This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/Pky97jBwdyUgYzg1_AI-qFYMT1o.roa File: Pky97jBwdyUgYzg1_AI-qFYMT1o.roa (raw, json) Hash identifier: nbaHUKHv0TZLnVM+2128xVj9F0Kn5xH6nruz/6y8MI8= Subject key identifier: 3E:4C:BD:EE:30:70:77:25:20:63:38:35:FC:02:3E:A8:56:0C:4F:5A Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019BF9E9897A10311791B2EC52B2BF683428 Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/Pky97jBwdyUgYzg1_AI-qFYMT1o.roa Signing time: Mon 26 Jan 2026 10:46:30 +0000 ROA not before: Mon 26 Jan 2026 10:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150770 IP address blocks: 185.238.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:e9:89:7a:10:31:17:91:b2:ec:52:b2:bf:68:34:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Jan 26 10:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e4cbdee3070772520633835fc023ea8560c4f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:ae:5b:23:87:f4:be:cd:dc:91:90:ce:5f: 02:ad:2e:42:77:f5:80:4b:6b:a8:7e:cc:90:43:87: 4d:57:2e:7f:1d:29:6b:ec:fc:f3:e2:e0:f5:c9:ca: 7f:53:56:f7:bb:ca:f6:ce:58:11:3e:7a:45:9c:fd: 94:af:81:83:31:f1:a4:99:05:aa:eb:f7:6d:7f:67: b0:91:17:0e:8d:66:62:5f:7c:01:27:41:26:fb:43: 51:53:88:ca:51:12:2a:a5:c4:3c:de:13:f6:12:ca: e7:31:13:bb:f3:90:7d:ad:e4:0f:4d:c7:2b:dc:0a: 21:15:07:da:ed:aa:e3:eb:fb:28:4e:51:47:f4:d4: 36:fb:f1:a3:4a:b6:d0:0f:13:ff:7e:c1:4e:76:74: 36:b3:90:7f:61:f5:65:d0:c7:7c:46:b0:75:64:b9: c0:3c:a8:98:e0:08:f8:e2:ae:86:44:fc:cd:29:b1: 42:35:f7:92:cb:8a:48:76:f8:d3:ba:a4:3c:6f:35: ce:f3:44:58:ac:80:1d:e4:c5:9b:02:04:f3:53:c1: c2:69:61:2e:87:e7:fc:4c:f6:4f:a3:d5:6c:55:25: 0b:11:2f:65:0b:cf:f2:f1:4c:11:ae:86:1c:75:63: 1e:18:40:f1:02:58:95:8f:7d:f7:7d:f8:96:35:ab: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:BD:EE:30:70:77:25:20:63:38:35:FC:02:3E:A8:56:0C:4F:5A X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/Pky97jBwdyUgYzg1_AI-qFYMT1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.212.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:59:d2:82:49:fd:e0:15:da:71:a1:07:4e:fb:c4:22:03:38: 45:8b:5c:c8:11:32:23:d6:f1:a2:84:95:00:a2:e1:27:52:40: eb:a2:00:e9:09:d6:cb:b6:c8:00:6c:e3:4c:f5:a0:b5:9a:42: cf:4f:0f:36:a0:99:ae:30:61:23:22:47:f7:66:e3:cf:23:2d: e8:b2:63:c5:a9:be:b5:a4:86:15:ee:0f:70:bc:f8:69:dc:fe: 28:0e:50:31:75:7a:6f:77:af:c8:c8:2e:37:ce:3d:ba:fc:de: bb:54:78:8f:09:90:e6:50:f9:86:7b:01:9a:b8:d3:84:2d:ed: e7:bf:96:c1:76:c0:aa:42:bb:c8:64:b6:b0:eb:09:01:3e:6d: a1:3c:48:f8:e2:1d:29:4e:90:90:ec:b1:00:6f:18:b9:4b:1d: ae:23:3d:93:aa:02:83:8f:57:43:9b:dc:ed:61:95:1a:63:c4: 76:ed:e6:a0:89:2a:d4:0f:ec:1e:87:a4:e8:8c:a5:08:fc:fd: d4:64:70:87:d9:52:28:ec:fc:6c:1d:08:03:8c:73:0a:de:09: 5d:50:19:c8:15:0b:3e:77:27:af:5a:64:6c:fd:6a:93:54:71: be:05:fc:c9:d9:26:fa:dc:66:78:9e:19:b7:9d:d4:50:52:b5: 64:b4:06:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv56Yl6EDEXkbLsUrK/aDQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjYwMTI2MTA0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTRjYmRlZTMwNzA3NzI1MjA2MzM4MzVmYzAyM2VhODU2MGM0ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6CuWyOH9L7N3JGQzl8CrS5Cd/WA S2uofsyQQ4dNVy5/HSlr7Pzz4uD1ycp/U1b3u8r2zlgRPnpFnP2Ur4GDMfGkmQWq 6/dtf2ewkRcOjWZiX3wBJ0Em+0NRU4jKURIqpcQ83hP2EsrnMRO785B9reQPTccr 3AohFQfa7arj6/soTlFH9NQ2+/GjSrbQDxP/fsFOdnQ2s5B/YfVl0Md8RrB1ZLnA PKiY4Aj44q6GRPzNKbFCNfeSy4pIdvjTuqQ8bzXO80RYrIAd5MWbAgTzU8HCaWEu h+f8TPZPo9VsVSULES9lC8/y8UwRroYcdWMeGEDxAliVj333ffiWNas1owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5Mve4wcHclIGM4NfwCPqhWDE9aMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvUGt5OTdqQndkeVVnWXpnMV9BSS1xRllNVDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G CSqGSIb3DQEBCwUAA4IBAQA/WdKCSf3gFdpxoQdO+8QiAzhFi1zIETIj1vGihJUA ouEnUkDrogDpCdbLtsgAbONM9aC1mkLPTw82oJmuMGEjIkf3ZuPPIy3osmPFqb61 pIYV7g9wvPhp3P4oDlAxdXpvd6/IyC43zj26/N67VHiPCZDmUPmGewGauNOELe3n v5bBdsCqQrvIZLaw6wkBPm2hPEj44h0pTpCQ7LEAbxi5Sx2uIz2TqgKDj1dDm9zt YZUaY8R27eagiSrUD+weh6TojKUI/P3UZHCH2VIo7PxsHQgDjHMK3gldUBnIFQs+ dyevWmRs/WqTVHG+BfzJ2Sb63GZ4nhm3ndRQUrVktAbb -----END CERTIFICATE-----Generated at Fri Jan 30 18:40:25 2026 by rpki-client