This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/pm79H7mwduu7mnhDJctsn-uYWPE.roa File: pm79H7mwduu7mnhDJctsn-uYWPE.roa (raw, json) Hash identifier: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs= Subject key identifier: A6:6E:FD:1F:B9:B0:76:EB:BB:9A:78:43:25:CB:6C:9F:EB:98:58:F1 Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Certificate serial: 019B7C8041A57FA287C8BEB29FE216AF5060 Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/pm79H7mwduu7mnhDJctsn-uYWPE.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 37002 IP address blocks: 185.165.32.0/22 maxlen: 24 185.165.32.0/24 maxlen: 24 185.165.33.0/24 maxlen: 24 185.165.34.0/24 maxlen: 24 185.165.35.0/24 maxlen: 24 2a0b:dc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:a5:7f:a2:87:c8:be:b2:9f:e2:16:af:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a66efd1fb9b076ebbb9a784325cb6c9feb9858f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:56:c9:df:cb:6c:ed:02:f6:be:2d:06:79: 21:28:1b:d3:74:d1:67:77:96:9a:2a:05:41:45:a7: ea:8b:4e:b5:db:21:c8:27:6c:7d:6a:a7:49:b0:1b: 63:82:f0:21:82:80:55:a7:db:e6:de:e5:63:f0:ac: 95:c3:0a:5e:51:5b:a3:3d:b8:33:55:4b:f9:44:43: 6e:7c:14:f1:7c:bc:2e:38:fe:36:eb:2b:ea:10:54: 0f:dc:7c:46:8b:c6:25:a4:b4:10:38:e5:6e:b9:42: 54:23:a1:24:4d:c0:54:5e:6e:93:25:8b:04:b5:9c: 08:32:51:7e:60:0f:21:0c:c3:84:64:2e:fd:d7:d3: ec:19:60:67:43:48:aa:f8:2c:a3:ec:a6:f6:c5:7d: f8:8f:12:38:7d:de:2e:34:00:88:43:61:b1:b1:36: 06:b5:9b:ff:4f:ff:e1:05:f2:93:2e:cc:f1:b0:c1: 01:a6:1e:33:7f:76:1b:29:88:33:cb:de:63:f2:bd: 4d:09:08:a1:67:ce:d6:53:8b:be:64:8d:9e:db:3b: c6:0e:c5:62:d8:6a:f9:94:02:44:48:3d:2d:cd:fe: 05:fc:04:36:c2:6a:71:dc:d3:d7:39:1e:3d:80:64: 89:10:91:da:4c:7a:76:81:ce:70:aa:a6:13:f3:6f: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6E:FD:1F:B9:B0:76:EB:BB:9A:78:43:25:CB:6C:9F:EB:98:58:F1 X509v3 Authority Key Identifier: keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/pm79H7mwduu7mnhDJctsn-uYWPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.32.0/22 IPv6: 2a0b:dc00::/29 Signature Algorithm: sha256WithRSAEncryption 27:3c:e8:cf:11:4d:66:33:96:f9:bb:89:c1:a9:0a:10:e8:4a: ec:97:54:8f:1a:2c:b3:75:22:66:66:64:ee:94:f8:32:d3:ad: 81:5d:60:17:4c:d3:c1:44:70:f2:6a:4d:62:17:2f:05:96:56: a7:74:ac:1b:e6:8a:f3:bf:d5:ab:61:d7:20:0b:80:9e:34:61: 88:b4:52:0d:51:d5:49:82:51:de:18:db:89:8e:46:5a:b6:dc: c3:9b:38:83:56:71:64:ee:7b:20:6e:29:3e:e2:9f:da:92:72: e9:55:26:6f:a0:88:34:c3:b4:26:1f:16:8c:89:b8:ce:19:9f: 7d:78:c1:1c:3a:da:ad:df:8e:c1:eb:a7:d7:69:e3:52:01:66: 94:9a:33:b0:b7:a2:be:7a:70:86:60:54:6f:b5:ad:0f:f2:c2: 4d:8e:8b:d1:2a:6d:4d:ad:3a:83:6f:b7:ea:58:9d:02:3d:fb: c8:d1:94:f2:30:77:f1:b9:19:e4:2a:6a:a4:38:79:59:4c:34: 1f:a4:45:35:c9:ba:3a:04:85:84:98:64:7e:f3:5c:fe:83:3c: 74:f2:43:b2:f2:3e:f2:a5:3a:5d:fe:a5:11:6d:2e:7f:8f:36: d6:ad:88:48:3c:2c:e4:9e:db:de:80:e0:3e:51:a2:61:43:f7: 84:24:ed:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gEGlf6KHyL6yn+IWr1BgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0 YzRiMWEwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjZlZmQxZmI5YjA3NmViYmI5YTc4NDMyNWNiNmM5ZmViOTg1OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYZWyd/LbO0C9r4tBnkhKBvTdNFn d5aaKgVBRafqi0612yHIJ2x9aqdJsBtjgvAhgoBVp9vm3uVj8KyVwwpeUVujPbgz VUv5RENufBTxfLwuOP426yvqEFQP3HxGi8YlpLQQOOVuuUJUI6EkTcBUXm6TJYsE tZwIMlF+YA8hDMOEZC7919PsGWBnQ0iq+Cyj7Kb2xX34jxI4fd4uNACIQ2GxsTYG tZv/T//hBfKTLszxsMEBph4zf3YbKYgzy95j8r1NCQihZ87WU4u+ZI2e2zvGDsVi 2Gr5lAJESD0tzf4F/AQ2wmpx3NPXOR49gGSJEJHaTHp2gc5wqqYT82/D2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKZu/R+5sHbru5p4QyXLbJ/rmFjxMB8GA1UdIwQY MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct ZTBkYzE4ZTg4MjI5LzEvcG03OUg3bXdkdXU3bW5oREpjdHNuLXVZV1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5 LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaUgMA0E AgACMAcDBQMqC9wAMA0GCSqGSIb3DQEBCwUAA4IBAQAnPOjPEU1mM5b5u4nBqQoQ 6Ersl1SPGiyzdSJmZmTulPgy062BXWAXTNPBRHDyak1iFy8FllandKwb5orzv9Wr YdcgC4CeNGGItFINUdVJglHeGNuJjkZattzDmziDVnFk7nsgbik+4p/aknLpVSZv oIg0w7QmHxaMibjOGZ99eMEcOtqt347B66fXaeNSAWaUmjOwt6K+enCGYFRvta0P 8sJNjovRKm1NrTqDb7fqWJ0CPfvI0ZTyMHfxuRnkKmqkOHlZTDQfpEU1ybo6BIWE mGR+81z+gzx08kOy8j7ypTpd/qURbS5/jzbWrYhIPCzkntvegOA+UaJhQ/eEJO2M -----END CERTIFICATE-----Generated at Sat Feb 7 04:30:36 2026 by rpki-client