This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa File: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (raw, json) Hash identifier: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k= Subject key identifier: A4:43:94:C1:A5:8B:3B:97:6F:1B:BB:AF:54:8A:34:FC:E2:25:F4:6F Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Certificate serial: 019B7F15BE4D988920713B0CCB67619B1BFE Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 185.34.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:be:4d:98:89:20:71:3b:0c:cb:67:61:9b:1b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44394c1a58b3b976f1bbbaf548a34fce225f46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:ae:38:ba:d4:12:5c:ef:14:ff:f0:4e:61: f0:a2:95:cf:4e:2f:d1:51:2d:df:52:c5:95:86:46: 81:8f:94:d4:10:62:16:c6:59:00:68:07:9f:97:bd: 4f:99:c2:d3:86:bd:67:c2:c1:48:35:07:0e:70:1c: 17:aa:50:a0:4e:26:4d:f9:e5:c1:13:d4:d7:31:68: c5:bd:3f:92:16:3a:23:0b:bb:ec:06:97:2e:4a:90: 3b:f5:de:89:47:c7:d5:c5:ae:5e:d7:ad:8f:bb:b8: dd:1a:f0:34:84:8a:0f:77:66:01:a5:ff:81:f8:f3: 97:1e:83:e7:83:57:3e:35:54:89:4a:a7:de:d3:67: 57:98:45:37:ad:ee:e4:0e:ee:03:2d:7a:ec:c2:ca: 3a:28:ad:a0:ac:a3:6b:58:27:64:d2:e3:b5:22:31: 8b:ab:02:bd:a3:14:a7:01:a3:96:c8:58:9e:2e:b1: 4e:d8:bd:a9:45:6d:01:47:02:10:03:e9:91:89:28: 26:8c:ba:26:c3:52:86:53:a8:36:c8:b6:9e:ed:bd: 53:3a:3c:93:32:f7:bb:2a:e9:04:26:74:fd:ea:73: d6:76:1b:e8:d5:3c:32:e5:c0:82:3f:f2:eb:97:4a: 14:48:72:09:20:aa:9b:29:05:e6:47:b0:55:c1:bc: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:94:C1:A5:8B:3B:97:6F:1B:BB:AF:54:8A:34:FC:E2:25:F4:6F X509v3 Authority Key Identifier: keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.131.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:af:49:34:50:76:cc:66:d0:c7:16:e6:a0:70:b9:62:0a:29: b1:b7:45:be:83:ab:e9:cd:b9:c7:2e:ce:ae:f1:bf:91:a9:a1: 37:3e:cf:ee:fc:9c:0a:1e:0a:12:4c:59:7b:31:3d:b7:74:d0: 2a:84:76:1a:1a:2f:ee:b1:b7:1d:13:e7:24:6d:4d:58:c2:1a: 5d:07:27:81:b3:33:72:fc:65:7d:8a:57:21:00:62:32:23:5f: 68:72:92:28:42:7b:3d:4d:d6:30:9d:1f:e3:72:52:ba:3e:ad: 7c:aa:df:eb:e8:fc:28:e4:7d:58:2a:dd:69:8b:39:ed:4d:67: 66:cc:22:41:93:da:6d:b0:32:37:5b:4f:96:9a:41:66:81:ea: dd:91:82:6e:15:c0:36:92:5c:0e:0b:c9:a8:d0:70:92:ab:a9: f3:fe:35:cd:87:67:fd:7c:de:e1:55:3e:d3:31:8b:09:8b:50: 8b:1d:c5:2d:0a:12:e1:a7:7a:78:13:49:2c:ea:d8:96:32:51: d0:ee:9d:4d:a1:85:8c:1a:b9:55:d7:16:80:d0:4f:eb:96:3c: ee:ae:5c:bc:c2:e1:81:24:bc:66:6a:a4:d4:16:14:c6:3b:cd: b6:bc:fa:1d:ef:54:3f:2a:17:f6:55:f0:50:62:fa:7b:2f:ef: de:61:cd:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fb5NmIkgcTsMy2dhmxv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZWQ2NzAwMmRjNzMwN2U4NTYzYjZlNDkzNGNjZDU3MjNh NDRmM2UwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQzOTRjMWE1OGIzYjk3NmYxYmJiYWY1NDhhMzRmY2UyMjVmNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw6uOLrUElzvFP/wTmHwopXPTi/R US3fUsWVhkaBj5TUEGIWxlkAaAefl71PmcLThr1nwsFINQcOcBwXqlCgTiZN+eXB E9TXMWjFvT+SFjojC7vsBpcuSpA79d6JR8fVxa5e162Pu7jdGvA0hIoPd2YBpf+B +POXHoPng1c+NVSJSqfe02dXmEU3re7kDu4DLXrswso6KK2grKNrWCdk0uO1IjGL qwK9oxSnAaOWyFieLrFO2L2pRW0BRwIQA+mRiSgmjLomw1KGU6g2yLae7b1TOjyT Mve7KukEJnT96nPWdhvo1Twy5cCCP/Lrl0oUSHIJIKqbKQXmR7BVwbwypQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRDlMGlizuXbxu7r1SKNPziJfRvMB8GA1UdIwQY MBaAFDLtZwAtxzB+hWO25JNMzVcjpE8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMt ZjFlOWJjNDFkOTJmLzEvcEVPVXdhV0xPNWR2Rzd1dlZJbzBfT0lsOUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83OTE2Y2QtNGQyZi00ZjUyLWFlYWMtZjFlOWJjNDFkOTJm LzEvTXUxbkFDM0hNSDZGWTdia2swek5WeU9rVHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSKDMA0G CSqGSIb3DQEBCwUAA4IBAQAvr0k0UHbMZtDHFuagcLliCimxt0W+g6vpzbnHLs6u 8b+RqaE3Ps/u/JwKHgoSTFl7MT23dNAqhHYaGi/usbcdE+ckbU1YwhpdByeBszNy /GV9ilchAGIyI19ocpIoQns9TdYwnR/jclK6Pq18qt/r6Pwo5H1YKt1pizntTWdm zCJBk9ptsDI3W0+WmkFmgerdkYJuFcA2klwOC8mo0HCSq6nz/jXNh2f9fN7hVT7T MYsJi1CLHcUtChLhp3p4E0ks6tiWMlHQ7p1NoYWMGrlV1xaA0E/rljzurly8wuGB JLxmaqTUFhTGO822vPod71Q/Khf2VfBQYvp7L+/eYc2K -----END CERTIFICATE-----Generated at Wed Jan 21 22:03:42 2026 by rpki-client