This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa File: PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa (raw, json) Hash identifier: /lazpWv9V1FL2+iyQutogNw6pk8iaaxkITCs/3RcC10= Subject key identifier: 3D:04:6B:25:22:6D:9E:79:76:1A:7A:D6:C6:96:96:AF:74:BB:3D:9F Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Certificate serial: 019B7F8448BB29767727A123504F2634C0A1 Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12797 IP address blocks: 62.85.192.0/19 maxlen: 19 62.123.0.0/16 maxlen: 16 62.123.10.0/24 maxlen: 24 213.199.0.0/19 maxlen: 19 213.234.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:48:bb:29:76:77:27:a1:23:50:4f:26:34:c0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d046b25226d9e79761a7ad6c69696af74bb3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:1e:96:97:ac:eb:dc:fd:20:e9:12:b2:5c: 75:99:9a:8d:b7:28:4c:dd:da:7e:5f:d2:40:72:f3: 6d:4f:b3:5f:15:f0:ce:05:4e:24:7f:21:81:52:91: 66:ca:b4:3c:46:1c:e8:57:da:78:ce:0c:70:ec:8a: 60:fb:32:12:0c:bb:93:0c:5d:15:86:a4:43:da:8c: 61:03:b8:6d:35:87:7e:a5:98:a8:72:35:11:be:ba: 0f:7c:fd:58:2f:52:e5:4a:56:d1:08:e4:59:72:33: 69:a1:bd:e3:fd:e1:b5:4e:2e:67:95:64:7c:d8:d9: 41:12:74:a1:84:92:dd:3f:3e:7d:37:46:a2:5f:fe: 09:a9:f3:a9:db:25:a1:b1:3b:57:43:4b:38:3a:45: 83:b2:95:72:ed:a5:ea:0b:57:7f:93:fd:c2:7a:31: 56:d1:99:29:22:99:ec:ea:72:d3:53:2a:92:d6:8b: 8d:6d:44:3c:a0:78:26:d1:0c:7c:51:9f:a3:85:16: dc:76:6e:f4:85:79:ba:f2:81:0f:3f:ff:4d:d7:67: c7:1d:6b:56:d2:2b:dc:2b:80:1d:a7:3d:7c:30:c6: 2a:12:1d:e4:f0:ef:30:e8:fd:eb:37:df:fb:36:bc: bd:05:e3:0d:61:05:bc:89:48:5d:35:f0:4f:fa:37: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:04:6B:25:22:6D:9E:79:76:1A:7A:D6:C6:96:96:AF:74:BB:3D:9F X509v3 Authority Key Identifier: keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/PQRrJSJtnnl2GnrWxpaWr3S7PZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.85.192.0/19 62.123.0.0/16 213.199.0.0/19 213.234.128.0/18 Signature Algorithm: sha256WithRSAEncryption 61:16:47:82:d9:ea:3e:28:e6:e4:cf:6d:ee:bc:30:e7:81:5b: c5:43:5e:cb:ca:89:58:2c:51:d4:b9:b6:a5:1f:56:d7:79:c6: fc:e3:dc:d2:b2:f3:e7:58:53:2a:6f:0c:97:27:30:b1:97:27: 52:a8:41:18:cc:7d:b5:3d:da:a8:96:1a:ef:29:0f:bd:96:42: b7:f7:a3:a5:b3:e8:d6:ac:79:de:25:96:1c:79:86:c7:ba:b7: ca:79:42:ea:31:a5:cb:20:b7:24:02:37:6e:09:40:a6:ad:06: 9d:51:b4:09:21:f7:d1:ac:aa:e7:12:b6:01:71:66:c4:6e:23: e8:4e:bb:f8:fc:79:3a:7c:b0:1a:46:e1:d6:43:27:a4:1a:27: 8e:4d:f0:5e:b9:b8:6a:82:aa:29:3f:60:ce:87:71:75:13:2b: 63:87:13:28:b6:55:c1:94:1d:b3:ee:3a:93:82:d3:e0:55:5f: 92:0d:ec:fd:91:98:a7:b7:43:1d:24:63:2f:4b:53:47:ed:74: 75:40:64:18:cc:5c:b5:7b:e4:15:40:3a:f6:c7:97:2a:ef:f9: 47:d0:43:cc:7a:06:e7:2d:1d:d8:50:36:67:6f:02:b6:16:fb: eb:94:c8:39:f6:45:b7:64:84:dd:13:be:b1:13:2d:a1:7a:0c: 69:df:aa:ed -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hEi7KXZ3J6EjUE8mNMChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjJmNTgzZjg4OWRkNGIxMzRkYTU2ZGI0NWEzZTI1NTgw YjFiMWQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDA0NmIyNTIyNmQ5ZTc5NzYxYTdhZDZjNjk2OTZhZjc0YmIzZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H4elpes69z9IOkSslx1mZqNtyhM 3dp+X9JAcvNtT7NfFfDOBU4kfyGBUpFmyrQ8RhzoV9p4zgxw7Ipg+zISDLuTDF0V hqRD2oxhA7htNYd+pZiocjURvroPfP1YL1LlSlbRCORZcjNpob3j/eG1Ti5nlWR8 2NlBEnShhJLdPz59N0aiX/4JqfOp2yWhsTtXQ0s4OkWDspVy7aXqC1d/k/3CejFW 0ZkpIpns6nLTUyqS1ouNbUQ8oHgm0Qx8UZ+jhRbcdm70hXm68oEPP/9N12fHHWtW 0ivcK4Adpz18MMYqEh3k8O8w6P3rN9/7Nry9BeMNYQW8iUhdNfBP+jfh7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD0EayUibZ55dhp61saWlq90uz2fMB8GA1UdIwQY MBaAFK2y9YP4id1LE02lbbRaPiVYCxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEt YWRkMTUxNjY2ZTJhLzEvUFFSckpTSnRubmwyR25yV3hwYVdyM1M3UFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEtYWRkMTUxNjY2ZTJh LzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQFPlXAAwMA PnsDBAXVxwADBAbV6oAwDQYJKoZIhvcNAQELBQADggEBAGEWR4LZ6j4o5uTPbe68 MOeBW8VDXsvKiVgsUdS5tqUfVtd5xvzj3NKy8+dYUypvDJcnMLGXJ1KoQRjMfbU9 2qiWGu8pD72WQrf3o6Wz6Nased4llhx5hse6t8p5QuoxpcsgtyQCN24JQKatBp1R tAkh99GsqucStgFxZsRuI+hOu/j8eTp8sBpG4dZDJ6QaJ45N8F65uGqCqik/YM6H cXUTK2OHEyi2VcGUHbPuOpOC0+BVX5IN7P2RmKe3Qx0kYy9LU0ftdHVAZBjMXLV7 5BVAOvbHlyrv+UfQQ8x6BuctHdhQNmdvArYW++uUyDn2RbdkhN0TvrETLaF6DGnf qu0= -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:28 2026 by rpki-client