This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pmP95LiqgoukuMzZxcuVLIAcCF8.roa File: pmP95LiqgoukuMzZxcuVLIAcCF8.roa (raw, json) Hash identifier: EmMJkU1ANaxcyC7LkqUlCvhOGoBvXO81tDnLie0T/iU= Subject key identifier: A6:63:FD:E4:B8:AA:82:8B:A4:B8:CC:D9:C5:CB:95:2C:80:1C:08:5F Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C784F5CE3BB558A4DC973FF8BE3729 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pmP95LiqgoukuMzZxcuVLIAcCF8.roa Signing time: Thu 01 Jan 2026 04:18:42 +0000 ROA not before: Thu 01 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198595 IP address blocks: 195.136.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:84:f5:ce:3b:b5:58:a4:dc:97:3f:f8:be:37:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a663fde4b8aa828ba4b8ccd9c5cb952c801c085f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:47:a7:90:a0:e5:77:33:e1:8f:08:ae:69: 46:f2:45:08:d1:da:0d:56:99:0d:5f:09:80:be:e7: 8b:bc:68:fc:a1:7d:e6:86:4b:00:08:24:76:fa:20: 20:de:da:8d:90:d9:25:0d:7e:1f:a0:a3:b7:9a:e1: 26:0d:3e:40:b7:1e:61:d0:fd:c2:61:0f:89:9b:d6: e9:fc:34:f5:7e:08:f6:4e:9c:b5:d6:98:cb:32:1a: 98:bc:09:79:36:b3:76:a5:a4:0c:f6:72:dd:80:06: 75:50:8f:42:bf:90:db:21:2a:c5:2c:f1:5e:f4:96: ce:24:f2:ae:05:3e:2b:6d:ab:8c:39:54:f9:66:e8: 12:25:5c:7d:79:90:ff:f2:fb:ed:70:98:06:ae:8c: 8a:be:e5:84:bc:13:53:5f:2c:6a:0c:56:46:fc:7d: 0d:31:0a:a5:b4:0f:65:f2:40:b0:74:b4:93:4c:ed: 85:9c:c9:84:a3:10:a4:b1:30:ca:8d:67:0b:9a:e7: 40:29:2e:de:5b:2e:86:11:6c:56:a7:82:03:f0:f6: 4d:40:5e:2f:dd:45:18:0d:a8:b8:ac:2a:f8:ff:3b: 00:f5:f5:98:9f:7c:4f:8d:e0:79:94:c4:ff:a3:b8: db:48:e6:91:72:3c:cd:6a:8f:32:3a:cf:5b:f7:0e: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:63:FD:E4:B8:AA:82:8B:A4:B8:CC:D9:C5:CB:95:2C:80:1C:08:5F X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/pmP95LiqgoukuMzZxcuVLIAcCF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.173.0/24 Signature Algorithm: sha256WithRSAEncryption c6:31:ff:85:8a:71:1f:45:c6:1f:97:8f:f8:1d:7f:a9:3b:a3: 1e:47:5d:50:71:9e:bd:f4:16:3e:ad:93:e0:d1:04:2f:29:42: 76:e9:d0:60:d1:66:67:bc:0b:f0:c3:d1:2c:31:32:a1:f2:83: 9c:06:08:fe:04:aa:3c:64:08:54:6c:2d:5d:0f:17:85:5a:fc: d0:ae:83:15:7c:90:62:9e:88:3a:39:6c:c1:44:3e:d6:9a:f4: d4:e5:eb:a9:68:42:b3:07:20:23:a3:91:46:72:fe:e5:21:39: f4:37:b2:ac:e3:ac:9b:79:16:88:bd:5c:42:7a:7c:8d:df:d4: 75:7a:a8:d4:8c:ae:3a:c6:3a:9f:97:ea:52:75:f3:3d:d9:6a: 90:79:99:05:3d:70:9b:11:37:f8:a0:c7:ae:73:2e:1f:f1:dd: c1:f8:32:20:62:0c:ca:02:d1:c3:cb:91:8f:6b:3d:5a:e4:af: 28:e0:52:c8:b1:55:b9:9b:ed:21:0b:05:75:d9:af:e7:76:ae: 3c:b1:2c:68:26:7e:f2:d8:c0:77:41:64:98:87:aa:52:85:54: 05:c0:cf:ca:41:81:70:de:fd:35:a2:97:28:94:66:8f:ae:88: 90:2d:b2:9c:61:a1:f4:47:7e:21:5e:98:d5:58:9d:37:71:bd: 3a:2c:cd:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x4T1zju1WKTclz/4vjcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjYzZmRlNGI4YWE4MjhiYTRiOGNjZDljNWNiOTUyYzgwMWMwODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx59Hp5Cg5Xcz4Y8IrmlG8kUI0doN VpkNXwmAvueLvGj8oX3mhksACCR2+iAg3tqNkNklDX4foKO3muEmDT5Atx5h0P3C YQ+Jm9bp/DT1fgj2Tpy11pjLMhqYvAl5NrN2paQM9nLdgAZ1UI9Cv5DbISrFLPFe 9JbOJPKuBT4rbauMOVT5ZugSJVx9eZD/8vvtcJgGroyKvuWEvBNTXyxqDFZG/H0N MQqltA9l8kCwdLSTTO2FnMmEoxCksTDKjWcLmudAKS7eWy6GEWxWp4ID8PZNQF4v 3UUYDai4rCr4/zsA9fWYn3xPjeB5lMT/o7jbSOaRcjzNao8yOs9b9w73QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZj/eS4qoKLpLjM2cXLlSyAHAhfMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvcG1QOTVMaXFnb3VrdU16WnhjdVZMSUFjQ0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4itMA0G CSqGSIb3DQEBCwUAA4IBAQDGMf+FinEfRcYfl4/4HX+pO6MeR11QcZ699BY+rZPg 0QQvKUJ26dBg0WZnvAvww9EsMTKh8oOcBgj+BKo8ZAhUbC1dDxeFWvzQroMVfJBi nog6OWzBRD7WmvTU5eupaEKzByAjo5FGcv7lITn0N7Ks46ybeRaIvVxCenyN39R1 eqjUjK46xjqfl+pSdfM92WqQeZkFPXCbETf4oMeucy4f8d3B+DIgYgzKAtHDy5GP az1a5K8o4FLIsVW5m+0hCwV12a/ndq48sSxoJn7y2MB3QWSYh6pShVQFwM/KQYFw 3v01opcolGaProiQLbKcYaH0R34hXpjVWJ03cb06LM1q -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:03 2026 by rpki-client