This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Pui4aFfCJCN_h8GazyO026_o4wI.roa File: Pui4aFfCJCN_h8GazyO026_o4wI.roa (raw, json) Hash identifier: yvu0mHk+qJWSJCWHRBXdhFULRu1ZTV+QVf4jntrUIBQ= Subject key identifier: 3E:E8:B8:68:57:C2:24:23:7F:87:C1:9A:CF:23:B4:DB:AF:E8:E3:02 Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Certificate serial: 019B7F813F19AFAE66E74BBACD6577126C13 Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Pui4aFfCJCN_h8GazyO026_o4wI.roa Signing time: Fri 02 Jan 2026 16:18:55 +0000 ROA not before: Fri 02 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42037 IP address blocks: 185.155.180.0/22 maxlen: 24 2a00:8c40::/32 maxlen: 48 2a00:8c40:238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:3f:19:af:ae:66:e7:4b:ba:cd:65:77:12:6c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c Validity Not Before: Jan 2 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ee8b86857c224237f87c19acf23b4dbafe8e302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:a0:be:4a:f9:80:b4:c7:f2:63:10:29:1e: 71:5c:11:49:63:2a:2e:2b:12:fb:2e:f7:e4:c8:96: 15:f9:f2:e5:d0:c8:8d:67:2b:e0:01:cc:79:7d:a2: f1:37:2d:45:01:ec:13:a9:59:bc:f7:a5:74:53:ff: 08:87:eb:6e:39:2f:bd:ef:93:da:74:4e:06:d1:73: 2e:26:bf:82:c3:de:73:a8:9c:11:95:6a:57:0b:10: 3c:f3:dd:fe:51:f9:eb:ea:bf:22:73:c7:00:cf:8e: 1f:52:b9:54:88:5f:1e:21:51:bd:6d:f7:7e:ea:a3: c8:3e:40:37:ce:59:a6:93:89:1d:c6:fa:4c:38:68: 37:5b:2a:e5:ee:4f:bc:24:7b:4c:72:7e:6e:bc:b9: 8b:c7:28:ea:62:89:a8:1a:c4:35:61:83:bd:db:d9: 51:7c:67:10:45:c5:30:46:37:b4:4f:fd:77:df:63: 8e:84:2f:2b:54:2a:64:8e:bc:a9:7d:80:55:f7:77: 66:6c:4a:0b:2f:60:8b:7e:57:de:0c:b7:7d:e4:93: 8a:08:1e:64:85:b1:6a:65:87:4c:7b:29:a5:41:c5: 3b:c5:f3:82:4b:3f:b5:00:90:f1:1e:e6:a4:ff:1b: 05:36:ae:12:0a:93:27:3c:5d:f1:b4:04:ff:c0:41: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:B8:68:57:C2:24:23:7F:87:C1:9A:CF:23:B4:DB:AF:E8:E3:02 X509v3 Authority Key Identifier: keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/Pui4aFfCJCN_h8GazyO026_o4wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.180.0/22 IPv6: 2a00:8c40::/32 Signature Algorithm: sha256WithRSAEncryption 65:a0:94:a0:a9:75:79:af:28:97:bc:97:ba:d9:14:ae:59:69: 61:95:01:2e:ec:8d:27:6c:41:0d:6b:57:74:cf:a7:4f:66:a9: 1e:32:2a:e1:27:fa:76:15:25:68:ff:6b:7a:ac:23:1b:f2:9d: 9f:84:55:c7:25:ce:ca:a9:2a:56:03:09:70:ca:ab:24:3f:8a: 64:8d:47:aa:31:b0:5e:5a:d2:a6:95:b9:52:b6:92:a2:ad:a7: 8b:6a:7b:6f:68:8a:b1:4a:4d:a5:7a:6a:83:06:2f:90:65:2f: 95:4f:aa:98:65:3b:49:82:33:e6:eb:b0:86:f7:8a:c2:fe:68: 27:2b:d8:c0:81:4f:4f:d6:3a:cd:21:bd:e9:96:70:63:a2:1c: bf:da:4d:a7:5b:98:55:23:9b:0d:c9:dd:c8:2a:d5:19:22:de: 1e:fa:87:e4:1f:34:77:ea:4f:c7:39:6d:d3:ab:dd:bc:42:0c: f6:f9:63:7d:31:31:ff:f4:34:5f:0a:4d:95:7a:a1:50:2b:8a: 15:4b:93:71:bc:e1:a3:58:c6:96:3a:6d:2f:49:3b:64:e7:de: f8:63:53:da:c9:ce:43:13:68:c6:77:db:2e:41:b4:a2:2a:36: b0:6a:59:40:ac:9c:03:21:16:c7:44:c5:8b:42:5e:89:d1:5d: 65:c0:9c:8d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gT8Zr65m50u6zWV3EmwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj YTRlN2MwHhcNMjYwMTAyMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWU4Yjg2ODU3YzIyNDIzN2Y4N2MxOWFjZjIzYjRkYmFmZThlMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplqgvkr5gLTH8mMQKR5xXBFJYyou KxL7LvfkyJYV+fLl0MiNZyvgAcx5faLxNy1FAewTqVm896V0U/8Ih+tuOS+975Pa dE4G0XMuJr+Cw95zqJwRlWpXCxA8893+Ufnr6r8ic8cAz44fUrlUiF8eIVG9bfd+ 6qPIPkA3zlmmk4kdxvpMOGg3Wyrl7k+8JHtMcn5uvLmLxyjqYomoGsQ1YYO929lR fGcQRcUwRje0T/1332OOhC8rVCpkjrypfYBV93dmbEoLL2CLflfeDLd95JOKCB5k hbFqZYdMeymlQcU7xfOCSz+1AJDxHuak/xsFNq4SCpMnPF3xtAT/wEFi5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD7ouGhXwiQjf4fBms8jtNuv6OMCMB8GA1UdIwQY MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt NTUxMzFjYzFlZmVhLzEvUHVpNGFGZkNKQ05faDhHYXp5TzAyNl9vNHdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZu0MA0E AgACMAcDBQAqAIxAMA0GCSqGSIb3DQEBCwUAA4IBAQBloJSgqXV5ryiXvJe62RSu WWlhlQEu7I0nbEENa1d0z6dPZqkeMirhJ/p2FSVo/2t6rCMb8p2fhFXHJc7KqSpW AwlwyqskP4pkjUeqMbBeWtKmlblStpKiraeLantvaIqxSk2lemqDBi+QZS+VT6qY ZTtJgjPm67CG94rC/mgnK9jAgU9P1jrNIb3plnBjohy/2k2nW5hVI5sNyd3IKtUZ It4e+ofkHzR36k/HOW3Tq928Qgz2+WN9MTH/9DRfCk2VeqFQK4oVS5NxvOGjWMaW Om0vSTtk5974Y1Payc5DE2jGd9suQbSiKjawallArJwDIRbHRMWLQl6J0V1lwJyN -----END CERTIFICATE-----Generated at Fri Jan 30 21:24:44 2026 by rpki-client