This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/POj4_0IjkoRQHzWCydUSaXOI1sk.roa File: POj4_0IjkoRQHzWCydUSaXOI1sk.roa (raw, json) Hash identifier: OXXoe1i5VmrRsJ4ZrhX2i51+dmFyvJThd+6tYO7luGY= Subject key identifier: 3C:E8:F8:FF:42:23:92:84:50:1F:35:82:C9:D5:12:69:73:88:D6:C9 Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91 Certificate serial: 019B78A32C7442F7E75CD0DEC8EBF4E2420E Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/POj4_0IjkoRQHzWCydUSaXOI1sk.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 185.207.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:74:42:f7:e7:5c:d0:de:c8:eb:f4:e2:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ce8f8ff42239284501f3582c9d512697388d6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:a2:b3:5f:86:91:94:0c:e5:58:b3:ab:e0: 7c:39:25:5c:91:c3:a0:fa:52:03:ed:72:03:92:01: 8d:88:14:6d:3e:78:fd:d2:7b:9f:19:5c:8a:78:fe: ca:cf:30:9b:75:49:b7:c2:bc:1d:6a:29:57:cb:18: a8:38:5b:f4:25:d7:7c:1f:a5:25:e1:23:1d:18:06: e9:7b:b5:d4:21:97:e7:88:51:67:43:d9:14:2b:07: fd:22:ae:4e:ef:6f:2e:bb:86:75:13:b1:d0:56:08: cd:eb:60:e4:05:c1:11:fa:90:2e:b7:70:4f:44:0e: bf:ad:67:bb:03:c5:1b:be:a5:c1:1d:d7:4b:5d:79: 33:39:fa:d6:52:a4:04:2a:86:aa:e8:fe:00:b3:bb: 14:7c:3a:9b:b4:72:0d:8f:a9:2a:51:29:f5:ea:79: d7:a3:a5:a2:2f:05:98:80:41:a6:ab:6d:32:8e:a5: a8:ce:fe:90:bf:77:77:7a:a9:97:98:db:87:78:06: e3:f0:1c:b1:d6:b6:32:90:d2:cb:41:bf:72:da:76: eb:76:2d:69:9c:4a:d1:cc:fb:f6:92:84:1e:df:ef: 5b:4c:ac:9e:7c:ba:07:8d:9f:27:01:bb:89:5e:a5: 72:76:c3:bf:7d:85:35:29:a9:89:05:90:a6:f8:26: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E8:F8:FF:42:23:92:84:50:1F:35:82:C9:D5:12:69:73:88:D6:C9 X509v3 Authority Key Identifier: keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/POj4_0IjkoRQHzWCydUSaXOI1sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.164.0/22 Signature Algorithm: sha256WithRSAEncryption 07:91:34:90:29:97:72:dd:9d:d2:e2:5e:00:e0:fd:64:4f:6c: af:83:32:de:99:22:a8:74:05:92:97:34:36:f0:57:8c:fa:01: d5:5c:b2:f6:20:2d:ef:b0:d8:c7:69:7a:97:56:69:89:36:2c: 7a:1d:1f:85:c6:0f:8b:09:ba:2b:fd:55:b6:d1:17:d3:60:7e: 19:36:41:d2:1b:80:98:13:a5:c1:c0:f0:9d:57:14:75:2f:78: 9d:72:93:a8:92:ac:ae:92:17:71:d7:1a:13:07:56:54:bd:4e: 1e:f2:89:66:cd:bf:cf:fd:da:bc:98:1f:7c:47:3b:2b:99:ac: 81:cc:64:a3:ff:c4:cd:67:2f:f0:e7:14:bf:0d:c1:0d:18:f5: d1:bd:5a:58:cc:db:f0:ab:5d:44:d1:5d:7a:0c:97:32:8d:63: 13:1b:8f:f5:7e:d7:8b:10:3b:ad:0a:30:9e:14:e5:b4:d1:12: 7e:4f:3b:7c:78:88:a6:23:74:90:d3:33:80:67:3c:70:25:a0: cf:fc:3a:3d:20:c6:28:aa:3b:f2:1d:0d:5e:0a:fd:56:b2:ca: 11:96:6b:cc:8d:20:41:a5:1c:9f:0d:51:f1:96:44:10:ac:dc: 66:09:97:78:0c:f9:2d:4a:3e:58:33:d1:5a:30:4d:8f:e8:11: 20:c0:04:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyx0QvfnXNDeyOv04kIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5 MGFhOTEwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2U4ZjhmZjQyMjM5Mjg0NTAxZjM1ODJjOWQ1MTI2OTczODhkNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7Sis1+GkZQM5Vizq+B8OSVckcOg +lID7XIDkgGNiBRtPnj90nufGVyKeP7KzzCbdUm3wrwdailXyxioOFv0Jdd8H6Ul 4SMdGAbpe7XUIZfniFFnQ9kUKwf9Iq5O728uu4Z1E7HQVgjN62DkBcER+pAut3BP RA6/rWe7A8UbvqXBHddLXXkzOfrWUqQEKoaq6P4As7sUfDqbtHINj6kqUSn16nnX o6WiLwWYgEGmq20yjqWozv6Qv3d3eqmXmNuHeAbj8Byx1rYykNLLQb9y2nbrdi1p nErRzPv2koQe3+9bTKyefLoHjZ8nAbuJXqVydsO/fYU1KamJBZCm+CaY2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzo+P9CI5KEUB81gsnVEmlziNbJMB8GA1UdIwQY MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt ODU0MzgxNjg2YzdiLzEvUE9qNF8wSWprb1JRSHpXQ3lkVVNhWE9JMXNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc+kMA0G CSqGSIb3DQEBCwUAA4IBAQAHkTSQKZdy3Z3S4l4A4P1kT2yvgzLemSKodAWSlzQ2 8FeM+gHVXLL2IC3vsNjHaXqXVmmJNix6HR+Fxg+LCbor/VW20RfTYH4ZNkHSG4CY E6XBwPCdVxR1L3idcpOokqyukhdx1xoTB1ZUvU4e8olmzb/P/dq8mB98RzsrmayB zGSj/8TNZy/w5xS/DcENGPXRvVpYzNvwq11E0V16DJcyjWMTG4/1fteLEDutCjCe FOW00RJ+Tzt8eIimI3SQ0zOAZzxwJaDP/Do9IMYoqjvyHQ1eCv1WssoRlmvMjSBB pRyfDVHxlkQQrNxmCZd4DPktSj5YM9FaME2P6BEgwAQh -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:29 2026 by rpki-client