This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa File: Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa (raw, json) Hash identifier: Z4q0gZP6TZCVbicLemekk+usml+xCUXFfIPrfXm7A+k= Subject key identifier: 3E:AD:36:52:E5:60:3E:C1:10:26:7C:5F:9A:A1:E6:03:0F:59:AD:16 Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Certificate serial: 019B7C80275A6AA0C2610E62D1B5F2D15E78 Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16238 IP address blocks: 217.73.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:5a:6a:a0:c2:61:0e:62:d1:b5:f2:d1:5e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ead3652e5603ec110267c5f9aa1e6030f59ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:10:b1:82:74:08:73:89:8d:28:60:86:02: b0:66:75:67:b7:a6:b0:a3:6e:b0:1d:ab:0b:1f:33: 60:dd:ab:b5:2c:a9:3c:b5:75:08:70:94:d0:90:52: b2:39:ad:9b:f5:0a:a6:16:e7:98:81:9f:a8:3b:99: d0:32:8e:7c:46:18:9b:c7:62:70:83:80:ac:e6:24: 0e:0c:49:87:2e:97:28:2e:4e:9a:67:5f:f0:67:e6: 7b:92:30:ce:18:42:9c:09:8d:9e:19:a1:6a:7d:b2: 56:ca:56:1b:4f:ff:7e:f8:94:ac:80:18:c1:62:3d: 2f:35:67:4a:0c:37:ca:7b:a3:97:d9:d1:4b:6e:1e: 43:4b:8d:ea:72:a5:b2:d1:4b:38:ec:69:07:55:2b: f7:93:17:97:ce:aa:33:33:20:94:5e:92:32:ab:ea: 29:d1:25:38:24:69:1c:4f:f5:3e:23:d9:1f:d4:55: 4c:79:fd:7a:9e:53:55:7b:92:8e:4c:3f:e8:f5:e3: 06:b9:96:14:2b:c7:11:26:b2:d0:94:24:18:1b:e4: 9e:c3:5f:c7:51:8c:bc:b8:99:f3:ff:a2:1e:91:17: 5d:d3:37:81:7e:75:21:14:ff:ed:ff:3b:fe:b0:06: 7a:b5:90:45:8e:4c:0a:89:00:62:29:4c:b3:2f:2b: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AD:36:52:E5:60:3E:C1:10:26:7C:5F:9A:A1:E6:03:0F:59:AD:16 X509v3 Authority Key Identifier: keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.73.79.0/24 Signature Algorithm: sha256WithRSAEncryption 30:34:bd:c2:85:f8:78:4b:c7:5f:f1:36:bf:af:a5:84:7b:68: 6a:ef:8d:9e:d5:f3:56:ce:31:96:88:58:49:d9:9c:c3:d5:5e: d1:82:f2:49:0e:67:0d:64:e1:f4:61:be:ab:eb:d7:63:77:ca: a0:f7:a2:7f:5e:25:ed:93:cd:3e:c8:31:49:03:a7:da:9a:e6: ee:8e:a3:28:1b:7e:44:89:cc:e6:40:6d:76:26:45:d5:22:77: 39:7c:07:a4:44:6a:39:74:19:03:cd:f9:ff:15:d6:61:f2:e5: 03:f2:47:2d:41:fe:e0:85:b8:b0:34:43:ad:92:25:8f:3d:40: 96:c8:67:85:e3:3a:61:c4:34:d7:ba:eb:8e:c4:67:8d:b4:28: f4:22:0e:3d:05:61:d0:97:a2:d5:cb:fd:32:46:8c:3b:29:f9: 23:7a:da:cc:f4:61:1c:d2:29:42:b7:9d:ef:78:52:fc:97:b5: 6b:43:a9:47:2a:2b:87:f5:d3:ae:7b:54:12:a2:ff:cd:dd:f9: 6e:44:d2:43:f0:0e:2a:33:45:d6:2e:6f:36:27:67:18:d3:f7: cb:ce:48:37:89:44:2f:6e:72:c6:5a:22:ab:36:d5:c8:0c:67: 6e:e6:ca:c5:09:ad:f0:3e:40:e7:a3:f7:aa:e3:fd:15:3d:e1: 79:fb:07:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCdaaqDCYQ5i0bXy0V54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTAxNDlmZDEyMTMwYjNjZGNmMzU4NjJiMGRjZGI5OGE5 NDcxYzkwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWFkMzY1MmU1NjAzZWMxMTAyNjdjNWY5YWExZTYwMzBmNTlhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyQQsYJ0CHOJjShghgKwZnVnt6aw o26wHasLHzNg3au1LKk8tXUIcJTQkFKyOa2b9QqmFueYgZ+oO5nQMo58Rhibx2Jw g4Cs5iQODEmHLpcoLk6aZ1/wZ+Z7kjDOGEKcCY2eGaFqfbJWylYbT/9++JSsgBjB Yj0vNWdKDDfKe6OX2dFLbh5DS43qcqWy0Us47GkHVSv3kxeXzqozMyCUXpIyq+op 0SU4JGkcT/U+I9kf1FVMef16nlNVe5KOTD/o9eMGuZYUK8cRJrLQlCQYG+Sew1/H UYy8uJnz/6IekRdd0zeBfnUhFP/t/zv+sAZ6tZBFjkwKiQBiKUyzLyu+bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6tNlLlYD7BECZ8X5qh5gMPWa0WMB8GA1UdIwQY MBaAFIEQFJ/RITCzzc81hisNzbmKlHHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMt YWIzMWVhY2JmZmNhLzEvUHEwMlV1VmdQc0VRSm54Zm1xSG1BdzlaclJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMtYWIzMWVhY2JmZmNh LzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UlPMA0G CSqGSIb3DQEBCwUAA4IBAQAwNL3Chfh4S8df8Ta/r6WEe2hq742e1fNWzjGWiFhJ 2ZzD1V7RgvJJDmcNZOH0Yb6r69djd8qg96J/XiXtk80+yDFJA6famubujqMoG35E iczmQG12JkXVInc5fAekRGo5dBkDzfn/FdZh8uUD8kctQf7ghbiwNEOtkiWPPUCW yGeF4zphxDTXuuuOxGeNtCj0Ig49BWHQl6LVy/0yRow7KfkjetrM9GEc0ilCt53v eFL8l7VrQ6lHKiuH9dOue1QSov/N3fluRNJD8A4qM0XWLm82J2cY0/fLzkg3iUQv bnLGWiKrNtXIDGdu5srFCa3wPkDno/eq4/0VPeF5+wey -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:47 2026 by rpki-client