This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa File: PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa (raw, json) Hash identifier: 1qezTMxLLeCKKaAo2JrFFrXX9RE2wcF8+6TlYZv7BMc= Subject key identifier: 3C:CD:FE:50:62:A3:2E:BF:7A:5C:81:4F:97:E8:4E:14:6F:C5:93:1A Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019A6D20CEF6F306574B9E3290D1F31F01F4 Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa Signing time: Mon 10 Nov 2025 09:37:37 +0000 ROA not before: Mon 10 Nov 2025 09:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44529 IP address blocks: 194.26.96.0/24 maxlen: 24 2a14:4e80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:20:ce:f6:f3:06:57:4b:9e:32:90:d1:f3:1f:01:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Nov 10 09:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3ccdfe5062a32ebf7a5c814f97e84e146fc5931a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:25:c0:ad:57:10:64:00:76:e1:0f:d2:8d:58: e3:fd:07:af:2e:e0:2b:87:aa:b1:27:99:9d:7b:94: ae:21:b6:82:4b:17:4a:56:d5:d5:e9:f1:f1:98:7e: fa:1f:31:f5:f7:28:e0:74:0b:ce:1c:8b:8a:40:b9: c8:8b:8f:93:81:3b:12:08:a4:92:01:ef:d9:0a:cc: 34:21:ff:85:14:fa:1f:3c:a8:a4:43:1c:a0:f1:d1: 87:8b:5a:09:d3:23:ac:c8:b4:ca:61:3b:3b:bb:78: 72:2c:a2:46:69:4a:1a:c1:f6:86:28:2b:c2:44:ae: 29:2c:51:33:8e:d2:22:95:86:7c:fc:d0:1d:52:c3: ba:46:fe:21:38:6a:0d:7a:8d:04:ea:1a:3f:63:d5: 84:5b:c6:30:8c:f4:17:71:61:49:71:11:58:c8:ef: 3c:5c:6a:43:b1:fd:2f:07:4c:fa:70:ad:7e:0e:ae: 2a:c5:15:49:25:f2:ba:6b:ba:7f:57:3c:0c:c3:57: f3:66:7e:cf:6d:97:d4:5a:5f:68:6e:ed:72:f0:8c: 36:e1:f3:82:5d:27:2f:94:a7:89:14:1f:d3:8a:42: 76:25:cb:32:21:b9:c6:7d:8c:94:6f:57:06:97:6c: 0e:89:90:8d:c3:69:b4:70:f8:91:82:a5:34:3e:17: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CD:FE:50:62:A3:2E:BF:7A:5C:81:4F:97:E8:4E:14:6F:C5:93:1A X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.96.0/24 IPv6: 2a14:4e80::/29 Signature Algorithm: sha256WithRSAEncryption 7b:8b:3d:52:94:02:35:bf:f7:e3:2b:e9:50:82:d9:00:92:41: ee:22:0b:ba:7c:2d:38:64:df:83:ef:69:78:49:e3:8a:39:72: 76:cf:ad:24:84:d8:d5:c0:5f:04:09:ea:38:c6:3d:b5:11:49: 10:59:38:23:ce:e9:a7:7d:39:b1:2e:dd:22:62:a0:60:fe:36: 59:fc:0f:4e:f7:54:c5:80:4d:3b:1b:27:b6:dd:6a:bb:9d:d8: aa:2f:cb:34:4a:23:4d:f3:23:84:d0:f3:39:f7:0d:5e:03:c6: a8:87:b6:d3:61:e9:ec:ec:38:b7:a5:2c:2f:ec:bf:bb:00:71: 0b:ff:66:38:60:5f:87:3f:a1:cf:b5:42:b8:5e:bc:37:e8:a6: 75:a4:60:94:99:2a:31:c7:4e:c3:33:ae:a0:8b:db:4c:15:24: 79:ba:9a:6a:9d:bf:51:28:97:dd:6a:7d:d0:8b:5a:24:fd:aa: d1:f8:d5:0a:b4:4c:86:7e:22:82:93:b0:ac:3f:88:f1:2c:fc: 57:3d:f0:bc:81:c4:82:43:95:ad:f0:7e:a5:8e:ae:43:b8:71: 19:19:e4:21:9b:76:ed:16:b6:2c:05:4f:14:2f:1b:e6:f8:39: 37:17:c9:07:7e:eb:17:53:fd:16:79:4f:6c:9e:70:c1:0f:15: 66:ce:51:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZptIM728wZXS54ykNHzHwH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjUxMTEwMDkzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2NkZmU1MDYyYTMyZWJmN2E1YzgxNGY5N2U4NGUxNDZmYzU5MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SXArVcQZAB24Q/SjVjj/QevLuAr h6qxJ5mde5SuIbaCSxdKVtXV6fHxmH76HzH19yjgdAvOHIuKQLnIi4+TgTsSCKSS Ae/ZCsw0If+FFPofPKikQxyg8dGHi1oJ0yOsyLTKYTs7u3hyLKJGaUoawfaGKCvC RK4pLFEzjtIilYZ8/NAdUsO6Rv4hOGoNeo0E6ho/Y9WEW8YwjPQXcWFJcRFYyO88 XGpDsf0vB0z6cK1+Dq4qxRVJJfK6a7p/VzwMw1fzZn7PbZfUWl9obu1y8Iw24fOC XScvlKeJFB/TikJ2JcsyIbnGfYyUb1cGl2wOiZCNw2m0cPiRgqU0PhdP3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDzN/lBioy6/elyBT5foThRvxZMaMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvUE0zLVVHS2pMcjk2WElGUGwtaE9GR19Ga3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwhpgMA0E AgACMAcDBQMqFE6AMA0GCSqGSIb3DQEBCwUAA4IBAQB7iz1SlAI1v/fjK+lQgtkA kkHuIgu6fC04ZN+D72l4SeOKOXJ2z60khNjVwF8ECeo4xj21EUkQWTgjzumnfTmx Lt0iYqBg/jZZ/A9O91TFgE07Gye23Wq7ndiqL8s0SiNN8yOE0PM59w1eA8aoh7bT Yens7Di3pSwv7L+7AHEL/2Y4YF+HP6HPtUK4Xrw36KZ1pGCUmSoxx07DM66gi9tM FSR5uppqnb9RKJfdan3Qi1ok/arR+NUKtEyGfiKCk7CsP4jxLPxXPfC8gcSCQ5Wt 8H6ljq5DuHEZGeQhm3btFrYsBU8ULxvm+Dk3F8kHfusXU/0WeU9snnDBDxVmzlEs -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:51 2025 by rpki-client