This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/pHCSU3fGUEEiD3DyFHzti8TdYz4.roa File: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (raw, json) Hash identifier: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA= Subject key identifier: A4:70:92:53:77:C6:50:41:22:0F:70:F2:14:7C:ED:8B:C4:DD:63:3E Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Certificate serial: 019B7F13A5D48D4A2BFCC6EB5610B6676293 Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/pHCSU3fGUEEiD3DyFHzti8TdYz4.roa Signing time: Fri 02 Jan 2026 14:19:12 +0000 ROA not before: Fri 02 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 91.184.46.0/23 maxlen: 23 91.184.48.0/20 maxlen: 20 2a01:198:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a5:d4:8d:4a:2b:fc:c6:eb:56:10:b6:67:62:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d Validity Not Before: Jan 2 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a470925377c65041220f70f2147ced8bc4dd633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:7e:3d:6a:1a:01:1f:3d:a7:3f:fb:6d:8e: 82:84:8f:35:c1:e3:bb:1d:3f:c6:5f:bb:af:02:3d: 43:ee:81:a0:b2:0a:5a:71:5b:f5:be:21:f4:ab:d5: 7d:b7:5d:f3:08:11:19:44:08:a2:4a:88:c0:a6:0f: 93:70:42:65:82:21:cb:36:5a:80:98:fb:6b:d2:f5: 60:2b:e4:68:06:49:0d:ec:04:54:1c:41:2b:40:ca: 83:24:ba:21:a9:3b:41:c1:dd:27:e9:37:dc:57:a3: 0b:1e:eb:ca:1e:2d:ac:87:5d:2f:b8:6d:29:8c:f2: 70:03:00:f7:5b:67:a7:72:b4:a6:c7:29:0a:82:17: 9b:ef:e1:96:5c:50:01:38:c4:cd:ed:97:d5:a5:2b: de:f0:3e:5e:6c:7c:77:05:d2:34:57:cd:75:ff:bd: 3b:29:f3:9f:40:86:2c:39:e5:66:35:dd:f9:b3:00: ec:42:08:71:6e:c5:71:c4:77:5f:c9:05:f6:9e:3d: 7c:f9:d8:9f:a1:b0:dd:ff:63:00:00:e1:45:8f:40: d0:b6:38:3a:14:05:70:9f:79:e2:e1:08:b2:19:e3: 70:0c:45:44:8e:5e:6c:09:df:4e:ae:b5:5a:3a:7b: 97:9f:d5:46:10:41:6f:23:83:e5:29:71:b4:8f:09: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:92:53:77:C6:50:41:22:0F:70:F2:14:7C:ED:8B:C4:DD:63:3E X509v3 Authority Key Identifier: keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/pHCSU3fGUEEiD3DyFHzti8TdYz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.184.46.0-91.184.63.255 IPv6: 2a01:198:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 1e:30:69:75:ca:02:62:d9:5e:9e:a7:75:ba:fa:4d:b1:f0:56: 34:53:65:72:d3:e5:c5:e4:71:02:e1:16:60:eb:fa:00:9c:e9: 56:fe:f0:31:c6:ef:96:cb:ef:ce:28:3c:e5:ae:c7:71:e9:91: 53:e1:f6:70:6b:a4:f8:50:b5:4c:59:ff:da:f1:d2:95:47:4b: 45:fd:08:03:50:21:eb:e6:89:6f:93:30:88:bc:5a:fe:65:4b: f3:03:f1:e6:93:28:50:dd:e3:e7:5e:2f:55:b9:02:0a:43:bd: d7:c5:fa:d3:2a:5c:f4:b6:4c:52:e3:c5:ef:e6:cf:05:37:58: 29:b2:ba:d4:72:02:f7:2c:74:ba:15:df:e3:15:2c:7a:d6:06: 8a:f0:24:e1:86:40:8f:36:8b:64:44:e0:a8:9b:27:8c:7b:d4: a2:81:46:f7:b5:1e:37:c7:a0:b8:bb:e2:a2:a9:44:f1:62:ef: 43:03:b2:ff:57:3b:8a:3b:d2:bb:f3:d9:0d:bc:93:8a:c0:67: 8f:27:26:ad:b4:63:5a:cb:f5:e7:7f:c7:b3:b7:0a:31:22:74: c8:fe:c0:21:55:39:f4:05:c3:bc:2c:34:2e:c2:0a:05:e6:83: cb:74:c6:ee:b2:b5:b5:ab:ab:b1:44:c8:ec:26:75:f3:ab:73: b3:c9:7a:2b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/E6XUjUor/MbrVhC2Z2KTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz NmRhNWQwHhcNMjYwMTAyMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDcwOTI1Mzc3YzY1MDQxMjIwZjcwZjIxNDdjZWQ4YmM0ZGQ2MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokR+PWoaAR89pz/7bY6ChI81weO7 HT/GX7uvAj1D7oGgsgpacVv1viH0q9V9t13zCBEZRAiiSojApg+TcEJlgiHLNlqA mPtr0vVgK+RoBkkN7ARUHEErQMqDJLohqTtBwd0n6TfcV6MLHuvKHi2sh10vuG0p jPJwAwD3W2encrSmxykKgheb7+GWXFABOMTN7ZfVpSve8D5ebHx3BdI0V811/707 KfOfQIYsOeVmNd35swDsQghxbsVxxHdfyQX2nj18+difobDd/2MAAOFFj0DQtjg6 FAVwn3ni4QiyGeNwDEVEjl5sCd9OrrVaOnuXn9VGEEFvI4PlKXG0jwnOEQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKRwklN3xlBBIg9w8hR87YvE3WM+MB8GA1UdIwQY MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk LTY2YmRmZmE4YmRjMS8xL3BIQ1NVM2ZHVUVFaUQzRHlGSHp0aThUZFl6NC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRkLTY2YmRmZmE4YmRj MS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMBQEAgABMA4wDAMEAVu4 LgMEBlu4ADAOBAIAAjAIAwYAKgEBmP8wDQYJKoZIhvcNAQELBQADggEBAB4waXXK AmLZXp6ndbr6TbHwVjRTZXLT5cXkcQLhFmDr+gCc6Vb+8DHG75bL784oPOWux3Hp kVPh9nBrpPhQtUxZ/9rx0pVHS0X9CANQIevmiW+TMIi8Wv5lS/MD8eaTKFDd4+de L1W5AgpDvdfF+tMqXPS2TFLjxe/mzwU3WCmyutRyAvcsdLoV3+MVLHrWBorwJOGG QI82i2RE4KibJ4x71KKBRve1HjfHoLi74qKpRPFi70MDsv9XO4o70rvz2Q28k4rA Z48nJq20Y1rL9ed/x7O3CjEidMj+wCFVOfQFw7wsNC7CCgXmg8t0xu6ytbWrq7FE yOwmdfOrc7PJeis= -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:43 2026 by rpki-client