This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/pCWFYgZBhGHbELeQcs-4zGj4CgI.roa File: pCWFYgZBhGHbELeQcs-4zGj4CgI.roa (raw, json) Hash identifier: SOOQXwgeDKJOSzjwjNvboDnmZ1A6znAmE487OR2Rqes= Subject key identifier: A4:25:85:62:06:41:84:61:DB:10:B7:90:72:CF:B8:CC:68:F8:0A:02 Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019B78A31AEB122D28B54CC5BC37DDC40A0C Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/pCWFYgZBhGHbELeQcs-4zGj4CgI.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 185.229.15.0/24 maxlen: 24 194.26.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:eb:12:2d:28:b5:4c:c5:bc:37:dd:c4:0a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a425856206418461db10b79072cfb8cc68f80a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:89:5f:8f:f5:62:99:a8:3e:58:39:87:0d: 90:4b:c2:bd:e7:6b:73:17:03:13:68:b0:d9:24:6e: dd:91:45:73:6b:6a:16:2a:50:91:dd:6c:fc:99:b8: 31:96:e3:71:84:6e:74:31:80:e1:1a:86:0e:ad:6b: f9:f1:5a:c6:aa:ff:b6:d3:e8:78:11:d4:dc:c2:04: 8f:f5:28:e8:20:1e:74:59:3a:90:f6:54:fe:28:31: 3d:ce:0b:e8:41:4e:6c:80:0a:40:2f:64:90:ed:0d: 3a:a9:43:99:9a:62:46:8c:21:0b:3e:b6:9e:b5:0c: fe:0a:6e:7c:cf:ca:44:a1:84:a9:96:eb:78:05:8a: a5:77:42:dd:ac:f7:e1:78:04:3f:e8:23:94:52:e9: 48:9a:84:01:32:f9:fd:cf:3d:01:fc:7f:ab:35:4f: 3e:7d:0b:aa:21:aa:de:85:f6:64:55:7c:d7:37:d5: 67:e5:43:e2:84:ba:ad:01:00:fa:9c:3e:19:d4:fd: c5:0b:aa:ca:02:9d:25:05:c2:46:80:48:7a:88:88: 93:03:8b:72:dd:54:07:e9:7f:c2:77:b4:8f:3b:46: 8a:8b:50:b5:8c:5b:20:36:4c:af:62:09:af:b3:30: 8b:f0:d2:11:0d:a0:43:1d:d9:b2:97:79:12:73:e9: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:85:62:06:41:84:61:DB:10:B7:90:72:CF:B8:CC:68:F8:0A:02 X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/pCWFYgZBhGHbELeQcs-4zGj4CgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.15.0/24 194.26.114.0/24 Signature Algorithm: sha256WithRSAEncryption 85:8f:e6:73:39:a8:6b:51:89:65:04:12:c7:cc:74:74:6c:f4: ec:8f:93:be:6a:42:f3:f0:e9:bf:f8:23:62:7b:1b:b7:ae:9a: 4d:65:2e:72:0b:f0:15:3b:0b:8a:d9:f7:73:eb:3c:b1:87:06: 83:bd:3a:73:7d:03:55:7d:54:53:9f:f8:bf:70:b0:e4:bc:99: bc:f7:04:8e:8b:f3:d6:1f:9c:ea:88:35:c7:50:5d:92:f7:76: 98:80:ba:f6:bd:33:35:b6:bb:96:28:42:ff:ae:fc:9c:a1:cf: ed:28:e7:f6:7d:fb:2c:77:d3:07:87:90:25:f1:e9:36:8c:a1: 2e:b7:60:e9:e9:1c:be:ce:b9:2a:96:8b:4a:b2:74:5c:2c:1a: b7:6a:29:37:62:92:04:a5:7a:b4:40:80:96:a7:5d:35:77:78: 12:69:bb:b6:03:6c:4d:7b:81:0f:19:2b:d3:b3:b8:21:91:3d: 75:32:1b:78:fc:c7:b7:ae:ca:d6:06:4e:f8:be:50:17:f0:2c: 7a:c8:4f:c4:87:75:41:f2:fd:88:dc:d2:02:4b:69:88:3f:60: 63:e3:cf:41:16:b5:1a:a6:7c:b6:1f:91:07:ba:ee:02:9e:67: 7a:93:8b:84:be:10:56:c1:fb:2c:d2:47:97:64:f7:78:8d:0a: ef:f5:1e:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxrrEi0otUzFvDfdxAoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDI1ODU2MjA2NDE4NDYxZGIxMGI3OTA3MmNmYjhjYzY4ZjgwYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNWJX4/1YpmoPlg5hw2QS8K952tz FwMTaLDZJG7dkUVza2oWKlCR3Wz8mbgxluNxhG50MYDhGoYOrWv58VrGqv+20+h4 EdTcwgSP9SjoIB50WTqQ9lT+KDE9zgvoQU5sgApAL2SQ7Q06qUOZmmJGjCELPrae tQz+Cm58z8pEoYSplut4BYqld0LdrPfheAQ/6COUUulImoQBMvn9zz0B/H+rNU8+ fQuqIarehfZkVXzXN9Vn5UPihLqtAQD6nD4Z1P3FC6rKAp0lBcJGgEh6iIiTA4ty 3VQH6X/Cd7SPO0aKi1C1jFsgNkyvYgmvszCL8NIRDaBDHdmyl3kSc+nA5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKQlhWIGQYRh2xC3kHLPuMxo+AoCMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvcENXRllnWkJoR0hiRUxlUWNzLTR6R2o0Q2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueUPAwQA whpyMA0GCSqGSIb3DQEBCwUAA4IBAQCFj+ZzOahrUYllBBLHzHR0bPTsj5O+akLz 8Om/+CNiexu3rppNZS5yC/AVOwuK2fdz6zyxhwaDvTpzfQNVfVRTn/i/cLDkvJm8 9wSOi/PWH5zqiDXHUF2S93aYgLr2vTM1truWKEL/rvycoc/tKOf2ffssd9MHh5Al 8ek2jKEut2Dp6Ry+zrkqlotKsnRcLBq3aik3YpIEpXq0QICWp101d3gSabu2A2xN e4EPGSvTs7ghkT11Mht4/Me3rsrWBk74vlAX8Cx6yE/Eh3VB8v2I3NICS2mIP2Bj 489BFrUapny2H5EHuu4Cnmd6k4uEvhBWwfss0keXZPd4jQrv9R4O -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:15 2026 by rpki-client