This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa File: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (raw, json) Hash identifier: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM= Subject key identifier: 3F:9A:66:4C:D5:A4:F5:74:60:57:41:2D:B4:24:89:C0:E3:28:27:A8 Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9 Certificate serial: 019B7B36B5F3B79B21BCDEBED15F884D9B21 Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214785 IP address blocks: 195.190.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b5:f3:b7:9b:21:bc:de:be:d1:5f:88:4d:9b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9a664cd5a4f5746057412db42489c0e32827a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:1b:fa:c0:cf:fb:14:14:97:08:9f:b7:18: fa:f3:d1:f3:98:97:2b:32:08:7f:7b:ed:5d:e2:ce: ff:52:6b:7e:72:90:c9:e7:70:e4:d7:f7:59:53:f7: 90:93:c1:c6:77:1c:92:3b:8f:51:a0:27:aa:9f:8e: e9:51:e5:4e:1e:09:4f:61:79:c3:8d:ea:1a:70:8f: 81:8d:01:f2:60:96:34:a6:a8:a3:3e:ea:56:e4:d2: cc:39:72:68:12:46:c4:f0:28:36:c0:73:31:d6:26: 0b:14:8b:87:15:bc:cc:cf:41:4a:e0:15:4c:a4:d9: 6c:a1:5d:62:02:03:30:f7:9e:dc:62:aa:eb:44:a5: 6c:27:87:48:7b:40:59:f4:f6:60:a8:93:04:87:28: 49:f9:d8:5b:d8:30:a2:57:56:7b:97:0f:50:2e:ff: db:37:3a:ac:eb:6c:6f:19:2f:ca:62:ef:d9:24:19: 1d:0e:7e:c2:8c:66:36:79:51:97:53:19:a6:65:69: ab:30:4a:f7:26:4c:f0:15:61:0a:9e:92:a2:19:73: bb:8d:a1:f1:a7:bd:8f:61:e8:86:3f:4a:83:79:6b: 7c:0f:0d:f5:9f:4b:a4:b5:18:86:4a:12:62:37:52: 6e:57:f7:02:51:13:7d:94:39:b4:7a:e4:84:0b:4c: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9A:66:4C:D5:A4:F5:74:60:57:41:2D:B4:24:89:C0:E3:28:27:A8 X509v3 Authority Key Identifier: keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.130.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d9:eb:71:f8:50:dc:50:90:f8:d1:4c:5b:76:fc:9f:c2:ed: 4f:f2:7a:6f:29:23:31:1f:72:33:3c:6b:9b:70:c1:6d:59:3a: ff:22:25:24:5a:bf:90:b9:78:15:0c:0f:51:63:32:22:f8:2f: 28:9f:fb:79:13:44:26:b4:ad:2f:dc:f0:82:50:ad:fe:a5:27: d6:09:30:9b:28:20:da:d0:3b:01:45:30:29:90:ad:c8:be:be: ef:36:89:98:7e:b2:87:12:e2:2b:66:81:64:38:af:f7:58:40: a8:6a:e7:ba:19:41:c8:f5:73:a8:00:85:4c:1e:d0:6d:e5:76: 33:5c:33:16:3f:60:e3:70:b5:77:f0:4e:b4:34:bf:63:db:2e: 6c:51:57:36:ca:d4:9e:f4:bf:24:a8:27:40:39:0f:e5:37:39: d6:02:6f:a5:0f:20:c0:0d:1d:31:07:2b:9f:4e:db:3e:5a:1e: 03:b3:ce:28:a1:e9:ce:7c:1f:9a:bc:9f:46:17:ef:f1:85:2c: 1d:23:6b:b3:59:f9:7f:29:b9:21:5e:e7:93:50:af:16:2b:7d: 5c:15:d8:15:44:08:e8:f2:ef:70:80:2f:4c:18:d6:b3:90:89: af:2a:b4:91:94:ce:85:a4:bf:6e:19:8a:fd:f4:dd:5e:23:ec: 42:53:9a:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrXzt5shvN6+0V+ITZshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzZkYWYwMzc1NmJhZjgzYmE0ZjM4ZGJlNWQ2OGNiOWJh Y2VmZjkwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjlhNjY0Y2Q1YTRmNTc0NjA1NzQxMmRiNDI0ODljMGUzMjgyN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloYb+sDP+xQUlwiftxj689HzmJcr Mgh/e+1d4s7/Umt+cpDJ53Dk1/dZU/eQk8HGdxySO49RoCeqn47pUeVOHglPYXnD jeoacI+BjQHyYJY0pqijPupW5NLMOXJoEkbE8Cg2wHMx1iYLFIuHFbzMz0FK4BVM pNlsoV1iAgMw957cYqrrRKVsJ4dIe0BZ9PZgqJMEhyhJ+dhb2DCiV1Z7lw9QLv/b Nzqs62xvGS/KYu/ZJBkdDn7CjGY2eVGXUxmmZWmrMEr3JkzwFWEKnpKiGXO7jaHx p72PYeiGP0qDeWt8Dw31n0uktRiGShJiN1JuV/cCURN9lDm0euSEC0xQkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+aZkzVpPV0YFdBLbQkicDjKCeoMB8GA1UdIwQY MBaAFDk22vA3Vrr4O6Tzjb5daMubrO/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2Mt Zjk1ZjY2ZDYwNTVjLzEvUDVwbVROV2s5WFJnVjBFdHRDU0p3T01vSjZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2MtZjk1ZjY2ZDYwNTVj LzEvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76CMA0G CSqGSIb3DQEBCwUAA4IBAQCM2etx+FDcUJD40Uxbdvyfwu1P8npvKSMxH3IzPGub cMFtWTr/IiUkWr+QuXgVDA9RYzIi+C8on/t5E0QmtK0v3PCCUK3+pSfWCTCbKCDa 0DsBRTApkK3Ivr7vNomYfrKHEuIrZoFkOK/3WECoaue6GUHI9XOoAIVMHtBt5XYz XDMWP2DjcLV38E60NL9j2y5sUVc2ytSe9L8kqCdAOQ/lNznWAm+lDyDADR0xByuf Tts+Wh4Ds84ooenOfB+avJ9GF+/xhSwdI2uzWfl/KbkhXueTUK8WK31cFdgVRAjo 8u9wgC9MGNazkImvKrSRlM6FpL9uGYr99N1eI+xCU5rJ -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:47 2026 by rpki-client