This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/PRW-hNh_LQ1tYJtEgFeANrexr4g.roa File: PRW-hNh_LQ1tYJtEgFeANrexr4g.roa (raw, json) Hash identifier: EtDY3iCkv6z8EfmjFrXYO7Uslfyf9DYjVpRw+acf/tw= Subject key identifier: 3D:15:BE:84:D8:7F:2D:0D:6D:60:9B:44:80:57:80:36:B7:B1:AF:88 Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Certificate serial: 019B7834D59761C7A9AC60279B6FF81A722D Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/PRW-hNh_LQ1tYJtEgFeANrexr4g.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.113.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d5:97:61:c7:a9:ac:60:27:9b:6f:f8:1a:72:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d15be84d87f2d0d6d609b4480578036b7b1af88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:6d:a2:99:33:92:69:50:54:69:3d:8f:44: 95:3f:ea:52:dc:29:53:36:38:4e:08:53:30:be:83: fa:56:09:18:47:79:ef:c2:d9:9d:0b:46:1c:ab:73: c6:63:32:c0:ea:9d:46:19:b8:d9:a9:01:45:d4:18: ae:e4:be:d0:8e:1c:eb:d6:a6:b5:61:6b:40:03:2a: 96:7c:a4:49:46:29:de:63:c3:66:23:85:76:97:90: a9:3b:1e:0e:a7:76:03:e4:17:5e:50:a9:c4:05:c6: 95:39:12:5a:55:30:33:80:72:87:72:dc:c4:b6:82: e3:84:11:1a:6c:c1:cf:f8:b7:33:7f:06:f4:fb:50: 4b:e4:2e:2d:9a:90:77:ad:57:3d:3e:48:df:bd:13: e5:72:8b:de:ad:d7:4b:9b:f1:95:a6:ac:06:5a:1b: a6:bb:82:70:23:29:ae:a5:fc:b8:75:34:8c:00:12: 38:ee:1a:ac:8b:15:fc:87:5e:ff:c6:6f:89:28:e2: 29:74:86:bb:49:bb:2b:09:79:c8:00:3d:25:b7:56: 47:12:00:22:52:32:17:62:4a:de:06:22:23:ec:f0: 2d:9d:88:88:2a:3e:dd:fb:19:3b:78:28:b3:ba:c4: 9f:a4:ef:88:cf:3e:15:43:98:ac:8d:4c:42:fc:58: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:BE:84:D8:7F:2D:0D:6D:60:9B:44:80:57:80:36:B7:B1:AF:88 X509v3 Authority Key Identifier: keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/PRW-hNh_LQ1tYJtEgFeANrexr4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.189.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5a:bd:28:39:54:30:8f:0e:c1:a4:90:d2:b2:f4:ba:4b:9f: 75:85:85:a4:77:e0:36:94:6b:17:09:cf:21:45:4f:d5:1f:66: 9a:61:c6:cf:c6:52:42:67:93:3f:27:bc:3d:77:a2:7a:50:78: 5b:c2:10:fa:11:63:6e:ea:01:da:22:14:ab:1c:0e:c2:bd:d9: 7e:fd:1f:e4:73:8e:f5:e2:73:b6:7f:53:c5:c0:98:61:93:35: 30:c3:c5:50:0b:70:21:e5:c8:ad:14:5c:aa:c9:11:6b:27:60: 1d:7b:14:9c:00:13:54:ae:98:b2:da:a9:4a:9c:bc:fb:15:a6: a6:d6:96:57:41:e2:25:e5:99:2c:b2:b1:89:dd:42:a2:4f:23: 58:24:b8:e4:fd:b2:00:ce:e3:02:67:2a:8d:dc:ee:30:60:c0: 34:82:d7:09:48:9f:a4:8f:81:fd:d9:75:f9:0c:73:74:56:21: 3d:c7:c0:f0:a7:2f:2c:6f:68:3c:c5:7b:7b:86:95:f3:c5:c2: d6:fd:71:06:d3:6d:aa:d1:33:81:49:4c:b4:28:8f:69:3a:4f: 9e:50:9b:07:92:ff:59:13:00:6b:90:57:e0:d9:d3:d2:8c:7d: 97:3f:dc:9f:e6:f1:e3:70:7f:cf:a9:41:d4:25:57:a5:15:5e: bf:1c:b0:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNWXYceprGAnm2/4GnItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1 MzFkYjkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDE1YmU4NGQ4N2YyZDBkNmQ2MDliNDQ4MDU3ODAzNmI3YjFhZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXxtopkzkmlQVGk9j0SVP+pS3ClT NjhOCFMwvoP6VgkYR3nvwtmdC0Ycq3PGYzLA6p1GGbjZqQFF1Biu5L7Qjhzr1qa1 YWtAAyqWfKRJRineY8NmI4V2l5CpOx4Op3YD5BdeUKnEBcaVORJaVTAzgHKHctzE toLjhBEabMHP+Lczfwb0+1BL5C4tmpB3rVc9PkjfvRPlcoverddLm/GVpqwGWhum u4JwIymupfy4dTSMABI47hqsixX8h17/xm+JKOIpdIa7SbsrCXnIAD0lt1ZHEgAi UjIXYkreBiIj7PAtnYiIKj7d+xk7eCizusSfpO+Izz4VQ5isjUxC/FiLZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0VvoTYfy0NbWCbRIBXgDa3sa+IMB8GA1UdIwQY MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et OWU5NmFmNmQ2YThmLzEvUFJXLWhOaF9MUTF0WUp0RWdGZUFOcmV4cjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXG9MA0G CSqGSIb3DQEBCwUAA4IBAQBAWr0oOVQwjw7BpJDSsvS6S591hYWkd+A2lGsXCc8h RU/VH2aaYcbPxlJCZ5M/J7w9d6J6UHhbwhD6EWNu6gHaIhSrHA7Cvdl+/R/kc471 4nO2f1PFwJhhkzUww8VQC3Ah5citFFyqyRFrJ2AdexScABNUrpiy2qlKnLz7Faam 1pZXQeIl5ZkssrGJ3UKiTyNYJLjk/bIAzuMCZyqN3O4wYMA0gtcJSJ+kj4H92XX5 DHN0ViE9x8Dwpy8sb2g8xXt7hpXzxcLW/XEG022q0TOBSUy0KI9pOk+eUJsHkv9Z EwBrkFfg2dPSjH2XP9yf5vHjcH/PqUHUJVelFV6/HLCs -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client