This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa File: PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa (raw, json) Hash identifier: z9RT/9Jkq4vz3VK737R/u9nIymh4paqLKc/5slB5Igw= Subject key identifier: 3C:74:A1:D9:12:B7:9B:87:69:AA:35:3C:86:4D:61:13:DC:46:AB:32 Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3 Certificate serial: 019B77596FFB83BC018714ED152C670B0DAE Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204811 IP address blocks: 185.239.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6f:fb:83:bc:01:87:14:ed:15:2c:67:0b:0d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929f0769c63883573f2703d766462570af5590f3 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c74a1d912b79b8769aa353c864d6113dc46ab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:ab:34:69:4d:60:61:1c:f0:0a:57:eb:75: 33:63:d0:8b:ef:98:83:c2:48:bd:51:33:e7:58:13: d5:6a:4a:2b:f5:6e:e6:27:4b:13:e0:bb:62:ed:e8: 3e:71:72:76:bd:28:19:46:67:9a:5f:35:10:64:08: 57:5d:1b:07:42:93:b6:76:d5:a2:21:71:1d:9f:86: df:f0:6e:4d:2b:3c:8d:e5:73:cd:6e:5c:46:2e:98: e9:ca:5a:b7:81:3e:e9:04:96:38:26:50:3c:3e:31: 9f:49:18:f1:76:c6:04:bf:9f:d8:5a:4f:76:64:7b: ae:c9:8a:d1:54:ef:e7:04:f9:1c:df:02:ec:51:22: 9d:42:c1:3f:e1:01:70:93:06:10:08:7b:70:ce:b7: 79:99:22:40:6f:32:72:08:17:e3:ee:f1:29:de:1f: 9a:c2:8d:cd:58:ba:f1:e0:47:02:cc:a0:a9:a5:51: 97:ab:7a:81:7e:bd:35:91:5b:f9:3b:4a:79:23:a9: 46:c5:9e:f0:18:6b:f5:30:da:b8:66:4b:1f:d7:ee: 19:5f:21:43:09:9f:ca:e3:da:aa:d9:c9:c5:62:25: 94:61:13:d6:fe:28:24:cd:b3:82:e1:84:b2:78:0b: 1d:52:51:4a:37:08:fc:0b:b0:56:20:33:ea:b8:55: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:74:A1:D9:12:B7:9B:87:69:AA:35:3C:86:4D:61:13:DC:46:AB:32 X509v3 Authority Key Identifier: keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/PHSh2RK3m4dpqjU8hk1hE9xGqzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.72.0/22 Signature Algorithm: sha256WithRSAEncryption 55:b7:1d:b6:23:56:e0:63:ca:41:7c:2d:11:c8:0a:ea:72:2b: ad:78:5e:40:6d:c4:b1:8d:f0:c9:2e:30:32:43:60:34:ed:87: 5b:d6:a4:9e:d5:e4:fe:67:73:12:27:8d:f0:ae:4f:62:b5:34: e8:ff:ab:25:07:67:a5:bf:a2:50:d1:8e:be:fd:b7:1d:cc:3a: 9b:0d:29:44:84:01:5e:40:b1:76:1a:e5:6a:a9:a6:45:a3:c3: c8:c9:d4:8a:ce:af:7e:c2:2a:d1:4a:1c:9c:fe:e4:6a:33:e6: db:ff:07:a8:2e:11:ea:46:62:f6:26:fa:bf:c0:e6:fe:41:d2: 64:ac:a0:ee:c1:ea:ef:d4:25:bf:42:1c:bd:5b:86:ad:9f:5b: ea:e0:24:8e:ab:c5:52:f0:24:2a:f7:57:59:1d:f9:83:5a:4c: 71:ce:a2:e4:f5:d0:49:ab:40:df:ab:00:31:ee:a6:12:1b:86: ef:25:68:03:80:32:8e:f4:ff:5d:c2:96:dc:62:ef:c8:ed:da: b1:3d:68:98:b2:f7:0a:c0:03:a6:1e:c9:d0:de:b5:34:cf:dc: 96:1e:06:2b:93:a3:d9:4c:ff:8c:37:96:16:5d:40:7b:b9:77: 0e:9a:40:0d:6b:a9:4d:20:62:86:c0:8c:de:a7:ea:b2:e3:56: 80:0a:64:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW/7g7wBhxTtFSxnCw2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOWYwNzY5YzYzODgzNTczZjI3MDNkNzY2NDYyNTcwYWY1 NTkwZjMwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzc0YTFkOTEyYjc5Yjg3NjlhYTM1M2M4NjRkNjExM2RjNDZhYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxSrNGlNYGEc8ApX63UzY9CL75iD wki9UTPnWBPVakor9W7mJ0sT4Lti7eg+cXJ2vSgZRmeaXzUQZAhXXRsHQpO2dtWi IXEdn4bf8G5NKzyN5XPNblxGLpjpylq3gT7pBJY4JlA8PjGfSRjxdsYEv5/YWk92 ZHuuyYrRVO/nBPkc3wLsUSKdQsE/4QFwkwYQCHtwzrd5mSJAbzJyCBfj7vEp3h+a wo3NWLrx4EcCzKCppVGXq3qBfr01kVv5O0p5I6lGxZ7wGGv1MNq4Zksf1+4ZXyFD CZ/K49qq2cnFYiWUYRPW/igkzbOC4YSyeAsdUlFKNwj8C7BWIDPquFWJ7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDx0odkSt5uHaao1PIZNYRPcRqsyMB8GA1UdIwQY MBaAFJKfB2nGOINXPycD12ZGJXCvVZDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGIt NWQ4MDY5YzRhNjU3LzEvUEhTaDJSSzNtNGRwcWpVOGhrMWhFOXhHcXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGItNWQ4MDY5YzRhNjU3 LzEva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue9IMA0G CSqGSIb3DQEBCwUAA4IBAQBVtx22I1bgY8pBfC0RyArqciuteF5AbcSxjfDJLjAy Q2A07Ydb1qSe1eT+Z3MSJ43wrk9itTTo/6slB2elv6JQ0Y6+/bcdzDqbDSlEhAFe QLF2GuVqqaZFo8PIydSKzq9+wirRShyc/uRqM+bb/weoLhHqRmL2Jvq/wOb+QdJk rKDuwerv1CW/Qhy9W4atn1vq4CSOq8VS8CQq91dZHfmDWkxxzqLk9dBJq0DfqwAx 7qYSG4bvJWgDgDKO9P9dwpbcYu/I7dqxPWiYsvcKwAOmHsnQ3rU0z9yWHgYrk6PZ TP+MN5YWXUB7uXcOmkANa6lNIGKGwIzep+qy41aACmTK -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:39 2026 by rpki-client