This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa File: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (raw, json) Hash identifier: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU= Subject key identifier: 3C:ED:28:1A:17:00:72:EE:2B:9C:CC:6A:07:B8:B7:12:01:DC:7E:69 Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Certificate serial: 019B77C70F47A4BFF4E835250A888699C68F Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 193.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0f:47:a4:bf:f4:e8:35:25:0a:88:86:99:c6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ced281a170072ee2b9ccc6a07b8b71201dc7e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:7b:99:c9:6c:d0:45:99:c4:38:75:f6:37: 80:f4:7a:64:3a:c5:fe:56:84:6e:02:1f:7c:e8:8e: 1f:f3:f6:27:a4:ff:3b:b4:3e:a8:6f:9f:38:30:44: 3e:9d:7a:b8:19:f8:a3:41:a2:d6:4f:eb:bf:6b:a5: 86:73:ad:5b:cf:d2:2e:95:95:5a:a6:f8:d8:45:19: 19:52:0b:01:d6:fd:28:c5:69:d7:68:74:86:c8:c7: ef:d4:f7:e8:17:a8:7b:66:2b:56:8b:4e:a2:3d:b3: aa:4c:a9:66:68:fa:b7:af:de:c4:bd:6c:c3:5e:58: e3:43:97:67:e5:90:48:58:cc:aa:88:bc:ab:b5:6f: 7f:64:31:a6:da:a6:ed:3a:2b:b7:e9:b9:df:ec:4d: 64:7b:f8:28:a8:9c:3e:5a:93:f8:a2:f0:ec:72:4a: fa:5f:7d:f9:ca:62:c4:50:ac:67:c2:99:d4:ff:ce: 3f:6c:f2:cd:09:76:cd:31:0f:16:14:53:83:ce:6d: 08:59:b0:aa:5e:f5:ae:b7:53:91:98:b1:33:8b:e7: e0:96:86:e4:91:22:9a:fb:33:ad:10:55:b6:d5:aa: 1b:33:79:dc:f2:94:12:7d:6e:dd:2c:cd:35:ac:84: c3:a8:aa:68:ad:a2:70:d4:e6:4f:b2:74:7e:22:b6: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:28:1A:17:00:72:EE:2B:9C:CC:6A:07:B8:B7:12:01:DC:7E:69 X509v3 Authority Key Identifier: keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.109.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:86:6e:a7:57:75:b4:72:fa:1c:bd:59:0d:3e:2a:67:18:cb: 9b:50:a1:19:b8:34:22:bd:30:a0:99:04:de:4a:74:2e:72:95: a3:ba:c7:0b:b1:ad:92:fe:81:1e:d3:03:e0:00:fa:4a:b5:c5: 51:4f:05:77:b2:46:f5:14:84:a9:30:19:43:f3:77:b6:13:7c: 94:72:d1:80:b2:cb:69:84:80:81:4a:c2:a5:e0:16:81:c9:5f: 5d:e6:48:b2:3e:c1:61:bc:8f:aa:16:e8:05:56:31:96:ec:3d: cf:85:86:40:52:9d:34:0b:be:81:fe:2b:40:bf:0e:73:5e:2d: 76:3b:d0:5c:1c:cf:fd:fd:b9:5e:98:01:38:d9:66:b5:52:24: 15:a9:8e:03:66:bd:1b:9d:bb:e9:b1:9e:71:a2:f1:98:05:9d: 3b:cf:f7:b4:66:eb:34:82:52:5f:9f:16:d3:76:ee:76:d1:2e: 4e:ae:d1:3d:da:36:d5:fa:04:61:72:64:55:52:52:32:45:01: f6:1c:73:63:98:6e:c0:1c:59:88:3a:f8:a2:01:4c:20:ed:d2: d7:c9:c4:54:59:be:39:91:59:4c:fe:bd:5b:83:b6:32:75:3f: bc:aa:8e:45:25:85:cd:34:00:1a:a5:04:ae:f7:1c:0c:f5:90: c4:25:3e:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xw9HpL/06DUlCoiGmcaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjExYjRlYWEyZTBiMzdmNzJjYzA4YWM5Mjk2MTk4MWVh YmIyMWYwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2VkMjgxYTE3MDA3MmVlMmI5Y2NjNmEwN2I4YjcxMjAxZGM3ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJ7mcls0EWZxDh19jeA9HpkOsX+ VoRuAh986I4f8/YnpP87tD6ob584MEQ+nXq4GfijQaLWT+u/a6WGc61bz9IulZVa pvjYRRkZUgsB1v0oxWnXaHSGyMfv1PfoF6h7ZitWi06iPbOqTKlmaPq3r97EvWzD XljjQ5dn5ZBIWMyqiLyrtW9/ZDGm2qbtOiu36bnf7E1ke/goqJw+WpP4ovDsckr6 X335ymLEUKxnwpnU/84/bPLNCXbNMQ8WFFODzm0IWbCqXvWut1ORmLEzi+fglobk kSKa+zOtEFW21aobM3nc8pQSfW7dLM01rITDqKporaJw1OZPsnR+IrYUzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDztKBoXAHLuK5zMage4txIB3H5pMB8GA1UdIwQY MBaAFAJhG06qLgs39yzAiskpYZgeq7IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2Qt MTJjNGJkODA1OGFhLzEvUE8wb0doY0FjdTRybk14cUI3aTNFZ0hjZm1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2QtMTJjNGJkODA1OGFh LzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSttMA0G CSqGSIb3DQEBCwUAA4IBAQAvhm6nV3W0cvocvVkNPipnGMubUKEZuDQivTCgmQTe SnQucpWjuscLsa2S/oEe0wPgAPpKtcVRTwV3skb1FISpMBlD83e2E3yUctGAsstp hICBSsKl4BaByV9d5kiyPsFhvI+qFugFVjGW7D3PhYZAUp00C76B/itAvw5zXi12 O9BcHM/9/blemAE42Wa1UiQVqY4DZr0bnbvpsZ5xovGYBZ07z/e0Zus0glJfnxbT du520S5OrtE92jbV+gRhcmRVUlIyRQH2HHNjmG7AHFmIOviiAUwg7dLXycRUWb45 kVlM/r1bg7YydT+8qo5FJYXNNAAapQSu9xwM9ZDEJT6/ -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:39 2026 by rpki-client