This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/pm0Tvle3pSWAFywqIeydLv7TeLE.roa File: pm0Tvle3pSWAFywqIeydLv7TeLE.roa (raw, json) Hash identifier: inzjhwDjN5GTwhq8RFj6Bcubbn1fXkic1q4h6XInxSQ= Subject key identifier: A6:6D:13:BE:57:B7:A5:25:80:17:2C:2A:21:EC:9D:2E:FE:D3:78:B1 Certificate issuer: /CN=169f7cbfca8595e391f40b975fd103958de08d24 Certificate serial: 019B7759307AF38853AB46B85834086F0765 Authority key identifier: 16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/pm0Tvle3pSWAFywqIeydLv7TeLE.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206201 IP address blocks: 185.193.180.0/24 maxlen: 24 185.193.181.0/24 maxlen: 24 2a0a:3bc0::/32 maxlen: 32 2a0a:3bc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:30:7a:f3:88:53:ab:46:b8:58:34:08:6f:07:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169f7cbfca8595e391f40b975fd103958de08d24 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a66d13be57b7a52580172c2a21ec9d2efed378b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:b3:12:af:c6:d9:22:8d:15:cf:7a:30:a5: 8d:ab:d1:b4:01:db:bd:5c:91:1d:2a:fe:af:87:e9: 8c:f7:9a:ec:fe:6f:6d:ec:05:38:0e:72:db:92:f2: 21:1a:f5:d3:13:e7:8d:2e:a1:c0:7b:69:10:81:ad: 23:b4:d1:7f:aa:58:6b:a2:fb:55:d1:a3:22:8d:81: 7a:29:da:e9:18:ea:41:33:d4:de:9e:2e:55:ee:a1: 9d:a1:d3:9b:35:55:0c:4b:29:73:01:34:28:46:ae: 76:7c:5a:87:fa:35:37:0c:eb:0e:2f:fc:80:00:44: 1f:9b:66:75:0a:bf:07:76:3d:43:a9:f1:d5:b3:52: 8d:32:0b:14:29:57:41:f5:14:c9:c8:37:db:06:aa: a5:ea:04:da:31:5b:f7:90:87:32:a3:b0:a0:cc:ed: 26:f0:fa:fb:e4:42:a4:ec:8c:63:b5:96:cc:7e:67: f4:de:4c:fc:da:88:4e:05:9a:73:5d:71:b7:7d:ab: 0f:96:f1:37:58:b8:ae:9e:6c:31:06:4b:59:17:b9: ca:e5:74:69:4a:a2:0d:62:d4:e8:d6:57:22:45:6f: f3:d0:8c:84:6c:18:38:e8:bb:bb:99:fb:18:31:e2: ba:dd:dd:57:d2:d2:b4:43:a7:fa:2e:94:c3:fe:4e: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6D:13:BE:57:B7:A5:25:80:17:2C:2A:21:EC:9D:2E:FE:D3:78:B1 X509v3 Authority Key Identifier: keyid:16:9F:7C:BF:CA:85:95:E3:91:F4:0B:97:5F:D1:03:95:8D:E0:8D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp98v8qFleOR9AuXX9EDlY3gjSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/pm0Tvle3pSWAFywqIeydLv7TeLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/13e6ce-8ec2-460d-8050-a7ffbe5587cc/1/Fp98v8qFleOR9AuXX9EDlY3gjSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.180.0/23 IPv6: 2a0a:3bc0::/31 Signature Algorithm: sha256WithRSAEncryption 75:25:48:2f:3d:65:09:81:f8:1b:dc:1b:be:d9:f5:35:2c:16: 