This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Px0hRLwMpt6gnRZo7zyiovUdUbE.roa File: Px0hRLwMpt6gnRZo7zyiovUdUbE.roa (raw, json) Hash identifier: HF1Jq+ZM+Fyulrio/Ty2ngdOoHyM2iCqoXo+sxWyN+Q= Subject key identifier: 3F:1D:21:44:BC:0C:A6:DE:A0:9D:16:68:EF:3C:A2:A2:F5:1D:51:B1 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6BE6050A219C0DAFAE69AC1D5448E Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Px0hRLwMpt6gnRZo7zyiovUdUbE.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 46.8.5.0/24 maxlen: 24 188.130.196.0/22 maxlen: 22 188.130.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:be:60:50:a2:19:c0:da:fa:e6:9a:c1:d5:44:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1d2144bc0ca6dea09d1668ef3ca2a2f51d51b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:e0:b9:09:d7:6f:4e:df:7e:a7:59:31:49: 9e:60:c4:d6:f2:13:b9:42:48:ec:0e:6a:39:59:7f: e5:8f:aa:92:1e:b1:3f:2f:99:ab:2f:63:43:8c:96: 25:83:e1:a3:c3:04:01:86:2a:89:fb:95:bb:c2:85: 54:7d:a3:a1:66:7e:73:16:b0:61:e5:20:bc:9d:e2: 62:0a:b6:4f:e8:09:24:70:58:78:e6:db:2d:63:f8: 1b:b6:d1:3c:2b:45:3a:f6:e5:b0:91:c8:c2:62:ba: 28:82:7c:98:2d:ac:25:fe:9b:f1:88:23:3a:36:2e: fc:98:bf:aa:cb:6c:6a:32:4c:0a:9a:bc:fe:8c:1e: 7f:40:fe:78:7b:d8:d7:c5:40:08:aa:13:ec:3c:53: 47:d5:e8:98:20:85:75:e6:09:a8:4b:e8:10:0f:55: 8a:cf:8e:0c:e8:13:06:69:6a:a0:5b:92:ae:71:39: 3b:c5:4c:c0:c4:6c:aa:c4:3e:68:36:4a:6a:34:fb: 04:ff:f1:f9:31:7f:33:91:eb:3f:65:9b:78:f6:ba: 64:ee:40:ae:8b:85:7b:02:f0:0b:1f:77:6c:73:0e: d4:e0:df:c5:d2:cf:54:4a:10:3c:fb:29:43:ab:67: a0:10:7c:72:b0:c6:36:13:e8:8b:4f:b2:94:fc:ef: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1D:21:44:BC:0C:A6:DE:A0:9D:16:68:EF:3C:A2:A2:F5:1D:51:B1 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Px0hRLwMpt6gnRZo7zyiovUdUbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.5.0/24 188.130.196.0/22 188.130.205.0/24 Signature Algorithm: sha256WithRSAEncryption b8:ca:48:c6:9b:58:9f:b7:74:08:78:8e:28:1e:d0:c9:73:22: aa:38:3e:cd:32:00:87:9f:0f:13:b6:ec:9c:f6:84:2a:79:14: be:8b:22:25:e7:c0:c9:45:8f:a6:42:9b:f0:00:a3:b6:25:0f: 6c:51:67:90:22:a2:53:4f:07:35:36:10:4b:37:b4:d5:e1:e7: 55:23:5f:f9:35:f9:ed:e0:84:cf:df:4f:f8:18:de:bb:8d:2b: 07:72:b4:0e:33:43:ec:35:59:ca:f9:54:93:ec:7c:dc:d4:5e: 46:3f:b2:77:d0:10:42:ee:24:e6:70:09:be:86:1b:58:74:95: 81:c8:b9:a4:68:4f:a9:a7:d4:06:c9:bb:ee:89:92:e8:a8:79: 03:4a:05:bb:e1:cc:43:5c:3f:1e:8d:cc:5b:8f:76:80:1d:ca: 70:d1:86:7a:c3:e4:18:0b:68:ae:3b:8c:5d:33:05:d5:fe:4e: 98:54:76:a7:e8:80:87:09:7a:83:fa:17:87:d4:51:2c:97:b5: 2c:5c:b0:4d:b0:08:4c:0d:8a:dd:c5:b5:7c:6e:75:ca:6d:3b: 0d:14:ad:6d:b6:db:b5:40:ef:8a:ab:8b:3f:23:ae:8e:1f:2a: 46:a7:f2:49:00:54:78:75:0b:69:0b:08:a3:2a:f8:30:74:e2: 8d:ff:3b:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xr5gUKIZwNr65prB1USOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFkMjE0NGJjMGNhNmRlYTA5ZDE2NjhlZjNjYTJhMmY1MWQ1MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QLguQnXb07ffqdZMUmeYMTW8hO5 QkjsDmo5WX/lj6qSHrE/L5mrL2NDjJYlg+GjwwQBhiqJ+5W7woVUfaOhZn5zFrBh 5SC8neJiCrZP6AkkcFh45tstY/gbttE8K0U69uWwkcjCYroognyYLawl/pvxiCM6 Ni78mL+qy2xqMkwKmrz+jB5/QP54e9jXxUAIqhPsPFNH1eiYIIV15gmoS+gQD1WK z44M6BMGaWqgW5KucTk7xUzAxGyqxD5oNkpqNPsE//H5MX8zkes/ZZt49rpk7kCu i4V7AvALH3dscw7U4N/F0s9UShA8+ylDq2egEHxysMY2E+iLT7KU/O+gywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD8dIUS8DKbeoJ0WaO88oqL1HVGxMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvUHgwaFJMd01wdDZnblJabzd6eWlvdlVkVWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALggFAwQC vILEAwQAvILNMA0GCSqGSIb3DQEBCwUAA4IBAQC4ykjGm1ift3QIeI4oHtDJcyKq OD7NMgCHnw8Ttuyc9oQqeRS+iyIl58DJRY+mQpvwAKO2JQ9sUWeQIqJTTwc1NhBL N7TV4edVI1/5Nfnt4ITP30/4GN67jSsHcrQOM0PsNVnK+VST7Hzc1F5GP7J30BBC 7iTmcAm+hhtYdJWByLmkaE+pp9QGybvuiZLoqHkDSgW74cxDXD8ejcxbj3aAHcpw 0YZ6w+QYC2iuO4xdMwXV/k6YVHan6ICHCXqD+heH1FEsl7UsXLBNsAhMDYrdxbV8 bnXKbTsNFK1tttu1QO+Kq4s/I66OHypGp/JJAFR4dQtpCwijKvgwdOKN/zuC -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:46 2026 by rpki-client