This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pC1PxnBfbpu2eskCC6g9M0LEFYc.roa File: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (raw, json) Hash identifier: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc= Subject key identifier: A4:2D:4F:C6:70:5F:6E:9B:B6:7A:C9:02:0B:A8:3D:33:42:C4:15:87 Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Certificate serial: 019B7B35C2E383A9B84793B742F3755A7C8E Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pC1PxnBfbpu2eskCC6g9M0LEFYc.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 89.107.184.0/21 maxlen: 21 185.18.92.0/22 maxlen: 22 2a01:50c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c2:e3:83:a9:b8:47:93:b7:42:f3:75:5a:7c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42d4fc6705f6e9bb67ac9020ba83d3342c41587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:46:f9:e3:93:f6:27:3b:a5:69:bd:61:26: 34:a9:8d:9f:63:33:ff:55:d3:a5:d4:25:f4:b5:0f: 4c:1f:37:48:c0:df:74:41:dd:d3:3a:40:28:b3:6f: 3b:3f:f7:ef:d9:09:47:57:ee:6e:c3:35:4f:b9:95: 95:23:60:a7:db:5b:8e:6e:fc:53:67:a8:34:ca:03: 65:0a:ab:46:d7:5e:17:4d:35:5a:d5:61:db:51:a9: e3:91:18:51:63:df:8f:68:a3:0f:fa:cb:02:59:81: 87:97:71:5a:d7:d4:13:61:95:82:d6:12:f4:d0:92: 00:a8:dd:9b:7d:92:12:ce:4b:e1:fd:7b:7e:4c:2d: ce:d8:52:d6:b9:33:1f:1c:2d:dd:d9:e5:53:c7:51: c7:84:6c:d6:73:61:95:20:aa:98:c6:b6:bd:2f:be: 00:0d:cc:44:56:e6:11:b3:4d:a7:3d:a1:58:1e:19: cf:82:f4:05:db:ce:49:e3:5f:ce:67:30:50:f1:65: cf:c1:f4:c8:fb:50:ce:b6:4f:fb:d4:b5:a1:b2:9d: cf:ab:32:60:fd:7c:70:5b:02:15:14:ba:75:09:b7: b3:66:4a:47:c7:23:09:fe:b8:2d:42:65:53:bb:c1: 54:50:1f:40:a6:6b:fe:a2:a9:7a:62:48:4b:bf:27: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:4F:C6:70:5F:6E:9B:B6:7A:C9:02:0B:A8:3D:33:42:C4:15:87 X509v3 Authority Key Identifier: keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pC1PxnBfbpu2eskCC6g9M0LEFYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.184.0/21 185.18.92.0/22 IPv6: 2a01:50c0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 1c:bf:ff:5e:43:d9:9d:61:f5:de:cc:70:cb:b7:24:72:44:bc: b9:7d:f8:5f:44:59:6f:17:e5:fa:82:a2:8f:7d:59:77:47:03: 77:0a:06:e5:a1:6d:c4:ab:a8:9a:ec:e4:6c:c9:ca:72:79:e7: ba:56:22:db:f6:8d:68:d5:5e:96:fb:ad:ec:c8:75:c3:c3:07: 0f:d2:66:2f:64:8e:92:71:76:44:f1:a3:20:7d:e6:9c:e4:9a: e6:11:2b:98:d3:8d:83:a3:16:b6:95:e5:56:ed:8a:ec:52:90: dd:f1:0a:11:7d:fb:a7:0e:9d:a1:a5:3a:e9:ab:e9:6b:84:1d: c2:b3:26:1d:81:28:de:c9:c9:fd:ca:dd:78:95:33:19:09:96: d4:bb:ca:c5:a4:99:06:1d:4e:ff:af:dc:a6:55:20:74:42:39: da:c5:45:bc:db:52:9c:e8:9d:60:10:bd:91:35:84:c4:4f:91: 0d:55:7e:e4:4c:de:ef:fd:8e:00:bc:93:bc:8c:6b:96:fc:cb: 3f:75:ba:76:d9:ee:88:56:2d:f1:92:51:04:d6:69:6a:29:46: 2d:97:44:3b:32:fc:14:76:de:a3:ca:25:42:cf:c4:1e:e7:e5: c3:26:21:75:13:88:05:55:b1:e8:69:a5:20:27:5a:47:91:e7: cc:c5:0f:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7NcLjg6m4R5O3QvN1WnyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk NmM1YTUwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJkNGZjNjcwNWY2ZTliYjY3YWM5MDIwYmE4M2QzMzQyYzQxNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugNG+eOT9ic7pWm9YSY0qY2fYzP/ VdOl1CX0tQ9MHzdIwN90Qd3TOkAos287P/fv2QlHV+5uwzVPuZWVI2Cn21uObvxT Z6g0ygNlCqtG114XTTVa1WHbUanjkRhRY9+PaKMP+ssCWYGHl3Fa19QTYZWC1hL0 0JIAqN2bfZISzkvh/Xt+TC3O2FLWuTMfHC3d2eVTx1HHhGzWc2GVIKqYxra9L74A DcxEVuYRs02nPaFYHhnPgvQF285J41/OZzBQ8WXPwfTI+1DOtk/71LWhsp3PqzJg /XxwWwIVFLp1CbezZkpHxyMJ/rgtQmVTu8FUUB9Apmv+oql6YkhLvyd/lwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFKQtT8ZwX26btnrJAguoPTNCxBWHMB8GA1UdIwQY MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt ZTkzMDFhZmMzODRmLzEvcEMxUHhuQmZicHUyZXNrQ0M2ZzlNMExFRlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDWWu4AwQC uRJcMA4EAgACMAgDBgQqAVDAEDANBgkqhkiG9w0BAQsFAAOCAQEAHL//XkPZnWH1 3sxwy7ckckS8uX34X0RZbxfl+oKij31Zd0cDdwoG5aFtxKuomuzkbMnKcnnnulYi 2/aNaNVelvut7Mh1w8MHD9JmL2SOknF2RPGjIH3mnOSa5hErmNONg6MWtpXlVu2K 7FKQ3fEKEX37pw6doaU66avpa4QdwrMmHYEo3snJ/crdeJUzGQmW1LvKxaSZBh1O /6/cplUgdEI52sVFvNtSnOidYBC9kTWExE+RDVV+5Eze7/2OALyTvIxrlvzLP3W6 dtnuiFYt8ZJRBNZpailGLZdEOzL8FHbeo8olQs/EHuflwyYhdROIBVWx6GmlICda R5HnzMUPsA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:43 2026 by rpki-client