This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/pH4b3fMjLouUhkKsmyKmLszYD1s.roa File: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (raw, json) Hash identifier: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s= Subject key identifier: A4:7E:1B:DD:F3:23:2E:8B:94:86:42:AC:9B:22:A6:2E:CC:D8:0F:5B Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F84258EF722C451FEC7BD7E7A74C32E Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/pH4b3fMjLouUhkKsmyKmLszYD1s.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206487 IP address blocks: 188.86.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:25:8e:f7:22:c4:51:fe:c7:bd:7e:7a:74:c3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a47e1bddf3232e8b948642ac9b22a62eccd80f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:21:47:65:5f:62:2a:e1:09:52:22:18:a7:a5: e3:41:42:6c:03:7d:88:f9:1f:5f:9f:48:ec:39:e2: 5a:65:7e:74:5c:41:8b:6a:64:cf:03:a9:c4:f9:00: f0:2a:2d:4d:c4:2a:d7:3c:46:48:3b:72:28:7b:0f: 2f:d4:e3:5e:74:b9:e4:c7:ff:b4:7c:c0:5a:b8:d9: 78:24:61:7b:dc:33:31:7b:39:33:32:fa:ff:91:d6: 0d:d5:43:6f:59:04:95:5f:a1:7c:8f:8c:03:74:c8: 7b:92:fc:77:f8:24:e5:94:58:c3:1b:1a:19:02:98: f7:15:e4:77:36:07:b8:1b:82:ee:40:9b:5b:59:54: cd:7e:38:54:6d:67:2b:79:fb:18:fb:2a:ca:54:2b: 6f:de:1e:d0:48:88:78:8a:9c:51:f0:7d:cd:82:b4: 7b:de:b5:fa:e6:11:1f:15:1e:09:6c:fb:be:d5:bb: ba:fe:be:aa:ca:37:4e:93:bd:18:e6:03:1e:b1:9a: 48:c7:70:d8:39:3a:29:42:e9:37:1c:c4:c4:c8:5d: 2d:5b:9d:36:c1:01:b3:b7:fa:4e:93:0f:15:2f:d4: fa:85:ff:d2:02:f7:0a:f2:64:f4:8f:5a:65:68:63: 58:0e:51:ae:a2:e4:80:ed:00:34:2e:22:49:72:b0: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7E:1B:DD:F3:23:2E:8B:94:86:42:AC:9B:22:A6:2E:CC:D8:0F:5B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/pH4b3fMjLouUhkKsmyKmLszYD1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.86.116.0/24 Signature Algorithm: sha256WithRSAEncryption 26:71:74:9f:76:9f:c8:3a:56:05:5c:1f:8d:ce:52:3e:7c:c8: 4a:48:ac:83:7e:81:b5:91:40:19:7f:36:f4:c7:6a:12:d0:97: f4:f8:fa:a6:cd:67:d1:f6:b7:22:20:22:76:ef:c6:13:42:95: 90:7a:12:1c:10:36:0d:1a:98:54:b6:47:50:ad:f9:44:26:83: c6:fa:be:ec:ac:e5:a8:98:b7:ec:e4:f4:91:fd:0b:74:fa:e4: e8:41:ba:0e:2a:c8:00:eb:47:70:40:f9:6b:ca:87:4b:66:1b: 3b:33:f8:b8:64:c0:dc:51:8d:bf:b6:8b:b3:fc:86:c2:d3:91: d7:a7:e5:9d:9f:7d:d4:ce:75:ce:41:7a:e4:18:b8:bd:c7:b3: 31:e2:8a:81:f7:b3:7a:ef:68:e0:7c:1c:89:d8:ac:18:05:f6: 78:3e:2f:32:10:c3:81:60:64:a1:22:86:4a:b7:13:22:0e:45: a8:6a:81:7f:e5:59:07:57:b9:a5:ca:e8:af:b4:5b:04:5b:a2: d1:c1:80:22:2e:04:1c:66:b7:4b:19:87:ee:23:2c:3b:8b:22: ea:67:41:1d:76:01:fb:af:32:7e:c8:46:f9:91:8b:6b:25:0e: 3a:27:72:fb:58:56:96:fc:37:a5:4d:17:b8:8c:a0:3a:fd:b9: 64:61:34:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCWO9yLEUf7HvX56dMMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDdlMWJkZGYzMjMyZThiOTQ4NjQyYWM5YjIyYTYyZWNjZDgwZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiFHZV9iKuEJUiIYp6XjQUJsA32I +R9fn0jsOeJaZX50XEGLamTPA6nE+QDwKi1NxCrXPEZIO3Ioew8v1ONedLnkx/+0 fMBauNl4JGF73DMxezkzMvr/kdYN1UNvWQSVX6F8j4wDdMh7kvx3+CTllFjDGxoZ Apj3FeR3Nge4G4LuQJtbWVTNfjhUbWcrefsY+yrKVCtv3h7QSIh4ipxR8H3NgrR7 3rX65hEfFR4JbPu+1bu6/r6qyjdOk70Y5gMesZpIx3DYOTopQuk3HMTEyF0tW502 wQGzt/pOkw8VL9T6hf/SAvcK8mT0j1plaGNYDlGuouSA7QA0LiJJcrAiSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKR+G93zIy6LlIZCrJsipi7M2A9bMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvcEg0YjNmTWpMb3VVaGtLc215S21Mc3pZRDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvFZ0MA0G CSqGSIb3DQEBCwUAA4IBAQAmcXSfdp/IOlYFXB+NzlI+fMhKSKyDfoG1kUAZfzb0 x2oS0Jf0+PqmzWfR9rciICJ278YTQpWQehIcEDYNGphUtkdQrflEJoPG+r7srOWo mLfs5PSR/Qt0+uToQboOKsgA60dwQPlryodLZhs7M/i4ZMDcUY2/touz/IbC05HX p+Wdn33UznXOQXrkGLi9x7Mx4oqB97N672jgfByJ2KwYBfZ4Pi8yEMOBYGShIoZK txMiDkWoaoF/5VkHV7mlyuivtFsEW6LRwYAiLgQcZrdLGYfuIyw7iyLqZ0EddgH7 rzJ+yEb5kYtrJQ46J3L7WFaW/DelTRe4jKA6/blkYTQV -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:25 2026 by rpki-client