This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa File: pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa (raw, json) Hash identifier: UleN7udW9nm6GoIks0+gA75pmdznZCROwYpJMoJdnLI= Subject key identifier: A7:12:85:92:A7:3D:6A:20:8D:2B:98:46:75:91:3C:3F:AF:EF:F2:5F Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6 Certificate serial: 019B7AC91DB89586DFD16E3B3E68D228D278 Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5467 IP address blocks: 93.175.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1d:b8:95:86:df:d1:6e:3b:3e:68:d2:28:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7128592a73d6a208d2b984675913c3fafeff25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6b:02:be:29:f7:6f:8c:14:e9:0a:20:e7:9a: b4:6b:2d:62:7c:1e:60:80:bb:19:64:f0:56:dd:53: 7d:d9:18:30:6a:74:55:92:03:3f:65:11:40:e9:79: 7c:d9:c5:eb:01:59:b0:f3:c8:01:09:56:ce:5a:47: ee:70:21:0e:51:c8:f7:1e:a5:02:c5:5d:5c:6f:20: 91:a3:1f:e5:0d:11:56:07:05:d5:dd:80:3d:94:1e: dc:6c:71:28:ba:d4:b3:49:d1:24:3b:61:b1:ae:df: 37:0a:16:87:35:bf:3e:a8:e9:1d:57:d0:bf:a3:20: 3e:5a:ca:8c:8f:98:7f:36:50:38:91:16:2f:7f:12: 51:08:6b:74:05:f0:d6:14:d6:58:ff:89:19:ff:46: 89:88:66:3a:98:ab:29:25:9e:c6:0f:22:41:64:13: e0:1f:c6:b6:6a:50:68:e7:d4:c0:c7:03:78:be:6e: 6f:d1:5f:86:cb:56:bf:cf:3d:b5:26:83:c9:ce:c1: d1:cf:52:be:0e:f2:2e:01:87:83:3a:04:08:f0:e7: 9e:9b:98:fc:40:05:00:cd:6b:29:16:f2:8c:01:5f: 1d:7b:82:22:ad:1c:fc:f1:22:72:33:10:99:2e:ae: cd:12:da:3d:f3:91:64:4e:25:24:a4:f6:a2:d0:04: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:12:85:92:A7:3D:6A:20:8D:2B:98:46:75:91:3C:3F:AF:EF:F2:5F X509v3 Authority Key Identifier: keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.175.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:ac:39:81:8a:8b:7d:f2:df:a5:e0:c5:6a:ac:60:0d:12:67: 18:d6:1b:47:7d:e5:e6:cd:dd:b9:2c:02:a1:b2:3f:d1:1e:7f: 8f:5b:24:ff:0e:14:ee:28:cb:02:01:5e:8c:b7:88:7b:9c:d4: e9:d5:b1:9c:ad:d0:67:ef:8e:da:32:6b:56:d7:d1:94:5c:7f: 8c:ec:b9:91:bc:f4:69:9b:e4:52:f9:6d:10:68:e2:55:e4:9c: 7a:15:c9:e3:8d:f7:eb:d6:fb:81:db:93:1c:c0:b9:09:b5:16: 22:60:25:cc:06:32:57:9e:8e:1b:a4:4e:cd:5e:d6:08:37:7e: 22:49:33:7e:81:0d:9a:3a:d3:5e:de:c0:52:52:6c:2c:1e:65: 81:ea:b3:a4:da:e4:26:35:0b:ed:f7:65:be:18:c2:4f:8a:6f: 34:e2:17:b4:68:a8:17:d5:8c:0e:1b:1f:ae:78:be:e9:6c:e4: 82:b2:ed:9c:64:80:90:71:b3:89:32:d4:c8:1b:76:b8:be:bb: 67:26:6b:42:93:b9:cc:27:d0:13:61:19:21:27:fc:53:b8:fb: 6f:95:3f:97:67:cd:7c:3c:fc:00:3d:97:3d:de:97:d0:e5:a5: 59:5c:77:f3:c5:ba:f8:69:9a:41:46:03:b8:3e:48:e7:02:c7: bc:2c:11:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yR24lYbf0W47PmjSKNJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWQyYzA3YzI4YWM3YjcyNmE4MjVkMzY5M2FmZTIzOTcy MDlkZTYwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzEyODU5MmE3M2Q2YTIwOGQyYjk4NDY3NTkxM2MzZmFmZWZmMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WsCvin3b4wU6Qog55q0ay1ifB5g gLsZZPBW3VN92RgwanRVkgM/ZRFA6Xl82cXrAVmw88gBCVbOWkfucCEOUcj3HqUC xV1cbyCRox/lDRFWBwXV3YA9lB7cbHEoutSzSdEkO2Gxrt83ChaHNb8+qOkdV9C/ oyA+WsqMj5h/NlA4kRYvfxJRCGt0BfDWFNZY/4kZ/0aJiGY6mKspJZ7GDyJBZBPg H8a2alBo59TAxwN4vm5v0V+Gy1a/zz21JoPJzsHRz1K+DvIuAYeDOgQI8Oeem5j8 QAUAzWspFvKMAV8de4IirRz88SJyMxCZLq7NEto985FkTiUkpPai0ATsGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcShZKnPWogjSuYRnWRPD+v7/JfMB8GA1UdIwQY MBaAFFIdLAfCise3Jqgl02k6/iOXIJ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjkt Y2FjZmI2N2JmZjlkLzEvcHhLRmtxYzlhaUNOSzVoR2RaRThQNl92OGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xN2FjNjctMmQ1Zi00MzlhLThmZjktY2FjZmI2N2JmZjlk LzEvVWgwc0I4S0t4N2NtcUNYVGFUci1JNWNnbmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXa8AMA0G CSqGSIb3DQEBCwUAA4IBAQAcrDmBiot98t+l4MVqrGANEmcY1htHfeXmzd25LAKh sj/RHn+PWyT/DhTuKMsCAV6Mt4h7nNTp1bGcrdBn747aMmtW19GUXH+M7LmRvPRp m+RS+W0QaOJV5Jx6Fcnjjffr1vuB25McwLkJtRYiYCXMBjJXno4bpE7NXtYIN34i STN+gQ2aOtNe3sBSUmwsHmWB6rOk2uQmNQvt92W+GMJPim804he0aKgX1YwOGx+u eL7pbOSCsu2cZICQcbOJMtTIG3a4vrtnJmtCk7nMJ9ATYRkhJ/xTuPtvlT+XZ818 PPwAPZc93pfQ5aVZXHfzxbr4aZpBRgO4PkjnAse8LBGL -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:02 2026 by rpki-client