This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/PEehES5SpZnr6s-nLTRBCvh0KiA.roa File: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (raw, json) Hash identifier: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw= Subject key identifier: 3C:47:A1:11:2E:52:A5:99:EB:EA:CF:A7:2D:34:41:0A:F8:74:2A:20 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019B7F159567BFA6A191F615C2B699ED8B28 Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/PEehES5SpZnr6s-nLTRBCvh0KiA.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 45.155.212.0/22 maxlen: 25 185.103.76.0/22 maxlen: 24 195.35.114.0/23 maxlen: 24 2a06:2a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:67:bf:a6:a1:91:f6:15:c2:b6:99:ed:8b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c47a1112e52a599ebeacfa72d34410af8742a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:b5:a3:4f:fb:0b:fa:65:0a:d1:c0:e7:5f: 88:c7:5e:cc:14:94:44:7a:eb:56:2f:0a:ba:06:16: fe:79:76:86:d7:03:55:ef:4d:de:34:e3:dd:60:5d: 16:6a:0b:df:d5:9e:e5:a3:27:80:e0:ea:04:bb:6e: 4c:b9:66:62:4a:c9:62:e2:1e:08:db:53:91:3b:b5: 70:8f:50:bc:24:be:47:5f:ba:b6:69:c9:dd:2d:9c: a6:c6:8e:26:ea:bb:ad:0f:b2:e5:ac:30:4b:32:ce: 77:ab:7b:d1:20:e8:c4:b7:20:b1:54:75:86:0f:ed: f9:9d:5a:a8:bb:0f:c2:ac:15:6a:81:d7:3f:09:d3: 0f:98:eb:4e:84:16:6c:f7:dc:28:3b:cc:c7:12:80: 12:a3:25:bf:cc:4e:67:6f:79:eb:0f:d8:33:d6:9d: ec:ac:64:d4:4b:fb:59:89:83:de:73:44:0c:65:3e: a9:34:a7:59:5e:0b:1c:e6:4c:c8:49:42:8c:e2:cf: 33:af:cb:cf:81:53:20:86:63:20:74:6f:20:a3:07: e4:92:9d:65:b5:84:4b:21:f2:b3:04:a2:38:e4:5d: 54:83:ac:ea:83:c1:68:b8:85:9e:0a:41:af:6f:7b: ec:26:41:a9:ee:eb:20:fc:64:89:29:d8:0b:7f:c2: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:A1:11:2E:52:A5:99:EB:EA:CF:A7:2D:34:41:0A:F8:74:2A:20 X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/PEehES5SpZnr6s-nLTRBCvh0KiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.212.0/22 185.103.76.0/22 195.35.114.0/23 IPv6: 2a06:2a80::/29 Signature Algorithm: sha256WithRSAEncryption 25:34:27:d6:0f:88:46:45:49:66:3c:44:c7:ed:58:00:ef:1f: 37:d9:fb:45:3e:d7:b0:10:d9:73:90:98:1b:51:48:02:39:2e: 20:38:2d:34:b5:fa:b8:93:f1:6c:aa:64:ba:a2:32:ae:28:dc: a6:10:ca:bd:e6:e7:92:a3:de:7c:13:1a:cb:bc:de:14:d8:e9: d1:84:4e:ca:f1:3d:c7:35:1f:86:30:88:02:c5:c6:7b:99:30: cd:ce:dc:7e:fc:ad:ed:79:f4:2c:a4:0d:16:17:80:43:f4:5d: db:14:d7:f0:73:df:53:42:50:83:d5:6b:1c:a2:c4:bc:e7:27: 1e:49:29:72:6c:76:7a:3d:25:e3:fa:55:38:9f:d0:66:b2:82: 4b:b9:e0:75:f8:e6:08:5d:6b:90:11:36:bf:db:bd:87:d7:25: c1:ac:54:34:09:6e:db:f2:21:6a:e3:16:ef:44:44:87:1a:43: 7f:3d:bc:26:4a:5d:64:ba:bd:3d:99:66:57:a1:8b:d5:57:46: 85:e0:8d:5a:50:bf:6d:cd:a2:79:12:11:ef:a8:1e:a7:77:c5: 0d:12:7b:7c:d5:8c:67:cb:b4:f9:e0:a8:5b:14:97:2c:48:27: da:82:77:b0:b5:10:ce:8c:5c:00:52:d9:cd:3c:a5:8f:bd:c9: 7e:e2:81:c2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FZVnv6ahkfYVwraZ7YsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzQ3YTExMTJlNTJhNTk5ZWJlYWNmYTcyZDM0NDEwYWY4NzQyYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ61o0/7C/plCtHA51+Ix17MFJRE eutWLwq6Bhb+eXaG1wNV703eNOPdYF0Wagvf1Z7loyeA4OoEu25MuWZiSsli4h4I 21ORO7Vwj1C8JL5HX7q2acndLZymxo4m6rutD7LlrDBLMs53q3vRIOjEtyCxVHWG D+35nVqouw/CrBVqgdc/CdMPmOtOhBZs99woO8zHEoASoyW/zE5nb3nrD9gz1p3s rGTUS/tZiYPec0QMZT6pNKdZXgsc5kzISUKM4s8zr8vPgVMghmMgdG8gowfkkp1l tYRLIfKzBKI45F1Ug6zqg8FouIWeCkGvb3vsJkGp7usg/GSJKdgLf8KeVwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDxHoREuUqWZ6+rPpy00QQr4dCogMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvUEVlaEVTNVNwWm5yNnMtbkxUUkJDdmgwS2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLZvUAwQC uWdMAwQBwyNyMA0EAgACMAcDBQMqBiqAMA0GCSqGSIb3DQEBCwUAA4IBAQAlNCfW D4hGRUlmPETH7VgA7x832ftFPtewENlzkJgbUUgCOS4gOC00tfq4k/FsqmS6ojKu KNymEMq95ueSo958ExrLvN4U2OnRhE7K8T3HNR+GMIgCxcZ7mTDNztx+/K3tefQs pA0WF4BD9F3bFNfwc99TQlCD1WscosS85yceSSlybHZ6PSXj+lU4n9BmsoJLueB1 +OYIXWuQETa/272H1yXBrFQ0CW7b8iFq4xbvRESHGkN/PbwmSl1kur09mWZXoYvV V0aF4I1aUL9tzaJ5EhHvqB6nd8UNEnt81Yxny7T54KhbFJcsSCfagnewtRDOjFwA UtnNPKWPvcl+4oHC -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:01 2026 by rpki-client