This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/pKs45C6f1fQLKakV-zJPgC3zh1Y.roa File: pKs45C6f1fQLKakV-zJPgC3zh1Y.roa (raw, json) Hash identifier: 0A0sNeWwxD3U95a3mQVF0PVW66p+HwNWwu64xGKD15I= Subject key identifier: A4:AB:38:E4:2E:9F:D5:F4:0B:29:A9:15:FB:32:4F:80:2D:F3:87:56 Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Certificate serial: 019B79103FAB50D77D2BD40B6C46D9E87B01 Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/pKs45C6f1fQLKakV-zJPgC3zh1Y.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 185.195.237.0/24 maxlen: 24 2001:67c:be8::/48 maxlen: 48 2a01:ec40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3f:ab:50:d7:7d:2b:d4:0b:6c:46:d9:e8:7b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ab38e42e9fd5f40b29a915fb324f802df38756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:05:e0:76:5e:d5:91:d4:51:ba:1a:ff:84:a4: 9b:67:2f:32:86:f0:8f:d9:71:39:1d:b1:23:1d:7c: 26:6b:c6:c6:5c:69:af:a9:ea:0c:0a:df:0b:e0:37: c9:ab:81:cb:66:95:fe:0c:ae:b7:a0:39:fd:69:bd: 3b:1b:2c:0b:8b:e2:01:16:af:8a:e6:cd:44:f2:ff: a9:34:4d:4e:43:b3:ed:61:69:64:9d:cc:5f:48:ce: 6c:3c:b2:1f:2b:0d:dc:2a:95:5c:a8:6a:db:6c:82: ca:7c:66:c9:b6:b6:eb:a9:f3:40:a2:2e:3e:74:27: a5:11:c6:6d:ed:63:ee:9f:3b:7b:b0:cf:62:a0:c6: 68:e7:9b:5f:b9:29:d9:b8:2b:20:98:b9:4c:56:84: 9e:74:07:4b:31:d7:48:88:1b:3d:44:21:25:af:5c: 17:34:91:b8:1f:00:32:ef:b6:73:88:02:3f:db:75: dd:9e:85:ef:53:58:41:e3:a2:70:c2:1f:54:42:bf: 51:a4:46:9c:fd:ed:fb:47:bd:3c:63:fb:b9:30:ea: d5:34:10:65:5f:63:8d:d3:bd:2c:c2:f2:67:19:9c: 73:09:6d:3e:a9:ee:43:24:5c:c2:d3:c8:77:02:fb: 3e:f6:ff:62:f6:4b:a2:3e:10:38:cf:76:96:3d:72: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:38:E4:2E:9F:D5:F4:0B:29:A9:15:FB:32:4F:80:2D:F3:87:56 X509v3 Authority Key Identifier: keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/pKs45C6f1fQLKakV-zJPgC3zh1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.237.0/24 IPv6: 2001:67c:be8::/48 2a01:ec40::/48 Signature Algorithm: sha256WithRSAEncryption 63:03:5a:4f:98:45:bc:5f:93:64:a6:36:4f:69:af:74:b0:ca: 43:e4:a1:d7:c1:43:03:7a:28:d8:01:ca:d5:3a:bc:78:19:22: 9a:db:7b:39:93:08:2e:fa:69:dd:54:a6:9a:11:74:ca:3a:7b: b6:3c:aa:1a:50:b3:85:0a:a0:b4:73:d2:c2:bd:c0:4f:37:e2: 49:14:90:51:b6:e4:0d:1d:7b:19:fe:e7:ab:98:8e:14:be:e5: 9d:09:aa:28:94:6b:3b:9c:bc:fc:df:87:ac:3d:25:33:56:4d: 36:07:aa:09:e5:71:31:8b:c2:35:45:fa:83:41:17:b8:b5:6e: 5a:3c:35:33:da:60:73:25:10:4c:b6:3e:fe:c8:48:98:10:13: d1:a6:bc:83:5d:3b:63:8f:1a:bd:a4:ac:b8:7f:2c:a9:8f:0d: dc:7c:40:8c:c4:fa:68:f4:25:4c:d9:00:df:b6:8b:d2:79:9d: 5d:a9:69:63:75:a7:6e:93:87:b5:f5:c9:3d:f0:e1:66:a0:23: 29:31:41:33:82:6b:1c:27:45:a0:ab:8d:a6:92:00:4d:13:11: 58:a1:bc:ea:7d:a1:c8:d4:1b:e8:24:26:69:fd:76:e1:c1:98: b9:ea:4e:e8:dc:45:cd:9a:cf:a9:a3:ac:b8:07:92:f9:84:a3: b6:c2:b8:e3 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5ED+rUNd9K9QLbEbZ6HsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU5M2YxOTYxYmViYzEwMDA5Y2IyNjVjMGJhZjM0NzAy YTNkYWIwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGFiMzhlNDJlOWZkNWY0MGIyOWE5MTVmYjMyNGY4MDJkZjM4NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wXgdl7VkdRRuhr/hKSbZy8yhvCP 2XE5HbEjHXwma8bGXGmvqeoMCt8L4DfJq4HLZpX+DK63oDn9ab07GywLi+IBFq+K 5s1E8v+pNE1OQ7PtYWlkncxfSM5sPLIfKw3cKpVcqGrbbILKfGbJtrbrqfNAoi4+ dCelEcZt7WPunzt7sM9ioMZo55tfuSnZuCsgmLlMVoSedAdLMddIiBs9RCElr1wX NJG4HwAy77ZziAI/23XdnoXvU1hB46Jwwh9UQr9RpEac/e37R708Y/u5MOrVNBBl X2ON070swvJnGZxzCW0+qe5DJFzC08h3Avs+9v9i9kuiPhA4z3aWPXIuDQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKSrOOQun9X0CympFfsyT4At84dWMB8GA1UdIwQY MBaAFAqOk/GWG+vBAAnLJlwLrzRwKj2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODkt YjkzNTZlNjFmNzNhLzEvcEtzNDVDNmYxZlFMS2FrVi16SlBnQzN6aDFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODktYjkzNTZlNjFmNzNh LzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAucPtMBgE AgACMBIDBwAgAQZ8C+gDBwAqAexAAAAwDQYJKoZIhvcNAQELBQADggEBAGMDWk+Y Rbxfk2SmNk9pr3SwykPkodfBQwN6KNgBytU6vHgZIprbezmTCC76ad1UppoRdMo6 e7Y8qhpQs4UKoLRz0sK9wE834kkUkFG25A0dexn+56uYjhS+5Z0JqiiUazucvPzf h6w9JTNWTTYHqgnlcTGLwjVF+oNBF7i1blo8NTPaYHMlEEy2Pv7ISJgQE9GmvINd O2OPGr2krLh/LKmPDdx8QIzE+mj0JUzZAN+2i9J5nV2paWN1p26Th7X1yT3w4Wag IykxQTOCaxwnRaCrjaaSAE0TEVihvOp9ocjUG+gkJmn9duHBmLnqTujcRc2az6mj rLgHkvmEo7bCuOM= -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:51 2026 by rpki-client