This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/PCSAe779gtpQ1Sa05bIdrwV78eg.roa
File: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (raw, json)
Hash identifier: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=
Subject key identifier: 3C:24:80:7B:BE:FD:82:DA:50:D5:26:B4:E5:B2:1D:AF:05:7B:F1:E8
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019B7C135D001F0B35BA5888E68C1C5A7ECE
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/PCSAe779gtpQ1Sa05bIdrwV78eg.roa
Signing time: Fri 02 Jan 2026 00:20:02 +0000
ROA not before: Fri 02 Jan 2026 00:20:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:5d:00:1f:0b:35:ba:58:88:e6:8c:1c:5a:7e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jan 2 00:20:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c24807bbefd82da50d526b4e5b21daf057bf1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:69:0e:e5:13:a4:44:af:04:8f:f4:48:b1:
cf:ec:35:82:27:77:9e:d1:af:65:2d:04:8a:48:ee:
b3:59:8a:e5:39:9f:19:fe:e0:4f:d9:9b:80:48:23:
4f:40:d3:3b:bb:23:49:3c:95:08:17:a8:89:dc:2a:
f6:32:1f:5d:d3:37:4e:39:a0:64:46:52:78:32:e4:
aa:cc:1d:70:2f:5a:2b:41:ee:13:b2:64:fa:f2:b9:
59:b4:4e:e7:7b:83:30:3e:6e:ce:57:84:82:4b:39:
d5:e9:8d:2d:ef:2a:12:1d:f9:3e:4b:fe:1d:df:2d:
57:ae:5f:0d:01:56:17:6c:67:08:26:e5:2e:cf:d0:
1f:4e:46:a8:2c:47:02:d5:b3:aa:a1:fe:86:0d:5c:
6d:0a:d5:d7:59:bf:2c:a5:c9:37:a9:f8:c3:81:cb:
ff:65:a1:ed:9c:4e:e2:2b:4a:5c:f7:ec:50:4f:0f:
b0:02:60:8b:4f:42:0e:c3:0f:d9:7f:e6:92:c2:bb:
1c:42:ed:52:aa:7c:89:70:91:1d:e9:32:21:77:49:
04:25:71:4b:6c:8a:16:e6:37:aa:de:d1:fa:72:66:
6a:90:ea:1a:96:05:e0:04:89:5b:82:e7:90:63:72:
37:31:4d:cb:63:88:a8:d9:38:00:43:73:03:60:6b:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:80:7B:BE:FD:82:DA:50:D5:26:B4:E5:B2:1D:AF:05:7B:F1:E8
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/PCSAe779gtpQ1Sa05bIdrwV78eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
53:39:3f:69:87:2d:b6:d4:fe:66:19:1f:b0:c2:79:24:a3:1e:
39:e5:36:a8:03:3b:48:71:8a:62:67:c2:b5:af:4c:f4:d9:45:
c3:3c:84:ea:d1:e0:35:63:64:e2:86:89:f2:84:03:42:01:f5:
fe:12:07:a7:5f:b9:81:3c:19:01:ee:ea:17:da:59:56:cc:a5:
3c:ef:7f:f7:7b:76:27:a5:60:e7:30:43:24:1d:d7:55:6c:ce:
65:68:f7:a2:b8:6e:4f:76:77:32:3b:b8:8a:64:cb:11:bc:b6:
5a:20:df:fe:0c:de:ff:10:18:9b:f2:e1:8d:05:0c:f2:58:ef:
5a:6f:7b:7f:17:1c:ce:7d:bb:6c:fc:85:4d:27:87:28:f2:8d:
2a:eb:c2:cc:df:d3:d7:55:94:07:65:eb:0e:28:cf:d5:06:d4:
38:7a:91:8b:2a:f6:0b:41:18:fa:72:7d:3a:04:cd:f2:28:9f:
fd:02:b0:75:c0:e3:dc:a3:93:05:37:86:83:af:5b:15:63:10:
68:cc:2e:98:7f:a6:4e:a5:de:74:b0:c3:26:2f:4b:71:c6:94:
dc:10:5a:19:16:64:7b:ad:1a:22:03:ef:5a:33:58:c1:62:f1:
fd:c7:c1:a7:be:26:a3:eb:7c:63:e0:c6:dd:af:b2:c6:bf:5f:
9d:24:30:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E10AHws1uliI5owcWn7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2
MmMwNDMwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzI0ODA3YmJlZmQ4MmRhNTBkNTI2YjRlNWIyMWRhZjA1N2JmMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw5pDuUTpESvBI/0SLHP7DWCJ3ee
0a9lLQSKSO6zWYrlOZ8Z/uBP2ZuASCNPQNM7uyNJPJUIF6iJ3Cr2Mh9d0zdOOaBk
RlJ4MuSqzB1wL1orQe4TsmT68rlZtE7ne4MwPm7OV4SCSznV6Y0t7yoSHfk+S/4d
3y1Xrl8NAVYXbGcIJuUuz9AfTkaoLEcC1bOqof6GDVxtCtXXWb8spck3qfjDgcv/
ZaHtnE7iK0pc9+xQTw+wAmCLT0IOww/Zf+aSwrscQu1SqnyJcJEd6TIhd0kEJXFL
bIoW5jeq3tH6cmZqkOoalgXgBIlbgueQY3I3MU3LY4io2TgAQ3MDYGuYfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwkgHu+/YLaUNUmtOWyHa8Fe/HoMB8GA1UdIwQY
MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt
YTI2NWYzODA5M2EwLzEvUENTQWU3NzlndHBRMVNhMDViSWRyd1Y3OGVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew
LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC+MA0G
CSqGSIb3DQEBCwUAA4IBAQBTOT9phy221P5mGR+wwnkkox455TaoAztIcYpiZ8K1
r0z02UXDPITq0eA1Y2TihonyhANCAfX+EgenX7mBPBkB7uoX2llWzKU873/3e3Yn
pWDnMEMkHddVbM5laPeiuG5PdncyO7iKZMsRvLZaIN/+DN7/EBib8uGNBQzyWO9a
b3t/FxzOfbts/IVNJ4co8o0q68LM39PXVZQHZesOKM/VBtQ4epGLKvYLQRj6cn06
BM3yKJ/9ArB1wOPco5MFN4aDr1sVYxBozC6Yf6ZOpd50sMMmL0txxpTcEFoZFmR7
rRoiA+9aM1jBYvH9x8Gnviaj63xj4Mbdr7LGv1+dJDCy
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:59 2026 by rpki-client