This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/Pfs9aP8BKKXCO6_jhGet2wnBznM.roa File: Pfs9aP8BKKXCO6_jhGet2wnBznM.roa (raw, json) Hash identifier: 3+xHpUwJc+iFtnuQ4GBtBBwdLd9ZKYaSTFL998yDg3c= Subject key identifier: 3D:FB:3D:68:FF:01:28:A5:C2:3B:AF:E3:84:67:AD:DB:09:C1:CE:73 Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7 Certificate serial: 019B77594FD21CAA5451C34A25D13EF248F8 Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/Pfs9aP8BKKXCO6_jhGet2wnBznM.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57468 IP address blocks: 185.146.40.0/22 maxlen: 22 185.146.40.0/24 maxlen: 24 185.146.43.0/24 maxlen: 24 2a07:4d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4f:d2:1c:aa:54:51:c3:4a:25:d1:3e:f2:48:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dfb3d68ff0128a5c23bafe38467addb09c1ce73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:a3:5e:c3:11:ff:94:9b:1c:a9:c7:93:81: 3c:02:e1:7a:a2:e2:96:d7:f3:f9:76:6b:62:61:b0: 82:85:0b:da:01:98:24:80:2e:33:2c:b2:c9:96:3d: 48:87:56:2f:46:77:2d:50:de:41:75:a0:fd:f0:14: 89:3a:30:d7:41:78:da:35:d0:40:b1:8a:a8:9b:68: b6:0a:5f:15:0c:ab:cd:fe:0d:12:05:5c:0d:79:6f: 54:58:42:68:fd:bf:eb:0c:fb:3b:3e:51:48:49:7a: 66:8b:28:40:14:c6:ce:3c:75:95:83:1e:f2:ae:46: 09:b7:d4:50:f0:c7:c8:09:83:88:9b:50:15:50:cc: 30:bc:58:e3:f7:f3:59:8b:57:6e:e1:ca:cf:d6:0a: 37:18:a9:94:de:27:ff:1a:be:73:67:5c:48:09:84: 37:5d:d5:dc:a3:ac:b7:df:33:c9:4a:1a:d5:0d:cd: d8:63:e2:ae:c5:96:93:94:aa:ac:67:06:9b:24:08: 82:2b:b7:a9:69:2e:9d:fc:88:9c:bd:58:ed:f7:6d: 00:ce:49:1a:0b:a3:05:fc:3c:07:30:d1:87:3a:d0: ff:e9:a9:75:32:07:08:a0:a6:51:0d:e9:2e:5c:d3: ee:2f:ed:d6:0e:44:ab:6d:03:c7:cb:91:5e:f4:c7: d1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FB:3D:68:FF:01:28:A5:C2:3B:AF:E3:84:67:AD:DB:09:C1:CE:73 X509v3 Authority Key Identifier: keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/Pfs9aP8BKKXCO6_jhGet2wnBznM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.40.0/22 IPv6: 2a07:4d40::/29 Signature Algorithm: sha256WithRSAEncryption 20:a3:f5:b7:61:c0:8b:35:d5:1e:5a:f2:4a:c9:2f:13:af:32: 77:87:4e:fc:80:0a:bf:c9:20:9e:12:de:72:bb:e3:b6:de:c2: d2:50:02:24:86:b7:0d:53:96:8d:0e:47:8e:e2:73:3d:7b:91: 63:dd:3b:5a:f4:22:f5:dd:dd:89:32:8c:0f:2d:4b:02:87:1a: 75:bb:54:66:4c:2e:10:96:5d:d4:57:c8:70:47:9e:41:fc:d4: b1:e1:82:59:92:83:dc:8d:e9:7e:ea:aa:23:57:d9:db:bb:ae: 0d:57:7c:bb:91:b7:2c:34:27:9e:cc:ff:f7:98:06:0f:80:e3: 29:68:e2:79:ef:22:56:d1:70:d5:61:73:43:82:30:73:4b:eb: 03:a0:9c:96:8e:96:fb:4a:87:2c:fd:b5:9f:8c:83:ee:0a:9e: 49:b9:47:62:73:79:69:2b:45:86:f3:0d:29:55:86:a0:08:6c: 1b:fe:bd:87:11:b8:c2:22:a1:d0:1f:ed:c3:e6:e4:c2:f3:eb: c7:6c:72:c4:31:03:e9:bd:08:d9:af:87:a7:22:01:7b:75:51: e1:ad:7a:b4:dd:91:6e:a9:fd:ca:97:09:41:49:b3:04:27:42: d4:33:cf:ef:84:fb:e9:79:fe:44:c5:cb:b4:32:f9:9a:e9:fd: 38:60:52:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WU/SHKpUUcNKJdE+8kj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2Njg4YWU5NjMyM2MxZmNmYWI1NGIyOTQ1NTczOTdiNDli MDNiYzcwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGZiM2Q2OGZmMDEyOGE1YzIzYmFmZTM4NDY3YWRkYjA5YzFjZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l+jXsMR/5SbHKnHk4E8AuF6ouKW 1/P5dmtiYbCChQvaAZgkgC4zLLLJlj1Ih1YvRnctUN5BdaD98BSJOjDXQXjaNdBA sYqom2i2Cl8VDKvN/g0SBVwNeW9UWEJo/b/rDPs7PlFISXpmiyhAFMbOPHWVgx7y rkYJt9RQ8MfICYOIm1AVUMwwvFjj9/NZi1du4crP1go3GKmU3if/Gr5zZ1xICYQ3 XdXco6y33zPJShrVDc3YY+KuxZaTlKqsZwabJAiCK7epaS6d/IicvVjt920Azkka C6MF/DwHMNGHOtD/6al1MgcIoKZRDekuXNPuL+3WDkSrbQPHy5Fe9MfRsQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD37PWj/ASilwjuv44RnrdsJwc5zMB8GA1UdIwQY MBaAFOZoiuljI8H8+rVLKUVXOXtJsDvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5Zjgt MGExZWYwZWMwNTc4LzEvUGZzOWFQOEJLS1hDTzZfamhHZXQyd25Cem5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jZTVjYTYtZjkzOS00ZmQ3LWI5ZjgtMGExZWYwZWMwNTc4 LzEvNW1pSzZXTWp3Zno2dFVzcFJWYzVlMG13TzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZIoMA0E AgACMAcDBQMqB01AMA0GCSqGSIb3DQEBCwUAA4IBAQAgo/W3YcCLNdUeWvJKyS8T rzJ3h078gAq/ySCeEt5yu+O23sLSUAIkhrcNU5aNDkeO4nM9e5Fj3Tta9CL13d2J MowPLUsChxp1u1RmTC4Qll3UV8hwR55B/NSx4YJZkoPcjel+6qojV9nbu64NV3y7 kbcsNCeezP/3mAYPgOMpaOJ57yJW0XDVYXNDgjBzS+sDoJyWjpb7Socs/bWfjIPu Cp5JuUdic3lpK0WG8w0pVYagCGwb/r2HEbjCIqHQH+3D5uTC8+vHbHLEMQPpvQjZ r4enIgF7dVHhrXq03ZFuqf3KlwlBSbMEJ0LUM8/vhPvpef5Excu0Mvma6f04YFJg -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:48 2026 by rpki-client