This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa File: PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa (raw, json) Hash identifier: RoukLN17HEVFuKCJd4uqal1toMgfNC1RsX/IX0RX0fY= Subject key identifier: 3E:10:92:EB:92:EB:B9:5D:D4:E9:BF:02:6B:A6:7B:3A:8F:8C:6D:8D Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019B7A5AB35AE29E7B7C5E65CE5B9CAB51C0 Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207638 IP address blocks: 194.116.104.0/24 maxlen: 24 194.116.105.0/24 maxlen: 24 2001:848:1::/48 maxlen: 48 2001:848:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b3:5a:e2:9e:7b:7c:5e:65:ce:5b:9c:ab:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1092eb92ebb95dd4e9bf026ba67b3a8f8c6d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:37:69:44:25:b3:ba:9c:79:8d:03:30:17: 11:89:78:33:12:a7:09:a3:a2:a4:e7:86:61:bc:e0: 3b:0b:5b:9c:bd:14:13:e4:c1:10:de:62:39:15:ee: 4b:5f:41:b3:f9:f5:16:19:14:03:24:c5:8f:66:d0: 83:12:36:5a:b5:cd:fb:10:5c:ca:c6:d2:90:35:a2: 36:f9:df:41:2b:4f:54:f5:fc:20:2a:8b:ac:ce:d0: ab:7c:33:f8:55:b9:6d:07:9a:9a:ef:ca:74:30:e2: 48:9b:d5:4e:e2:72:9e:98:c6:3d:f0:97:ec:f5:f5: a4:4d:75:34:0d:48:96:dc:84:e0:4c:20:84:af:87: 62:21:16:29:a8:35:72:27:dc:93:7a:f8:f6:a7:14: e7:e3:58:db:37:fc:a2:1a:5b:69:a9:14:b8:43:d5: ee:11:e3:82:3b:f1:ff:b5:f7:e7:ee:c2:1f:95:02: 28:fc:9d:fc:95:90:03:12:f4:00:44:f5:bf:46:48: 69:f7:46:a4:3c:d7:07:83:8c:90:fb:cc:5b:6d:e4: 6c:9e:73:52:04:52:0d:d2:9a:0b:b3:4e:95:60:f2: ff:a8:4a:0f:f8:e9:f2:85:88:fa:11:9f:fc:49:8e: 7d:83:49:5b:79:3b:2c:a8:dc:19:ce:a3:20:eb:e2: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:92:EB:92:EB:B9:5D:D4:E9:BF:02:6B:A6:7B:3A:8F:8C:6D:8D X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/PhCS65LruV3U6b8Ca6Z7Oo-MbY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.104.0/23 IPv6: 2001:848:1::-2001:848:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2a:ba:92:18:52:00:39:e3:1d:89:a1:fd:92:99:b0:a2:9c:b7: d5:a0:7d:ab:ce:a9:56:35:20:fa:37:8a:85:ce:eb:be:ab:48: 40:32:bb:e2:3e:ff:1e:d9:2c:01:0c:2d:78:19:8e:7a:64:74: b5:87:5f:3d:a3:e2:e0:e6:1e:44:e9:8a:31:27:7b:a4:f7:0f: 9a:9a:35:22:88:e2:c9:66:16:b5:86:82:43:6c:19:16:0e:53: 91:87:29:3b:d0:2b:d3:7d:fb:e3:28:01:0c:0e:cd:8a:72:39: 79:0b:94:1f:1c:6a:1b:ac:18:54:76:35:db:1c:27:5f:20:75: 0e:b6:3e:10:e1:d6:5a:54:35:86:c8:61:e1:06:ba:82:04:5b: b6:3a:5d:65:1f:6c:e8:43:96:21:3c:53:71:72:04:45:ed:ec: bf:61:ee:c1:41:d5:4f:fa:1f:21:f5:e7:c7:07:e3:04:ac:c2: 54:2b:9d:b1:60:93:84:cb:a5:3b:68:c1:b9:0d:83:6a:44:9a: eb:59:11:1a:b8:43:8a:32:a0:1c:24:29:4d:f2:e5:4d:35:06: 75:16:57:b3:e8:07:f0:7a:f3:e8:df:95:5c:00:86:7c:c9:08: 37:e5:51:69:34:d0:74:05:1e:72:8e:e0:53:e7:e6:ac:be:1c: 79:61:39:70 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6WrNa4p57fF5lzlucq1HAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTEwOTJlYjkyZWJiOTVkZDRlOWJmMDI2YmE2N2IzYThmOGM2ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts83aUQls7qceY0DMBcRiXgzEqcJ o6Kk54ZhvOA7C1ucvRQT5MEQ3mI5Fe5LX0Gz+fUWGRQDJMWPZtCDEjZatc37EFzK xtKQNaI2+d9BK09U9fwgKousztCrfDP4VbltB5qa78p0MOJIm9VO4nKemMY98Jfs 9fWkTXU0DUiW3ITgTCCEr4diIRYpqDVyJ9yTevj2pxTn41jbN/yiGltpqRS4Q9Xu EeOCO/H/tffn7sIflQIo/J38lZADEvQARPW/Rkhp90akPNcHg4yQ+8xbbeRsnnNS BFIN0poLs06VYPL/qEoP+OnyhYj6EZ/8SY59g0lbeTssqNwZzqMg6+IL0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD4QkuuS67ld1Om/AmumezqPjG2NMB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvUGhDUzY1THJ1VjNVNmI4Q2E2WjdPby1NYlkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQBwnRoMBoE AgACMBQwEgMHACABCEgAAQMHACABCEgAAjANBgkqhkiG9w0BAQsFAAOCAQEAKrqS GFIAOeMdiaH9kpmwopy31aB9q86pVjUg+jeKhc7rvqtIQDK74j7/HtksAQwteBmO emR0tYdfPaPi4OYeROmKMSd7pPcPmpo1IojiyWYWtYaCQ2wZFg5TkYcpO9Ar0337 4ygBDA7NinI5eQuUHxxqG6wYVHY12xwnXyB1DrY+EOHWWlQ1hshh4Qa6ggRbtjpd ZR9s6EOWITxTcXIERe3sv2HuwUHVT/ofIfXnxwfjBKzCVCudsWCThMulO2jBuQ2D akSa61kRGrhDijKgHCQpTfLlTTUGdRZXs+gH8Hrz6N+VXACGfMkIN+VRaTTQdAUe co7gU+fmrL4ceWE5cA== -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:46 2026 by rpki-client