This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/P-YnCSUtnumn2hA16AWMoL57X4s.roa File: P-YnCSUtnumn2hA16AWMoL57X4s.roa (raw, json) Hash identifier: eWTWw5vjur+Hdp0k4MV5xWgnd5LJ3YCF0WihFpndkIA= Subject key identifier: 3F:E6:27:09:25:2D:9E:E9:A7:DA:10:35:E8:05:8C:A0:BE:7B:5F:8B Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Certificate serial: 019B7E37E1759BE248CDCCF59FB9231F49D7 Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/P-YnCSUtnumn2hA16AWMoL57X4s.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203153 IP address blocks: 212.73.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e1:75:9b:e2:48:cd:cc:f5:9f:b9:23:1f:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fe62709252d9ee9a7da1035e8058ca0be7b5f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:df:c7:b7:29:71:17:82:0d:05:e9:14:9e: c5:38:9a:93:19:aa:d3:c0:65:0b:71:c2:61:ba:95: 31:26:05:1a:3e:57:b8:20:e2:9b:a7:55:b9:b4:f1: 7a:13:83:08:fa:6d:06:09:76:c7:cc:b5:3c:48:a8: 52:0f:f1:8c:94:36:3f:16:a7:8a:a5:50:7f:00:04: 84:13:78:4a:36:c7:05:b0:36:02:a0:30:23:ac:80: 70:fd:1e:42:31:8f:54:08:d2:a3:8b:67:e2:f7:61: 60:18:48:de:0a:66:f9:1b:d8:0f:4b:49:69:07:b0: 7d:4c:a9:49:55:84:c1:c2:98:39:ed:31:f3:f8:0f: 4b:5c:49:6f:f8:05:fc:2e:02:3f:df:8e:46:f3:fe: 39:16:de:84:b7:f6:7c:8f:da:00:42:cd:6a:5d:50: 9e:18:d7:4f:3d:af:12:c2:82:39:c8:5b:77:c5:7e: ec:25:4e:00:00:f7:50:f3:d8:75:fd:80:cd:6e:28: 4a:1c:1f:92:f6:10:b1:bd:a1:f7:f5:4e:16:71:33: 9c:49:9d:89:7f:65:04:5a:fa:8d:6f:4c:0f:04:47: ba:58:fb:06:2f:eb:2a:0e:39:77:13:52:ee:92:85: 0f:4f:92:80:98:b1:b7:81:09:04:a7:fe:1c:6a:23: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E6:27:09:25:2D:9E:E9:A7:DA:10:35:E8:05:8C:A0:BE:7B:5F:8B X509v3 Authority Key Identifier: keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/P-YnCSUtnumn2hA16AWMoL57X4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.73.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:73:3c:76:2c:4c:f4:a5:12:53:8a:29:e5:4c:e2:cc:aa:8f: 50:48:93:e3:56:50:df:4d:a4:ac:75:fd:fc:95:24:21:fa:aa: ae:f1:2b:75:af:97:ee:6a:47:0d:3b:e6:41:12:f3:d1:16:70: 1f:18:b5:81:4f:6e:f0:7b:cf:b4:92:2e:3b:4c:93:57:e8:ff: a8:44:13:3c:ee:9d:2d:0a:4f:59:35:a5:f6:5e:d1:36:25:2e: 45:ac:8b:6a:c4:de:76:e4:8a:53:45:ee:c3:fe:97:09:82:1b: 4a:58:d3:75:a2:be:7b:28:37:f5:8f:90:6d:ef:29:7e:1e:20: b1:78:5b:ff:f2:62:07:91:ae:1b:da:0e:47:e1:c3:29:d6:bc: 63:5a:34:19:d8:c3:26:07:ba:4e:e0:aa:d5:e8:11:e2:7a:92: f1:8f:f2:9e:79:5f:b7:34:bf:b1:96:8b:5b:20:15:55:29:05: 23:4a:4a:c9:8d:b3:e2:91:fb:2b:01:f0:7a:a9:44:87:b1:ea: a8:4c:f5:1c:b9:0d:aa:24:f2:29:29:66:7c:a3:e8:e7:01:0d: 44:77:d8:5b:b6:bc:60:5b:12:ca:70:02:74:26:35:86:23:38: 5a:16:ca:c5:f4:1c:56:7c:5f:39:75:2c:97:95:40:b0:8b:ba: 08:e5:51:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+F1m+JIzcz1n7kjH0nXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1 OTUxMmMwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmU2MjcwOTI1MmQ5ZWU5YTdkYTEwMzVlODA1OGNhMGJlN2I1ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ljfx7cpcReCDQXpFJ7FOJqTGarT wGULccJhupUxJgUaPle4IOKbp1W5tPF6E4MI+m0GCXbHzLU8SKhSD/GMlDY/FqeK pVB/AASEE3hKNscFsDYCoDAjrIBw/R5CMY9UCNKji2fi92FgGEjeCmb5G9gPS0lp B7B9TKlJVYTBwpg57THz+A9LXElv+AX8LgI/345G8/45Ft6Et/Z8j9oAQs1qXVCe GNdPPa8SwoI5yFt3xX7sJU4AAPdQ89h1/YDNbihKHB+S9hCxvaH39U4WcTOcSZ2J f2UEWvqNb0wPBEe6WPsGL+sqDjl3E1LukoUPT5KAmLG3gQkEp/4caiOR2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/mJwklLZ7pp9oQNegFjKC+e1+LMB8GA1UdIwQY MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct NTIxMmRiOTc1NGY0LzEvUC1ZbkNTVXRudW1uMmhBMTZBV01vTDU3WDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0 LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EmaMA0G CSqGSIb3DQEBCwUAA4IBAQAfczx2LEz0pRJTiinlTOLMqo9QSJPjVlDfTaSsdf38 lSQh+qqu8St1r5fuakcNO+ZBEvPRFnAfGLWBT27we8+0ki47TJNX6P+oRBM87p0t Ck9ZNaX2XtE2JS5FrItqxN525IpTRe7D/pcJghtKWNN1or57KDf1j5Bt7yl+HiCx eFv/8mIHka4b2g5H4cMp1rxjWjQZ2MMmB7pO4KrV6BHiepLxj/KeeV+3NL+xlotb IBVVKQUjSkrJjbPikfsrAfB6qUSHseqoTPUcuQ2qJPIpKWZ8o+jnAQ1Ed9hbtrxg WxLKcAJ0JjWGIzhaFsrF9BxWfF85dSyXlUCwi7oI5VGf -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:02 2026 by rpki-client