This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/pLo7yeor3yvWz_bHf888b08GSSo.roa File: pLo7yeor3yvWz_bHf888b08GSSo.roa (raw, json) Hash identifier: 8qMgd9TM0x86p9/1D7RQi+vTq1bW9K6YhRD76Hg6SSc= Subject key identifier: A4:BA:3B:C9:EA:2B:DF:2B:D6:CF:F6:C7:7F:CF:3C:6F:4F:06:49:2A Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Certificate serial: 019B76EB72856355EE53F05F157A1940D428 Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/pLo7yeor3yvWz_bHf888b08GSSo.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50926 IP address blocks: 185.251.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:72:85:63:55:ee:53:f0:5f:15:7a:19:40:d4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ba3bc9ea2bdf2bd6cff6c77fcf3c6f4f06492a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:11:e0:03:56:4c:8e:a7:07:d6:9b:96:98: 9e:17:2f:ae:ee:3a:d3:35:fe:6d:bd:c7:0b:f3:46: 70:2d:11:55:9a:b3:71:29:da:36:f1:87:b8:1a:e4: 1f:2e:4b:0e:0c:d5:a1:cf:26:03:1d:c0:2f:a8:10: d7:d2:63:e3:ac:98:c3:7b:6f:08:23:73:14:73:a1: 09:89:e9:9c:24:d6:54:b3:45:8f:1c:7d:24:b1:5c: c1:f4:c5:0a:d0:c8:42:6b:95:0b:dd:90:17:cc:55: 19:1e:42:3d:b6:4c:33:c1:98:3f:93:5f:e8:f5:04: 6a:0b:dc:89:84:bb:36:e2:a6:58:c2:da:8d:a7:a9: f1:37:73:f9:08:35:e6:98:04:47:2c:95:e3:c8:ed: 9f:04:a2:2d:b5:da:e4:79:c9:dc:50:54:f0:66:58: a7:96:a5:7a:da:59:81:a0:a7:1f:c8:0c:db:b1:9b: 7d:e7:1b:cc:1f:01:c0:61:0b:f5:25:91:f1:f5:83: fe:8e:6c:c3:6f:e6:69:24:8e:7d:27:f2:f2:53:19: 25:3d:dc:a3:fa:f2:cd:54:dc:5f:dc:4e:c2:f2:b6: f6:9a:85:e2:0d:e9:41:35:11:cc:16:33:be:f1:da: e8:5f:12:73:99:ee:2a:0a:08:b4:59:7c:04:65:3d: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BA:3B:C9:EA:2B:DF:2B:D6:CF:F6:C7:7F:CF:3C:6F:4F:06:49:2A X509v3 Authority Key Identifier: keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/pLo7yeor3yvWz_bHf888b08GSSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.128.0/22 Signature Algorithm: sha256WithRSAEncryption 51:77:83:2d:eb:ee:b9:ee:56:5c:ef:d2:b1:d9:6f:9d:e4:ac: 43:f7:57:78:ba:cb:16:a5:9e:9c:3b:f7:81:8c:49:00:7c:34: 27:eb:85:1d:7a:eb:09:53:75:ec:8b:a9:cb:87:23:34:6c:a9: a5:e2:3e:16:08:22:e2:22:b7:e3:56:ad:06:c7:a5:42:89:80: 56:df:bb:2d:54:6c:8b:80:e5:9e:27:60:da:03:68:e5:40:bc: f9:ed:25:90:ac:9e:65:d3:44:81:f9:d7:38:2a:bd:89:ad:c1: b2:25:1f:28:62:ce:89:b9:e1:cb:39:ee:ef:b4:37:88:e9:40: 53:34:24:72:3b:ae:e6:01:d0:51:0a:aa:b7:5b:66:51:a7:2b: 7d:ee:2e:98:d7:20:4d:eb:42:d5:64:65:42:0f:76:f2:ea:55: cf:e4:34:9f:d8:db:77:e4:09:4f:19:a1:ee:7b:59:f2:64:e1: d9:47:03:0c:41:a0:01:4e:7a:8b:d6:91:24:9b:11:58:12:d1: c1:1b:b5:2f:ba:80:31:5f:f0:bd:5b:6e:e2:12:f8:2b:69:c5: 31:f4:a9:1e:01:49:07:73:06:0e:8c:73:7b:ab:03:8d:d6:b3: c9:bc:7d:d7:b0:c9:60:1f:44:a6:93:49:39:0d:5a:93:c0:a0: fb:41:7e:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263KFY1XuU/BfFXoZQNQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmYzNWQ4OTkwYTdiMjk0YzQ1Mzk1NmUwZTgyNDJjMGFh Y2IwMzEwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGJhM2JjOWVhMmJkZjJiZDZjZmY2Yzc3ZmNmM2M2ZjRmMDY0OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sUR4ANWTI6nB9ablpieFy+u7jrT Nf5tvccL80ZwLRFVmrNxKdo28Ye4GuQfLksODNWhzyYDHcAvqBDX0mPjrJjDe28I I3MUc6EJiemcJNZUs0WPHH0ksVzB9MUK0MhCa5UL3ZAXzFUZHkI9tkwzwZg/k1/o 9QRqC9yJhLs24qZYwtqNp6nxN3P5CDXmmARHLJXjyO2fBKIttdrkecncUFTwZlin lqV62lmBoKcfyAzbsZt95xvMHwHAYQv1JZHx9YP+jmzDb+ZpJI59J/LyUxklPdyj +vLNVNxf3E7C8rb2moXiDelBNRHMFjO+8droXxJzme4qCgi0WXwEZT19dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKS6O8nqK98r1s/2x3/PPG9PBkkqMB8GA1UdIwQY MBaAFG1vNdiZCnspTEU5VuDoJCwKrLAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUt N2EwOTZmNjA3ZTI2LzEvcExvN3llb3IzeXZXel9iSGY4ODhiMDhHU1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUtN2EwOTZmNjA3ZTI2 LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufuAMA0G CSqGSIb3DQEBCwUAA4IBAQBRd4Mt6+657lZc79Kx2W+d5KxD91d4ussWpZ6cO/eB jEkAfDQn64UdeusJU3Xsi6nLhyM0bKml4j4WCCLiIrfjVq0Gx6VCiYBW37stVGyL gOWeJ2DaA2jlQLz57SWQrJ5l00SB+dc4Kr2JrcGyJR8oYs6JueHLOe7vtDeI6UBT NCRyO67mAdBRCqq3W2ZRpyt97i6Y1yBN60LVZGVCD3by6lXP5DSf2Nt35AlPGaHu e1nyZOHZRwMMQaABTnqL1pEkmxFYEtHBG7UvuoAxX/C9W27iEvgracUx9KkeAUkH cwYOjHN7qwON1rPJvH3XsMlgH0Smk0k5DVqTwKD7QX5E -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:22 2026 by rpki-client