This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/PsabYp2ySYYY4yWAvK9dKL6YUH8.roa File: PsabYp2ySYYY4yWAvK9dKL6YUH8.roa (raw, json) Hash identifier: vZfpMIjc6fu7umjV0/mcBQ6XxsIN7kJ9lIrou1yREPE= Subject key identifier: 3E:C6:9B:62:9D:B2:49:86:18:E3:25:80:BC:AF:5D:28:BE:98:50:7F Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8 Certificate serial: 019B7F8569DE41440DBD9EA3C889ED2C9E40 Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/PsabYp2ySYYY4yWAvK9dKL6YUH8.roa Signing time: Fri 02 Jan 2026 16:23:28 +0000 ROA not before: Fri 02 Jan 2026 16:23:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205871 IP address blocks: 185.179.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:69:de:41:44:0d:bd:9e:a3:c8:89:ed:2c:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8 Validity Not Before: Jan 2 16:23:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ec69b629db2498618e32580bcaf5d28be98507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:61:88:ae:24:ff:82:9d:84:bc:cf:8a:ca: 51:fb:3c:20:d1:e9:e0:8f:fa:25:62:1e:a7:57:6f: 40:f2:e6:5b:19:b8:95:78:46:85:8a:46:5b:3e:01: 0c:c5:a2:16:05:41:b6:e1:ed:5f:ef:63:b2:5b:81: 0f:39:82:ca:ea:83:48:8b:86:37:43:0c:c7:2f:46: da:6c:4d:b2:2c:1f:a3:92:3b:86:b8:38:ae:0a:23: f3:e5:10:bb:37:d6:45:7b:c0:59:d7:04:f4:90:4c: ab:53:24:3e:38:12:62:cd:0b:2f:95:15:be:5b:3d: a2:d3:e8:26:21:57:b3:ac:17:fd:df:00:08:14:2a: 83:96:f4:38:a6:73:22:4e:48:5d:6d:6b:9b:df:ef: 4d:27:b8:99:a7:99:8e:ec:9a:bf:ff:c7:7f:58:c7: f1:4c:1e:42:05:de:c6:e7:62:e8:91:df:1b:d7:fb: 29:41:41:3c:93:2e:3d:e0:65:15:27:19:be:28:b3: df:a7:79:a1:71:fc:bd:f3:13:b3:ee:bd:54:31:4e: 65:bc:de:da:57:88:d1:32:aa:c9:10:e8:14:39:8a: 30:66:0a:84:e3:1c:57:a1:e2:a9:f2:0f:dc:43:43: d2:3b:f6:f9:00:7a:b8:08:ee:99:50:86:17:2c:a8: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:9B:62:9D:B2:49:86:18:E3:25:80:BC:AF:5D:28:BE:98:50:7F X509v3 Authority Key Identifier: keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/PsabYp2ySYYY4yWAvK9dKL6YUH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.58.0/23 Signature Algorithm: sha256WithRSAEncryption 23:6f:6e:0b:19:0d:db:ec:37:05:5f:e3:41:4f:1a:ed:ce:c8: 88:c8:da:13:86:c7:e7:4a:f2:d1:ae:84:14:81:20:5f:bd:17: c8:d0:34:60:90:97:4c:48:ff:99:c2:d6:ba:df:2b:d8:fc:c9: 3e:27:d5:e5:ad:53:f7:a2:d0:12:25:03:25:7f:94:1d:04:50: 01:38:c3:51:95:8a:ea:6c:ac:41:81:a0:74:3d:86:4c:9f:0e: 35:e7:dc:e8:7d:a4:d8:6d:49:a2:0b:16:04:75:ee:ba:b8:c9: d0:a2:fb:e4:f4:a3:a3:49:eb:a9:97:4b:a3:b9:27:e9:9f:64: 5b:ea:31:02:0c:89:fa:8f:a8:e5:21:74:e8:c5:f4:f9:50:bb: b2:ce:72:c8:21:4c:2c:42:82:7d:93:46:ed:fe:ee:e8:4f:96: 46:5f:03:63:05:41:2c:4b:3b:a7:59:48:e8:1a:2b:f7:19:28: 9c:20:f1:bb:28:7f:0c:3a:c9:bf:16:75:bb:bf:98:c7:aa:10: 28:37:ac:45:d7:81:60:04:64:6e:c9:87:3d:24:ed:ac:64:53: c0:fa:77:53:33:ff:97:22:37:30:61:36:67:dc:09:b8:7d:5f: 54:2e:a6:48:b9:63:93:f4:b1:ab:f6:df:c6:3e:5c:51:55:9c: aa:3d:d3:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWneQUQNvZ6jyIntLJ5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZGYwY2JkZDU1NzFlNTgwZWE1N2UxOGE0NDBjYTJiZWE0 ODA2ZjgwHhcNMjYwMTAyMTYyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWM2OWI2MjlkYjI0OTg2MThlMzI1ODBiY2FmNWQyOGJlOTg1MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvxhiK4k/4KdhLzPispR+zwg0eng j/olYh6nV29A8uZbGbiVeEaFikZbPgEMxaIWBUG24e1f72OyW4EPOYLK6oNIi4Y3 QwzHL0babE2yLB+jkjuGuDiuCiPz5RC7N9ZFe8BZ1wT0kEyrUyQ+OBJizQsvlRW+ Wz2i0+gmIVezrBf93wAIFCqDlvQ4pnMiTkhdbWub3+9NJ7iZp5mO7Jq//8d/WMfx TB5CBd7G52Lokd8b1/spQUE8ky494GUVJxm+KLPfp3mhcfy98xOz7r1UMU5lvN7a V4jRMqrJEOgUOYowZgqE4xxXoeKp8g/cQ0PSO/b5AHq4CO6ZUIYXLKiVaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7Gm2KdskmGGOMlgLyvXSi+mFB/MB8GA1UdIwQY MBaAFIDfDL3VVx5YDqV+GKRAyivqSAb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMt YmQ3NWVmOWI1Nzk4LzEvUHNhYllwMnlTWVlZNHlXQXZLOWRLTDZZVUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMtYmQ3NWVmOWI1Nzk4 LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubM6MA0G CSqGSIb3DQEBCwUAA4IBAQAjb24LGQ3b7DcFX+NBTxrtzsiIyNoThsfnSvLRroQU gSBfvRfI0DRgkJdMSP+Zwta63yvY/Mk+J9XlrVP3otASJQMlf5QdBFABOMNRlYrq bKxBgaB0PYZMnw4159zofaTYbUmiCxYEde66uMnQovvk9KOjSeupl0ujuSfpn2Rb 6jECDIn6j6jlIXToxfT5ULuyznLIIUwsQoJ9k0bt/u7oT5ZGXwNjBUEsSzunWUjo Giv3GSicIPG7KH8MOsm/FnW7v5jHqhAoN6xF14FgBGRuyYc9JO2sZFPA+ndTM/+X IjcwYTZn3Am4fV9ULqZIuWOT9LGr9t/GPlxRVZyqPdMW -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:51 2026 by rpki-client