This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA1HaDV2ZCfgduQ4AKcfYhFk2UE.roa File: PA1HaDV2ZCfgduQ4AKcfYhFk2UE.roa (raw, json) Hash identifier: kVYuuUxMGw8hLuvY9spQJ1m8JSvXpK63gi9+81ilfzY= Subject key identifier: 3C:0D:47:68:35:76:64:27:E0:76:E4:38:00:A7:1F:62:11:64:D9:41 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F879BBAB98BF2B67738B659A729E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA1HaDV2ZCfgduQ4AKcfYhFk2UE.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204584 IP address blocks: 92.38.41.0/24 maxlen: 24 93.171.214.0/24 maxlen: 24 95.47.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f8:79:bb:ab:98:bf:2b:67:73:8b:65:9a:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c0d476835766427e076e43800a71f621164d941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:a4:4f:a4:59:b5:5b:64:eb:67:24:99:aa: ba:65:0e:9c:d1:31:2b:2f:03:96:2e:54:ca:8a:90: 83:79:76:23:60:e9:b5:04:fa:7c:aa:a5:46:aa:e6: b2:c5:36:82:d5:f7:31:c2:12:07:32:4a:c6:30:24: 5b:cf:29:ef:2b:bb:be:6e:ca:55:6f:c6:20:96:8a: 5c:48:8a:bf:3f:ee:74:83:a3:a9:c4:31:1b:52:e0: 52:b8:30:70:98:33:f2:73:21:b5:3b:77:fa:ec:42: f3:e1:19:ab:cd:a9:c6:e7:8c:7f:9e:f4:c9:2f:64: b6:b0:e7:38:fd:50:f2:06:57:cd:43:7e:74:b3:51: 17:cf:6e:13:cf:5c:60:30:ad:52:88:2a:de:98:89: 00:6d:e4:d0:35:16:33:9d:7b:2a:21:b0:f4:bc:83: 4d:e1:bf:e4:eb:49:f9:7a:f4:e8:e0:19:fe:21:cc: c6:6f:8c:94:5a:ef:7e:be:90:c5:54:1d:8c:a1:78: b0:d3:ae:78:2a:96:30:fb:44:3f:52:bd:80:fb:6c: 2e:63:83:84:5e:18:c2:6e:50:d4:06:f0:12:c9:41: 2a:cf:87:52:b0:c2:79:7b:4f:a1:c8:68:20:d4:16: 91:9a:25:ae:5b:4e:7f:a3:43:fd:e8:77:8a:ea:be: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:47:68:35:76:64:27:E0:76:E4:38:00:A7:1F:62:11:64:D9:41 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA1HaDV2ZCfgduQ4AKcfYhFk2UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.41.0/24 93.171.214.0/24 95.47.110.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:f7:27:87:9d:0f:ce:5d:f0:16:00:68:36:e7:ae:e6:e4:1e: d8:45:2a:95:0a:19:00:7a:c1:fb:42:e9:bc:16:77:8b:dc:94: 76:cb:3c:e9:d9:a1:96:96:73:2d:5b:40:79:37:84:16:4e:8f: c6:15:89:ca:5e:9c:76:3e:0c:47:0e:35:12:ac:6e:96:7b:1c: 18:62:f4:d9:83:06:1c:92:7a:f2:b0:75:cd:c0:81:f2:48:bc: 29:e5:70:e0:c6:7b:32:23:6d:9c:a7:81:55:ee:5c:ff:b5:8f: 22:8f:ed:ec:52:35:c3:ec:18:55:fc:ff:2b:ba:17:37:d2:e1: 78:88:66:a4:b5:8e:2c:7d:c6:85:21:31:23:88:88:e1:8f:20: 66:7f:27:f3:1d:e0:03:d4:7a:df:6d:d6:52:c1:34:82:20:4d: 27:6b:f8:05:9b:09:78:bb:54:32:8a:7a:86:c7:0e:39:15:f9: 84:62:3e:82:6a:37:d8:60:8f:1c:d3:1f:7e:a8:c7:6f:2f:fb: 56:b5:6a:dd:86:89:b2:26:ff:8e:02:ed:2a:a6:36:0a:e0:6a: 89:41:8d:37:6d:7c:e9:e4:ac:7c:9c:a2:88:be:8d:bf:9a:69: 2d:b5:0b:1b:1b:ed:0d:18:0d:1f:65:f0:69:a5:9b:6a:bd:17: 71:97:15:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hPh5u6uYvytnc4tlmnKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzBkNDc2ODM1NzY2NDI3ZTA3NmU0MzgwMGE3MWY2MjExNjRkOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNukT6RZtVtk62ckmaq6ZQ6c0TEr LwOWLlTKipCDeXYjYOm1BPp8qqVGquayxTaC1fcxwhIHMkrGMCRbzynvK7u+bspV b8YglopcSIq/P+50g6OpxDEbUuBSuDBwmDPycyG1O3f67ELz4RmrzanG54x/nvTJ L2S2sOc4/VDyBlfNQ350s1EXz24Tz1xgMK1SiCremIkAbeTQNRYznXsqIbD0vINN 4b/k60n5evTo4Bn+IczGb4yUWu9+vpDFVB2MoXiw0654KpYw+0Q/Ur2A+2wuY4OE XhjCblDUBvASyUEqz4dSsMJ5e0+hyGgg1BaRmiWuW05/o0P96HeK6r52CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDwNR2g1dmQn4HbkOACnH2IRZNlBMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUEExSGFEVjJaQ2ZnZHVRNEFLY2ZZaEZrMlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXCYpAwQA XavWAwQBXy9uMA0GCSqGSIb3DQEBCwUAA4IBAQA79yeHnQ/OXfAWAGg2567m5B7Y RSqVChkAesH7Qum8FneL3JR2yzzp2aGWlnMtW0B5N4QWTo/GFYnKXpx2PgxHDjUS rG6WexwYYvTZgwYcknrysHXNwIHySLwp5XDgxnsyI22cp4FV7lz/tY8ij+3sUjXD 7BhV/P8ruhc30uF4iGaktY4sfcaFITEjiIjhjyBmfyfzHeAD1HrfbdZSwTSCIE0n a/gFmwl4u1QyinqGxw45FfmEYj6CajfYYI8c0x9+qMdvL/tWtWrdhomyJv+OAu0q pjYK4GqJQY03bXzp5Kx8nKKIvo2/mmkttQsbG+0NGA0fZfBppZtqvRdxlxW0 -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:43 2026 by rpki-client