This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa File: P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa (raw, json) Hash identifier: U1J0vNwFsA81czhw4TBsP5/VLrBO35KlQLKDFzPg3rg= Subject key identifier: 3F:7E:AE:1E:E3:D2:E7:FD:59:71:B1:41:77:60:4A:F9:D9:7F:4E:20 Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3 Certificate serial: 019B7C7F272CBB2FB4F6E1400D70530E11DA Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa Signing time: Fri 02 Jan 2026 02:17:46 +0000 ROA not before: Fri 02 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207815 IP address blocks: 194.11.16.0/24 maxlen: 24 194.11.19.0/24 maxlen: 24 194.11.25.0/24 maxlen: 24 194.11.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:27:2c:bb:2f:b4:f6:e1:40:0d:70:53:0e:11:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f7eae1ee3d2e7fd5971b14177604af9d97f4e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:f1:ff:60:54:21:af:8d:cf:bf:2a:82:f2: 13:c4:40:0d:55:5e:90:24:03:3f:e9:02:6a:a6:dd: 02:d4:c4:82:55:3a:f9:8d:75:07:3e:80:5a:fc:0e: e0:ef:94:f5:0b:17:bd:bd:34:6b:fe:b1:71:ed:fe: af:5d:dd:ad:73:06:cf:05:51:e9:2e:ca:16:c0:62: ed:42:e1:3c:28:99:15:21:05:04:0e:71:07:ac:9a: 32:94:f0:2a:fa:aa:78:a0:a4:ba:9a:b4:cf:53:f1: 5c:69:4c:a4:98:f9:33:c0:be:4e:23:91:cb:83:eb: 50:45:e9:92:16:db:42:6d:cf:ab:39:dd:d9:58:c5: 8f:7b:e2:ac:80:e5:bd:32:1b:83:2f:5d:c5:fb:9e: a6:70:b0:34:0b:01:b0:c7:d2:e6:43:56:18:66:02: 19:a7:69:ab:1b:1c:03:03:19:7a:51:e5:fd:96:3b: 03:11:bf:c4:ee:ee:c9:fe:41:e6:fa:7b:df:ea:43: 9c:58:2f:ba:bd:0f:80:a5:96:40:c9:6f:93:70:97: 66:e6:27:0f:58:fb:26:0b:a3:c5:4b:8b:96:b3:dc: 3e:2d:2d:77:2f:42:c9:25:90:a9:46:fe:66:11:5a: 2c:3d:bc:ad:f0:f4:a9:3a:82:5d:43:33:40:b8:eb: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:AE:1E:E3:D2:E7:FD:59:71:B1:41:77:60:4A:F9:D9:7F:4E:20 X509v3 Authority Key Identifier: keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/P36uHuPS5_1ZcbFBd2BK-dl_TiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.16.0/24 194.11.19.0/24 194.11.25.0/24 194.11.83.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:00:a0:59:7d:52:47:1f:cf:88:6a:43:74:47:8c:59:db:02: c4:72:2d:00:84:6b:17:c9:92:88:88:d6:6c:9e:28:bb:07:fc: 86:9c:ca:ca:6a:f9:ec:08:3f:94:d6:0d:6b:6e:ba:fe:67:2e: e2:38:a9:8a:ef:7c:3d:97:37:59:d5:35:2a:c4:3d:88:ef:9e: 38:9e:8e:90:e0:3b:a6:b2:85:ef:c5:b4:2b:50:81:c7:56:c0: 15:35:83:3f:d8:a4:f8:f0:65:f5:d0:89:5c:40:dc:e3:03:f5: 83:0c:31:02:ca:f2:2d:b5:a5:dc:df:0d:1e:b9:b4:2b:65:07: 0d:e3:7a:ec:c1:77:d7:00:19:c4:9d:a8:3a:0b:cb:7f:4f:fb: d9:c3:9e:87:66:8b:79:4d:bf:43:11:8c:c5:88:80:d3:05:80: 74:a5:71:07:69:74:18:e9:62:87:54:69:c1:a3:b4:3b:c9:89: f8:5d:30:6a:8b:48:88:1f:0c:2d:1c:34:0a:3b:7e:31:a2:fe: 60:ef:da:89:47:aa:8d:3e:45:3c:76:4f:a2:41:24:53:42:df: 0a:c5:a2:4f:f4:c0:59:d6:94:df:0b:95:24:ad:87:7f:94:04: 19:63:72:85:80:88:c5:be:31:5b:14:19:98:e9:fc:e6:c6:85: 0a:17:ec:1c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8fycsuy+09uFADXBTDhHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZTI3MjBjNTdkYjAyNzYxMGM4MjFjODQwNDdiMTEwYmMz NmRkYzMwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjdlYWUxZWUzZDJlN2ZkNTk3MWIxNDE3NzYwNGFmOWQ5N2Y0ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTx/2BUIa+Nz78qgvITxEANVV6Q JAM/6QJqpt0C1MSCVTr5jXUHPoBa/A7g75T1Cxe9vTRr/rFx7f6vXd2tcwbPBVHp LsoWwGLtQuE8KJkVIQUEDnEHrJoylPAq+qp4oKS6mrTPU/FcaUykmPkzwL5OI5HL g+tQRemSFttCbc+rOd3ZWMWPe+KsgOW9MhuDL13F+56mcLA0CwGwx9LmQ1YYZgIZ p2mrGxwDAxl6UeX9ljsDEb/E7u7J/kHm+nvf6kOcWC+6vQ+ApZZAyW+TcJdm5icP WPsmC6PFS4uWs9w+LS13L0LJJZCpRv5mEVosPbyt8PSpOoJdQzNAuOvYWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD9+rh7j0uf9WXGxQXdgSvnZf04gMB8GA1UdIwQY MBaAFA3icgxX2wJ2EMghyEBHsRC8Nt3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAt NjMxMGJmNjMwNTFmLzEvUDM2dUh1UFM1XzFaY2JGQmQyQkstZGxfVGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jNWE1MzAtMTMwYi00YTYyLTk4MjAtNjMxMGJmNjMwNTFm LzEvRGVKeURGZmJBbllReUNISVFFZXhFTHcyM2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwgsQAwQA wgsTAwQAwgsZAwQAwgtTMA0GCSqGSIb3DQEBCwUAA4IBAQAeAKBZfVJHH8+IakN0 R4xZ2wLEci0AhGsXyZKIiNZsnii7B/yGnMrKavnsCD+U1g1rbrr+Zy7iOKmK73w9 lzdZ1TUqxD2I7544no6Q4DumsoXvxbQrUIHHVsAVNYM/2KT48GX10IlcQNzjA/WD DDECyvIttaXc3w0eubQrZQcN43rswXfXABnEnag6C8t/T/vZw56HZot5Tb9DEYzF iIDTBYB0pXEHaXQY6WKHVGnBo7Q7yYn4XTBqi0iIHwwtHDQKO34xov5g79qJR6qN PkU8dk+iQSRTQt8KxaJP9MBZ1pTfC5UkrYd/lAQZY3KFgIjFvjFbFBmY6fzmxoUK F+wc -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:09 2026 by rpki-client