This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/P1ghkVf1iYeiJ5urtCBrMjr_3Hg.roa File: P1ghkVf1iYeiJ5urtCBrMjr_3Hg.roa (raw, json) Hash identifier: +Jnqgq2YUIAGH2X9ewpN8lb6jHk8R5mKkq16yKUVg6M= Subject key identifier: 3F:58:21:91:57:F5:89:87:A2:27:9B:AB:B4:20:6B:32:3A:FF:DC:78 Certificate issuer: /CN=62f62a847a4edff99571a32e94edff0525b03b66 Certificate serial: 019B7B35D3028858F989FC5ECE9B2E658C4C Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/P1ghkVf1iYeiJ5urtCBrMjr_3Hg.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51952 IP address blocks: 185.183.196.0/24 maxlen: 24 185.183.197.0/24 maxlen: 24 185.183.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d3:02:88:58:f9:89:fc:5e:ce:9b:2e:65:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66 Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f58219157f58987a2279babb4206b323affdc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:d7:5d:2e:2c:53:9d:c5:8c:ca:dc:00:24: 2b:d0:bd:42:0b:f9:20:f3:a3:d0:5a:a7:a0:26:02: f0:9c:91:f9:c7:8e:6a:eb:c0:cb:aa:c4:a2:e4:33: 36:09:c6:15:07:ad:86:41:b1:f8:29:5c:43:9e:eb: 9a:44:fb:92:a9:38:05:b9:85:f8:b3:bd:a8:cb:f3: e6:57:ea:77:9c:e3:d8:f3:1c:05:a9:bf:e7:8c:52: 22:22:4d:46:9c:ac:8e:02:1b:f6:f5:da:ce:26:e2: a0:e9:23:31:71:71:5f:10:65:94:df:0c:e6:28:53: 87:92:03:ec:5f:cb:b9:b0:d5:11:d9:64:a7:d2:29: 97:55:51:94:c9:bf:0b:b7:1c:2d:11:f7:d1:1b:3e: d3:a9:54:27:f3:5f:30:a9:6f:59:95:86:7b:92:3a: c6:44:5f:4f:5b:be:8a:14:1e:c5:a4:8a:5c:be:d2: 59:f8:50:ac:c4:8c:de:17:a0:ba:dc:99:0f:97:32: 63:65:56:24:a8:15:52:a3:76:32:6a:fe:87:73:b8: e7:b9:51:18:db:e1:e2:ce:1b:ed:15:a9:95:2d:75: 90:71:12:dd:35:d1:db:34:5f:d6:21:63:e9:06:35: 55:52:d6:af:38:2b:8b:8d:d2:7f:09:78:34:4b:0d: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:58:21:91:57:F5:89:87:A2:27:9B:AB:B4:20:6B:32:3A:FF:DC:78 X509v3 Authority Key Identifier: keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/P1ghkVf1iYeiJ5urtCBrMjr_3Hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.196.0-185.183.198.255 Signature Algorithm: sha256WithRSAEncryption 42:71:86:5b:07:c5:a5:20:d0:b1:0a:cb:64:8f:a6:45:d2:6b: b8:f2:f4:d7:7c:0c:46:4c:95:7e:d9:a6:9f:4a:cb:38:f6:18: 22:43:c7:9a:3e:9b:48:b0:67:4f:4b:8e:d6:50:b9:9f:33:56: 38:df:69:63:a8:09:85:ec:38:85:b3:e0:a9:6c:6b:33:d3:f2: 73:9b:dc:4d:b9:e4:d4:08:da:d2:40:31:e0:83:41:ce:e2:a9: ce:dd:51:83:c4:ba:a9:0e:09:0d:f0:13:ed:e8:d6:d0:eb:c4: f1:57:d7:f2:67:2e:2d:15:3d:0c:cb:3b:f0:4c:4c:17:a2:16: 4f:0e:6a:a0:a2:bd:38:fe:1d:35:c3:84:cd:05:ea:71:01:1f: 2d:49:78:2f:27:5a:3d:3c:67:20:1c:2b:24:42:d3:5b:c4:d4: 9c:95:60:5b:d6:37:0d:0c:e2:2a:be:d5:59:66:19:91:fc:9b: 70:40:f4:06:c1:19:71:0c:a0:88:84:32:67:d8:d8:04:5f:02: bb:72:0a:46:18:ee:97:7d:c4:db:11:4e:b6:d7:d6:67:f3:2c: 65:b4:7a:2f:dc:65:3c:cd:09:7c:99:1d:6a:e5:bd:f2:83:7f: aa:c9:69:ce:04:c5:c8:5a:f1:e0:a8:f9:45:0a:95:1e:48:90: 98:3a:bf:12 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NdMCiFj5ifxezpsuZYxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZjYyYTg0N2E0ZWRmZjk5NTcxYTMyZTk0ZWRmZjA1MjVi MDNiNjYwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjU4MjE5MTU3ZjU4OTg3YTIyNzliYWJiNDIwNmIzMjNhZmZkYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroTXXS4sU53FjMrcACQr0L1CC/kg 86PQWqegJgLwnJH5x45q68DLqsSi5DM2CcYVB62GQbH4KVxDnuuaRPuSqTgFuYX4 s72oy/PmV+p3nOPY8xwFqb/njFIiIk1GnKyOAhv29drOJuKg6SMxcXFfEGWU3wzm KFOHkgPsX8u5sNUR2WSn0imXVVGUyb8LtxwtEffRGz7TqVQn818wqW9ZlYZ7kjrG RF9PW76KFB7FpIpcvtJZ+FCsxIzeF6C63JkPlzJjZVYkqBVSo3Yyav6Hc7jnuVEY 2+HizhvtFamVLXWQcRLdNdHbNF/WIWPpBjVVUtavOCuLjdJ/CXg0Sw33SQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD9YIZFX9YmHoiebq7QgazI6/9x4MB8GA1UdIwQY MBaAFGL2KoR6Tt/5lXGjLpTt/wUlsDtmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEt MjU1MGU0YjBmYmIyLzEvUDFnaGtWZjFpWWVpSjV1cnRDQnJNanJfM0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC84ZjQ3ODAtZWZhZi00ZTA2LWExZmEtMjU1MGU0YjBmYmIy LzEvWXZZcWhIcE8zX21WY2FNdWxPM19CU1d3TzJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5t8QD BAC5t8YwDQYJKoZIhvcNAQELBQADggEBAEJxhlsHxaUg0LEKy2SPpkXSa7jy9Nd8 DEZMlX7Zpp9Kyzj2GCJDx5o+m0iwZ09LjtZQuZ8zVjjfaWOoCYXsOIWz4KlsazPT 8nOb3E255NQI2tJAMeCDQc7iqc7dUYPEuqkOCQ3wE+3o1tDrxPFX1/JnLi0VPQzL O/BMTBeiFk8OaqCivTj+HTXDhM0F6nEBHy1JeC8nWj08ZyAcKyRC01vE1JyVYFvW Nw0M4iq+1VlmGZH8m3BA9AbBGXEMoIiEMmfY2ARfArtyCkYY7pd9xNsRTrbX1mfz LGW0ei/cZTzNCXyZHWrlvfKDf6rJac4Excha8eCo+UUKlR5IkJg6vxI= -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:33 2026 by rpki-client