This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa File: P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa (raw, json) Hash identifier: 3tOX45ZYiLFtcCM+7LWZEAit3POwqgmH66Hrj3e5Vfs= Subject key identifier: 3F:46:4D:C4:B9:35:B1:D1:02:81:D8:B5:4E:6F:B9:06:2E:18:16:A3 Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc Certificate serial: 019B7C1271A91A01AF0DD85824918A96B20A Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202293 IP address blocks: 88.151.118.0/24 maxlen: 24 91.229.148.0/22 maxlen: 22 91.229.148.0/24 maxlen: 24 91.229.149.0/24 maxlen: 24 91.229.150.0/24 maxlen: 24 91.229.151.0/24 maxlen: 24 195.245.96.0/22 maxlen: 22 195.245.96.0/24 maxlen: 24 195.245.97.0/24 maxlen: 24 195.245.98.0/24 maxlen: 24 195.245.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:71:a9:1a:01:af:0d:d8:58:24:91:8a:96:b2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f464dc4b935b1d10281d8b54e6fb9062e1816a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:46:b0:58:e7:6c:8e:ca:f7:0d:f8:f0:24: 81:1e:eb:ca:75:5c:b0:84:b0:65:43:eb:9e:72:3d: 66:2b:3f:c7:d6:a4:53:fe:62:c6:14:92:4b:a1:53: db:8d:9c:ae:80:e7:22:fd:d7:60:de:64:ff:de:56: 2d:38:cb:14:68:e2:17:f9:ed:d2:8a:86:5a:c2:c8: ca:ee:77:48:40:58:02:38:52:84:dc:7a:23:a2:e8: 2d:e3:b4:7f:41:d6:32:01:c3:9b:af:fe:79:4b:5d: d5:cd:58:62:21:0f:2f:c8:0c:b1:05:e9:fa:25:8d: 91:c3:b6:ad:a0:40:4f:8c:c5:79:26:de:b8:0a:84: 8d:e9:6b:83:96:d9:4e:2e:7e:d8:53:24:cc:20:e6: 97:c6:92:c2:00:29:43:c1:4a:c5:1e:eb:06:6f:df: c9:e2:24:0c:9f:fc:0f:ae:a5:34:bc:e3:ce:cb:09: 75:43:33:59:a2:84:8b:02:c5:ff:76:1f:4e:e4:da: fd:db:82:02:3c:80:93:74:40:c4:e2:e3:8d:a9:bf: 97:a1:dc:49:a0:c5:9c:0a:32:51:7c:ee:ef:00:4a: c0:1f:49:9e:c1:d3:af:3a:33:c6:87:ba:59:57:4a: 42:be:22:ee:d0:5b:25:46:31:8f:ee:c1:14:88:9f: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:4D:C4:B9:35:B1:D1:02:81:D8:B5:4E:6F:B9:06:2E:18:16:A3 X509v3 Authority Key Identifier: keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.118.0/24 91.229.148.0/22 195.245.96.0/22 Signature Algorithm: sha256WithRSAEncryption 95:8f:38:3b:1e:bd:b5:52:fb:3a:86:72:fe:bd:03:f1:10:02: a8:55:cc:d7:c3:f5:39:5b:6b:d4:82:04:01:5f:41:20:ea:f0: f9:60:28:ff:ee:47:8a:88:ba:93:aa:7b:b3:1d:2f:db:ad:f7: da:79:48:a7:7d:21:a6:ab:b7:61:dd:92:7b:4a:ef:85:58:48: 47:01:b6:16:c8:2e:25:1d:35:da:88:63:29:f2:23:fc:fb:3a: 4c:a2:c2:ec:0f:f6:9d:95:7e:55:39:7a:f6:e4:aa:87:fd:dd: 5a:55:fb:11:13:38:b2:b9:60:03:45:a4:3d:8c:42:e2:6c:31: 80:6b:74:a0:9b:80:0d:99:b1:31:c8:1e:1d:b7:be:61:7d:fd: 8b:69:a4:fa:41:7c:8e:1d:85:0d:c0:ae:cf:c8:07:63:21:6a: c1:fd:9b:46:6b:fe:f6:2d:97:cf:de:71:0c:68:7e:7a:c3:e9: da:a7:0d:7a:38:8c:08:de:3d:52:b9:3f:d6:87:f3:39:53:e8: a1:71:9b:c0:9e:32:7c:74:c7:46:ee:f8:4c:8a:69:e7:3b:6d: 13:0f:2b:c5:90:7a:44:e2:17:19:24:46:15:32:48:de:21:ab: e9:0c:bc:5a:89:06:2c:76:9a:6c:06:1f:dc:8a:e5:8e:f2:d2: 89:81:9f:94 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EnGpGgGvDdhYJJGKlrIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2RhMjMwOTY3Y2ZmMmVkZTIxNzdmMmQzMzJhZjBhY2I3 ZTUwYmMwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjQ2NGRjNGI5MzViMWQxMDI4MWQ4YjU0ZTZmYjkwNjJlMTgxNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE9GsFjnbI7K9w348CSBHuvKdVyw hLBlQ+uecj1mKz/H1qRT/mLGFJJLoVPbjZyugOci/ddg3mT/3lYtOMsUaOIX+e3S ioZawsjK7ndIQFgCOFKE3Hojougt47R/QdYyAcObr/55S13VzVhiIQ8vyAyxBen6 JY2Rw7atoEBPjMV5Jt64CoSN6WuDltlOLn7YUyTMIOaXxpLCAClDwUrFHusGb9/J 4iQMn/wPrqU0vOPOywl1QzNZooSLAsX/dh9O5Nr924ICPICTdEDE4uONqb+XodxJ oMWcCjJRfO7vAErAH0mewdOvOjPGh7pZV0pCviLu0FslRjGP7sEUiJ+l+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD9GTcS5NbHRAoHYtU5vuQYuGBajMB8GA1UdIwQY MBaAFEvNojCWfP8u3iF38tMyrwrLflC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzgyaU1KWjhfeTdlSVhmeTB6S3ZDc3QtVUx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZTU1NzItYTg0YS00YzlmLTljYjEt ZmUwYTFkMDBiMjA5LzEvUDBaTnhMazFzZEVDZ2RpMVRtLTVCaTRZRnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80ZTU1NzItYTg0YS00YzlmLTljYjEtZmUwYTFkMDBiMjA5 LzEvUzgyaU1KWjhfeTdlSVhmeTB6S3ZDc3QtVUx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWJd2AwQC W+WUAwQCw/VgMA0GCSqGSIb3DQEBCwUAA4IBAQCVjzg7Hr21Uvs6hnL+vQPxEAKo VczXw/U5W2vUggQBX0Eg6vD5YCj/7keKiLqTqnuzHS/brffaeUinfSGmq7dh3ZJ7 Su+FWEhHAbYWyC4lHTXaiGMp8iP8+zpMosLsD/adlX5VOXr25KqH/d1aVfsREziy uWADRaQ9jELibDGAa3Sgm4ANmbExyB4dt75hff2LaaT6QXyOHYUNwK7PyAdjIWrB /ZtGa/72LZfP3nEMaH56w+napw16OIwI3j1SuT/Wh/M5U+ihcZvAnjJ8dMdG7vhM imnnO20TDyvFkHpE4hcZJEYVMkjeIavpDLxaiQYsdppsBh/ciuWO8tKJgZ+U -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:07 2026 by rpki-client