This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PnMFMAlDI7Lnd11TTIMJWoZSwXU.roa File: PnMFMAlDI7Lnd11TTIMJWoZSwXU.roa (raw, json) Hash identifier: zCsbsD738ukRpuD4Mdol2aBUHr+Zz7mn/C6ZLHy1d8E= Subject key identifier: 3E:73:05:30:09:43:23:B2:E7:77:5D:53:4C:83:09:5A:86:52:C1:75 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A7E10D53B7F0F62B42E2E2AF2484 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PnMFMAlDI7Lnd11TTIMJWoZSwXU.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210705 IP address blocks: 94.183.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a7:e1:0d:53:b7:f0:f6:2b:42:e2:e2:af:24:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e730530094323b2e7775d534c83095a8652c175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:be:4a:2e:de:17:f4:db:1f:26:08:23:a9:02: f7:4b:ce:a8:72:26:95:01:77:ba:a6:10:4b:5c:97: ee:d1:15:e5:50:1a:eb:2a:85:aa:0f:49:60:a6:ae: c3:86:42:e6:9f:71:f2:66:0a:6d:2b:33:91:b3:36: 40:a5:fc:b0:85:ed:8d:32:fd:cf:ee:79:46:c8:35: dc:91:df:cc:79:44:c2:60:7f:d0:0e:9d:2d:ed:94: bd:88:03:7b:d0:ac:47:35:fd:9a:65:23:78:4e:52: 9f:fb:07:cd:a8:f2:98:e6:a7:ae:93:dc:f0:8c:af: 65:27:df:b3:71:4a:12:ad:6a:30:2b:b8:70:f2:e5: 66:63:5d:a1:92:8f:d1:a1:c7:5a:83:9b:8a:87:4e: 6f:23:f5:d3:2e:bd:f2:6a:7d:84:e2:8c:02:15:7c: 83:0e:96:b4:7d:74:7c:84:6a:40:3b:30:ac:8f:f9: d0:4f:0d:34:7e:c4:a3:e5:1b:59:cc:91:1a:51:97: 63:37:36:84:0e:48:94:c1:c3:0d:9e:35:e0:da:d8: 69:83:e8:a1:54:ad:ed:73:76:04:44:d7:fc:60:e2: b8:95:35:68:80:95:ae:f3:17:cc:38:ce:1c:fe:91: ce:0f:4c:e9:32:d8:e3:2f:b8:b1:16:61:69:5f:d7: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:05:30:09:43:23:B2:E7:77:5D:53:4C:83:09:5A:86:52:C1:75 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PnMFMAlDI7Lnd11TTIMJWoZSwXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.165.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ad:9f:ee:82:5f:47:1c:d2:5d:59:d2:95:b7:f9:08:41:72: 84:a5:07:25:24:ef:c1:b2:ef:e3:e4:c8:5a:2d:c9:54:f0:86: 1f:f2:fd:7b:6a:50:35:4f:e7:9f:08:5b:0b:89:62:99:7c:34: 76:5c:5b:a2:37:51:55:7c:a8:4d:84:c8:52:a2:9d:3c:bd:3a: e3:16:2b:d0:70:53:5f:8a:0a:c1:5c:93:83:7f:05:3a:b3:ad: b9:a6:63:95:74:e2:2a:d4:4e:75:12:e4:f2:3a:8f:1a:bb:2e: c5:43:5e:76:b8:7f:ee:80:43:c1:cb:79:80:85:85:32:4e:7f: d4:59:29:f5:0d:58:4c:b6:ff:0d:ec:88:9e:11:a6:bd:3a:01: 62:72:9c:ef:d0:ed:4d:a6:56:8b:4b:a2:ea:6f:f5:86:0c:6c: a9:2b:e6:64:0d:3c:1c:0b:07:dc:22:0d:c1:a4:ac:0f:6c:61: 6c:a8:78:8b:0d:5e:58:2c:6d:13:cf:b6:fb:ea:26:a4:87:d3: 4d:f7:a1:12:be:00:4d:00:5c:72:25:e5:db:82:42:e9:98:e8: 32:10:84:f0:89:04:e5:15:84:75:8e:d3:d7:86:f4:4c:c2:1b: 16:b1:8a:80:f0:68:cc:f5:05:16:a0:d4:e2:57:f7:86:44:ed: e0:04:6c:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKfhDVO38PYrQuLirySEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTczMDUzMDA5NDMyM2IyZTc3NzVkNTM0YzgzMDk1YTg2NTJjMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA575KLt4X9NsfJggjqQL3S86ociaV AXe6phBLXJfu0RXlUBrrKoWqD0lgpq7DhkLmn3HyZgptKzORszZApfywhe2NMv3P 7nlGyDXckd/MeUTCYH/QDp0t7ZS9iAN70KxHNf2aZSN4TlKf+wfNqPKY5qeuk9zw jK9lJ9+zcUoSrWowK7hw8uVmY12hko/Rocdag5uKh05vI/XTLr3yan2E4owCFXyD Dpa0fXR8hGpAOzCsj/nQTw00fsSj5RtZzJEaUZdjNzaEDkiUwcMNnjXg2thpg+ih VK3tc3YERNf8YOK4lTVogJWu8xfMOM4c/pHOD0zpMtjjL7ixFmFpX9floQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5zBTAJQyOy53ddU0yDCVqGUsF1MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUG5NRk1BbERJN0xuZDExVFRJTUpXb1pTd1hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrelMA0G CSqGSIb3DQEBCwUAA4IBAQAbrZ/ugl9HHNJdWdKVt/kIQXKEpQclJO/Bsu/j5Mha LclU8IYf8v17alA1T+efCFsLiWKZfDR2XFuiN1FVfKhNhMhSop08vTrjFivQcFNf igrBXJODfwU6s625pmOVdOIq1E51EuTyOo8auy7FQ152uH/ugEPBy3mAhYUyTn/U WSn1DVhMtv8N7IieEaa9OgFicpzv0O1NplaLS6Lqb/WGDGypK+ZkDTwcCwfcIg3B pKwPbGFsqHiLDV5YLG0Tz7b76iakh9NN96ESvgBNAFxyJeXbgkLpmOgyEITwiQTl FYR1jtPXhvRMwhsWsYqA8GjM9QUWoNTiV/eGRO3gBGw7 -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:47 2026 by rpki-client