This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/Psndu95QZf6tgKNvQkbaDhxNkYg.roa File: Psndu95QZf6tgKNvQkbaDhxNkYg.roa (raw, json) Hash identifier: d9f4EyfJsmR2vvAcSDXuO/gBDmodHHefWdbiiIbdVEk= Subject key identifier: 3E:C9:DD:BB:DE:50:65:FE:AD:80:A3:6F:42:46:DA:0E:1C:4D:91:88 Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46 Certificate serial: 019B7EA6B1EB12A230B557F8F904A654DDBE Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/Psndu95QZf6tgKNvQkbaDhxNkYg.roa Signing time: Fri 02 Jan 2026 12:20:12 +0000 ROA not before: Fri 02 Jan 2026 12:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31390 IP address blocks: 185.100.216.0/24 maxlen: 24 185.100.217.0/24 maxlen: 24 185.100.218.0/24 maxlen: 24 185.100.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b1:eb:12:a2:30:b5:57:f8:f9:04:a6:54:dd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46 Validity Not Before: Jan 2 12:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ec9ddbbde5065fead80a36f4246da0e1c4d9188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:ce:4d:92:a1:de:a7:46:7a:fe:84:c7:ab: ff:80:36:26:44:68:ca:16:8f:0f:fb:d4:7e:2a:3b: e1:6e:d3:ed:41:a0:d2:ac:ed:3e:fb:9f:ec:3e:24: ef:85:0b:7f:d1:7b:4a:f3:e7:09:b6:15:ee:cb:7c: bf:b5:74:4d:ac:94:12:15:0d:af:fb:af:d5:5d:03: 56:52:ee:79:fa:37:fc:27:a9:c1:3e:ee:e6:8e:48: 48:c7:e7:d5:13:3f:6a:36:f2:f6:64:3c:7c:28:a6: b6:a6:1c:40:40:a9:5a:1a:83:40:e2:b2:cc:dd:20: 63:24:64:79:19:d9:0b:5b:88:1e:f1:22:7c:60:95: 11:3c:aa:c7:1b:49:9a:a1:7b:5f:9a:99:42:c9:c6: aa:e4:d2:c8:72:a9:9b:cc:40:58:ad:ec:ed:8b:a1: ca:32:31:f1:a0:c9:0d:49:22:28:52:86:e8:00:ba: 4b:08:45:2c:46:f9:cc:e1:fa:2b:99:15:2f:b4:cb: 18:b2:0c:95:2f:43:9f:8f:1f:e8:8e:02:e7:11:e3: a6:d6:90:89:29:69:4e:d3:6f:6e:43:5e:63:6c:b5: 9b:b8:b4:5d:2d:ff:32:bc:e0:60:eb:ac:2a:8f:90: d2:99:63:4d:5e:4b:e7:e9:48:74:43:e1:b3:84:f2: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:DD:BB:DE:50:65:FE:AD:80:A3:6F:42:46:DA:0E:1C:4D:91:88 X509v3 Authority Key Identifier: keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/Psndu95QZf6tgKNvQkbaDhxNkYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.216.0/22 Signature Algorithm: sha256WithRSAEncryption c7:6d:cb:7c:2f:10:0c:3b:99:fb:f0:13:9b:73:b8:d1:2c:59: 39:83:15:c6:17:45:da:1f:7e:3a:9a:08:c8:a2:7d:84:d8:8c: 99:15:ce:34:a4:05:bf:6a:70:84:30:ae:2f:32:6a:34:09:79: 94:d8:96:22:2d:d0:fb:ce:74:9c:e2:fa:50:35:42:1d:63:91: a5:fe:7b:79:1f:cd:25:73:1c:71:df:e6:8d:04:32:2c:e7:e2: ac:b5:c6:f0:4a:11:98:9c:cd:3f:a0:7b:b6:ce:f9:a9:77:7d: 81:09:a7:b4:eb:1a:03:b6:74:be:36:91:07:3a:e5:fd:a4:73: f6:5f:01:b7:c7:d3:ad:bd:5b:24:d3:97:62:ef:f7:4a:75:96: ec:f4:10:40:37:66:16:a8:25:51:91:d9:49:b4:9f:81:4a:24: f9:f7:70:b4:3b:03:24:9e:73:f2:7a:4e:e8:c0:a9:44:89:6f: 69:3f:e3:b1:a3:64:e2:f2:d2:c9:15:b7:89:48:51:b8:3f:c0: 1d:6c:c7:09:e6:17:b0:ef:e0:97:94:f2:ff:c6:5e:bf:b4:d7: b3:e0:7e:6c:09:3a:a4:38:66:b8:50:f9:0b:e4:88:5d:67:97: 21:3e:9a:ba:29:ab:b6:3a:52:3d:b4:4b:f1:b7:0f:a1:ed:ee: 85:18:70:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prHrEqIwtVf4+QSmVN2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYmQyNzNhMTQ1MzYxNjE1NTEyNjBkODQ4ZDc2ZmEyNjQ0 NmNkNDYwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWM5ZGRiYmRlNTA2NWZlYWQ4MGEzNmY0MjQ2ZGEwZTFjNGQ5MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rnOTZKh3qdGev6Ex6v/gDYmRGjK Fo8P+9R+KjvhbtPtQaDSrO0++5/sPiTvhQt/0XtK8+cJthXuy3y/tXRNrJQSFQ2v +6/VXQNWUu55+jf8J6nBPu7mjkhIx+fVEz9qNvL2ZDx8KKa2phxAQKlaGoNA4rLM 3SBjJGR5GdkLW4ge8SJ8YJURPKrHG0maoXtfmplCycaq5NLIcqmbzEBYrezti6HK MjHxoMkNSSIoUoboALpLCEUsRvnM4formRUvtMsYsgyVL0Ofjx/ojgLnEeOm1pCJ KWlO029uQ15jbLWbuLRdLf8yvOBg66wqj5DSmWNNXkvn6Uh0Q+GzhPL5owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7J3bveUGX+rYCjb0JG2g4cTZGIMB8GA1UdIwQY MBaAFIu9JzoUU2FhVRJg2EjXb6JkRs1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTct ZTE2MjIwMzI5NmJiLzEvUHNuZHU5NVFaZjZ0Z0tOdlFrYmFEaHhOa1lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTctZTE2MjIwMzI5NmJi LzEvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWTYMA0G CSqGSIb3DQEBCwUAA4IBAQDHbct8LxAMO5n78BObc7jRLFk5gxXGF0XaH346mgjI on2E2IyZFc40pAW/anCEMK4vMmo0CXmU2JYiLdD7znSc4vpQNUIdY5Gl/nt5H80l cxxx3+aNBDIs5+KstcbwShGYnM0/oHu2zvmpd32BCae06xoDtnS+NpEHOuX9pHP2 XwG3x9OtvVsk05di7/dKdZbs9BBAN2YWqCVRkdlJtJ+BSiT593C0OwMknnPyek7o wKlEiW9pP+Oxo2Ti8tLJFbeJSFG4P8AdbMcJ5hew7+CXlPL/xl6/tNez4H5sCTqk OGa4UPkL5IhdZ5chPpq6Kau2OlI9tEvxtw+h7e6FGHCm -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:09 2026 by rpki-client