This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P2lTQ6nuXH00L_QWMlRJwRil2I0.roa File: P2lTQ6nuXH00L_QWMlRJwRil2I0.roa (raw, json) Hash identifier: Puvm5nLjqOXImIn19GXkQim2MfZGej5pzZoVmFZL+yI= Subject key identifier: 3F:69:53:43:A9:EE:5C:7D:34:2F:F4:16:32:54:49:C1:18:A5:D8:8D Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B12C643A1916C03705B58939B449 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P2lTQ6nuXH00L_QWMlRJwRil2I0.roa Signing time: Thu 01 Jan 2026 02:17:39 +0000 ROA not before: Thu 01 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60647 IP address blocks: 185.88.175.0/24 maxlen: 24 185.98.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b1:2c:64:3a:19:16:c0:37:05:b5:89:39:b4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f695343a9ee5c7d342ff416325449c118a5d88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:68:45:18:af:d3:50:b5:2c:0d:5f:8f:39: 44:5e:4c:0d:7e:b3:46:47:ef:62:86:9f:63:fa:3d: d6:aa:50:b0:e8:81:25:b5:f6:2b:83:63:23:d3:38: b1:97:6b:ed:4b:67:82:12:03:ab:bf:55:e8:3a:df: d1:f8:15:83:de:e2:3b:97:e5:21:42:e6:93:26:c8: ea:26:1c:25:24:53:f4:32:da:b1:f6:98:a5:9d:71: 77:5c:a8:7e:17:c3:ac:aa:37:4f:4b:bc:5f:dd:83: b0:aa:1e:9e:f3:9f:9c:b8:3e:cc:88:fd:bc:33:0a: c2:d0:db:43:56:d7:4e:ce:5c:92:e0:95:c0:af:81: e4:b2:18:b5:25:78:81:45:e1:a0:36:9c:df:d0:98: d6:25:a1:d5:15:9f:3c:02:d7:b9:c0:dc:52:37:68: 36:06:9a:04:2d:14:59:d9:20:74:ff:b6:96:84:48: 98:09:e4:5b:81:24:89:f0:08:e0:cc:30:dc:45:c3: ba:5e:9e:7c:bb:98:89:00:d8:85:3d:e8:90:e9:66: d8:c7:de:df:51:ca:d6:58:e9:5d:c8:33:bf:58:15: 34:6b:26:a5:17:0f:f3:38:f1:9d:33:c6:fc:fa:79: 92:4c:48:ad:90:81:8c:37:48:9e:ef:b6:c0:f5:70: a9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:69:53:43:A9:EE:5C:7D:34:2F:F4:16:32:54:49:C1:18:A5:D8:8D X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/P2lTQ6nuXH00L_QWMlRJwRil2I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.175.0/24 185.98.63.0/24 Signature Algorithm: sha256WithRSAEncryption 49:39:0b:1f:a5:c3:7f:92:b2:60:65:af:7f:a8:9e:cc:e4:cd: b4:17:0a:d8:c2:e4:12:2e:fd:4d:a8:54:09:4e:6a:2b:b2:99: f9:e6:6e:4e:6c:54:d1:f5:e0:17:bc:ba:fc:b8:65:b3:3a:4a: 3e:9a:f0:17:a8:4b:c0:71:43:6c:6b:10:71:f0:5f:05:0a:5b: 29:eb:96:24:ae:32:68:e8:ad:b5:a2:02:25:11:34:76:b7:c2: 82:27:5f:71:24:ea:3c:7d:56:39:35:35:01:7a:57:9e:f0:48: 1a:14:1a:df:8e:53:0e:1b:fd:c0:a7:e4:a2:fa:0e:8b:30:71: 86:30:a5:e6:b4:a3:fe:8e:77:fe:4e:08:cc:b7:11:78:8c:91: 78:96:90:c9:e1:25:84:e5:d7:bf:8b:7c:75:37:59:15:0b:ea: 22:db:8b:e7:7c:0a:02:93:f1:9f:ac:84:07:ca:5d:53:90:a8: 65:c5:65:20:af:9b:15:c2:ae:62:c5:8d:35:a9:49:4a:3d:89: 0c:fa:e0:08:5b:e5:76:67:2a:2d:47:2e:d5:6e:28:0a:56:a4: 91:c6:2a:0b:1c:e7:68:1d:47:03:08:f2:65:fc:27:40:f1:d6: 67:a5:5c:06:35:30:13:a6:f3:ee:e6:33:b8:e7:66:2b:06:c1: 77:39:e5:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WLEsZDoZFsA3BbWJObRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjY5NTM0M2E5ZWU1YzdkMzQyZmY0MTYzMjU0NDljMTE4YTVkODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VhoRRiv01C1LA1fjzlEXkwNfrNG R+9ihp9j+j3WqlCw6IEltfYrg2Mj0zixl2vtS2eCEgOrv1XoOt/R+BWD3uI7l+Uh QuaTJsjqJhwlJFP0Mtqx9pilnXF3XKh+F8OsqjdPS7xf3YOwqh6e85+cuD7MiP28 MwrC0NtDVtdOzlyS4JXAr4Hkshi1JXiBReGgNpzf0JjWJaHVFZ88Ate5wNxSN2g2 BpoELRRZ2SB0/7aWhEiYCeRbgSSJ8AjgzDDcRcO6Xp58u5iJANiFPeiQ6WbYx97f UcrWWOldyDO/WBU0ayalFw/zOPGdM8b8+nmSTEitkIGMN0ie77bA9XCp8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9pU0Op7lx9NC/0FjJUScEYpdiNMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvUDJsVFE2bnVYSDAwTF9RV01sUkp3UmlsMkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVivAwQA uWI/MA0GCSqGSIb3DQEBCwUAA4IBAQBJOQsfpcN/krJgZa9/qJ7M5M20FwrYwuQS Lv1NqFQJTmorspn55m5ObFTR9eAXvLr8uGWzOko+mvAXqEvAcUNsaxBx8F8FClsp 65YkrjJo6K21ogIlETR2t8KCJ19xJOo8fVY5NTUBelee8EgaFBrfjlMOG/3Ap+Si +g6LMHGGMKXmtKP+jnf+TgjMtxF4jJF4lpDJ4SWE5de/i3x1N1kVC+oi24vnfAoC k/GfrIQHyl1TkKhlxWUgr5sVwq5ixY01qUlKPYkM+uAIW+V2ZyotRy7VbigKVqSR xioLHOdoHUcDCPJl/CdA8dZnpVwGNTATpvPu5jO452YrBsF3OeXU -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:45 2026 by rpki-client