This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa File: PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa (raw, json) Hash identifier: WjBKvJrOfiKeEL68xDsyhZV8pUdA94BoBT1vP1PsXEY= Subject key identifier: 3D:48:43:C8:97:50:6E:A1:81:02:88:88:3D:0A:8E:22:EC:6D:D8:D1 Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Certificate serial: 019B7DC9FA1D11F449A23A4029970A4071C3 Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42909 IP address blocks: 193.223.78.0/24 maxlen: 24 194.180.185.0/24 maxlen: 24 194.180.186.0/24 maxlen: 24 194.180.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fa:1d:11:f4:49:a2:3a:40:29:97:0a:40:71:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d4843c897506ea1810288883d0a8e22ec6dd8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1b:1e:51:ed:b3:f7:4b:52:20:0d:6a:da:f0: 0b:04:63:50:cf:a0:4f:b2:f4:28:59:79:f6:15:a9: cc:30:d7:43:17:13:c4:64:5d:ee:20:85:1c:c3:bd: 83:eb:17:99:ef:00:74:ae:81:d2:f8:06:d0:67:f7: 85:7e:4b:a7:b2:32:5a:9c:cb:2d:46:d7:93:ed:d4: b9:ad:66:ab:16:3b:f4:a4:7b:d7:6c:d2:b8:02:7d: aa:9d:a3:86:23:93:f8:2b:6a:de:b9:45:08:53:5e: 23:cd:5d:ea:1e:c0:d9:34:75:62:7e:4c:a4:8f:06: 94:69:39:f3:5c:df:45:17:e4:1b:4b:15:ba:53:29: 9a:fa:7d:a5:f8:a5:cb:1b:b2:66:c7:62:d2:de:d9: f5:2e:8e:7c:19:a8:e2:50:d7:7d:93:41:66:08:8e: dd:6f:79:2f:c7:99:02:d6:01:91:29:49:02:63:a1: d5:2c:2a:6c:e6:7e:3b:91:31:e5:06:88:0e:d7:ba: 24:2b:e8:65:29:59:31:e2:67:82:86:cc:16:2a:86: ae:4d:21:61:c6:4e:cc:0d:80:9c:aa:16:da:da:92: 23:2e:8a:4c:b2:03:81:31:74:e6:bb:53:bb:1c:e9: 85:51:f7:f5:97:93:d0:88:99:3f:bc:9c:a9:60:ff: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:43:C8:97:50:6E:A1:81:02:88:88:3D:0A:8E:22:EC:6D:D8:D1 X509v3 Authority Key Identifier: keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.223.78.0/24 194.180.185.0-194.180.187.255 Signature Algorithm: sha256WithRSAEncryption 85:9f:b9:88:c5:c9:e8:fc:4c:d3:b3:3b:f4:f8:e6:a1:1a:ee: 3f:19:13:e6:aa:15:12:5c:f1:b2:c8:bf:b7:d9:b7:ed:be:43: 2c:b2:d5:f5:a9:d9:df:67:dc:7c:81:b0:9c:c6:05:5d:42:9e: 16:16:f6:ca:b9:79:f4:e9:28:63:93:6b:e1:3e:f3:25:0e:74: be:da:61:fe:0c:e6:c5:fc:e2:be:bf:96:ad:2d:1b:81:4c:a8: 92:7d:2a:bb:b5:9f:50:65:35:1b:92:ec:19:97:0d:21:01:36: a3:11:a0:ec:36:dc:1a:44:5a:ae:da:38:11:8f:d8:c5:5a:0b: 83:63:e9:f3:37:1a:8e:ff:6a:c0:28:21:9b:19:c4:cf:32:ae: fe:fd:54:13:d1:aa:94:f4:f6:e0:23:9a:6b:19:63:94:79:6f: 2f:1c:97:fa:9a:85:4e:e8:bc:80:8a:0a:a0:93:ea:5a:d4:7f: df:c8:dc:58:08:eb:ff:4a:d0:2d:3c:b8:1c:9c:8f:9b:75:b9: 6e:12:78:ec:1b:69:b4:35:06:a3:ca:46:5e:3d:e1:ed:ba:94: 1f:55:dc:b5:dd:ed:b2:5c:19:3f:dc:4a:d2:ed:b6:49:e4:97: 09:d6:67:d7:bf:72:c7:b3:cb:40:2c:ce:ce:50:51:8f:7f:e4: ca:29:0f:35 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yfodEfRJojpAKZcKQHHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm MjM3YTAwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQ4NDNjODk3NTA2ZWExODEwMjg4ODgzZDBhOGUyMmVjNmRkOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hseUe2z90tSIA1q2vALBGNQz6BP svQoWXn2FanMMNdDFxPEZF3uIIUcw72D6xeZ7wB0roHS+AbQZ/eFfkunsjJanMst RteT7dS5rWarFjv0pHvXbNK4An2qnaOGI5P4K2reuUUIU14jzV3qHsDZNHVifkyk jwaUaTnzXN9FF+QbSxW6Uyma+n2l+KXLG7Jmx2LS3tn1Lo58GajiUNd9k0FmCI7d b3kvx5kC1gGRKUkCY6HVLCps5n47kTHlBogO17okK+hlKVkx4meChswWKoauTSFh xk7MDYCcqhba2pIjLopMsgOBMXTmu1O7HOmFUff1l5PQiJk/vJypYP/I+QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFD1IQ8iXUG6hgQKIiD0KjiLsbdjRMB8GA1UdIwQY MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt ODcyNGVkNWU5MDNhLzEvUFVoRHlKZFFicUdCQW9pSVBRcU9JdXh0Mk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwd9OMAwD BADCtLkDBALCtLgwDQYJKoZIhvcNAQELBQADggEBAIWfuYjFyej8TNOzO/T45qEa 7j8ZE+aqFRJc8bLIv7fZt+2+Qyyy1fWp2d9n3HyBsJzGBV1CnhYW9sq5efTpKGOT a+E+8yUOdL7aYf4M5sX84r6/lq0tG4FMqJJ9Kru1n1BlNRuS7BmXDSEBNqMRoOw2 3BpEWq7aOBGP2MVaC4Nj6fM3Go7/asAoIZsZxM8yrv79VBPRqpT09uAjmmsZY5R5 by8cl/qahU7ovICKCqCT6lrUf9/I3FgI6/9K0C08uBycj5t1uW4SeOwbabQ1BqPK Rl494e26lB9V3LXd7bJcGT/cStLttknklwnWZ9e/csezy0Aszs5QUY9/5MopDzU= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:57 2026 by rpki-client