This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pPuYN3xv0sq-4zILngE0M1s1Mlc.roa File: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (raw, json) Hash identifier: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw= Subject key identifier: A4:FB:98:37:7C:6F:D2:CA:BE:E3:32:0B:9E:01:34:33:5B:35:32:57 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019B7F82E64548EC48147C94C23BFBDE9C7F Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pPuYN3xv0sq-4zILngE0M1s1Mlc.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60558 IP address blocks: 185.52.52.0/22 maxlen: 22 185.52.55.0/24 maxlen: 24 2a01:b960:2301::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e6:45:48:ec:48:14:7c:94:c2:3b:fb:de:9c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4fb98377c6fd2cabee3320b9e0134335b353257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:3a:f9:da:e8:2d:d3:42:fe:81:77:77:d9: b8:99:92:a0:47:d8:13:fa:ca:55:03:b0:31:84:61: c2:39:17:57:ff:14:52:15:a9:1c:a0:76:57:74:63: 52:4e:e6:58:4d:68:c7:ac:75:9a:78:f3:08:46:24: fc:be:38:be:bb:c7:fa:35:17:62:f6:2e:5e:8c:30: 9a:75:3a:b3:42:be:0b:e0:8d:1c:75:e0:21:a9:a1: fe:a3:5c:67:a2:9f:c6:7a:4b:27:06:64:bb:11:59: 92:24:69:cb:e3:51:25:ea:d0:bc:ea:63:05:d5:3e: e5:27:53:49:8a:73:e3:6e:6b:e0:42:26:f2:6c:67: 18:c8:e9:89:8e:0e:96:8a:5c:23:87:b3:a0:e0:0e: 70:95:d3:56:a0:88:4a:00:60:12:ff:1f:3f:e8:ca: 74:70:21:a9:ab:5b:a1:50:13:e5:fe:3d:b5:11:9a: 0b:5a:b0:38:e0:0d:32:69:6d:a0:5a:c6:bb:cb:74: 65:21:36:cc:82:e2:e9:30:74:55:49:41:dc:cd:24: 70:52:45:9e:b7:75:23:4c:bb:60:32:70:0b:f4:48: 64:7b:bb:3c:8e:c0:b2:1a:d3:1e:14:00:99:12:c2: ed:e4:9c:f8:be:e3:f3:dc:6c:44:16:fd:52:75:55: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:98:37:7C:6F:D2:CA:BE:E3:32:0B:9E:01:34:33:5B:35:32:57 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pPuYN3xv0sq-4zILngE0M1s1Mlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.52.0/22 IPv6: 2a01:b960:2301::/48 Signature Algorithm: sha256WithRSAEncryption 00:af:55:93:f5:37:68:76:f6:ee:3e:7e:e9:38:9c:2f:80:6c: 7d:6f:b5:eb:c7:4c:88:d8:eb:62:00:62:e4:6f:3d:dc:42:59: 17:0a:af:15:ef:0b:df:22:6f:f4:2b:0f:7b:76:d2:c2:2a:c8: 4b:9c:44:40:e8:0e:5e:11:32:bc:45:da:d1:c2:af:3b:e2:da: e9:c0:8f:5c:46:8b:fd:4e:c0:8c:55:f5:e7:6d:b0:16:be:2d: 43:13:73:b9:d0:bc:68:98:85:36:b5:06:3c:8f:78:dd:ad:a4: 0c:f0:26:3b:f1:7f:ea:2a:07:cd:12:e4:d0:24:ab:7b:ef:a2: c8:b7:e8:49:bf:49:0c:12:9c:fc:9d:f5:55:08:0c:64:9e:71: f2:9e:93:3c:1a:b4:e9:33:a0:9d:ec:c0:4b:b4:50:c4:bc:20: 0b:7d:e3:07:2a:e7:aa:4e:3c:e1:d2:dc:40:19:f0:0d:56:fa: 19:13:91:00:dd:55:2c:20:a0:d5:31:49:b2:06:7a:7d:5d:0b: 71:19:8d:64:46:70:3c:7f:b5:ea:79:e9:4a:30:ef:e6:a4:4d: 55:ce:d8:71:53:ec:23:87:cb:33:b5:53:b1:e1:78:79:57:ed: cd:bb:25:36:0d:61:c0:f7:a6:c9:7c:bc:35:38:bc:c7:be:98: 21:79:d0:29 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/guZFSOxIFHyUwjv73px/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGZiOTgzNzdjNmZkMmNhYmVlMzMyMGI5ZTAxMzQzMzViMzUzMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3k6+droLdNC/oF3d9m4mZKgR9gT +spVA7AxhGHCORdX/xRSFakcoHZXdGNSTuZYTWjHrHWaePMIRiT8vji+u8f6NRdi 9i5ejDCadTqzQr4L4I0cdeAhqaH+o1xnop/GeksnBmS7EVmSJGnL41El6tC86mMF 1T7lJ1NJinPjbmvgQibybGcYyOmJjg6Wilwjh7Og4A5wldNWoIhKAGAS/x8/6Mp0 cCGpq1uhUBPl/j21EZoLWrA44A0yaW2gWsa7y3RlITbMguLpMHRVSUHczSRwUkWe t3UjTLtgMnAL9Ehke7s8jsCyGtMeFACZEsLt5Jz4vuPz3GxEFv1SdVX9/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKT7mDd8b9LKvuMyC54BNDNbNTJXMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvcFB1WU4zeHYwc3EtNHpJTG5nRTBNMXMxTWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuTQ0MA8E AgACMAkDBwAqAblgIwEwDQYJKoZIhvcNAQELBQADggEBAACvVZP1N2h29u4+fuk4 nC+AbH1vtevHTIjY62IAYuRvPdxCWRcKrxXvC98ib/QrD3t20sIqyEucREDoDl4R MrxF2tHCrzvi2unAj1xGi/1OwIxV9edtsBa+LUMTc7nQvGiYhTa1BjyPeN2tpAzw Jjvxf+oqB80S5NAkq3vvosi36Em/SQwSnPyd9VUIDGSecfKekzwatOkzoJ3swEu0 UMS8IAt94wcq56pOPOHS3EAZ8A1W+hkTkQDdVSwgoNUxSbIGen1dC3EZjWRGcDx/ tep56Uow7+akTVXO2HFT7COHyzO1U7HheHlX7c27JTYNYcD3psl8vDU4vMe+mCF5 0Ck= -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:30 2026 by rpki-client