This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/P-URDAGpJlBtirNXMlncGEOdodQ.roa File: P-URDAGpJlBtirNXMlncGEOdodQ.roa (raw, json) Hash identifier: PBxxeaTmlc6dNqe/x5pXK/HXEF+12jOC6l+JUMQJWVU= Subject key identifier: 3F:E5:11:0C:01:A9:26:50:6D:8A:B3:57:32:59:DC:18:43:9D:A1:D4 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759581375F73B4FE7A00FBC7E1F4EFB Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/P-URDAGpJlBtirNXMlncGEOdodQ.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56684 IP address blocks: 92.114.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:58:13:75:f7:3b:4f:e7:a0:0f:bc:7e:1f:4e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fe5110c01a926506d8ab3573259dc18439da1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:97:9a:34:da:9b:48:fe:75:58:7e:41:bf: 72:65:20:25:2f:67:84:3d:38:ab:c6:bc:cb:1e:ad: 1f:47:2c:5e:71:82:1c:2c:de:8c:18:0e:9a:89:b2: d1:d3:38:1d:b7:d2:c1:91:0a:d1:ad:87:77:f2:3c: e9:91:c8:fe:8a:0f:e1:b2:af:da:96:48:bc:db:33: a8:69:d0:bf:0b:16:6f:ee:32:9f:dc:b3:72:23:96: 7a:16:34:df:71:1d:e8:f6:da:e1:fd:13:55:09:a5: b9:1b:64:5c:7e:83:8d:1e:5a:a3:bf:1a:1f:05:e8: 3d:28:60:81:86:82:ad:65:c6:60:0b:b0:4d:b6:f2: 3f:70:58:9d:21:93:45:50:63:b7:f3:7a:6b:e1:98: be:0b:78:1a:35:e4:1b:7f:9e:c5:8f:39:e3:03:a6: b5:11:25:f4:3c:b3:a9:88:08:e6:12:59:f7:f0:48: 64:17:f3:9c:7d:28:d7:2e:4b:36:44:3b:e3:39:ad: 0f:57:f4:cb:3a:b9:b7:fc:96:a0:51:6a:24:e1:9b: ce:a7:d5:f0:1e:45:f2:e6:62:3c:64:f3:cb:aa:35: 01:f5:af:0e:65:cc:d8:f8:80:d7:2c:41:3f:13:f1: b3:f3:0c:f9:43:13:69:af:83:01:e8:a9:f9:77:8a: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E5:11:0C:01:A9:26:50:6D:8A:B3:57:32:59:DC:18:43:9D:A1:D4 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/P-URDAGpJlBtirNXMlncGEOdodQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.114.106.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ca:be:ae:10:56:58:75:73:70:f1:52:d4:43:1b:d2:3e:e7: 80:51:cf:01:1b:ff:27:65:e0:22:cb:6f:41:d9:4d:66:f5:e8: 9c:0d:80:ba:97:1a:51:c7:98:c6:e7:a0:47:fa:f6:de:74:fe: 71:53:72:98:7c:f0:c2:49:a8:6d:0b:8f:c0:44:7e:78:71:4d: 64:9a:21:eb:34:f1:26:f4:5f:17:10:00:91:28:40:03:b6:91: 0a:cf:1e:5e:04:f8:11:f9:ea:8c:50:6d:49:30:64:36:d9:ca: 65:01:68:92:75:2d:fb:36:8b:10:d3:b7:16:74:ce:6e:4a:21: fb:d8:59:b8:f0:4f:c8:79:5d:67:49:fa:9a:03:da:70:26:92: 3f:d8:2a:9f:76:8d:da:25:1f:4d:27:9b:f3:2e:3c:8a:68:c1: d2:e8:e4:90:0d:db:af:97:c4:5a:1e:31:7c:e7:71:ab:7b:d4: e3:b4:a7:4d:b0:50:ce:9b:08:ae:46:e7:07:9f:97:d7:90:c3: b6:be:27:49:75:75:dc:d2:15:bb:c3:2a:44:fc:d2:ef:92:62: 82:59:25:7a:4e:37:c9:99:dc:35:e9:18:8d:8d:7b:0a:a5:d9: 7a:0f:08:4d:26:d2:f1:07:e9:84:c5:e3:83:75:41:86:8f:e3: de:eb:a9:49 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVgTdfc7T+egD7x+H077MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmU1MTEwYzAxYTkyNjUwNmQ4YWIzNTczMjU5ZGMxODQzOWRhMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDOXmjTam0j+dVh+Qb9yZSAlL2eE PTirxrzLHq0fRyxecYIcLN6MGA6aibLR0zgdt9LBkQrRrYd38jzpkcj+ig/hsq/a lki82zOoadC/CxZv7jKf3LNyI5Z6FjTfcR3o9trh/RNVCaW5G2RcfoONHlqjvxof Beg9KGCBhoKtZcZgC7BNtvI/cFidIZNFUGO383pr4Zi+C3gaNeQbf57FjznjA6a1 ESX0PLOpiAjmEln38EhkF/OcfSjXLks2RDvjOa0PV/TLOrm3/JagUWok4ZvOp9Xw HkXy5mI8ZPPLqjUB9a8OZczY+IDXLEE/E/Gz8wz5QxNpr4MB6Kn5d4oUzwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD/lEQwBqSZQbYqzVzJZ3BhDnaHUMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1AtVVJEQUdwSmxCdGlyTlhNbG5jR0VPZG9kUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccmow DQYJKoZIhvcNAQELBQADggEBAIHKvq4QVlh1c3DxUtRDG9I+54BRzwEb/ydl4CLL b0HZTWb16JwNgLqXGlHHmMbnoEf69t50/nFTcph88MJJqG0Lj8BEfnhxTWSaIes0 8Sb0XxcQAJEoQAO2kQrPHl4E+BH56oxQbUkwZDbZymUBaJJ1Lfs2ixDTtxZ0zm5K IfvYWbjwT8h5XWdJ+poD2nAmkj/YKp92jdolH00nm/MuPIpowdLo5JAN26+XxFoe MXzncat71OO0p02wUM6bCK5G5wefl9eQw7a+J0l1ddzSFbvDKkT80u+SYoJZJXpO N8mZ3DXpGI2Newql2XoPCE0m0vEH6YTF44N1QYaP497rqUk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:04 2026 by rpki-client