This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa File: P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa (raw, json) Hash identifier: 94bU66dX6J/YU6mZi7lnaxiIrZDpbyRdxL2MOQ0QKYQ= Subject key identifier: 3F:72:3E:92:63:CD:E8:0B:81:F6:B8:FF:AC:5F:01:9C:68:1D:BB:E1 Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd Certificate serial: 019B7EA47349716C5C2CF8B40980CEF13CFA Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa Signing time: Fri 02 Jan 2026 12:17:45 +0000 ROA not before: Fri 02 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39766 IP address blocks: 89.185.192.0/19 maxlen: 19 185.14.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:73:49:71:6c:5c:2c:f8:b4:09:80:ce:f1:3c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd Validity Not Before: Jan 2 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f723e9263cde80b81f6b8ffac5f019c681dbbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:5d:dc:b2:1f:94:b8:6b:73:de:57:13:b2: 83:62:c1:b9:68:10:6a:54:7c:43:19:a9:00:00:e6: da:9c:18:bd:0f:14:d9:c8:08:fe:57:3b:25:19:cb: 10:c4:f4:02:b2:5d:da:7b:81:59:d7:ad:52:5e:41: e5:46:b7:cc:0a:f0:fe:f0:8f:4f:7d:e1:fe:a3:76: 9b:9a:3b:1f:0c:0e:67:89:47:fa:bf:63:d1:b7:ba: 3f:37:09:80:54:83:d9:a8:5e:2e:4c:0d:7a:1d:21: 14:bf:94:cd:ab:dc:ad:f5:44:2c:c9:17:9f:e6:40: e2:d4:dd:87:3d:44:26:82:ee:ad:f5:f7:73:5b:2e: 9d:a9:6b:5b:43:07:bb:96:b0:a2:7e:67:b6:6d:9a: 35:c2:9d:88:a9:26:d8:3e:ad:ae:55:0c:f5:02:84: b3:fd:16:ca:48:d5:8c:54:1a:65:c0:f3:24:c8:fa: b0:66:ec:f1:c4:3c:02:7d:7b:c2:7e:b6:ae:0d:01: 5c:e6:1a:c4:2e:2f:3e:73:52:45:b8:8d:b3:7d:db: d2:64:32:73:44:59:c0:d1:0c:1e:b4:6e:3c:8d:b3: 5b:05:7c:ed:af:5c:f6:6f:32:f6:c8:49:5c:4b:5f: ff:e5:d4:d0:b8:32:58:bc:56:5f:2a:79:b8:82:ca: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:72:3E:92:63:CD:E8:0B:81:F6:B8:FF:AC:5F:01:9C:68:1D:BB:E1 X509v3 Authority Key Identifier: keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.192.0/19 185.14.204.0/22 Signature Algorithm: sha256WithRSAEncryption 44:1f:ea:49:3f:5e:f1:84:31:45:a7:d9:9e:de:5a:dc:da:9c: 64:c8:0e:78:bb:87:02:a1:8c:a6:d2:40:53:b5:33:c2:69:da: 45:d5:35:7d:fd:76:ee:48:16:05:90:63:de:8d:38:06:35:2d: 01:52:ea:31:1d:01:0f:c5:54:c9:15:66:28:3e:18:a0:5c:06: 92:67:f2:bd:16:20:1a:17:7c:e8:33:40:27:ee:27:35:18:0c: e5:8a:72:ae:1d:1a:96:75:e6:80:b7:11:2d:ce:54:42:00:e1: 0c:c6:50:d2:23:b4:42:0e:fe:01:0c:04:43:77:b9:4a:2a:dd: 0d:43:03:08:75:6f:ee:b4:6e:31:26:ee:b3:cd:d6:c0:9d:d9: 37:53:5a:0a:c0:17:5c:1f:58:4c:ce:c4:1d:e2:31:dd:ea:44: eb:d6:9e:b8:bf:65:fb:b1:c4:a3:98:c7:bd:24:30:b9:f5:0f: f2:b2:c2:d5:ad:8c:ad:e4:37:b4:12:77:6e:03:f6:35:eb:ab: 54:9a:30:5a:b4:0a:45:ad:7d:7b:82:02:50:79:f6:79:be:fd: dc:8e:ef:63:da:43:33:78:b0:db:a0:70:7b:ef:ab:b8:2f:2b: 6c:40:a2:ae:c8:1d:ca:3a:09:59:1e:1f:8f:e0:b4:32:d1:e9: 03:3b:85:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pHNJcWxcLPi0CYDO8Tz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTc2ZTczNzAzOWE2OTg2NzJmZTk1MjRhZGQzMzdkMWZm NTJjZmQwHhcNMjYwMTAyMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjcyM2U5MjYzY2RlODBiODFmNmI4ZmZhYzVmMDE5YzY4MWRiYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJld3LIflLhrc95XE7KDYsG5aBBq VHxDGakAAObanBi9DxTZyAj+VzslGcsQxPQCsl3ae4FZ161SXkHlRrfMCvD+8I9P feH+o3abmjsfDA5niUf6v2PRt7o/NwmAVIPZqF4uTA16HSEUv5TNq9yt9UQsyRef 5kDi1N2HPUQmgu6t9fdzWy6dqWtbQwe7lrCifme2bZo1wp2IqSbYPq2uVQz1AoSz /RbKSNWMVBplwPMkyPqwZuzxxDwCfXvCfrauDQFc5hrELi8+c1JFuI2zfdvSZDJz RFnA0QwetG48jbNbBXztr1z2bzL2yElcS1//5dTQuDJYvFZfKnm4gsogCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9yPpJjzegLgfa4/6xfAZxoHbvhMB8GA1UdIwQY MBaAFHaXbnNwOaaYZy/pUkrdM30f9Sz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBkdWMzQTVwcGhuTC1sU1N0MHpmUl8xTFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NzcxYzUtMjZmNi00YzdkLTk4NTEt ZjUxODllYjEzYTE3LzEvUDNJLWttUE42QXVCOXJqX3JGOEJuR2dkdS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80NzcxYzUtMjZmNi00YzdkLTk4NTEtZjUxODllYjEzYTE3 LzEvZHBkdWMzQTVwcGhuTC1sU1N0MHpmUl8xTFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFWbnAAwQC uQ7MMA0GCSqGSIb3DQEBCwUAA4IBAQBEH+pJP17xhDFFp9me3lrc2pxkyA54u4cC oYym0kBTtTPCadpF1TV9/XbuSBYFkGPejTgGNS0BUuoxHQEPxVTJFWYoPhigXAaS Z/K9FiAaF3zoM0An7ic1GAzlinKuHRqWdeaAtxEtzlRCAOEMxlDSI7RCDv4BDARD d7lKKt0NQwMIdW/utG4xJu6zzdbAndk3U1oKwBdcH1hMzsQd4jHd6kTr1p64v2X7 scSjmMe9JDC59Q/yssLVrYyt5De0EnduA/Y166tUmjBatApFrX17ggJQefZ5vv3c ju9j2kMzeLDboHB776u4LytsQKKuyB3KOglZHh+P4LQy0ekDO4UY -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:46 2026 by rpki-client