This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa File: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (raw, json) Hash identifier: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g= Subject key identifier: 3F:C5:41:33:65:6D:EF:C3:07:D2:14:EC:4E:C0:D8:A0:DD:43:0B:0A Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Certificate serial: 019B7E37922700B0C0A93A816542AE5E9722 Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa Signing time: Fri 02 Jan 2026 10:18:49 +0000 ROA not before: Fri 02 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 185.51.134.0/24 maxlen: 32 2001:1548:206::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:92:27:00:b0:c0:a9:3a:81:65:42:ae:5e:97:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fc54133656defc307d214ec4ec0d8a0dd430b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:74:62:89:a7:06:b0:f1:72:d3:62:7b:5c: 0d:dd:8e:f3:90:c9:fb:1e:1e:fa:35:23:28:37:1c: 56:bc:10:fa:b6:2c:75:7b:4f:c2:26:9b:25:42:62: 6b:13:af:f5:98:57:03:d2:a6:88:a3:11:34:3e:67: a2:99:ab:e9:2c:04:b8:b4:9e:69:cb:9c:81:97:27: 76:77:ec:a7:8f:5f:fa:2e:44:09:4c:d8:25:b6:ad: 81:67:d4:a2:71:d4:29:bc:af:74:02:fc:1a:45:63: 49:22:d3:04:c1:5d:72:57:1b:82:c7:74:1f:10:e0: 2e:c1:dd:24:94:4b:60:8f:b4:71:43:cd:d0:21:f3: c7:1f:69:e8:54:98:bd:5a:1a:86:81:13:74:3d:ef: 1d:6d:35:84:5b:30:dd:1f:71:db:58:96:b2:03:9b: 6e:fd:36:f4:c4:06:94:e7:38:63:5a:13:1d:a6:65: a2:c5:66:97:7b:9d:01:9c:db:60:ad:9c:4a:8e:18: 53:27:28:26:62:56:d8:e5:0b:3d:4d:9e:39:39:89: 41:73:87:75:ee:dd:b5:55:76:7f:b3:7e:6d:95:ad: 3d:a8:2a:65:76:21:b1:c9:ee:70:c8:f2:45:79:a3: 2e:ad:aa:25:4b:8a:b1:d4:e5:45:c2:20:4d:b4:24: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C5:41:33:65:6D:EF:C3:07:D2:14:EC:4E:C0:D8:A0:DD:43:0B:0A X509v3 Authority Key Identifier: keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.134.0/24 IPv6: 2001:1548:206::/48 Signature Algorithm: sha256WithRSAEncryption 81:f7:0d:6b:6d:db:70:c9:f9:91:cd:b5:75:19:8a:f8:d0:31: ef:22:69:6f:75:fe:66:40:e7:c4:f4:27:b3:95:35:d9:08:81: 87:7c:aa:ed:49:86:b2:e6:68:49:26:c7:c5:3e:5c:5b:b3:8b: 6b:a8:61:e6:64:62:93:47:4b:6e:e0:a6:89:2d:95:63:b7:b9: d6:6e:19:36:2b:a4:dd:2e:ce:59:cf:24:f7:cb:28:26:f6:f8: f0:51:20:88:8c:02:bd:b4:09:f0:e6:fc:a0:6a:2b:66:4e:be: 22:c3:79:1e:5c:d0:c5:d5:cc:d9:9d:f8:c0:8d:8a:98:fa:2f: 08:3b:d4:32:4a:a9:22:23:3c:51:5d:f6:6f:b0:ef:bb:2b:92: 30:29:4e:36:9f:26:ac:de:15:2e:a3:bd:67:31:7a:9f:71:2c: 1e:d3:2f:3e:f4:87:8c:ab:fa:cf:94:d9:3d:9d:6f:f5:24:66: 1c:fc:ec:ec:1c:5a:e6:35:e6:2d:d1:02:ad:9f:9b:b9:3c:af: a6:bb:5b:7f:67:92:13:f8:a2:c3:58:4f:6d:66:9f:a1:6d:67: 43:9b:5d:6d:c7:05:91:19:f9:6f:45:9f:70:94:c8:b0:2c:2d: ef:97:9a:76:9d:ca:86:17:79:ae:c9:00:dd:d1:26:3d:70:c7: a6:5d:55:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N5InALDAqTqBZUKuXpciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx ZWQ3YmYwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmM1NDEzMzY1NmRlZmMzMDdkMjE0ZWM0ZWMwZDhhMGRkNDMwYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9t0YomnBrDxctNie1wN3Y7zkMn7 Hh76NSMoNxxWvBD6tix1e0/CJpslQmJrE6/1mFcD0qaIoxE0PmeimavpLAS4tJ5p y5yBlyd2d+ynj1/6LkQJTNgltq2BZ9SicdQpvK90AvwaRWNJItMEwV1yVxuCx3Qf EOAuwd0klEtgj7RxQ83QIfPHH2noVJi9WhqGgRN0Pe8dbTWEWzDdH3HbWJayA5tu /Tb0xAaU5zhjWhMdpmWixWaXe50BnNtgrZxKjhhTJygmYlbY5Qs9TZ45OYlBc4d1 7t21VXZ/s35tla09qCpldiGxye5wyPJFeaMuraolS4qx1OVFwiBNtCQbKwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD/FQTNlbe/DB9IU7E7A2KDdQwsKMB8GA1UdIwQY MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It YTI5Y2U3ZGExMGZkLzEvUDhWQk0yVnQ3OE1IMGhUc1RzRFlvTjFEQ3dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuTOGMA8E AgACMAkDBwAgARVIAgYwDQYJKoZIhvcNAQELBQADggEBAIH3DWtt23DJ+ZHNtXUZ ivjQMe8iaW91/mZA58T0J7OVNdkIgYd8qu1JhrLmaEkmx8U+XFuzi2uoYeZkYpNH S27gpoktlWO3udZuGTYrpN0uzlnPJPfLKCb2+PBRIIiMAr20CfDm/KBqK2ZOviLD eR5c0MXVzNmd+MCNipj6Lwg71DJKqSIjPFFd9m+w77srkjApTjafJqzeFS6jvWcx ep9xLB7TLz70h4yr+s+U2T2db/UkZhz87OwcWuY15i3RAq2fm7k8r6a7W39nkhP4 osNYT21mn6FtZ0ObXW3HBZEZ+W9Fn3CUyLAsLe+XmnadyoYXea7JAN3RJj1wx6Zd VYg= -----END CERTIFICATE-----Generated at Wed Jan 21 06:06:37 2026 by rpki-client