This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PdhTLCzS94CSZKH6b3DIBk5Rvps.roa File: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (raw, json) Hash identifier: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY= Subject key identifier: 3D:D8:53:2C:2C:D2:F7:80:92:64:A1:FA:6F:70:C8:06:4E:51:BE:9B Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019B7F83AA5A970FC26D0E804C59328A27B0 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PdhTLCzS94CSZKH6b3DIBk5Rvps.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61060 IP address blocks: 91.244.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:aa:5a:97:0f:c2:6d:0e:80:4c:59:32:8a:27:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dd8532c2cd2f7809264a1fa6f70c8064e51be9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:71:52:de:37:a5:43:6d:8a:dd:2e:69:2f: 6b:3e:62:52:db:9b:3e:80:a4:60:c3:61:73:3c:d8: 29:70:4f:d9:be:99:e5:42:7a:ef:c1:0f:86:6d:78: 5a:b2:4e:50:a8:74:af:72:27:6a:35:65:e7:3a:c5: 35:68:49:a1:ea:ab:e4:96:74:29:50:ed:ee:6d:71: e7:0d:6d:96:56:78:d1:d8:0d:df:47:98:72:03:e2: 92:b9:a0:33:39:63:09:f2:79:24:d0:2b:d7:23:fe: 05:4c:cc:48:2d:5f:e5:da:42:1e:20:8d:f3:05:b5: e7:74:7c:86:be:50:89:ee:eb:3e:5d:e5:07:9c:9e: 43:0f:a9:80:ec:48:a6:46:b8:e9:5c:81:75:1b:0e: f0:ee:f9:dc:ed:b9:41:bc:43:2b:5d:10:37:bc:1f: 20:22:cf:4e:26:2e:5f:22:4b:85:b4:30:60:bd:06: 25:7b:14:4d:b5:65:91:99:69:95:50:ab:36:f6:3b: 22:ab:9d:7f:6c:25:8e:bc:90:31:e0:16:5f:54:0c: 04:0c:21:72:a9:e6:14:9d:0b:93:aa:54:47:c6:08: 0b:0f:32:fc:a1:cf:f9:db:82:c5:96:81:4d:5f:fd: d4:7e:28:81:fa:c6:b4:7f:4b:66:cd:4a:65:b7:c6: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D8:53:2C:2C:D2:F7:80:92:64:A1:FA:6F:70:C8:06:4E:51:BE:9B X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PdhTLCzS94CSZKH6b3DIBk5Rvps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.224.0/24 Signature Algorithm: sha256WithRSAEncryption 23:13:ac:64:18:15:33:54:52:00:6c:5b:5f:01:db:c6:7d:8a: d8:f5:67:c8:66:22:c1:9c:31:85:6d:3f:99:9a:0f:60:3c:88: a1:10:41:4b:30:79:73:91:d3:89:4b:f5:ba:96:1f:7b:9f:89: e9:33:dc:f3:b5:59:92:fa:8b:78:41:60:77:cc:0b:d5:31:25: b0:90:a8:b3:58:f8:45:a0:a5:ba:86:4d:48:ef:95:07:6a:b6: d3:f5:27:05:86:a4:26:f2:4d:b9:85:be:a5:5b:c2:b2:8d:93: e5:8c:0a:f3:ca:68:46:d8:68:14:1f:6c:d4:73:3a:c9:42:89: 61:ec:f6:ac:fc:10:05:86:2b:42:c4:d1:dd:4c:eb:44:fa:c9: 14:26:06:4e:ce:98:5a:22:59:6c:f9:d6:36:83:2d:73:7c:a3: cc:94:05:ee:40:46:64:03:02:6e:98:2f:25:73:ed:55:32:fe: 18:d7:e3:43:bb:22:8f:66:08:e7:7b:cd:25:2a:9a:dd:b7:1a: 70:86:a1:f0:33:52:8e:9c:24:8f:97:6d:8f:c9:1b:9d:0c:57: bf:55:89:aa:b3:5f:43:a5:b9:d6:fd:c7:cd:5c:7c:d5:2e:de: ce:4b:57:42:ef:f7:94:56:87:91:a0:36:72:ee:6e:48:d4:9f: 09:f9:1d:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6palw/CbQ6ATFkyiiewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQ4NTMyYzJjZDJmNzgwOTI2NGExZmE2ZjcwYzgwNjRlNTFiZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA1xUt43pUNtit0uaS9rPmJS25s+ gKRgw2FzPNgpcE/ZvpnlQnrvwQ+GbXhask5QqHSvcidqNWXnOsU1aEmh6qvklnQp UO3ubXHnDW2WVnjR2A3fR5hyA+KSuaAzOWMJ8nkk0CvXI/4FTMxILV/l2kIeII3z BbXndHyGvlCJ7us+XeUHnJ5DD6mA7EimRrjpXIF1Gw7w7vnc7blBvEMrXRA3vB8g Is9OJi5fIkuFtDBgvQYlexRNtWWRmWmVUKs29jsiq51/bCWOvJAx4BZfVAwEDCFy qeYUnQuTqlRHxggLDzL8oc/524LFloFNX/3UfiiB+sa0f0tmzUplt8az8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3YUyws0veAkmSh+m9wyAZOUb6bMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvUGRoVExDelM5NENTWktINmIzRElCazVSdnBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TgMA0G CSqGSIb3DQEBCwUAA4IBAQAjE6xkGBUzVFIAbFtfAdvGfYrY9WfIZiLBnDGFbT+Z mg9gPIihEEFLMHlzkdOJS/W6lh97n4npM9zztVmS+ot4QWB3zAvVMSWwkKizWPhF oKW6hk1I75UHarbT9ScFhqQm8k25hb6lW8KyjZPljArzymhG2GgUH2zUczrJQolh 7Pas/BAFhitCxNHdTOtE+skUJgZOzphaIlls+dY2gy1zfKPMlAXuQEZkAwJumC8l c+1VMv4Y1+NDuyKPZgjne80lKprdtxpwhqHwM1KOnCSPl22PyRudDFe/VYmqs19D pbnW/cfNXHzVLt7OS1dC7/eUVoeRoDZy7m5I1J8J+R0k -----END CERTIFICATE-----Generated at Wed Jan 21 08:35:50 2026 by rpki-client