This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/pNlley5H_9TvcEcVei0jRvY3Yrg.roa File: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (raw, json) Hash identifier: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk= Subject key identifier: A4:D9:65:7B:2E:47:FF:D4:EF:70:47:15:7A:2D:23:46:F6:37:62:B8 Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Certificate serial: 019B783493676404B2AE0F417FB0EF13BA1C Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/pNlley5H_9TvcEcVei0jRvY3Yrg.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34964 IP address blocks: 193.189.146.0/24 maxlen: 24 2001:67c:21f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:93:67:64:04:b2:ae:0f:41:7f:b0:ef:13:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4d9657b2e47ffd4ef7047157a2d2346f63762b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:8b:84:1e:f6:bc:96:fc:cb:ee:8f:53:54: 0b:a3:66:f8:b8:e6:e9:3f:d2:9d:cc:44:f4:d4:9d: e5:fe:c4:16:3b:ba:22:54:cf:5d:f6:0f:9f:c8:94: 4c:21:8b:df:5e:5c:24:8e:c1:79:f4:c5:c5:7e:4a: 75:8f:2f:20:43:de:c8:69:d9:d3:e4:d8:eb:24:c4: 9a:99:be:7d:bc:dc:a6:7e:7b:44:bc:d1:fd:f8:00: 40:11:09:26:20:ca:06:14:cd:8d:58:e0:88:32:8f: 2f:40:4e:f9:a1:4c:80:44:5f:55:df:94:64:9e:cd: 04:f5:53:9a:aa:69:64:fa:3b:af:15:53:1b:7f:f9: 0f:09:9e:2e:d5:2e:58:78:0f:27:aa:a4:fb:b2:2b: 10:88:36:4a:19:81:83:a9:5b:bf:54:c7:b1:08:5b: cc:f8:aa:d4:a5:b7:1e:cd:a9:fa:28:1f:2c:90:f2: 0b:e0:08:85:37:eb:a3:50:2e:ff:f4:e2:8f:60:20: 53:64:d4:2e:dc:d3:98:a0:ee:ee:8d:99:7f:3a:20: 70:4b:c2:eb:6f:da:aa:6e:53:54:ef:4c:cd:34:d6: d2:f2:66:fb:0b:3b:0a:45:39:bc:e8:96:b6:56:38: dc:78:4a:ec:03:05:04:95:bd:6c:e3:a0:42:09:80: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:65:7B:2E:47:FF:D4:EF:70:47:15:7A:2D:23:46:F6:37:62:B8 X509v3 Authority Key Identifier: keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/pNlley5H_9TvcEcVei0jRvY3Yrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.146.0/24 IPv6: 2001:67c:21f8::/48 Signature Algorithm: sha256WithRSAEncryption 3b:86:76:a6:08:86:0d:06:74:fe:e7:74:3e:2b:13:20:cc:6b: 8c:8b:59:e8:fd:ea:15:02:df:9b:58:81:87:96:45:3c:82:02: 3d:bd:b5:61:01:ff:ce:33:d4:e5:a9:9a:16:65:64:56:f7:f8: 1d:d7:bf:e3:7d:e6:7b:83:58:1b:0a:83:14:1f:22:2c:04:71: ca:5a:2d:8f:29:3c:f1:f4:ee:5e:b5:77:a8:aa:88:31:70:89: 9c:b7:07:83:1e:40:96:79:40:dd:de:c7:44:49:3f:da:e1:35: 38:ab:7b:81:88:6c:bf:2f:63:a4:5a:80:15:94:12:88:7b:62: 3a:1e:5f:9c:0b:99:b5:6b:6a:4c:a9:43:b7:b5:c3:7a:59:07: 73:52:1d:05:9c:19:3b:2d:46:43:cb:8b:7e:b7:a8:84:ff:b5: ea:f8:b0:03:c6:cb:33:20:66:ae:cc:4a:b3:04:9e:23:b6:d3: 06:2e:43:f9:51:6b:67:96:62:a9:23:9b:0c:a8:fb:5e:5a:ba: 48:8a:1a:c3:a3:4d:ec:29:3e:21:fd:bb:e8:05:9a:4f:8b:a7: 05:34:c8:b6:73:9b:1a:f1:42:eb:39:12:7b:17:11:20:9d:cd: d2:fe:96:c0:ed:57:55:97:56:6f:9b:bc:b1:6d:5a:0f:f1:da: 89:90:e1:72 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NJNnZASyrg9Bf7DvE7ocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm OWQ3NTEwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGQ5NjU3YjJlNDdmZmQ0ZWY3MDQ3MTU3YTJkMjM0NmY2Mzc2MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPyLhB72vJb8y+6PU1QLo2b4uObp P9KdzET01J3l/sQWO7oiVM9d9g+fyJRMIYvfXlwkjsF59MXFfkp1jy8gQ97IadnT 5NjrJMSamb59vNymfntEvNH9+ABAEQkmIMoGFM2NWOCIMo8vQE75oUyARF9V35Rk ns0E9VOaqmlk+juvFVMbf/kPCZ4u1S5YeA8nqqT7sisQiDZKGYGDqVu/VMexCFvM +KrUpbcezan6KB8skPIL4AiFN+ujUC7/9OKPYCBTZNQu3NOYoO7ujZl/OiBwS8Lr b9qqblNU70zNNNbS8mb7CzsKRTm86Ja2VjjceErsAwUElb1s46BCCYDdRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKTZZXsuR//U73BHFXotI0b2N2K4MB8GA1UdIwQY MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt Y2Q2NTU1ZmNkODJlLzEvcE5sbGV5NUhfOVR2Y0VjVmVpMGpSdlkzWXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwb2SMA8E AgACMAkDBwAgAQZ8IfgwDQYJKoZIhvcNAQELBQADggEBADuGdqYIhg0GdP7ndD4r EyDMa4yLWej96hUC35tYgYeWRTyCAj29tWEB/84z1OWpmhZlZFb3+B3Xv+N95nuD WBsKgxQfIiwEccpaLY8pPPH07l61d6iqiDFwiZy3B4MeQJZ5QN3ex0RJP9rhNTir e4GIbL8vY6RagBWUEoh7YjoeX5wLmbVrakypQ7e1w3pZB3NSHQWcGTstRkPLi363 qIT/ter4sAPGyzMgZq7MSrMEniO20wYuQ/lRa2eWYqkjmwyo+15aukiKGsOjTewp PiH9u+gFmk+LpwU0yLZzmxrxQus5EnsXESCdzdL+lsDtV1WXVm+bvLFtWg/x2omQ 4XI= -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:01 2026 by rpki-client