This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/PhNX9XOjP2fYLbiCcrgh747sc-o.roa File: PhNX9XOjP2fYLbiCcrgh747sc-o.roa (raw, json) Hash identifier: gAvpjhF1Yi6Gj4OWm/a6X0F1pu4Gk0vGaIU7l4b8C1M= Subject key identifier: 3E:13:57:F5:73:A3:3F:67:D8:2D:B8:82:72:B8:21:EF:8E:EC:73:EA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA407EA60B237CF29706E94DD5E35AF Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/PhNX9XOjP2fYLbiCcrgh747sc-o.roa Signing time: Thu 01 Jan 2026 22:18:26 +0000 ROA not before: Thu 01 Jan 2026 22:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200195 IP address blocks: 185.40.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:07:ea:60:b2:37:cf:29:70:6e:94:dd:5e:35:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e1357f573a33f67d82db88272b821ef8eec73ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:3f:96:f2:59:02:82:5f:3c:96:6c:6d:ac: a6:ec:fb:9e:6b:ce:af:e0:88:b3:5b:8e:ed:00:cc: 8a:89:6e:4d:78:44:fc:0e:b0:1f:a9:89:6b:bf:ac: f0:77:7a:6d:87:1d:56:e9:52:d6:8c:a9:ad:8b:49: d6:99:54:d1:3b:e5:a8:d4:98:da:19:1f:7a:8a:11: ef:8f:58:59:77:50:11:f3:90:cf:17:a6:38:10:10: ca:2e:6d:b9:b3:5b:d2:b9:96:9b:65:44:95:f7:94: c8:2c:7e:81:da:de:66:67:3a:22:d5:70:be:16:82: 4e:97:2c:20:f9:99:58:e5:c2:81:e2:00:f6:e3:60: 8f:3a:49:e4:a1:69:51:08:ed:f2:81:e7:9e:6f:a5: 89:04:b5:5d:74:4d:e4:ed:88:8c:ef:49:92:d4:ed: 34:35:6d:25:26:15:f6:82:ef:fe:a3:6c:fb:82:d1: 56:15:c7:c7:39:01:bc:87:68:87:57:ed:c1:09:15: 42:9c:f6:85:ff:cf:21:65:63:60:a8:74:8f:d0:a3: 9f:f0:cd:b2:77:62:9c:9b:6c:30:b8:d9:9d:02:4c: 9e:e6:46:31:6c:eb:c5:db:d4:16:ae:e1:72:45:3d: 93:4a:c8:71:fa:0f:f2:e8:bd:46:12:4b:2e:97:9f: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:57:F5:73:A3:3F:67:D8:2D:B8:82:72:B8:21:EF:8E:EC:73:EA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/PhNX9XOjP2fYLbiCcrgh747sc-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.4.0/24 Signature Algorithm: sha256WithRSAEncryption ae:31:dd:f6:b2:23:81:f3:65:10:99:6e:30:5d:93:f6:70:48: 31:f3:6c:6d:1f:4b:d6:df:a4:51:cf:76:bf:84:04:8a:fa:cf: 7c:36:48:36:ac:e9:26:69:73:68:fe:5b:22:c9:2b:87:a4:34: e6:f8:f2:2d:cf:7b:2d:4a:38:7f:38:a9:6e:a7:f1:0b:12:fc: 29:eb:de:6f:ed:58:8d:dc:9a:3a:92:78:a8:b5:0a:70:f3:67: 66:fc:30:16:a2:8a:fc:42:9a:98:1f:2a:61:ea:18:39:04:8e: 3e:c2:6c:fa:c4:85:1e:dd:ff:49:1e:e0:df:57:70:c9:b0:ec: 8b:27:27:d6:0c:23:a0:c0:2e:2e:bc:1d:1f:71:14:68:ae:06: 6e:ad:05:c1:2d:93:22:4b:be:0c:f2:75:06:b4:ef:24:01:a4: 46:c9:bd:bd:59:f0:71:d6:56:23:5d:22:57:39:dc:c0:74:ba: 30:59:0a:f0:c9:50:37:7c:ef:d2:ab:68:c9:1d:28:c2:bb:4c: f2:bc:aa:3f:e4:82:ae:90:3e:58:d2:f8:43:90:d9:13:00:66: 6c:7e:69:38:56:16:40:67:a4:b4:4d:41:f8:58:32:05:b3:bf: c3:96:ad:b1:b9:09:b9:63:b1:fb:d0:83:2e:2d:e4:93:bc:db: 52:e4:16:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pAfqYLI3zylwbpTdXjWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTEzNTdmNTczYTMzZjY3ZDgyZGI4ODI3MmI4MjFlZjhlZWM3M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVA/lvJZAoJfPJZsbaym7Puea86v 4IizW47tAMyKiW5NeET8DrAfqYlrv6zwd3pthx1W6VLWjKmti0nWmVTRO+Wo1Jja GR96ihHvj1hZd1AR85DPF6Y4EBDKLm25s1vSuZabZUSV95TILH6B2t5mZzoi1XC+ FoJOlywg+ZlY5cKB4gD242CPOknkoWlRCO3ygeeeb6WJBLVddE3k7YiM70mS1O00 NW0lJhX2gu/+o2z7gtFWFcfHOQG8h2iHV+3BCRVCnPaF/88hZWNgqHSP0KOf8M2y d2Kcm2wwuNmdAkye5kYxbOvF29QWruFyRT2TSshx+g/y6L1GEksul5+IVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4TV/Vzoz9n2C24gnK4Ie+O7HPqMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUGhOWDlYT2pQMmZZTGJpQ2NyZ2g3NDdzYy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSgEMA0G CSqGSIb3DQEBCwUAA4IBAQCuMd32siOB82UQmW4wXZP2cEgx82xtH0vW36RRz3a/ hASK+s98Nkg2rOkmaXNo/lsiySuHpDTm+PItz3stSjh/OKlup/ELEvwp695v7ViN 3Jo6kniotQpw82dm/DAWoor8QpqYHyph6hg5BI4+wmz6xIUe3f9JHuDfV3DJsOyL JyfWDCOgwC4uvB0fcRRorgZurQXBLZMiS74M8nUGtO8kAaRGyb29WfBx1lYjXSJX OdzAdLowWQrwyVA3fO/Sq2jJHSjCu0zyvKo/5IKukD5Y0vhDkNkTAGZsfmk4VhZA Z6S0TUH4WDIFs7/Dlq2xuQm5Y7H70IMuLeSTvNtS5BZl -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:50 2026 by rpki-client