This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/_PtHvW2RJJdVLwdw4tkeOOXKuZg.roa File: _PtHvW2RJJdVLwdw4tkeOOXKuZg.roa (raw, json) Hash identifier: umc/jSpScOWcBT/+2vljs6mhq1ooAAa3Yj5G5OElkwE= Subject key identifier: FC:FB:47:BD:6D:91:24:97:55:2F:07:70:E2:D9:1E:38:E5:CA:B9:98 Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44 Certificate serial: 019B7F1425DFA22E1E0EDC95F02D039C5988 Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/_PtHvW2RJJdVLwdw4tkeOOXKuZg.roa Signing time: Fri 02 Jan 2026 14:19:45 +0000 ROA not before: Fri 02 Jan 2026 14:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12459 IP address blocks: 185.54.161.0/24 maxlen: 24 185.119.89.0/24 maxlen: 24 185.119.90.0/24 maxlen: 24 2a0c:bf80:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:25:df:a2:2e:1e:0e:dc:95:f0:2d:03:9c:59:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44 Validity Not Before: Jan 2 14:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcfb47bd6d912497552f0770e2d91e38e5cab998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:a6:41:be:24:d1:13:d6:16:6c:a2:8b:de: 1d:25:5e:91:dd:df:4e:16:6e:39:09:4d:92:22:59: d3:fe:34:3d:ea:b7:ab:f4:a4:21:13:d2:50:97:43: cd:96:88:4c:96:fd:a5:ac:e0:fb:15:fd:6e:74:25: d0:68:93:c8:2f:90:c2:c5:70:c5:41:b3:99:13:cc: 33:3e:dd:21:8f:b8:75:dc:c9:b5:aa:6c:a4:1d:3a: 19:0f:78:19:e5:92:2f:48:94:f1:0e:2d:5e:4d:71: a1:51:f0:08:e1:db:e3:88:be:c9:9c:3a:e8:cc:ac: 52:44:1d:22:9c:1b:c8:a4:1d:21:e0:23:29:7c:fe: 7b:68:6a:f2:21:41:16:75:b8:b3:fd:ee:58:80:c0: 76:e8:06:6d:70:bf:7a:eb:2e:e6:c5:c2:f1:e9:88: 15:0e:60:9d:2f:ea:f1:b4:99:73:c6:84:ed:f4:4d: 57:2c:58:2e:ef:37:06:4c:90:62:54:79:c9:d5:ce: 71:15:c9:56:8b:fc:a3:fd:7c:fa:14:94:16:b1:a6: 0c:66:d3:b6:62:36:79:ec:e6:e9:d5:6d:59:1b:03: cf:83:81:bd:84:cf:e1:b4:ee:2f:b6:eb:4b:3e:6b: 35:45:12:8d:40:e9:e1:54:1d:bb:0e:46:22:32:74: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FB:47:BD:6D:91:24:97:55:2F:07:70:E2:D9:1E:38:E5:CA:B9:98 X509v3 Authority Key Identifier: keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/_PtHvW2RJJdVLwdw4tkeOOXKuZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.161.0/24 185.119.89.0-185.119.90.255 IPv6: 2a0c:bf80:5a::/48 Signature Algorithm: sha256WithRSAEncryption 05:67:83:dd:32:0b:cf:55:28:65:05:71:c7:a6:0c:68:9b:2c: 82:c6:bf:fa:f3:6c:08:28:8b:3f:e8:da:b7:9c:c3:d4:2b:a9: cb:61:44:4a:c5:e9:f0:4d:4f:1e:c6:da:51:f0:63:f6:f3:40: 79:84:43:9c:13:32:ba:69:c4:a2:7d:9e:75:d2:7f:06:7b:c3: be:71:89:b3:cb:2b:2c:c8:ca:c0:86:f9:87:b4:94:99:07:5c: 60:a2:8f:cd:57:51:18:e8:21:9d:90:0d:aa:9b:3f:2b:b8:73: e3:2f:98:ef:4f:ed:19:fa:dd:69:a3:54:8f:b7:b4:83:8d:1d: 9a:6e:5a:1f:bc:5f:53:a9:25:88:17:1f:b2:7c:04:b7:6c:0c: 67:3c:63:d3:08:1e:38:3a:19:c9:78:f4:fa:b0:f3:54:e7:50: 1d:40:0f:e5:a6:7b:cd:51:20:0f:76:c8:eb:bd:fd:45:6a:4e: 6e:25:a7:93:72:37:ea:a2:4e:1a:7f:31:f8:b1:f5:c8:75:99: 06:66:b2:2f:b2:3a:e5:2f:da:64:db:50:90:26:6c:a8:81:f2: 29:30:be:a1:52:1b:3a:d6:ec:16:7e:62:1a:60:5a:87:43:65: ae:4e:09:b2:db:5b:c4:4d:03:20:c6:d6:07:34:92:5f:39:51: 0f:1f:b3:1b -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt/FCXfoi4eDtyV8C0DnFmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4 MzdiNDQwHhcNMjYwMTAyMTQxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ZiNDdiZDZkOTEyNDk3NTUyZjA3NzBlMmQ5MWUzOGU1Y2FiOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokOmQb4k0RPWFmyii94dJV6R3d9O Fm45CU2SIlnT/jQ96rer9KQhE9JQl0PNlohMlv2lrOD7Ff1udCXQaJPIL5DCxXDF QbOZE8wzPt0hj7h13Mm1qmykHToZD3gZ5ZIvSJTxDi1eTXGhUfAI4dvjiL7JnDro zKxSRB0inBvIpB0h4CMpfP57aGryIUEWdbiz/e5YgMB26AZtcL966y7mxcLx6YgV DmCdL+rxtJlzxoTt9E1XLFgu7zcGTJBiVHnJ1c5xFclWi/yj/Xz6FJQWsaYMZtO2 YjZ57Obp1W1ZGwPPg4G9hM/htO4vtutLPms1RRKNQOnhVB27DkYiMnTQfQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPz7R71tkSSXVS8HcOLZHjjlyrmYMB8GA1UdIwQY MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt ZDhjMzUxZDkzZWM2LzEvX1B0SHZXMlJKSmRWTHdkdzR0a2VPT1hLdVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2 LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQAuTahMAwD BAC5d1kDBAC5d1owDwQCAAIwCQMHACoMv4AAWjANBgkqhkiG9w0BAQsFAAOCAQEA BWeD3TILz1UoZQVxx6YMaJssgsa/+vNsCCiLP+jat5zD1Cupy2FESsXp8E1PHsba UfBj9vNAeYRDnBMyumnEon2eddJ/BnvDvnGJs8srLMjKwIb5h7SUmQdcYKKPzVdR GOghnZANqps/K7hz4y+Y70/tGfrdaaNUj7e0g40dmm5aH7xfU6kliBcfsnwEt2wM Zzxj0wgeODoZyXj0+rDzVOdQHUAP5aZ7zVEgD3bI6739RWpObiWnk3I36qJOGn8x +LH1yHWZBmayL7I65S/aZNtQkCZsqIHyKTC+oVIbOtbsFn5iGmBah0Nlrk4Jsttb xE0DIMbWBzSSXzlRDx+zGw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:25 2026 by rpki-client