This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Pqb4jrQCqGySE_13LWqkkjr2SqA.roa File: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (raw, json) Hash identifier: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc= Subject key identifier: 3E:A6:F8:8E:B4:02:A8:6C:92:13:FD:77:2D:6A:A4:92:3A:F6:4A:A0 Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Certificate serial: 019B7D5C76805BCB67C7A9B4A9A41F4D7860 Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Pqb4jrQCqGySE_13LWqkkjr2SqA.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42457 IP address blocks: 92.118.81.0/24 maxlen: 24 92.118.82.0/24 maxlen: 24 92.118.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:76:80:5b:cb:67:c7:a9:b4:a9:a4:1f:4d:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ea6f88eb402a86c9213fd772d6aa4923af64aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:70:64:f1:6e:95:9d:80:39:e2:eb:45:c4: b4:9f:af:58:2a:46:e6:6e:7d:24:9d:a4:1d:a0:31: 96:55:95:6a:b7:78:5e:86:35:d6:3d:92:20:cb:4f: e2:a9:79:45:86:f5:21:e5:79:4a:19:86:84:f2:29: 43:b8:83:c2:18:f8:e0:43:f3:38:86:85:02:e6:83: 44:d2:a7:f2:26:a0:08:93:49:cd:8f:91:c2:67:20: fd:5b:da:b9:eb:0a:0e:44:20:ad:8b:c0:87:c5:37: ee:81:00:a1:65:6c:35:81:80:ec:a6:ba:fc:ed:9c: 32:e7:b6:42:a1:4a:5c:4d:ab:cd:1d:33:e8:64:2a: 34:00:e0:11:4d:4b:fb:78:ed:b7:11:f1:15:72:1a: a3:ab:56:e3:ef:d0:80:7d:ae:a4:49:04:4b:f6:4f: fe:13:f3:a6:43:ee:1d:b5:6a:12:79:2f:32:35:9d: bb:75:24:f8:14:5d:be:54:a2:84:3f:05:27:44:03: 99:d6:dd:e0:4d:11:23:5d:c1:75:63:4c:6f:fe:f2: 6c:e8:39:47:5d:96:63:4a:45:46:61:81:4e:72:5a: e8:09:6c:10:59:80:60:44:e8:01:32:9b:f0:7a:56: da:bf:f1:eb:b3:8c:91:50:e1:5a:54:30:bb:ba:40: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:F8:8E:B4:02:A8:6C:92:13:FD:77:2D:6A:A4:92:3A:F6:4A:A0 X509v3 Authority Key Identifier: keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Pqb4jrQCqGySE_13LWqkkjr2SqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.81.0-92.118.83.255 Signature Algorithm: sha256WithRSAEncryption a9:2e:21:23:46:a3:9d:58:18:bf:40:5c:17:ef:84:fb:00:d2: e8:50:b2:12:37:54:88:d0:77:e9:8e:9d:74:ef:a5:5b:7c:6e: 4d:41:56:94:52:3b:ac:48:fa:f5:2b:25:53:f0:e1:39:f1:69: c1:02:19:d6:b9:83:72:c5:f4:f9:b8:9e:f7:72:3d:8d:cd:a8: 18:ed:49:3b:5e:ee:8b:0c:3e:ed:f7:92:f0:58:e2:0e:8a:6a: dd:74:75:a6:9a:6a:d4:8f:00:f7:5b:11:f5:94:7c:91:cb:44: 30:7c:b9:ca:13:67:59:7d:63:5b:00:fa:94:3a:ad:e9:f5:7d: 72:7e:99:54:73:81:0c:f4:3c:26:00:7c:77:9e:69:d1:62:3a: b2:3b:87:78:7e:7f:b7:c5:6d:42:b9:f3:5f:b8:d3:ad:ef:22: 7f:e4:df:53:b7:23:71:e5:8a:26:4c:e6:36:09:36:bc:cd:8a: b2:06:b3:70:ca:b9:b9:f4:ca:ea:13:71:20:20:96:b9:7a:35: 34:58:d0:de:17:f3:a7:bd:54:a2:dc:79:af:60:49:4a:d0:5f: 13:a6:46:42:30:13:52:71:5e:04:8a:5e:94:81:00:13:c9:13: 8c:b7:39:11:af:f2:67:d8:0d:82:c2:86:9a:89:10:fa:16:c9: d9:d3:0d:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XHaAW8tnx6m0qaQfTXhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1 YmE2ODEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWE2Zjg4ZWI0MDJhODZjOTIxM2ZkNzcyZDZhYTQ5MjNhZjY0YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLpwZPFulZ2AOeLrRcS0n69YKkbm bn0knaQdoDGWVZVqt3hehjXWPZIgy0/iqXlFhvUh5XlKGYaE8ilDuIPCGPjgQ/M4 hoUC5oNE0qfyJqAIk0nNj5HCZyD9W9q56woORCCti8CHxTfugQChZWw1gYDsprr8 7Zwy57ZCoUpcTavNHTPoZCo0AOARTUv7eO23EfEVchqjq1bj79CAfa6kSQRL9k/+ E/OmQ+4dtWoSeS8yNZ27dST4FF2+VKKEPwUnRAOZ1t3gTREjXcF1Y0xv/vJs6DlH XZZjSkVGYYFOclroCWwQWYBgROgBMpvwelbav/Hrs4yRUOFaVDC7ukBN3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD6m+I60AqhskhP9dy1qpJI69kqgMB8GA1UdIwQY MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt YTg3NzNkZTc2OGY3LzEvUHFiNGpyUUNxR3lTRV8xM0xXcWtranIyU3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3 LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABcdlED BAJcdlAwDQYJKoZIhvcNAQELBQADggEBAKkuISNGo51YGL9AXBfvhPsA0uhQshI3 VIjQd+mOnXTvpVt8bk1BVpRSO6xI+vUrJVPw4TnxacECGda5g3LF9Pm4nvdyPY3N qBjtSTte7osMPu33kvBY4g6Kat10daaaatSPAPdbEfWUfJHLRDB8ucoTZ1l9Y1sA +pQ6ren1fXJ+mVRzgQz0PCYAfHeeadFiOrI7h3h+f7fFbUK581+4063vIn/k31O3 I3HliiZM5jYJNrzNirIGs3DKubn0yuoTcSAglrl6NTRY0N4X86e9VKLcea9gSUrQ XxOmRkIwE1JxXgSKXpSBABPJE4y3ORGv8mfYDYLChpqJEPoWydnTDao= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:38 2026 by rpki-client