This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/PsWp9xa53jWoAHdPeTK2Ik_zisE.roa File: PsWp9xa53jWoAHdPeTK2Ik_zisE.roa (raw, json) Hash identifier: FqYGJ8eq8LBylqBU2znfr/5XrCV20Sm8u8t86Ik5QN8= Subject key identifier: 3E:C5:A9:F7:16:B9:DE:35:A8:00:77:4F:79:32:B6:22:4F:F3:8A:C1 Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Certificate serial: 019B7C11C9F51544EBEA6BB9731096BE31BC Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/PsWp9xa53jWoAHdPeTK2Ik_zisE.roa Signing time: Fri 02 Jan 2026 00:18:19 +0000 ROA not before: Fri 02 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202777 IP address blocks: 185.235.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c9:f5:15:44:eb:ea:6b:b9:73:10:96:be:31:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Validity Not Before: Jan 2 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ec5a9f716b9de35a800774f7932b6224ff38ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:88:a1:64:42:ad:1c:d2:14:b8:1d:f0:b4: 7a:3b:ea:c0:18:17:62:02:47:40:f1:c1:cc:61:ac: d6:bf:98:95:49:03:60:f5:f9:11:ef:da:f5:86:74: cc:d8:d6:53:2d:72:4e:b1:da:d6:d0:26:10:99:a9: ab:63:37:94:75:33:0f:9f:0b:b3:a0:15:fb:21:4b: 51:c7:42:db:ef:a6:64:1c:b4:1b:ed:92:d3:d5:16: 1d:53:64:27:ff:a8:bb:da:19:60:dc:46:8c:45:97: d2:5d:0e:62:a8:0f:67:ab:88:59:e7:87:1b:6b:6d: 04:19:00:d5:84:2a:89:95:53:00:84:ab:7c:1b:12: ba:69:53:21:2f:91:84:0a:80:1f:19:f3:0e:97:c3: 58:36:bb:02:81:1d:51:04:9a:9b:2a:20:95:23:2a: 70:d1:09:09:e8:32:be:1c:52:52:ed:71:37:e3:b8: e1:37:d7:1f:81:3b:50:ee:7b:71:fb:08:b1:b6:84: cb:8d:a6:6a:df:cf:7b:38:3b:26:61:24:f4:65:8d: a6:a6:05:12:84:d4:5a:c8:5b:0e:16:45:0a:c0:85: f7:c4:fd:08:38:0e:b9:c7:90:ce:06:ee:92:52:20: 38:c1:06:24:dd:60:ba:5f:3d:cd:ba:54:04:20:c6: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C5:A9:F7:16:B9:DE:35:A8:00:77:4F:79:32:B6:22:4F:F3:8A:C1 X509v3 Authority Key Identifier: keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/PsWp9xa53jWoAHdPeTK2Ik_zisE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.141.0/24 Signature Algorithm: sha256WithRSAEncryption c9:be:21:da:1c:95:6c:67:0b:45:51:10:ba:41:ca:ec:f2:c9: d8:ad:c1:df:34:c2:dd:f8:1a:f3:b7:cb:f7:94:05:88:e9:92: 8a:45:8f:bd:cc:bc:9f:a6:56:95:2c:21:26:c7:75:32:3b:86: a7:af:d6:9d:92:fc:3f:1a:6d:bf:8b:e7:46:1f:b5:42:e3:4b: 96:60:8b:99:17:62:3d:bf:15:f3:e1:45:23:ec:61:a1:e4:7f: 18:4e:5e:8c:b6:95:97:a5:89:62:a8:51:97:4f:b8:aa:5c:26: c0:90:03:c1:ec:fd:bf:e3:aa:51:a6:19:ea:0b:00:c5:0b:bb: 6a:84:0c:98:ac:b2:14:62:c3:7b:61:ed:da:0b:8a:58:14:27: 30:ab:73:82:7d:c3:34:a1:c6:3e:32:eb:4d:3b:8b:14:21:61: 2f:5c:95:bc:d7:64:d9:95:85:bd:5e:d9:22:b9:f0:e2:c0:19: 09:98:c5:de:b2:4f:66:4d:74:e4:03:38:39:d0:ab:0b:83:ae: c9:68:58:40:76:b3:6d:54:86:8f:d1:32:05:49:13:a5:c5:00: 3b:e4:5e:91:45:f9:b0:bb:71:78:78:ca:f0:50:e2:99:28:29: 30:df:7d:82:fc:31:5d:21:98:e1:69:e1:c8:8c:e7:e6:38:8a: 6c:1b:21:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ecn1FUTr6mu5cxCWvjG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk ZWRmOGMwHhcNMjYwMTAyMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWM1YTlmNzE2YjlkZTM1YTgwMDc3NGY3OTMyYjYyMjRmZjM4YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjneIoWRCrRzSFLgd8LR6O+rAGBdi AkdA8cHMYazWv5iVSQNg9fkR79r1hnTM2NZTLXJOsdrW0CYQmamrYzeUdTMPnwuz oBX7IUtRx0Lb76ZkHLQb7ZLT1RYdU2Qn/6i72hlg3EaMRZfSXQ5iqA9nq4hZ54cb a20EGQDVhCqJlVMAhKt8GxK6aVMhL5GECoAfGfMOl8NYNrsCgR1RBJqbKiCVIypw 0QkJ6DK+HFJS7XE347jhN9cfgTtQ7ntx+wixtoTLjaZq3897ODsmYST0ZY2mpgUS hNRayFsOFkUKwIX3xP0IOA65x5DOBu6SUiA4wQYk3WC6Xz3NulQEIMYyhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7FqfcWud41qAB3T3kytiJP84rBMB8GA1UdIwQY MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt NzIyNmE4ODQ1ZTAxLzEvUHNXcDl4YTUzaldvQUhkUGVUSzJJa196aXNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueuNMA0G CSqGSIb3DQEBCwUAA4IBAQDJviHaHJVsZwtFURC6Qcrs8snYrcHfNMLd+Brzt8v3 lAWI6ZKKRY+9zLyfplaVLCEmx3UyO4anr9adkvw/Gm2/i+dGH7VC40uWYIuZF2I9 vxXz4UUj7GGh5H8YTl6MtpWXpYliqFGXT7iqXCbAkAPB7P2/46pRphnqCwDFC7tq hAyYrLIUYsN7Ye3aC4pYFCcwq3OCfcM0ocY+MutNO4sUIWEvXJW812TZlYW9Xtki ufDiwBkJmMXesk9mTXTkAzg50KsLg67JaFhAdrNtVIaP0TIFSROlxQA75F6RRfmw u3F4eMrwUOKZKCkw332C/DFdIZjhaeHIjOfmOIpsGyH1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:49 2026 by rpki-client