This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P-m4JeRxKJ8xvO8Q7Po5EOkzT7E.roa File: P-m4JeRxKJ8xvO8Q7Po5EOkzT7E.roa (raw, json) Hash identifier: g6IuUhvsTx0A6O6oSwhkb384npXMhdzn/DuvvVpZKtE= Subject key identifier: 3F:E9:B8:25:E4:71:28:9F:31:BC:EF:10:EC:FA:39:10:E9:33:4F:B1 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E093975A2FAD05E827DB53208A27D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P-m4JeRxKJ8xvO8Q7Po5EOkzT7E.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215068 IP address blocks: 89.35.73.0/24 maxlen: 24 91.132.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:09:39:75:a2:fa:d0:5e:82:7d:b5:32:08:a2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fe9b825e471289f31bcef10ecfa3910e9334fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:2c:55:65:5a:38:ad:bc:eb:33:56:07:34: 04:26:16:c7:4b:da:7b:6d:4f:d8:bf:01:7a:8a:f6: da:eb:29:c4:26:02:ea:b5:40:30:72:45:16:e4:36: 1e:61:54:37:9f:ce:a3:9b:f0:f1:1d:d5:d1:7f:c4: cd:ed:56:16:8a:fb:2d:4d:a9:88:36:dc:2e:7f:3a: 10:47:52:d9:fe:36:fa:f2:09:ca:5f:ae:0e:70:c6: e9:d6:20:55:13:c6:30:bf:75:c6:3c:55:b9:5c:76: d4:ad:59:93:9c:73:04:63:46:ce:63:d0:58:9c:20: cb:23:86:ee:1a:5f:a5:20:57:52:61:62:30:f4:5e: ed:13:d0:8c:62:64:12:a9:15:33:19:5e:06:f8:ff: db:df:46:9f:14:e1:39:a9:54:f0:ed:dc:45:c8:cb: 22:7d:25:9f:92:45:3d:26:e5:d1:9a:62:f4:87:88: 29:d9:ca:a1:e1:e9:e6:93:32:06:bc:47:47:fa:b3: 9f:cb:1a:18:b4:3d:d1:7d:9f:25:3a:d5:7b:7d:3b: a4:4e:a6:f1:ce:c3:8a:9e:be:02:44:e3:58:cd:bf: db:66:99:3a:3b:60:21:6c:2f:4f:9a:2c:f6:26:ae: 5e:5f:d5:3c:75:28:37:66:43:18:4b:f8:8b:2e:8c: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E9:B8:25:E4:71:28:9F:31:BC:EF:10:EC:FA:39:10:E9:33:4F:B1 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/P-m4JeRxKJ8xvO8Q7Po5EOkzT7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.73.0/24 91.132.51.0/24 Signature Algorithm: sha256WithRSAEncryption 31:5d:40:74:76:a9:48:75:3e:2e:0f:26:3e:86:1a:c3:ea:28: 7b:45:dc:82:e5:59:d1:10:25:91:2e:1f:d5:fa:3d:3a:35:3d: 87:21:94:c1:2f:e5:e9:d4:90:1d:30:da:75:3a:e8:0c:09:50: 10:61:18:03:d4:78:59:0a:6c:5c:c6:6c:be:0b:81:76:54:cd: 47:7f:53:7b:99:7e:b0:8a:72:ed:4f:fc:51:ca:b5:ce:37:8c: c2:15:d3:57:8a:2e:d2:81:ae:00:58:3b:a9:db:e9:c2:02:74: 04:96:af:01:dd:82:4b:1f:5d:a7:f7:56:f4:d5:ea:41:7c:f6: ec:ba:3d:b2:b3:7d:bf:45:21:d5:dd:b0:20:35:cc:7a:8f:c5: 78:ca:37:6e:c9:ec:37:12:d1:44:bd:7d:12:ae:83:b9:05:b8: 5c:67:a5:81:ec:a6:2a:6c:8b:5e:03:94:3d:25:56:ec:e0:17: 00:95:01:e9:1f:1c:e4:b8:57:18:32:25:7c:ac:b7:85:ad:ce: c0:52:a5:6a:51:5f:63:4d:99:fc:0c:43:e2:63:8f:28:d2:79: 03:57:23:e6:64:67:cc:b6:da:6a:82:ab:0a:69:6a:8d:8a:89: 96:11:e3:34:3e:85:ef:bb:a4:8c:5e:b6:c7:5f:e2:5f:8a:4e: aa:a1:bf:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fgk5daL60F6CfbUyCKJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmU5YjgyNWU0NzEyODlmMzFiY2VmMTBlY2ZhMzkxMGU5MzM0ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQssVWVaOK286zNWBzQEJhbHS9p7 bU/YvwF6ivba6ynEJgLqtUAwckUW5DYeYVQ3n86jm/DxHdXRf8TN7VYWivstTamI NtwufzoQR1LZ/jb68gnKX64OcMbp1iBVE8Ywv3XGPFW5XHbUrVmTnHMEY0bOY9BY nCDLI4buGl+lIFdSYWIw9F7tE9CMYmQSqRUzGV4G+P/b30afFOE5qVTw7dxFyMsi fSWfkkU9JuXRmmL0h4gp2cqh4enmkzIGvEdH+rOfyxoYtD3RfZ8lOtV7fTukTqbx zsOKnr4CRONYzb/bZpk6O2AhbC9Pmiz2Jq5eX9U8dSg3ZkMYS/iLLow0vQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD/puCXkcSifMbzvEOz6ORDpM0+xMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvUC1tNEplUnhLSjh4dk84UTdQbzVFT2t6VDdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSNJAwQA W4QzMA0GCSqGSIb3DQEBCwUAA4IBAQAxXUB0dqlIdT4uDyY+hhrD6ih7RdyC5VnR ECWRLh/V+j06NT2HIZTBL+Xp1JAdMNp1OugMCVAQYRgD1HhZCmxcxmy+C4F2VM1H f1N7mX6winLtT/xRyrXON4zCFdNXii7Sga4AWDup2+nCAnQElq8B3YJLH12n91b0 1epBfPbsuj2ys32/RSHV3bAgNcx6j8V4yjduyew3EtFEvX0SroO5BbhcZ6WB7KYq bIteA5Q9JVbs4BcAlQHpHxzkuFcYMiV8rLeFrc7AUqVqUV9jTZn8DEPiY48o0nkD VyPmZGfMttpqgqsKaWqNiomWEeM0PoXvu6SMXrbHX+Jfik6qob+w -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client