This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/psNr_hTMl_I5KVL4YqNClQzsa0U.roa File: psNr_hTMl_I5KVL4YqNClQzsa0U.roa (raw, json) Hash identifier: iOzy4wHtJLtwL9zu93am3QAJzNv3kq9Sr3PhqUJ5iL8= Subject key identifier: A6:C3:6B:FE:14:CC:97:F2:39:29:52:F8:62:A3:42:95:0C:EC:6B:45 Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03 Certificate serial: 019B7F15A9ADAC3055B61258BCA3071A4946 Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/psNr_hTMl_I5KVL4YqNClQzsa0U.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24786 IP address blocks: 81.93.112.0/20 maxlen: 20 193.28.192.0/21 maxlen: 21 2a06:7500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:ad:ac:30:55:b6:12:58:bc:a3:07:1a:49:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6c36bfe14cc97f2392952f862a342950cec6b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:65:ea:c7:3f:df:d5:6b:ee:0a:55:f1:76: 06:4b:fa:1a:15:ed:fd:fd:7c:31:ce:7e:9b:d4:c4: 57:c6:b7:c1:12:0f:4e:af:37:fa:b3:47:8b:c1:d6: c0:53:45:2d:c4:2b:52:e4:6c:e0:62:88:dd:20:26: 3a:71:e9:19:25:b0:57:58:95:20:7e:94:17:99:f0: e2:34:48:3c:21:f8:d7:7b:2f:2a:2e:ef:10:a7:7a: 9a:e1:0d:5d:0b:f0:34:e0:62:a8:e2:05:c7:ea:60: 60:b0:7d:5c:76:e7:69:a4:b5:8e:2b:df:f6:6a:75: 31:78:7d:83:93:7c:cb:db:d5:63:e9:59:cf:3e:bd: d1:bf:5f:ef:cd:85:ea:71:a7:46:91:24:8c:a6:40: 5a:7f:4d:ff:8d:6a:94:66:79:66:1d:82:ac:f9:5d: a4:0b:fa:33:de:f0:f6:27:87:23:9f:46:b6:43:36: 89:56:c8:39:55:4b:15:f4:ad:f7:b0:e9:56:08:dc: eb:c4:6d:5e:80:82:44:45:c6:a0:9a:97:34:49:13: ba:65:02:b0:a4:46:0c:7e:d1:b0:9b:b5:1a:47:94: 9a:38:ad:bf:a0:f1:29:de:5c:46:a1:72:94:57:b8: 90:4c:2c:83:19:f8:20:96:d8:2b:a8:ce:f6:23:c5: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C3:6B:FE:14:CC:97:F2:39:29:52:F8:62:A3:42:95:0C:EC:6B:45 X509v3 Authority Key Identifier: keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/psNr_hTMl_I5KVL4YqNClQzsa0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.93.112.0/20 193.28.192.0/21 IPv6: 2a06:7500::/29 Signature Algorithm: sha256WithRSAEncryption 5e:b8:f6:f2:d1:89:39:76:38:8f:bf:31:69:22:3b:2b:9b:f1: 2a:7f:67:21:11:26:87:85:14:6c:4a:82:ee:b3:ce:2a:d3:f7: 87:25:46:40:94:e7:77:5f:b2:2c:ff:a4:e4:21:9e:c1:01:eb: e6:d6:46:fe:48:c7:26:e4:0a:dd:f0:6e:33:a5:36:a5:a8:89: cc:cf:21:07:c7:11:4d:76:a6:7b:04:5e:a6:c7:ed:f6:56:cc: 00:a8:58:fa:77:39:7f:6e:51:ad:2f:c1:26:ab:20:b4:18:1c: 37:e9:76:c9:7f:66:33:d6:91:86:68:bc:07:b2:6d:00:24:d0: b3:28:1d:24:9f:da:da:a3:61:93:b4:50:db:ad:5e:86:60:6c: e0:b2:13:8c:38:be:f1:c7:78:81:2b:8c:f6:82:a2:bf:78:6c: 11:cd:0b:dd:77:b1:5a:cd:19:c5:ce:d3:d6:d5:ae:ab:16:cb: d3:38:e7:9e:93:da:28:f9:ef:80:3e:fb:dc:eb:ac:0f:79:f5: 78:68:90:af:d3:77:1f:07:10:24:9f:3f:45:f2:19:a8:55:79: 24:b8:fa:e7:f3:15:f3:38:d7:dc:cd:9e:cc:b1:93:17:fc:1a: 3d:b0:4f:a5:d0:b0:a7:17:74:83:96:0d:71:d1:6c:be:ba:71: 3e:e6:85:11 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FamtrDBVthJYvKMHGklGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz YTJiMDMwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmMzNmJmZTE0Y2M5N2YyMzkyOTUyZjg2MmEzNDI5NTBjZWM2YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFFl6sc/39Vr7gpV8XYGS/oaFe39 /Xwxzn6b1MRXxrfBEg9Orzf6s0eLwdbAU0UtxCtS5GzgYojdICY6cekZJbBXWJUg fpQXmfDiNEg8IfjXey8qLu8Qp3qa4Q1dC/A04GKo4gXH6mBgsH1cdudppLWOK9/2 anUxeH2Dk3zL29Vj6VnPPr3Rv1/vzYXqcadGkSSMpkBaf03/jWqUZnlmHYKs+V2k C/oz3vD2J4cjn0a2QzaJVsg5VUsV9K33sOlWCNzrxG1egIJERcagmpc0SRO6ZQKw pEYMftGwm7UaR5SaOK2/oPEp3lxGoXKUV7iQTCyDGfggltgrqM72I8WqgwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKbDa/4UzJfyOSlS+GKjQpUM7GtFMB8GA1UdIwQY MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt YWQ0OTU4NThiMzJjLzEvcHNOcl9oVE1sX0k1S1ZMNFlxTkNsUXpzYTBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUV1wAwQD wRzAMA0EAgACMAcDBQMqBnUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeuPby0Yk5djiP vzFpIjsrm/Eqf2chESaHhRRsSoLus84q0/eHJUZAlOd3X7Is/6TkIZ7BAevm1kb+ SMcm5Ard8G4zpTalqInMzyEHxxFNdqZ7BF6mx+32VswAqFj6dzl/blGtL8EmqyC0 GBw36XbJf2Yz1pGGaLwHsm0AJNCzKB0kn9rao2GTtFDbrV6GYGzgshOMOL7xx3iB K4z2gqK/eGwRzQvdd7FazRnFztPW1a6rFsvTOOeek9oo+e+APvvc66wPefV4aJCv 03cfBxAknz9F8hmoVXkkuPrn8xXzONfczZ7MsZMX/Bo9sE+l0LCnF3SDlg1x0Wy+ unE+5oUR -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:18 2026 by rpki-client