This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/PolmcNKUOLtY-UeTb4jkSIvQsTM.roa File: PolmcNKUOLtY-UeTb4jkSIvQsTM.roa (raw, json) Hash identifier: b7erTVt5EQJ/JPRF7lrWpbLZEhrxU/WLeG3F+iBfhKk= Subject key identifier: 3E:89:66:70:D2:94:38:BB:58:F9:47:93:6F:88:E4:48:8B:D0:B1:33 Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Certificate serial: 019B7BA53EDC571E40AC2549D62E05FDAB5B Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/PolmcNKUOLtY-UeTb4jkSIvQsTM.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200701 IP address blocks: 77.244.0.0/20 maxlen: 20 185.212.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3e:dc:57:1e:40:ac:25:49:d6:2e:05:fd:ab:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e896670d29438bb58f947936f88e4488bd0b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:1b:da:f4:e8:d1:79:63:f7:00:71:6b:99: c2:5a:0a:a6:53:56:25:90:07:c1:0c:97:26:00:38: 89:12:67:81:40:ef:37:94:4a:63:c1:b1:9d:82:b7: 9a:cb:48:0a:7d:f4:18:39:97:ff:aa:75:c9:0e:9a: c5:1f:a4:3b:fc:eb:93:d0:71:31:c6:6f:f2:9a:30: f5:cc:8a:33:ec:32:e1:16:4b:8d:9f:c5:ba:8b:a5: cf:1b:0f:b2:29:ab:4c:a5:2f:11:80:10:1e:42:52: dc:62:a1:9c:69:7c:8a:ef:cf:4d:84:6f:4d:fb:d6: f1:2c:a9:62:53:fc:5d:0e:e4:93:5e:c3:7b:d8:41: 89:a7:1c:e3:45:58:e2:c4:3b:8d:ad:d9:4c:28:76: 4d:99:dc:d7:b6:e4:de:69:fc:df:05:35:0b:da:07: 77:d4:aa:69:28:36:20:64:ec:2c:b2:25:8b:63:6c: 75:3f:69:9a:7d:4b:e0:2f:79:9d:3f:94:81:e1:93: fb:53:c8:04:a2:5e:f7:0e:96:05:8b:69:21:6c:e7: c6:f1:2b:02:da:a6:bc:f4:5f:4c:48:2a:d0:f0:f8: 86:cd:fc:a2:07:f1:87:c5:40:ab:d9:33:70:e8:89: 01:d4:0c:5d:1a:03:be:aa:9d:55:3c:6e:5a:90:7e: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:89:66:70:D2:94:38:BB:58:F9:47:93:6F:88:E4:48:8B:D0:B1:33 X509v3 Authority Key Identifier: keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/PolmcNKUOLtY-UeTb4jkSIvQsTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.244.0.0/20 185.212.24.0/22 Signature Algorithm: sha256WithRSAEncryption 52:a7:fe:1b:cf:29:53:48:57:d7:45:17:f9:53:52:ee:55:eb: 0e:5f:02:b3:30:a7:be:54:2b:c7:53:0c:26:bb:89:19:a7:60: 22:4d:83:1a:c3:46:a6:ec:e1:f2:85:78:46:7b:90:fa:e7:a9: a5:2a:f7:10:72:33:49:b2:7f:db:07:12:de:b6:37:96:dc:a8: c6:56:23:7a:33:14:f1:b7:be:69:37:78:06:37:6b:76:04:ff: 67:57:96:6d:85:b1:76:a2:04:8d:47:cf:da:e6:4b:a0:ae:e7: 64:d6:f6:2c:9d:e5:a6:56:18:60:51:d7:36:2a:f9:16:b9:69: 84:d3:40:08:cf:8b:a0:50:92:39:ca:aa:6f:94:f7:a2:60:be: c3:06:c7:15:6c:21:d5:35:5c:2e:04:62:8e:f3:60:d8:04:9d: b9:f0:c1:b1:db:de:f8:d7:fe:3b:ff:15:c8:4f:63:80:6e:58: 07:0b:da:25:1a:10:93:0a:29:e3:4c:b5:33:e4:0c:3b:a1:16: 99:78:ea:86:f5:6e:cc:05:76:64:2e:4c:39:06:ee:23:95:b3: 47:6d:71:04:c1:49:78:6f:01:dd:69:16:7c:28:15:99:6e:15: 1a:98:3b:bf:e2:05:5f:fc:f4:11:10:cb:38:78:d5:39:82:7d: 8c:04:b3:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pT7cVx5ArCVJ1i4F/atbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTc5Y2NmMTBhZmY1Zjc3MzY5NGQ5ZjQzZTVkNWRiNDcy ZDY0ODUwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTg5NjY3MGQyOTQzOGJiNThmOTQ3OTM2Zjg4ZTQ0ODhiZDBiMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Ub2vTo0Xlj9wBxa5nCWgqmU1Yl kAfBDJcmADiJEmeBQO83lEpjwbGdgreay0gKffQYOZf/qnXJDprFH6Q7/OuT0HEx xm/ymjD1zIoz7DLhFkuNn8W6i6XPGw+yKatMpS8RgBAeQlLcYqGcaXyK789NhG9N +9bxLKliU/xdDuSTXsN72EGJpxzjRVjixDuNrdlMKHZNmdzXtuTeafzfBTUL2gd3 1KppKDYgZOwssiWLY2x1P2mafUvgL3mdP5SB4ZP7U8gEol73DpYFi2khbOfG8SsC 2qa89F9MSCrQ8PiGzfyiB/GHxUCr2TNw6IkB1AxdGgO+qp1VPG5akH6yVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD6JZnDSlDi7WPlHk2+I5EiL0LEzMB8GA1UdIwQY MBaAFM2XnM8Qr/X3c2lNn0Pl1dtHLWSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQt NzY1NmRhNmVkZTA5LzEvUG9sbWNOS1VPTHRZLVVlVGI0amtTSXZRc1RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQtNzY1NmRhNmVkZTA5 LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETfQAAwQC udQYMA0GCSqGSIb3DQEBCwUAA4IBAQBSp/4bzylTSFfXRRf5U1LuVesOXwKzMKe+ VCvHUwwmu4kZp2AiTYMaw0am7OHyhXhGe5D656mlKvcQcjNJsn/bBxLetjeW3KjG ViN6MxTxt75pN3gGN2t2BP9nV5ZthbF2ogSNR8/a5kugrudk1vYsneWmVhhgUdc2 KvkWuWmE00AIz4ugUJI5yqpvlPeiYL7DBscVbCHVNVwuBGKO82DYBJ258MGx2974 1/47/xXIT2OAblgHC9olGhCTCinjTLUz5Aw7oRaZeOqG9W7MBXZkLkw5Bu4jlbNH bXEEwUl4bwHdaRZ8KBWZbhUamDu/4gVf/PQREMs4eNU5gn2MBLN1 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:03 2026 by rpki-client