This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa File: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (raw, json) Hash identifier: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs= Subject key identifier: 3C:32:8A:71:F3:1F:07:D6:74:9B:19:6D:E2:39:B4:91:C5:B4:7E:0E Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFC5B59EB247B0137586006E419C3 Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203001 IP address blocks: 185.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fc:5b:59:eb:24:7b:01:37:58:60:06:e4:19:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c328a71f31f07d6749b196de239b491c5b47e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:b8:4d:51:f7:70:e2:76:02:6b:bb:e5:32: 4a:34:9e:42:9c:f6:b5:51:d6:d7:64:92:c4:f1:32: 4c:96:ec:9e:62:77:fa:d7:96:c8:5c:53:12:f0:63: 17:a6:45:82:87:0b:29:88:87:c9:71:53:f7:9e:8d: 81:28:af:d8:71:c9:00:cb:e2:f7:c1:ac:b5:c4:7b: 4a:fd:b0:11:3e:ca:28:88:07:b7:b1:9c:92:25:49: 0b:0a:2a:be:67:2f:c1:56:eb:22:01:df:6c:12:08: bc:77:b9:d8:cd:31:36:4e:c4:09:16:a5:46:2b:47: 18:4b:4d:08:1c:8a:1f:74:be:d5:f9:3e:b6:71:34: 47:d3:cf:62:22:78:61:26:00:3f:65:19:f9:23:95: 71:28:40:9b:88:4a:aa:fa:84:95:d1:b4:25:6a:95: 1d:f0:4d:fc:f9:5b:1a:11:d7:d2:d9:82:50:4f:9d: 43:70:6a:25:b6:db:27:69:70:52:c6:a9:e0:e8:f3: 00:97:98:1a:e7:52:35:84:08:0e:18:ad:04:95:c6: f9:d5:32:0b:2a:a6:cb:38:ab:71:7a:cd:8b:8c:8b: 04:20:8e:fd:0c:4e:08:d8:31:3e:1b:81:c6:d4:48: e1:df:90:80:7a:41:6e:9f:24:45:66:96:28:fa:c1: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:8A:71:F3:1F:07:D6:74:9B:19:6D:E2:39:B4:91:C5:B4:7E:0E X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:d0:f4:67:4b:b9:96:81:f2:f1:d0:09:c7:5a:ef:bb:ee:e7: 8c:ed:f3:61:66:bb:c5:59:11:16:fa:9b:2d:a8:fd:04:9c:75: 6a:08:63:5a:cd:c2:0f:98:2e:88:bb:f6:fe:da:56:1f:c7:c1: 75:b0:31:f7:a2:e5:a1:07:f7:42:98:e7:d0:bb:3b:f6:56:bb: 82:f4:ea:85:87:9e:38:07:20:4e:0d:a0:5f:34:3d:6b:12:22: 27:80:af:42:d6:04:21:bd:16:3f:bb:88:6e:f0:8f:8e:72:ec: c1:8e:8e:51:f5:dd:0f:8b:69:e9:37:14:b3:6c:05:7d:c0:c9: 69:65:e5:57:db:58:19:1d:b5:0f:1c:8f:48:a7:a8:b0:22:c4: fe:73:85:7d:10:47:4d:d4:d4:b8:02:28:f8:67:a7:9a:fa:ae: 32:5e:8d:21:97:0e:4e:1a:aa:8c:9b:c6:3d:c4:85:d5:86:22: db:b4:ae:c1:7b:be:6e:15:f0:65:d3:5e:45:da:71:e6:76:d9: 6e:4a:73:b0:0a:fa:d8:0a:58:18:6d:28:21:0a:82:1f:00:76: c0:82:a4:42:81:12:dd:f1:9e:03:eb:b0:de:3d:89:76:fe:0b: bb:d0:f6:dc:91:2d:3b:9e:88:d3:41:b3:c3:8a:74:4a:aa:6d: db:fe:3d:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/xbWeskewE3WGAG5BnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzMyOGE3MWYzMWYwN2Q2NzQ5YjE5NmRlMjM5YjQ5MWM1YjQ3ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMK4TVH3cOJ2Amu75TJKNJ5CnPa1 UdbXZJLE8TJMluyeYnf615bIXFMS8GMXpkWChwspiIfJcVP3no2BKK/YcckAy+L3 way1xHtK/bARPsooiAe3sZySJUkLCiq+Zy/BVusiAd9sEgi8d7nYzTE2TsQJFqVG K0cYS00IHIofdL7V+T62cTRH089iInhhJgA/ZRn5I5VxKECbiEqq+oSV0bQlapUd 8E38+VsaEdfS2YJQT51DcGolttsnaXBSxqng6PMAl5ga51I1hAgOGK0Elcb51TIL KqbLOKtxes2LjIsEII79DE4I2DE+G4HG1Ejh35CAekFunyRFZpYo+sF4bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwyinHzHwfWdJsZbeI5tJHFtH4OMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvUERLS2NmTWZCOVowbXhsdDRqbTBrY1cwZmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR17MA0G CSqGSIb3DQEBCwUAA4IBAQBP0PRnS7mWgfLx0AnHWu+77ueM7fNhZrvFWREW+pst qP0EnHVqCGNazcIPmC6Iu/b+2lYfx8F1sDH3ouWhB/dCmOfQuzv2VruC9OqFh544 ByBODaBfND1rEiIngK9C1gQhvRY/u4hu8I+OcuzBjo5R9d0Pi2npNxSzbAV9wMlp ZeVX21gZHbUPHI9Ip6iwIsT+c4V9EEdN1NS4Aij4Z6ea+q4yXo0hlw5OGqqMm8Y9 xIXVhiLbtK7Be75uFfBl015F2nHmdtluSnOwCvrYClgYbSghCoIfAHbAgqRCgRLd 8Z4D67DePYl2/gu70PbckS07nojTQbPDinRKqm3b/j1A -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:44 2026 by rpki-client