This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/Ppo8zp5LmchB33jNrvk9bBT1gBY.roa File: Ppo8zp5LmchB33jNrvk9bBT1gBY.roa (raw, json) Hash identifier: p3Wx4W4uCna+Td0Px+Vvc7pZpjBuiRji7FFkTSU5prU= Subject key identifier: 3E:9A:3C:CE:9E:4B:99:C8:41:DF:78:CD:AE:F9:3D:6C:14:F5:80:16 Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Certificate serial: 019B7AC88E1A17E5225626CCCB0A970A0A16 Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/Ppo8zp5LmchB33jNrvk9bBT1gBY.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43511 IP address blocks: 91.194.248.0/24 maxlen: 24 91.194.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:1a:17:e5:22:56:26:cc:cb:0a:97:0a:0a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e9a3cce9e4b99c841df78cdaef93d6c14f58016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:92:10:f3:3c:ab:2e:0e:ee:4b:0a:27:2e: c6:4b:b8:1e:2a:cf:b8:5b:25:ee:c0:10:0a:bb:7f: 89:2b:36:e2:a6:6c:0a:55:d3:04:8f:9e:98:04:b5: f1:e5:bf:48:ed:9a:3a:05:97:e4:02:af:54:8f:86: e8:33:cb:94:4e:7a:49:03:e4:68:a0:42:d8:ca:a2: 15:e9:4d:a8:8e:9f:f8:82:55:72:3d:e1:f6:e1:ad: c7:bb:cf:3c:23:f7:68:00:76:3a:04:ca:d8:8f:aa: 34:07:96:8d:3a:88:5d:3c:0f:78:b5:9a:4c:8d:a9: 4c:42:55:35:ff:9d:2f:08:27:3a:21:90:14:69:47: 0d:4e:16:e2:d4:2b:31:02:0b:03:d4:de:93:46:d1: db:00:10:f9:67:fb:88:ec:c1:78:bf:35:d1:f5:f8: 16:92:8e:4b:03:61:a1:51:0f:2a:24:53:05:9d:81: 99:16:ee:50:ac:bd:85:7d:c8:0d:45:a2:87:3d:cb: b3:4e:34:70:53:ee:ba:f9:9f:00:c7:ad:a8:34:b5: 0d:d9:a7:67:57:c7:36:1b:09:b2:5a:7d:c1:29:c1: 3c:71:df:09:b0:d1:f5:30:ed:9c:a1:86:52:06:b3: 47:1a:a5:14:9c:0f:a1:2e:fa:b9:e1:7f:45:39:7a: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9A:3C:CE:9E:4B:99:C8:41:DF:78:CD:AE:F9:3D:6C:14:F5:80:16 X509v3 Authority Key Identifier: keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/Ppo8zp5LmchB33jNrvk9bBT1gBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.248.0/23 Signature Algorithm: sha256WithRSAEncryption aa:08:81:d1:56:ed:32:37:d2:ba:da:1b:e7:d2:66:1e:bc:32: 49:9f:df:a3:6d:7f:c9:d1:4e:75:56:d4:f1:70:a6:2b:f9:4c: 9c:8a:4b:db:95:e7:bb:72:4d:c6:93:07:f1:21:3e:71:74:aa: 73:de:ef:fe:1d:86:de:0e:86:26:6b:92:5e:69:03:75:b2:eb: 59:19:d3:50:4c:52:b7:46:4c:5a:71:48:9c:7e:2b:f7:b6:db: 07:79:78:5c:a1:05:e7:3f:46:4f:a7:85:0e:b9:ad:0d:d4:6a: 11:33:3e:a7:87:87:bd:ce:1c:cb:f4:4e:b1:13:6d:3a:1a:33: 48:7a:82:d8:9e:6e:b8:ae:e7:da:32:30:26:7d:3e:b2:5a:f4: e5:39:8d:92:df:76:f4:d2:e7:a7:91:5e:0a:c8:20:6c:34:60: 57:60:65:ed:06:79:67:98:66:4f:b7:ea:9c:8c:7f:c3:05:ee: 14:a6:2b:19:d5:f9:ed:f2:0d:7e:58:53:b8:c5:cd:9a:bb:b4: 20:f5:aa:77:32:26:e4:b4:0f:12:70:fc:30:5f:09:0a:f1:44: f4:75:de:35:f6:2f:1c:9d:70:17:48:71:2c:2c:b0:03:9b:8e: 4f:52:fc:a3:f9:1b:72:9c:29:20:33:10:61:83:69:43:43:86: d5:e1:cf:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yI4aF+UiVibMywqXCgoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiN2Y4MWE2ZTc4MmUyMTExODljNGYzNGU0NTliNDIyNmM3 NWY0YTYwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTlhM2NjZTllNGI5OWM4NDFkZjc4Y2RhZWY5M2Q2YzE0ZjU4MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleiSEPM8qy4O7ksKJy7GS7geKs+4 WyXuwBAKu3+JKzbipmwKVdMEj56YBLXx5b9I7Zo6BZfkAq9Uj4boM8uUTnpJA+Ro oELYyqIV6U2ojp/4glVyPeH24a3Hu888I/doAHY6BMrYj6o0B5aNOohdPA94tZpM jalMQlU1/50vCCc6IZAUaUcNThbi1CsxAgsD1N6TRtHbABD5Z/uI7MF4vzXR9fgW ko5LA2GhUQ8qJFMFnYGZFu5QrL2FfcgNRaKHPcuzTjRwU+66+Z8Ax62oNLUN2adn V8c2GwmyWn3BKcE8cd8JsNH1MO2coYZSBrNHGqUUnA+hLvq54X9FOXoz4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6aPM6eS5nIQd94za75PWwU9YAWMB8GA1UdIwQY MBaAFIt/gabnguIRGJxPNORZtCJsdfSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUt ZjJmNDI2ZWZlMDM5LzEvUHBvOHpwNUxtY2hCMzNqTnJ2azliQlQxZ0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YjYwZTUtZjk4Zi00YWM2LTk4YTUtZjJmNDI2ZWZlMDM5 LzEvaTMtQnB1ZUM0aEVZbkU4MDVGbTBJbXgxOUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8L4MA0G CSqGSIb3DQEBCwUAA4IBAQCqCIHRVu0yN9K62hvn0mYevDJJn9+jbX/J0U51VtTx cKYr+Uycikvblee7ck3GkwfxIT5xdKpz3u/+HYbeDoYma5JeaQN1sutZGdNQTFK3 RkxacUicfiv3ttsHeXhcoQXnP0ZPp4UOua0N1GoRMz6nh4e9zhzL9E6xE206GjNI eoLYnm64rufaMjAmfT6yWvTlOY2S33b00uenkV4KyCBsNGBXYGXtBnlnmGZPt+qc jH/DBe4UpisZ1fnt8g1+WFO4xc2au7Qg9ap3MibktA8ScPwwXwkK8UT0dd419i8c nXAXSHEsLLADm45PUvyj+RtynCkgMxBhg2lDQ4bV4c9Z -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:50 2026 by rpki-client