This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/pFkI7meix8Wvnh8I7pdS5zO5VAs.roa File: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (raw, json) Hash identifier: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y= Subject key identifier: A4:59:08:EE:67:A2:C7:C5:AF:9E:1F:08:EE:97:52:E7:33:B9:54:0B Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a Certificate serial: 019B77593942B3BC78CB309FB826FCC70134 Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/pFkI7meix8Wvnh8I7pdS5zO5VAs.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201152 IP address blocks: 185.55.248.0/22 maxlen: 22 185.55.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:39:42:b3:bc:78:cb:30:9f:b8:26:fc:c7:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a45908ee67a2c7c5af9e1f08ee9752e733b9540b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:8f:e2:17:e4:1e:9f:7f:32:03:30:c5:e0: 30:c5:73:5a:76:a6:b3:23:73:57:cc:61:15:79:4c: 3a:1b:c6:ff:28:20:45:91:37:bd:00:7d:8c:2b:13: c7:17:66:f3:94:40:71:c2:a7:49:ec:a0:d9:13:55: 49:dc:0c:cb:a8:ca:a2:81:96:ce:bc:dc:2b:14:56: 25:42:01:b8:cd:b2:5c:35:56:e2:fd:e4:ba:10:ea: a2:fd:c9:06:41:25:91:6c:e4:d9:b4:47:c0:74:5b: c8:48:e7:1f:44:73:39:2f:e9:54:dc:07:2c:78:45: b9:d5:b6:7c:ca:93:cc:f6:fa:e8:f0:4e:47:50:b5: 90:6d:ba:9e:c8:ad:58:b0:85:bc:3d:9c:1c:40:d1: e0:dd:24:da:b2:fc:f7:27:fb:cf:9e:dd:13:8c:97: 0e:fc:f6:a4:5c:52:46:b8:e5:9a:f8:95:71:b2:d5: f6:bc:fb:12:bb:22:88:6c:6b:11:69:96:f3:0b:8c: 39:da:d7:e0:b5:5e:6a:4b:91:1d:ba:b5:c4:a3:32: 23:e2:fd:36:b1:a5:a1:48:07:d5:30:0c:f3:2d:7c: b9:7a:b5:13:6e:a0:72:5f:d4:ff:b2:76:24:13:9c: 17:60:ab:7d:ac:ed:43:23:23:b2:42:8e:99:6f:ee: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:08:EE:67:A2:C7:C5:AF:9E:1F:08:EE:97:52:E7:33:B9:54:0B X509v3 Authority Key Identifier: keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/pFkI7meix8Wvnh8I7pdS5zO5VAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.248.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:33:0d:60:84:ec:86:b8:5d:c9:e4:70:60:b0:0f:2f:c8:d9: 58:f1:f6:4f:d8:9e:29:02:ae:80:6c:e2:03:00:80:ed:eb:3e: 1b:5d:db:7f:1a:3c:b8:66:67:ae:49:76:6c:a3:57:d2:0f:1e: 9f:69:71:a4:60:b9:a7:9a:9d:d5:85:34:06:f8:c4:46:c0:19: 83:4f:d7:b5:39:35:0a:00:f8:f1:5b:9e:26:e1:f9:74:0b:c7: 7e:5c:ce:a6:e6:f6:f1:6e:b8:53:20:a9:d5:a7:78:b5:0b:31: a1:24:e4:89:1e:f9:4a:fb:1d:4d:95:b8:05:8c:dc:9b:08:d5: 26:d7:d2:94:df:a6:5b:de:78:03:c4:20:3f:3e:e8:dd:ca:2a: 1b:fe:fc:04:f1:69:9e:65:73:a9:f8:83:75:ca:fb:5c:19:ec: 27:bd:7a:53:69:35:79:ae:03:8c:d6:10:3c:92:c8:cf:eb:5d: 33:56:12:ae:37:a5:d4:bc:cc:68:ae:f9:8f:34:f8:d2:c4:87: dc:dd:53:4c:72:4c:40:78:e7:a2:99:9b:14:db:ec:e2:9f:72: 34:65:ad:4f:ae:6f:c2:d8:a6:61:bd:a1:74:5a:b9:c0:45:75: 87:91:d6:a0:de:f3:e7:ae:90:06:23:5e:5c:5d:64:ed:97:af: 42:ae:c3:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTlCs7x4yzCfuCb8xwE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk MzMxOWEwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDU5MDhlZTY3YTJjN2M1YWY5ZTFmMDhlZTk3NTJlNzMzYjk1NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneSP4hfkHp9/MgMwxeAwxXNadqaz I3NXzGEVeUw6G8b/KCBFkTe9AH2MKxPHF2bzlEBxwqdJ7KDZE1VJ3AzLqMqigZbO vNwrFFYlQgG4zbJcNVbi/eS6EOqi/ckGQSWRbOTZtEfAdFvISOcfRHM5L+lU3Acs eEW51bZ8ypPM9vro8E5HULWQbbqeyK1YsIW8PZwcQNHg3STasvz3J/vPnt0TjJcO /PakXFJGuOWa+JVxstX2vPsSuyKIbGsRaZbzC4w52tfgtV5qS5EdurXEozIj4v02 saWhSAfVMAzzLXy5erUTbqByX9T/snYkE5wXYKt9rO1DIyOyQo6Zb+5JzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRZCO5nosfFr54fCO6XUuczuVQLMB8GA1UdIwQY MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt OWEzODQxOTY3MTgxLzEvcEZrSTdtZWl4OFd2bmg4STdwZFM1ek81VkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTf4MA0G CSqGSIb3DQEBCwUAA4IBAQAPMw1ghOyGuF3J5HBgsA8vyNlY8fZP2J4pAq6AbOID AIDt6z4bXdt/Gjy4ZmeuSXZso1fSDx6faXGkYLmnmp3VhTQG+MRGwBmDT9e1OTUK APjxW54m4fl0C8d+XM6m5vbxbrhTIKnVp3i1CzGhJOSJHvlK+x1NlbgFjNybCNUm 19KU36Zb3ngDxCA/Pujdyiob/vwE8WmeZXOp+IN1yvtcGewnvXpTaTV5rgOM1hA8 ksjP610zVhKuN6XUvMxorvmPNPjSxIfc3VNMckxAeOeimZsU2+zin3I0Za1Prm/C 2KZhvaF0WrnARXWHkdag3vPnrpAGI15cXWTtl69CrsPh -----END CERTIFICATE-----Generated at Sat Jan 24 03:50:34 2026 by rpki-client