This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/PMdpUUy3N8aucFQis2EHtpFZuIY.roa File: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (raw, json) Hash identifier: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY= Subject key identifier: 3C:C7:69:51:4C:B7:37:C6:AE:70:54:22:B3:61:07:B6:91:59:B8:86 Certificate issuer: /CN=3a839936aeeff288678e772633020fa259bd9cf2 Certificate serial: 019B7F155D70FDD43F3041A87A674994462A Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/PMdpUUy3N8aucFQis2EHtpFZuIY.roa Signing time: Fri 02 Jan 2026 14:21:05 +0000 ROA not before: Fri 02 Jan 2026 14:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214917 IP address blocks: 188.95.68.0/24 maxlen: 24 2a12:ff00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5d:70:fd:d4:3f:30:41:a8:7a:67:49:94:46:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2 Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc769514cb737c6ae705422b36107b69159b886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:e6:71:4b:3f:bf:c2:b7:b3:24:72:dd:bf: a2:33:de:71:0f:44:c6:62:ba:70:98:3a:30:a3:b2: 99:bd:64:09:fd:88:63:8f:3c:bc:49:1d:ea:c8:ed: eb:98:3d:46:53:5e:a0:25:1e:55:dd:9b:a0:7b:dd: 6f:e2:88:82:74:3e:9f:2c:d2:d4:14:16:33:17:1b: 2b:e4:cc:81:91:9b:13:04:b0:81:39:72:3b:c7:fe: 7b:63:2e:cd:dd:23:6a:f9:c8:12:7d:3f:bb:94:7b: 58:b3:ae:98:1f:2a:c0:7c:02:f5:1f:65:4a:ff:02: e2:b0:ec:d9:4f:be:0a:05:d0:08:c8:6e:1f:8d:b3: 44:68:4b:54:3b:da:4c:f3:0f:57:64:d1:91:08:92: 45:24:81:b4:51:f5:45:4a:b7:1a:60:6c:90:00:e7: ba:9b:0b:11:54:8d:c0:07:6c:32:41:35:b7:30:25: 7a:07:fc:5d:81:bb:7a:94:b6:78:13:f0:e6:a9:3e: 62:8d:61:14:75:9f:e6:e2:67:ee:c2:a2:d9:7b:49: cf:31:c3:91:e9:78:9e:84:de:ff:f3:9b:62:ae:66: 05:a3:45:56:66:71:39:33:af:f1:2f:23:9e:92:75: 5f:08:81:6c:5f:47:c1:73:3c:63:16:9d:c7:35:80: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C7:69:51:4C:B7:37:C6:AE:70:54:22:B3:61:07:B6:91:59:B8:86 X509v3 Authority Key Identifier: keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/PMdpUUy3N8aucFQis2EHtpFZuIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.68.0/24 IPv6: 2a12:ff00::/29 Signature Algorithm: sha256WithRSAEncryption 98:8b:b6:51:3d:b0:05:57:e4:ac:cc:9b:6f:cf:36:91:80:46: 28:5a:4e:55:51:f9:fa:8f:43:2b:d9:0d:e3:94:a5:c4:b2:da: ee:ea:80:aa:06:2e:ac:8a:08:0c:ed:16:c9:4b:d8:dc:4d:3a: e2:2a:15:47:f4:65:c5:46:6e:ad:4c:93:1b:ea:74:e4:97:09: d3:a3:92:df:ae:37:55:10:0f:fb:72:40:ae:02:1d:74:0b:19: ea:3e:a7:91:01:6c:85:1d:f6:81:11:22:6a:1c:3f:a9:35:72: 15:f7:a0:ff:d4:97:2f:eb:c3:48:3c:10:3d:84:4e:37:ed:47: 61:4f:c2:4c:ff:95:32:29:31:a0:5b:ba:cd:8f:b5:11:06:89: 96:1f:36:91:b6:4f:ce:91:11:02:c8:85:0f:63:1a:ea:88:27: 91:db:8f:81:bf:61:5b:61:6a:df:4a:65:96:16:30:52:f0:14: 2c:56:65:b3:cc:00:d5:2f:16:67:9a:4e:e3:d4:e8:38:f7:4e: ec:33:33:97:aa:f7:17:56:31:03:54:a9:36:ef:2f:aa:8e:36: e2:ba:b2:1b:f0:1c:18:07:0f:7a:11:93:16:f1:05:9e:9d:72: c6:fd:df:68:ce:88:34:9a:80:a2:82:e3:8b:dc:5d:d3:56:63: 73:a8:d3:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FV1w/dQ/MEGoemdJlEYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhODM5OTM2YWVlZmYyODg2NzhlNzcyNjMzMDIwZmEyNTli ZDljZjIwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2M3Njk1MTRjYjczN2M2YWU3MDU0MjJiMzYxMDdiNjkxNTliODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ3mcUs/v8K3syRy3b+iM95xD0TG YrpwmDowo7KZvWQJ/Yhjjzy8SR3qyO3rmD1GU16gJR5V3Zuge91v4oiCdD6fLNLU FBYzFxsr5MyBkZsTBLCBOXI7x/57Yy7N3SNq+cgSfT+7lHtYs66YHyrAfAL1H2VK /wLisOzZT74KBdAIyG4fjbNEaEtUO9pM8w9XZNGRCJJFJIG0UfVFSrcaYGyQAOe6 mwsRVI3AB2wyQTW3MCV6B/xdgbt6lLZ4E/DmqT5ijWEUdZ/m4mfuwqLZe0nPMcOR 6XiehN7/85tirmYFo0VWZnE5M6/xLyOeknVfCIFsX0fBczxjFp3HNYCZxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDzHaVFMtzfGrnBUIrNhB7aRWbiGMB8GA1UdIwQY MBaAFDqDmTau7/KIZ453JjMCD6JZvZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQt ODM1ZjRlMzcyODNjLzEvUE1kcFVVeTNOOGF1Y0ZRaXMyRUh0cEZadUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81YzY3NDUtNzY4ZS00ZDYxLWI2MDQtODM1ZjRlMzcyODNj LzEvT29PWk5xN3Y4b2huam5jbU13SVBvbG05blBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvF9EMA0E AgACMAcDBQMqEv8AMA0GCSqGSIb3DQEBCwUAA4IBAQCYi7ZRPbAFV+SszJtvzzaR gEYoWk5VUfn6j0Mr2Q3jlKXEstru6oCqBi6siggM7RbJS9jcTTriKhVH9GXFRm6t TJMb6nTklwnTo5LfrjdVEA/7ckCuAh10CxnqPqeRAWyFHfaBESJqHD+pNXIV96D/ 1Jcv68NIPBA9hE437UdhT8JM/5UyKTGgW7rNj7URBomWHzaRtk/OkRECyIUPYxrq iCeR24+Bv2FbYWrfSmWWFjBS8BQsVmWzzADVLxZnmk7j1Og4907sMzOXqvcXVjED VKk27y+qjjbiurIb8BwYBw96EZMW8QWenXLG/d9ozog0moCiguOL3F3TVmNzqNP8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:54 2026 by rpki-client