This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/PMbYzy537M6FYdAlUz4jkGsPA-I.roa File: PMbYzy537M6FYdAlUz4jkGsPA-I.roa (raw, json) Hash identifier: ajPdaGQfR1aG3NMZPS8OhmT50QrXba1wlnD+tFLuyOs= Subject key identifier: 3C:C6:D8:CF:2E:77:EC:CE:85:61:D0:25:53:3E:23:90:6B:0F:03:E2 Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Certificate serial: 019B7B3595983FE10B54B90255EA40AC488F Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/PMbYzy537M6FYdAlUz4jkGsPA-I.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47624 IP address blocks: 91.206.138.0/24 maxlen: 24 91.206.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:95:98:3f:e1:0b:54:b9:02:55:ea:40:ac:48:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc6d8cf2e77ecce8561d025533e23906b0f03e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:49:69:e3:69:1e:5c:64:5f:d4:d2:35:00: bc:c8:82:40:e7:28:43:11:78:4a:06:6c:b3:4e:9f: c1:17:b9:ff:18:0f:f0:a4:e1:13:2b:f1:5d:a7:c2: 93:2b:cc:fe:f9:43:68:36:9f:a3:43:7c:32:1d:4a: ca:fd:02:24:a4:d7:e2:8a:cf:46:28:8a:de:13:43: 15:fc:17:ad:85:1e:18:bb:82:d5:f9:db:4b:a1:44: 2a:26:fb:0a:fd:70:dc:bd:5e:1e:6c:d9:6f:79:5f: ca:af:42:d1:9f:5c:b1:98:92:43:c0:1b:dd:bc:f8: 6c:21:d9:45:3f:a0:6d:d6:40:33:2c:6f:39:cf:85: d3:42:db:a2:1c:47:e0:3c:04:d2:e2:1f:b7:49:68: 45:11:2d:c7:ed:ad:78:da:ab:ea:17:d0:52:8b:35: a3:c7:16:56:65:39:ef:95:96:d1:5f:f9:fe:d2:a1: c9:5a:db:77:3e:f7:18:03:09:17:5f:96:f4:3f:b8: 5a:e0:10:a9:a0:e9:eb:a3:4a:6b:17:1d:7e:64:33: 5c:32:2a:e4:01:7b:1a:53:0b:6a:b0:08:10:6d:f3: fa:16:36:2b:16:c7:36:b3:30:71:a9:c2:30:a2:fd: 3f:2d:62:fe:e4:b9:ae:bf:a5:40:43:53:8c:50:d8: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:D8:CF:2E:77:EC:CE:85:61:D0:25:53:3E:23:90:6B:0F:03:E2 X509v3 Authority Key Identifier: keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/PMbYzy537M6FYdAlUz4jkGsPA-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.138.0/23 Signature Algorithm: sha256WithRSAEncryption 06:62:18:df:45:75:2f:d7:1e:13:01:bc:47:4c:97:71:9c:c2: 18:f2:65:99:9d:6e:66:cb:e5:07:1a:8b:98:0c:b5:7b:40:8c: c0:5b:ee:a2:fb:c2:ba:19:ba:09:d7:e6:32:da:ff:33:56:44: 90:a1:20:55:9f:85:17:2b:8e:d6:20:d4:5b:b4:1f:39:3d:30: 34:31:ee:63:f5:63:ad:c0:28:b1:a9:cd:70:3d:fc:0d:6a:fa: 18:d3:77:5b:9f:da:29:93:73:52:dc:8d:ed:53:78:a1:eb:66: 0a:6a:92:4c:1b:8c:3e:bd:27:b9:5b:a7:85:68:2d:14:43:07: 3f:12:e9:ed:08:b9:0d:df:ac:42:c1:1b:0b:78:7e:9d:fe:0b: 94:6c:6c:f5:5f:cf:85:cb:a1:5a:79:b8:c7:00:95:5d:59:94: 4c:b7:b0:2d:c3:b3:7a:b6:e1:97:e7:3b:93:d1:ff:ff:ea:c3: ba:47:69:40:e4:75:1c:fa:09:1e:35:71:f9:c2:13:20:97:17: ea:cb:7b:10:ee:61:cd:16:d5:0c:94:bf:09:9c:0c:f1:79:1f: 62:c7:50:1b:d7:c8:ed:4a:c3:00:d0:15:f7:17:1e:c3:f3:4b: 58:ea:b9:2b:54:a0:00:ab:d8:0b:c6:77:75:7e:d1:5d:ed:e7: 58:fe:89:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZWYP+ELVLkCVepArEiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey NTY4MTMwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2M2ZDhjZjJlNzdlY2NlODU2MWQwMjU1MzNlMjM5MDZiMGYwM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNZJaeNpHlxkX9TSNQC8yIJA5yhD EXhKBmyzTp/BF7n/GA/wpOETK/Fdp8KTK8z++UNoNp+jQ3wyHUrK/QIkpNfiis9G KIreE0MV/BethR4Yu4LV+dtLoUQqJvsK/XDcvV4ebNlveV/Kr0LRn1yxmJJDwBvd vPhsIdlFP6Bt1kAzLG85z4XTQtuiHEfgPATS4h+3SWhFES3H7a142qvqF9BSizWj xxZWZTnvlZbRX/n+0qHJWtt3PvcYAwkXX5b0P7ha4BCpoOnro0prFx1+ZDNcMirk AXsaUwtqsAgQbfP6FjYrFsc2szBxqcIwov0/LWL+5Lmuv6VAQ1OMUNizOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzG2M8ud+zOhWHQJVM+I5BrDwPiMB8GA1UdIwQY MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt NjRkMjljODZiZjNlLzEvUE1iWXp5NTM3TTZGWWRBbFV6NGprR3NQQS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW86KMA0G CSqGSIb3DQEBCwUAA4IBAQAGYhjfRXUv1x4TAbxHTJdxnMIY8mWZnW5my+UHGouY DLV7QIzAW+6i+8K6GboJ1+Yy2v8zVkSQoSBVn4UXK47WINRbtB85PTA0Me5j9WOt wCixqc1wPfwNavoY03dbn9opk3NS3I3tU3ih62YKapJMG4w+vSe5W6eFaC0UQwc/ EuntCLkN36xCwRsLeH6d/guUbGz1X8+Fy6FaebjHAJVdWZRMt7Atw7N6tuGX5zuT 0f//6sO6R2lA5HUc+gkeNXH5whMglxfqy3sQ7mHNFtUMlL8JnAzxeR9ix1Ab18jt SsMA0BX3Fx7D80tY6rkrVKAAq9gLxnd1ftFd7edY/onv -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:41 2026 by rpki-client