2e:33:85:93:54:19:7d:2c:1c:a5:23:43:37:29:f2:36:82:b4: 0a:c8:61:64:09:6d:1f:6b:0d:63:58:f7:b6:b5:0b:2a:67:3f: ab:6a:be:d4:39:80:ad:05:eb:b3:10:b3:19:08:a2:0b:ae:2c: 80:0f:59:b9:aa:d4:a1:2a:5f:51:73:5a:b6:c7:4e:23:7a:1a: b2:ad:46:7b:9f:02:0a:c2:67:f8:99:28:14:9a:af:5d:5e:20: f4:79:d1:50:21:09:69:db:a5:9a:5d:62:83:a0:0f:02:86:62: 15:58:26:53:94:21:b9:d3:f7:ed:5a:1c:54:fa:e0:4b:b8:42: 9f:6c:2c:9b:2d:41:69:db:61:8f:f9:7f:c5:96:1a:e1:e5:aa: eb:25:4f:43:98:19:97:ed:5d:9d:78:5e:79:2c:c2:f9:a7:a7: 72:b5:7f:a0:06:87:38:40:e6:6b:21:c9:bf:99:11:2c:5b:d2: 78:05:7d:20:a5:df:09:91:fa:49:cb:4a:53:f9:4e:66:da:a9: 7f:39:c4:86:2e:43:8a:b1:f3:94:95:5d:d2:85:aa:f0:20:bd: 30:a4:52:e8:a3:d6:b3:62:0d:35:a1:f3:b6:fb:92:00:a3:06: c8:0a:ff:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WTB684hTq0a4WDQIbwdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OWY3Y2JmY2E4NTk1ZTM5MWY0MGI5NzVmZDEwMzk1OGRl MDhkMjQwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjZkMTNiZTU3YjdhNTI1ODAxNzJjMmEyMWVjOWQyZWZlZDM3OGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqzEq/G2SKNFc96MKWNq9G0Adu9 XJEdKv6vh+mM95rs/m9t7AU4DnLbkvIhGvXTE+eNLqHAe2kQga0jtNF/qlhrovtV 0aMijYF6KdrpGOpBM9Teni5V7qGdodObNVUMSylzATQoRq52fFqH+jU3DOsOL/yA AEQfm2Z1Cr8Hdj1DqfHVs1KNMgsUKVdB9RTJyDfbBqql6gTaMVv3kIcyo7CgzO0m 8Pr75EKk7IxjtZbMfmf03kz82ohOBZpzXXG3fasPlvE3WLiunmwxBktZF7nK5XRp SqINYtTo1lciRW/z0IyEbBg46Lu7mfsYMeK63d1X0tK0Q6f6LpTD/k77cQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKZtE75Xt6UlgBcsKiHsnS7+03ixMB8GA1UdIwQY MBaAFBaffL/KhZXjkfQLl1/RA5WN4I0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnA5OHY4cUZsZU9SOUF1WFg5RURsWTNnalNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xM2U2Y2UtOGVjMi00NjBkLTgwNTAt YTdmZmJlNTU4N2NjLzEvcG0wVHZsZTNwU1dBRnl3cUlleWRMdjdUZUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xM2U2Y2UtOGVjMi00NjBkLTgwNTAtYTdmZmJlNTU4N2Nj LzEvRnA5OHY4cUZsZU9SOUF1WFg5RURsWTNnalNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBucG0MA0E AgACMAcDBQEqCjvAMA0GCSqGSIb3DQEBCwUAA4IBAQB1JUgvPWUJgfgb3Bu+2fU1 LBYuM4WTVBl9LBylI0M3KfI2grQKyGFkCW0faw1jWPe2tQsqZz+rar7UOYCtBeuz ELMZCKILriyAD1m5qtShKl9Rc1q2x04jehqyrUZ7nwIKwmf4mSgUmq9dXiD0edFQ IQlp26WaXWKDoA8ChmIVWCZTlCG50/ftWhxU+uBLuEKfbCybLUFp22GP+X/Flhrh 5arrJU9DmBmX7V2deF55LML5p6dytX+gBoc4QOZrIcm/mREsW9J4BX0gpd8JkfpJ y0pT+U5m2ql/OcSGLkOKsfOUlV3SharwIL0wpFLoo9azYg01ofO2+5IAowbICv85 -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:58 2026 by rpki-client