This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/v39I0Zjco7iTKjESnYevB85gpxs.roa File: v39I0Zjco7iTKjESnYevB85gpxs.roa (raw, json) Hash identifier: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA= Subject key identifier: BF:7F:48:D1:98:DC:A3:B8:93:2A:31:12:9D:87:AF:07:CE:60:A7:1B Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019B79EBD013D6EA1D9AF87CC578A7C8E15C Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/v39I0Zjco7iTKjESnYevB85gpxs.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216054 IP address blocks: 185.83.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d0:13:d6:ea:1d:9a:f8:7c:c5:78:a7:c8:e1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf7f48d198dca3b8932a31129d87af07ce60a71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:15:d0:33:b2:06:55:f0:16:69:6a:d6:51: 8d:72:bf:41:21:c8:6f:4a:b5:d6:fb:d7:2e:5f:50: 08:39:2d:01:b4:2b:75:61:b5:93:24:79:0d:4c:39: 84:30:05:03:71:1a:12:db:b0:18:20:28:39:ac:4a: 82:1b:aa:75:e2:e9:d7:1f:7a:97:2f:41:9f:2c:d5: ea:e0:a1:47:3e:21:ee:a5:78:c2:fc:de:c0:47:6e: 4a:80:9f:cb:3d:3a:71:b6:8b:67:58:95:28:c0:4a: f3:3f:36:f6:84:04:01:12:fb:9a:5e:79:c7:c8:6d: eb:62:e5:2f:d5:64:37:d2:99:b1:91:9d:df:6c:98: eb:1a:bc:23:5b:14:c9:eb:4b:b3:c3:5a:0a:98:9b: 76:2b:cc:d4:46:97:f6:ab:3c:2c:e4:7b:d0:35:24: 16:66:6e:2b:40:20:12:48:a5:82:f7:26:83:9a:76: 70:9d:9a:4d:e8:00:4f:70:0b:1a:7f:9b:07:c7:b4: 7c:ed:7a:d5:04:d8:03:4e:57:6d:ed:7a:f8:1b:06: d0:68:7c:dd:74:7e:c3:60:43:d8:60:57:6f:fc:fc: 7f:f1:46:8f:dc:d9:d2:bc:94:e5:ef:a9:b3:c0:f5: 91:b3:02:6d:9b:c8:cf:e9:90:37:f9:37:c8:09:f7: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:48:D1:98:DC:A3:B8:93:2A:31:12:9D:87:AF:07:CE:60:A7:1B X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/v39I0Zjco7iTKjESnYevB85gpxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.182.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:c4:b5:24:45:64:7b:87:23:8b:3c:c0:a6:73:b3:28:a9:5c: 4a:88:89:91:ad:60:b0:ac:d5:76:08:80:f0:8c:e0:7e:d5:60: e3:56:6c:47:03:9e:25:af:5f:8c:fd:15:e4:84:af:aa:2e:e6: a1:49:cc:1e:0b:e3:a3:57:11:8d:5d:b3:41:c6:94:4a:64:97: a0:dc:cf:fe:a9:a4:ee:57:53:23:51:23:be:ac:6d:aa:9e:71: 2b:60:2b:c6:42:d0:35:7d:ec:e3:9d:88:02:ac:b0:7d:37:4b: 5c:ee:82:4f:0e:42:8a:6a:10:e8:97:d8:16:33:54:dd:03:4a: 01:3c:04:e7:bc:b2:62:8f:bf:a5:ec:69:40:82:1a:7f:1c:c7: 20:5f:6a:1a:6b:86:29:ac:40:82:f4:c9:c4:df:57:92:00:90: 67:81:81:2f:4b:f3:0d:9e:6b:fa:9b:81:dc:09:b4:85:77:57: 15:dd:e5:62:f1:f8:68:b3:25:1b:e4:05:a1:02:2c:d9:3b:ca: 00:79:b7:11:0b:4d:1c:65:18:43:24:ae:cf:92:bd:d8:8f:df: 22:04:cc:3c:56:44:57:cd:1c:c4:38:db:8e:57:9e:f4:8f:e7: 1b:d8:b9:c8:c0:7a:e4:6f:8f:8e:a1:cf:a0:24:c5:07:39:15: 88:a8:43:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt569AT1uodmvh8xXinyOFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjdmNDhkMTk4ZGNhM2I4OTMyYTMxMTI5ZDg3YWYwN2NlNjBhNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8wV0DOyBlXwFmlq1lGNcr9BIchv SrXW+9cuX1AIOS0BtCt1YbWTJHkNTDmEMAUDcRoS27AYICg5rEqCG6p14unXH3qX L0GfLNXq4KFHPiHupXjC/N7AR25KgJ/LPTpxtotnWJUowErzPzb2hAQBEvuaXnnH yG3rYuUv1WQ30pmxkZ3fbJjrGrwjWxTJ60uzw1oKmJt2K8zURpf2qzws5HvQNSQW Zm4rQCASSKWC9yaDmnZwnZpN6ABPcAsaf5sHx7R87XrVBNgDTldt7Xr4GwbQaHzd dH7DYEPYYFdv/Px/8UaP3NnSvJTl76mzwPWRswJtm8jP6ZA3+TfICfdVzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL9/SNGY3KO4kyoxEp2HrwfOYKcbMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvdjM5STBaamNvN2lUS2pFU25ZZXZCODVncHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVO2MA0G CSqGSIb3DQEBCwUAA4IBAQCNxLUkRWR7hyOLPMCmc7MoqVxKiImRrWCwrNV2CIDw jOB+1WDjVmxHA54lr1+M/RXkhK+qLuahScweC+OjVxGNXbNBxpRKZJeg3M/+qaTu V1MjUSO+rG2qnnErYCvGQtA1fezjnYgCrLB9N0tc7oJPDkKKahDol9gWM1TdA0oB PATnvLJij7+l7GlAghp/HMcgX2oaa4YprECC9MnE31eSAJBngYEvS/MNnmv6m4Hc CbSFd1cV3eVi8fhosyUb5AWhAizZO8oAebcRC00cZRhDJK7Pkr3Yj98iBMw8VkRX zRzEONuOV570j+cb2LnIwHrkb4+Ooc+gJMUHORWIqEP3 -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:21 2026 by rpki-client