6b:83: 66:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4C:94:17:52:11:9A:D5:10:5A:00:26:D2:6F:AA:C2:12:49:69:DF X509v3 Authority Key Identifier: keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/l0yUF1IRmtUQWgAm0m-qwhJJad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.228.0/23 Signature Algorithm: sha256WithRSAEncryption 05:47:59:1c:e2:22:c3:cc:52:6d:19:af:91:96:c8:d1:bb:67: a5:7d:b0:97:af:c1:88:14:25:84:d3:47:57:c3:b3:c6:7e:92: 5b:03:1f:da:06:b8:be:1e:cf:10:71:be:0f:1d:2f:5f:a6:1e: 4d:cc:7e:f7:af:fa:3a:c0:d9:fe:b1:ce:1f:88:1e:ec:f7:72: fe:f4:c8:70:b9:26:8e:4c:c6:17:a5:ed:a8:ec:0f:d9:17:c1: 4d:01:0b:fb:72:e2:76:e0:b4:26:3a:cb:ed:d2:23:63:54:1c: 53:13:6d:77:ec:07:ac:8c:35:f6:aa:51:31:a0:27:f9:c9:e0: 5f:ea:21:66:5f:d6:81:bb:5f:99:5c:35:92:7d:17:e9:db:af: 81:31:af:d0:e6:dd:03:1a:4a:3c:49:81:f9:0e:53:73:d3:69: 42:e1:24:1c:12:d8:9f:95:d5:ac:bb:4a:16:bf:24:38:49:3f: c1:77:7a:1c:ca:9d:9c:e4:b7:75:2c:0b:78:ea:f7:2f:2f:58: d8:65:cd:23:84:1e:1b:f5:6a:c6:48:c5:99:a2:1b:0b:9b:8b: 0f:d0:0b:be:f6:82:12:fd:2c:82:d7:b2:4f:87:93:e2:a2:13: 4e:95:9f:32:37:0f:91:12:ab:71:de:6b:b6:ce:5c:31:f4:e5: 48:60:20:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2YCrSRGEAUDahL8CKgL1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5 Y2UzM2EwHhcNMjYwMTEzMDgwMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzRjOTQxNzUyMTE5YWQ1MTA1YTAwMjZkMjZmYWFjMjEyNDk2OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV5oJVp4hkEM70hMeRL41KQaK767 bOp3onEdAJmmMZfwKyytJkirUQOvaZnquZtsZXlSA65B/goa3/RgvAOhAmPlzzvT o90DG6rfugGlgsabt8cLd5h5HNQAQMchUNHgPfXz9iDmZfJSmEoJwKgECNsw748f M2S/fkIC58UHnW8HVZ/1E4NR5PGBC3JvLWoCWFVDmzxjJN83rOpYyscHPnLEtJFB e4mbxE6XEHb+FdsvB8pLEiQobaL+56GlHafQlcWrbHcBDVDc+Q4beQcmEdvgCF8d 6qF4fcDfOEOdAEj6gC9NPoEBGxPFIRpv+8KLdu7Jhvlx9QbZjKWca4NmnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJdMlBdSEZrVEFoAJtJvqsISSWnfMB8GA1UdIwQY MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt NjJiZTUzNDI1Njc2LzEvbDB5VUYxSVJtdFVRV2dBbTBtLXF3aEpKYWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2 LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwifkMA0G CSqGSIb3DQEBCwUAA4IBAQAFR1kc4iLDzFJtGa+RlsjRu2elfbCXr8GIFCWE00dX w7PGfpJbAx/aBri+Hs8Qcb4PHS9fph5NzH73r/o6wNn+sc4fiB7s93L+9MhwuSaO TMYXpe2o7A/ZF8FNAQv7cuJ24LQmOsvt0iNjVBxTE2137AesjDX2qlExoCf5yeBf 6iFmX9aBu1+ZXDWSfRfp26+BMa/Q5t0DGko8SYH5DlNz02lC4SQcEtifldWsu0oW vyQ4ST/Bd3ocyp2c5Ld1LAt46vcvL1jYZc0jhB4b9WrGSMWZohsLm4sP0Au+9oIS /SyC17JPh5PiohNOlZ8yNw+REqtx3mu2zlwx9OVIYCCh -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:54 2026 by rpki-client