This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa File: PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa (raw, json) Hash identifier: ggogQletXZT21dYbTRV1SNWHwV2S6gHYiktJ4MjCyQI= Subject key identifier: 3E:73:8E:87:B7:E7:99:91:42:7D:E3:9A:FF:03:33:82:A8:DD:C6:A0 Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244 Certificate serial: 019B7910C8287A465757D1026848A3BEF9DC Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197219 IP address blocks: 93.174.200.0/21 maxlen: 21 2a02:1720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c8:28:7a:46:57:57:d1:02:68:48:a3:be:f9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e738e87b7e79991427de39aff033382a8ddc6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:3c:39:58:7d:02:66:7f:aa:c5:a3:9b:2b: c1:1a:4a:c7:7c:4d:48:d6:4c:2e:4a:a0:56:be:54: 88:78:db:70:4b:2a:15:ef:61:d0:6c:bb:da:e6:e2: cb:30:f5:20:32:b2:6a:b0:e2:ab:e7:2d:9f:89:0c: f5:94:d3:ae:fa:4d:70:1a:eb:ca:53:00:6c:42:3b: d1:9c:57:aa:d4:a5:01:ee:0f:20:b3:86:53:6c:c8: e2:85:36:bc:5c:71:d4:67:55:69:fc:28:b8:a8:b4: 09:5e:2d:2e:23:0a:b3:80:de:d3:6e:97:05:ed:9f: 4a:49:ef:8a:b6:5e:6c:e9:63:23:a8:fc:e4:50:8c: d7:a3:d6:89:49:f8:a7:38:1d:03:4f:cd:72:05:ff: 56:7a:7f:c3:8d:21:24:48:7c:38:e8:04:89:fc:a1: 72:d7:c3:d4:ff:24:dc:aa:87:6b:75:85:c8:79:01: 92:32:68:33:04:e7:05:91:84:d3:55:c6:b3:eb:02: 4d:1b:69:8b:c6:ec:e5:2d:71:ff:1c:54:b5:ff:18: c7:87:33:f2:08:c2:40:96:f1:d7:15:45:1c:b4:3f: 2d:e9:79:7d:06:cd:a6:81:32:4c:49:74:8b:21:4f: b9:e3:4d:29:29:26:c9:e0:bb:fe:21:27:70:9f:82: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:8E:87:B7:E7:99:91:42:7D:E3:9A:FF:03:33:82:A8:DD:C6:A0 X509v3 Authority Key Identifier: keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.200.0/21 IPv6: 2a02:1720::/32 Signature Algorithm: sha256WithRSAEncryption 36:5d:b2:e6:9f:0e:88:8b:24:6d:6b:95:4d:16:35:45:74:81: bc:3e:ed:4b:59:62:75:e1:a9:19:db:89:57:77:64:81:6d:ff: 07:e9:a5:47:0a:f0:1f:a6:bc:c2:ed:3f:e8:ac:52:cf:0b:0a: 2f:b2:a0:5a:03:52:5e:de:0c:95:dd:2b:94:bb:c3:1d:8e:d5: 19:b8:09:05:6b:0c:79:63:d6:19:e5:d8:55:fd:2e:ad:97:21: 0a:f0:31:c7:82:ee:c2:93:30:72:71:fb:63:76:81:48:82:1f: cb:8d:21:7f:11:e8:4e:39:88:41:99:39:ea:66:0b:b8:00:5c: b2:e4:84:b9:de:80:8f:4a:c4:79:2c:d0:e6:41:5e:ff:f1:91: 48:8e:4f:82:e0:c4:60:d7:fa:b4:97:43:5e:32:38:54:cd:d3: d3:b2:d8:1f:75:9c:aa:41:93:d8:21:af:2d:b8:12:e4:be:44: 00:26:85:3e:0f:f7:9a:bd:98:28:e3:4c:d5:70:7d:9d:8c:8c: ae:2c:28:8f:e1:65:41:dc:c0:f5:a3:51:7f:db:c9:f9:52:5d: ee:db:28:20:23:35:6b:c6:e1:dc:a1:f6:81:d5:ad:f7:ed:6c: e7:8c:3c:4c:18:96:78:c8:8a:0e:ac:26:ca:de:6d:58:6d:ff: 96:a9:76:57 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EMgoekZXV9ECaEijvvncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGYzOTM0ODNkNDg5YzQyOWZjMThiMDkzNDJkNzZkMGFm ZTQyNDQwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTczOGU4N2I3ZTc5OTkxNDI3ZGUzOWFmZjAzMzM4MmE4ZGRjNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43k8OVh9AmZ/qsWjmyvBGkrHfE1I 1kwuSqBWvlSIeNtwSyoV72HQbLva5uLLMPUgMrJqsOKr5y2fiQz1lNOu+k1wGuvK UwBsQjvRnFeq1KUB7g8gs4ZTbMjihTa8XHHUZ1Vp/Ci4qLQJXi0uIwqzgN7TbpcF 7Z9KSe+Ktl5s6WMjqPzkUIzXo9aJSfinOB0DT81yBf9Wen/DjSEkSHw46ASJ/KFy 18PU/yTcqodrdYXIeQGSMmgzBOcFkYTTVcaz6wJNG2mLxuzlLXH/HFS1/xjHhzPy CMJAlvHXFUUctD8t6Xl9Bs2mgTJMSXSLIU+5400pKSbJ4Lv+ISdwn4KjpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD5zjoe355mRQn3jmv8DM4Ko3cagMB8GA1UdIwQY MBaAFJ2POTSD1InEKfwYsJNC120K/kJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTct MWUxNTFhYTFhZmRjLzEvUG5PT2g3Zm5tWkZDZmVPYV93TXpncWpkeHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTctMWUxNTFhYTFhZmRj LzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXa7IMA0E AgACMAcDBQAqAhcgMA0GCSqGSIb3DQEBCwUAA4IBAQA2XbLmnw6IiyRta5VNFjVF dIG8Pu1LWWJ14akZ24lXd2SBbf8H6aVHCvAfprzC7T/orFLPCwovsqBaA1Je3gyV 3SuUu8MdjtUZuAkFawx5Y9YZ5dhV/S6tlyEK8DHHgu7CkzBycftjdoFIgh/LjSF/ EehOOYhBmTnqZgu4AFyy5IS53oCPSsR5LNDmQV7/8ZFIjk+C4MRg1/q0l0NeMjhU zdPTstgfdZyqQZPYIa8tuBLkvkQAJoU+D/eavZgo40zVcH2djIyuLCiP4WVB3MD1 o1F/28n5Ul3u2yggIzVrxuHcofaB1a337WznjDxMGJZ4yIoOrCbK3m1Ybf+WqXZX -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:24 2026 by rpki-client