This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa File: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (raw, json) Hash identifier: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ= Subject key identifier: 3C:29:37:9E:4C:6F:46:82:C5:D6:00:DB:93:19:C3:0A:B8:E0:19:AD Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb Certificate serial: 019B7CED3365BF31AFACF11599B0DBAFCC68 Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216383 IP address blocks: 185.36.145.0/24 maxlen: 24 2a13:3e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:33:65:bf:31:af:ac:f1:15:99:b0:db:af:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c29379e4c6f4682c5d600db9319c30ab8e019ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:6a:24:52:57:bb:f2:b0:31:71:b2:9d:20: 5f:ad:2c:28:48:88:96:f2:18:44:2c:6f:55:cb:18: c5:ad:2d:46:3b:52:fc:66:dc:00:ea:6d:3f:0a:14: c4:18:ee:c2:ec:9b:8b:6b:a0:fb:cb:1c:6a:cb:c6: 6a:3d:aa:fd:7a:3d:4b:ba:7f:28:de:35:e0:68:87: 1d:9c:12:31:a1:0b:e0:23:02:1b:9e:0f:d4:eb:26: 51:9c:dc:b7:b2:f2:2d:c7:00:09:2b:92:59:c4:da: ed:88:e5:8a:96:72:3e:78:85:73:37:d8:0a:7f:f0: 2b:58:fa:f1:d1:a3:d3:81:e2:17:81:15:b7:c8:08: 12:1f:20:64:d4:e3:2f:e3:86:d3:3c:24:95:34:b5: 5c:ba:ee:1a:68:f1:d5:04:ea:7a:43:ae:e9:44:88: 09:9f:59:d3:00:4c:ff:9f:2c:95:21:e6:e6:31:71: bc:f9:f0:73:20:5b:9c:e9:d3:a6:f5:6f:6c:9c:a6: 88:ee:66:a2:b9:f2:5f:bb:53:ab:9e:93:b1:72:96: 74:10:d8:37:e6:aa:31:e4:b7:6b:75:aa:17:28:d2: 68:1c:21:0e:4e:2a:43:da:4e:81:3a:3a:37:45:69: 90:d0:10:b9:e8:96:ec:72:46:5d:49:8a:ab:28:ce: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:29:37:9E:4C:6F:46:82:C5:D6:00:DB:93:19:C3:0A:B8:E0:19:AD X509v3 Authority Key Identifier: keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.145.0/24 IPv6: 2a13:3e40::/29 Signature Algorithm: sha256WithRSAEncryption 6a:d9:99:1e:0d:a0:77:e8:5b:8c:08:79:5e:29:04:c9:84:56: ac:b1:cd:1b:d0:b4:3a:aa:a6:18:96:98:23:c1:92:8e:fd:68: a5:eb:05:df:65:81:a5:80:0a:1f:4a:3a:ee:0e:80:cd:a8:c2: af:12:16:d3:37:e0:cd:96:6e:56:fa:97:06:d6:b1:23:d2:84: b9:73:dc:fe:c4:dc:05:2f:d3:ed:87:4b:b9:96:46:e3:1c:a4: 8e:96:9b:9c:7e:04:3c:28:dd:c3:56:1b:31:18:1c:6d:c2:3a: 62:f4:9a:7d:07:c7:93:bc:4b:ee:91:aa:dc:92:70:30:9e:5a: 5c:78:bd:c4:5b:31:4c:a9:0a:ea:fb:4c:82:8d:46:92:fe:c5: 25:cd:91:7e:e0:00:c9:af:22:3d:43:54:45:d4:e7:ff:d6:ec: c9:55:80:46:0b:31:99:0c:ed:ed:77:cc:28:01:0e:bf:24:2f: d8:75:88:b1:00:98:75:d5:16:53:08:d3:60:da:7e:c3:22:cc: 06:b3:79:67:5f:06:a4:ce:59:94:ae:a8:18:9a:d4:39:be:ff: e7:3e:d9:d0:91:8c:bd:09:23:85:81:40:a6:4e:dd:60:90:3f: 21:17:87:ea:ef:77:c1:3b:b3:5d:ed:b1:d0:4a:84:d4:66:83: 89:4d:bb:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87TNlvzGvrPEVmbDbr8xoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi MjdlZmIwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzI5Mzc5ZTRjNmY0NjgyYzVkNjAwZGI5MzE5YzMwYWI4ZTAxOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BqJFJXu/KwMXGynSBfrSwoSIiW 8hhELG9VyxjFrS1GO1L8ZtwA6m0/ChTEGO7C7JuLa6D7yxxqy8ZqPar9ej1Lun8o 3jXgaIcdnBIxoQvgIwIbng/U6yZRnNy3svItxwAJK5JZxNrtiOWKlnI+eIVzN9gK f/ArWPrx0aPTgeIXgRW3yAgSHyBk1OMv44bTPCSVNLVcuu4aaPHVBOp6Q67pRIgJ n1nTAEz/nyyVIebmMXG8+fBzIFuc6dOm9W9snKaI7maiufJfu1OrnpOxcpZ0ENg3 5qox5LdrdaoXKNJoHCEOTipD2k6BOjo3RWmQ0BC56JbsckZdSYqrKM4UWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDwpN55Mb0aCxdYA25MZwwq44BmtMB8GA1UdIwQY MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt ZmViYzFlZDNjZWJhLzEvUENrM25reHZSb0xGMWdEYmt4bkRDcmpnR2EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSSRMA0E AgACMAcDBQMqEz5AMA0GCSqGSIb3DQEBCwUAA4IBAQBq2ZkeDaB36FuMCHleKQTJ hFassc0b0LQ6qqYYlpgjwZKO/Wil6wXfZYGlgAofSjruDoDNqMKvEhbTN+DNlm5W +pcG1rEj0oS5c9z+xNwFL9Pth0u5lkbjHKSOlpucfgQ8KN3DVhsxGBxtwjpi9Jp9 B8eTvEvukarcknAwnlpceL3EWzFMqQrq+0yCjUaS/sUlzZF+4ADJryI9Q1RF1Of/ 1uzJVYBGCzGZDO3td8woAQ6/JC/YdYixAJh11RZTCNNg2n7DIswGs3lnXwakzlmU rqgYmtQ5vv/nPtnQkYy9CSOFgUCmTt1gkD8hF4fq73fBO7Nd7bHQSoTUZoOJTbvI -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:44 2026 by rpki-client