This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PC9pTVGsv-J8SwhKbLXvknYgTKE.roa File: PC9pTVGsv-J8SwhKbLXvknYgTKE.roa (raw, json) Hash identifier: yyQ+1t6a27z7PMP1msPbzLU+fAdPmT3x/qtJmmj22Tk= Subject key identifier: 3C:2F:69:4D:51:AC:BF:E2:7C:4B:08:4A:6C:B5:EF:92:76:20:4C:A1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E60E29D4FDE1D4FF7D7F95452061 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PC9pTVGsv-J8SwhKbLXvknYgTKE.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62247 IP address blocks: 93.170.82.0/24 maxlen: 24 93.171.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:0e:29:d4:fd:e1:d4:ff:7d:7f:95:45:20:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c2f694d51acbfe27c4b084a6cb5ef9276204ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:99:a7:64:ec:60:22:6f:43:03:7d:98:16: c2:3f:52:7f:9f:5f:92:73:f2:d5:72:1c:fa:9e:77: 09:86:9c:5d:d7:ed:71:2f:80:ca:23:da:1e:54:b6: f0:43:42:a2:d9:eb:32:47:9f:90:b9:ee:8a:ff:61: 48:08:3e:71:c8:ba:ba:60:17:b8:94:79:78:19:3d: ed:8f:01:cb:81:87:b6:f1:59:a2:ab:0b:cf:f0:4f: 8c:d5:9c:4e:4d:ae:f1:22:3a:ff:a0:d5:fa:74:dc: df:17:89:63:1e:61:bb:5e:cb:83:c5:85:dd:b0:20: 40:ec:ed:f8:9c:37:f9:11:8c:b2:89:5f:6b:06:71: db:f6:e3:84:16:9c:ce:18:47:66:85:82:b3:45:ff: cb:29:22:8f:3c:4c:e1:ff:42:f2:50:2b:37:11:86: e9:11:52:8b:6f:83:b1:7f:33:4a:55:22:fd:eb:13: e2:61:79:f7:c6:8c:6e:fc:b7:87:72:0a:c3:b0:ed: a9:2e:ba:c0:f7:b9:6b:9b:7a:12:d5:e5:c5:4b:73: 3f:40:4a:52:1a:9f:88:ba:06:ed:35:72:62:b5:f9: af:77:0c:19:38:8f:b7:9f:4c:47:04:17:69:57:1e: ff:f3:57:d0:f9:1a:64:36:7d:25:0c:4d:c7:7f:66: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2F:69:4D:51:AC:BF:E2:7C:4B:08:4A:6C:B5:EF:92:76:20:4C:A1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PC9pTVGsv-J8SwhKbLXvknYgTKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.82.0/24 93.171.213.0/24 Signature Algorithm: sha256WithRSAEncryption b0:91:d2:03:eb:20:b5:32:9a:74:95:c3:63:ff:2a:1e:32:ca: 76:6e:48:90:84:20:16:ad:cd:46:62:54:a2:f6:dc:f5:be:ee: 5e:87:51:6a:1a:eb:57:39:aa:69:ef:5e:95:ab:94:8e:a3:5a: a6:1b:88:7d:19:9b:b0:19:9e:12:34:ee:4d:91:4f:b7:12:f4: 0d:9c:3f:3d:5f:31:c7:d9:83:8b:13:d2:4d:b9:2e:dc:29:53: f5:6f:66:6b:c5:54:84:7d:dc:e0:89:06:8b:c2:65:f3:c3:ca: a2:ac:e1:22:bf:6d:f2:31:17:03:4d:ae:08:48:66:17:73:fb: 4a:c0:c9:a3:9d:f1:7c:d6:99:7c:ea:63:7d:01:be:14:09:8d: 39:c3:38:02:47:6d:5b:e8:ff:14:50:d1:46:38:57:5a:5d:37: 1d:0f:02:99:8c:94:fc:3b:39:80:c6:07:0d:73:51:ec:25:93: ae:28:69:b4:9f:5d:47:b7:42:ef:b2:1a:e0:81:f2:7c:4e:bd: bb:f7:40:d3:59:1a:01:76:ae:01:41:a2:ef:e8:ac:48:2b:d4: 18:16:7e:b6:d9:5c:4b:94:31:ff:b4:75:84:55:4e:22:db:46: be:64:18:53:1b:fb:ad:68:47:25:5e:26:12:20:14:0e:94:1e: 89:e7:58:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hOYOKdT94dT/fX+VRSBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzJmNjk0ZDUxYWNiZmUyN2M0YjA4NGE2Y2I1ZWY5Mjc2MjA0Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFuZp2TsYCJvQwN9mBbCP1J/n1+S c/LVchz6nncJhpxd1+1xL4DKI9oeVLbwQ0Ki2esyR5+Que6K/2FICD5xyLq6YBe4 lHl4GT3tjwHLgYe28VmiqwvP8E+M1ZxOTa7xIjr/oNX6dNzfF4ljHmG7XsuDxYXd sCBA7O34nDf5EYyyiV9rBnHb9uOEFpzOGEdmhYKzRf/LKSKPPEzh/0LyUCs3EYbp EVKLb4OxfzNKVSL96xPiYXn3xoxu/LeHcgrDsO2pLrrA97lrm3oS1eXFS3M/QEpS Gp+IugbtNXJitfmvdwwZOI+3n0xHBBdpVx7/81fQ+RpkNn0lDE3Hf2ZklwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDwvaU1RrL/ifEsISmy175J2IEyhMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUEM5cFRWR3N2LUo4U3doS2JMWHZrbllnVEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXapSAwQA XavVMA0GCSqGSIb3DQEBCwUAA4IBAQCwkdID6yC1Mpp0lcNj/yoeMsp2bkiQhCAW rc1GYlSi9tz1vu5eh1FqGutXOapp716Vq5SOo1qmG4h9GZuwGZ4SNO5NkU+3EvQN nD89XzHH2YOLE9JNuS7cKVP1b2ZrxVSEfdzgiQaLwmXzw8qirOEiv23yMRcDTa4I SGYXc/tKwMmjnfF81pl86mN9Ab4UCY05wzgCR21b6P8UUNFGOFdaXTcdDwKZjJT8 OzmAxgcNc1HsJZOuKGm0n11Ht0LvshrggfJ8Tr2790DTWRoBdq4BQaLv6KxIK9QY Fn622VxLlDH/tHWEVU4i20a+ZBhTG/utaEclXiYSIBQOlB6J51gW -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:58 2026 by rpki-client