This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa File: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (raw, json) Hash identifier: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck= Subject key identifier: 3E:DD:4F:B3:0D:7E:95:7C:D4:A9:F9:F4:5F:42:CC:59:DC:E2:A4:FD Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019B7C802E998CE51120D414ED5CF4F2EE70 Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42083 IP address blocks: 185.208.100.0/24 maxlen: 24 185.208.101.0/24 maxlen: 24 185.208.102.0/24 maxlen: 24 185.208.103.0/24 maxlen: 24 194.99.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2e:99:8c:e5:11:20:d4:14:ed:5c:f4:f2:ee:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3edd4fb30d7e957cd4a9f9f45f42cc59dce2a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:94:ca:11:f1:6e:1a:68:f8:f3:f7:85:99: 53:45:2d:33:27:42:a7:eb:35:3f:20:6d:c7:1c:59: a6:5a:8e:2f:70:ad:b2:98:80:02:c7:33:4b:18:16: bc:5c:cc:07:c9:2d:53:39:a1:a9:3d:49:32:fc:73: aa:58:dd:91:be:71:fc:63:f2:e3:2e:09:f1:f3:fc: c9:ce:23:5b:9f:ee:ad:9d:bc:73:b3:ac:64:3e:bc: 8d:d5:b8:ad:19:4f:28:47:8d:ad:32:8c:01:16:b7: 50:76:71:97:bb:af:32:ea:fa:0b:da:b0:63:74:47: 81:29:5a:ef:0e:13:a4:be:37:e7:df:bc:fd:79:0b: e6:67:63:38:66:58:d3:cc:ab:87:ae:8b:44:69:ff: c4:14:65:73:ca:02:ba:2f:9c:ab:4b:15:16:6c:67: 13:ee:e8:d3:7c:45:55:f8:31:4e:d6:5d:7a:4d:06: 40:5b:30:95:a1:5d:37:50:42:d2:84:27:e8:83:62: da:fc:d7:9a:88:0f:a9:f4:82:a6:ff:5e:39:60:32: 51:98:d2:01:e8:d9:ca:d4:1e:47:99:7e:ba:dc:c5: c0:b9:56:e7:4c:09:ca:1c:42:96:04:a5:72:7c:05: ba:66:9a:e2:99:42:22:0a:d6:4f:de:89:ed:c5:f3: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:4F:B3:0D:7E:95:7C:D4:A9:F9:F4:5F:42:CC:59:DC:E2:A4:FD X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.100.0/22 194.99.57.0/24 Signature Algorithm: sha256WithRSAEncryption a1:59:bf:84:63:01:4a:5b:97:78:2d:67:66:a9:90:cc:37:15: 07:6d:c0:39:2c:89:33:fe:48:c4:60:e5:37:df:76:51:73:03: c7:64:a1:cd:9b:42:3a:18:ea:7c:b9:27:dd:4f:fc:7c:9e:d0: 84:29:ca:f5:60:fd:d7:d2:c7:35:bc:b1:b5:5b:e2:d9:a4:a3: 20:d5:45:09:a5:86:22:08:8d:c8:36:65:c0:60:97:2b:24:d2: 8d:4b:1d:1d:fc:cc:b5:ab:da:cf:26:ab:55:9a:1f:20:1f:57: 31:01:5c:7c:e5:26:30:c8:23:13:8a:fe:db:5b:44:df:c0:c9: 02:3e:e9:eb:6e:70:30:26:c2:bc:77:7e:07:02:66:72:e6:16: 2a:36:db:03:82:6c:0b:b4:89:d3:8c:c6:dc:b4:e5:fa:56:87: 62:9d:90:02:7f:8e:72:7a:49:7a:7f:b7:1a:43:bd:b0:cc:40: fe:25:63:0e:a7:f4:8f:4f:37:b4:1b:48:de:6c:e0:fd:ce:d6: 0c:40:7e:a7:02:16:34:27:a4:80:0f:cf:13:e3:08:35:34:b6: 31:ac:62:4c:4a:31:fa:34:7c:49:cf:27:2a:91:3b:d5:13:c0: ec:da:1d:46:ea:b4:61:85:35:fa:c8:79:d1:55:d9:ee:2b:10: f8:fa:b6:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gC6ZjOURINQU7Vz08u5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWRkNGZiMzBkN2U5NTdjZDRhOWY5ZjQ1ZjQyY2M1OWRjZTJhNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKUyhHxbhpo+PP3hZlTRS0zJ0Kn 6zU/IG3HHFmmWo4vcK2ymIACxzNLGBa8XMwHyS1TOaGpPUky/HOqWN2RvnH8Y/Lj Lgnx8/zJziNbn+6tnbxzs6xkPryN1bitGU8oR42tMowBFrdQdnGXu68y6voL2rBj dEeBKVrvDhOkvjfn37z9eQvmZ2M4ZljTzKuHrotEaf/EFGVzygK6L5yrSxUWbGcT 7ujTfEVV+DFO1l16TQZAWzCVoV03UELShCfog2La/NeaiA+p9IKm/145YDJRmNIB 6NnK1B5HmX663MXAuVbnTAnKHEKWBKVyfAW6ZprimUIiCtZP3ontxfMtqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD7dT7MNfpV81Kn59F9CzFnc4qT9MB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEvUHQxUHN3MS1sWHpVcWZuMFgwTE1XZHppcFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCudBkAwQA wmM5MA0GCSqGSIb3DQEBCwUAA4IBAQChWb+EYwFKW5d4LWdmqZDMNxUHbcA5LIkz /kjEYOU333ZRcwPHZKHNm0I6GOp8uSfdT/x8ntCEKcr1YP3X0sc1vLG1W+LZpKMg 1UUJpYYiCI3INmXAYJcrJNKNSx0d/My1q9rPJqtVmh8gH1cxAVx85SYwyCMTiv7b W0TfwMkCPunrbnAwJsK8d34HAmZy5hYqNtsDgmwLtInTjMbctOX6VodinZACf45y ekl6f7caQ72wzED+JWMOp/SPTze0G0jebOD9ztYMQH6nAhY0J6SAD88T4wg1NLYx rGJMSjH6NHxJzycqkTvVE8Ds2h1G6rRhhTX6yHnRVdnuKxD4+rYJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:02 2026 by rpki-client