This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa File: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (raw, json) Hash identifier: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo= Subject key identifier: 3E:73:D6:24:F6:8D:D4:9F:15:1C:29:9D:F9:CB:8A:0D:D5:25:93:EF Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Certificate serial: 019B7D5BCDC1B0FDFCC45C26B3E6640C2150 Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa Signing time: Fri 02 Jan 2026 06:18:46 +0000 ROA not before: Fri 02 Jan 2026 06:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211874 IP address blocks: 185.128.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:cd:c1:b0:fd:fc:c4:5c:26:b3:e6:64:0c:21:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46 Validity Not Before: Jan 2 06:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e73d624f68dd49f151c299df9cb8a0dd52593ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:f3:8e:31:ca:33:75:ee:a2:88:bd:e5:7d: 1b:0e:4d:d4:5d:83:32:50:c3:51:44:99:fc:c5:46: 60:66:ce:82:03:a4:fc:e9:cd:0a:e2:b5:8b:5b:5a: f3:03:07:38:43:7c:4c:35:82:0e:cc:6e:17:fa:9c: 2b:10:ef:ed:f8:32:4a:f8:87:91:28:d5:2c:51:45: d0:8f:0e:a8:3c:b9:4e:4d:75:29:ce:d8:4e:e9:c0: 6c:75:9d:a5:92:ea:d7:a8:94:23:43:b4:f4:ef:89: 49:27:65:48:c3:2e:39:9e:20:ca:5e:bb:6a:bd:d2: 45:db:8c:fb:2c:f6:2a:76:1c:d3:a8:f8:89:58:3a: e0:9d:60:9d:6d:86:55:bf:ab:97:02:85:ca:71:a8: 93:48:a4:17:8a:85:68:77:79:f0:e9:e9:8d:3a:0f: 59:f5:fe:fc:c7:59:23:06:b9:5a:cc:4a:f4:81:ca: 3c:1b:01:53:91:0e:54:3e:c2:ec:1c:07:b0:46:bb: ed:af:06:ef:13:16:9f:7f:49:3f:0b:ee:8a:9d:f0: 7a:dc:a0:af:6d:82:f7:7b:98:c1:de:ad:c5:82:4f: 22:a0:92:86:71:f4:2e:9e:6a:98:72:5d:41:62:11: 57:dd:6c:61:43:c1:55:5d:d2:f7:44:ca:5c:a5:ce: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:D6:24:F6:8D:D4:9F:15:1C:29:9D:F9:CB:8A:0D:D5:25:93:EF X509v3 Authority Key Identifier: keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.63.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c4:6a:d0:39:b0:2b:57:d0:04:55:b9:7e:63:0d:36:cf:e0: b0:ee:9d:9a:21:d0:01:60:81:7a:40:38:89:c0:45:d1:73:99: c3:84:19:6d:fe:68:30:c0:14:f9:68:4b:cd:9a:bc:18:20:69: f5:57:1c:1a:bf:76:7b:3b:0d:9a:87:6c:06:63:fd:2c:da:93: a5:54:4f:d2:e5:ed:45:9e:d4:b9:e7:a4:dc:61:59:33:95:2c: d5:88:0c:79:e6:7d:e5:db:af:58:34:ea:4c:86:86:cf:ac:f7: 81:5b:f6:70:a3:63:b8:e8:6c:3a:10:5f:f0:5c:9c:7b:d6:51: 33:c8:bf:4e:1b:6e:24:02:b4:69:70:0e:a7:41:23:7c:01:38: 46:15:2b:51:42:11:fc:34:a4:63:5f:cc:fc:c6:7a:4c:e6:2c: 2f:ee:20:0c:54:49:6f:cf:8d:d9:eb:f3:7e:b0:ff:ba:09:ed: b2:43:d7:33:5d:7a:3f:a7:46:8f:e0:1b:31:63:ed:8c:6b:e3: b0:81:e1:32:13:a5:3f:c0:0f:b7:50:b6:c7:5e:ab:8b:19:82: 77:1d:b8:91:ce:80:e6:21:b2:a3:0c:5c:c8:b5:a1:4e:71:32: a4:c6:b2:53:d4:52:c0:5e:88:fa:7e:0d:fc:1e:e9:a9:2d:84: 78:54:4f:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W83BsP38xFwms+ZkDCFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1 OWJmNDYwHhcNMjYwMTAyMDYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTczZDYyNGY2OGRkNDlmMTUxYzI5OWRmOWNiOGEwZGQ1MjU5M2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqzzjjHKM3Xuooi95X0bDk3UXYMy UMNRRJn8xUZgZs6CA6T86c0K4rWLW1rzAwc4Q3xMNYIOzG4X+pwrEO/t+DJK+IeR KNUsUUXQjw6oPLlOTXUpzthO6cBsdZ2lkurXqJQjQ7T074lJJ2VIwy45niDKXrtq vdJF24z7LPYqdhzTqPiJWDrgnWCdbYZVv6uXAoXKcaiTSKQXioVod3nw6emNOg9Z 9f78x1kjBrlazEr0gco8GwFTkQ5UPsLsHAewRrvtrwbvExaff0k/C+6KnfB63KCv bYL3e5jB3q3Fgk8ioJKGcfQunmqYcl1BYhFX3WxhQ8FVXdL3RMpcpc44HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5z1iT2jdSfFRwpnfnLig3VJZPvMB8GA1UdIwQY MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt ZjY2MTM4MDY2MzU4LzEvUG5QV0pQYU4xSjhWSENtZC1jdUtEZFVsay04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4 LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYA/MA0G CSqGSIb3DQEBCwUAA4IBAQCrxGrQObArV9AEVbl+Yw02z+Cw7p2aIdABYIF6QDiJ wEXRc5nDhBlt/mgwwBT5aEvNmrwYIGn1Vxwav3Z7Ow2ah2wGY/0s2pOlVE/S5e1F ntS556TcYVkzlSzViAx55n3l269YNOpMhobPrPeBW/Zwo2O46Gw6EF/wXJx71lEz yL9OG24kArRpcA6nQSN8AThGFStRQhH8NKRjX8z8xnpM5iwv7iAMVElvz43Z6/N+ sP+6Ce2yQ9czXXo/p0aP4BsxY+2Ma+OwgeEyE6U/wA+3ULbHXquLGYJ3HbiRzoDm IbKjDFzItaFOcTKkxrJT1FLAXoj6fg38HumpLYR4VE/N -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:58 2026 by rpki-client