This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/PAKafREmkHGfeg_qAOjMfzNKk8s.roa File: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (raw, json) Hash identifier: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g= Subject key identifier: 3C:02:9A:7D:11:26:90:71:9F:7A:0F:EA:00:E8:CC:7F:33:4A:93:CB Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025 Certificate serial: 019B7EA6CFEFB4282898FC2493690289942C Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/PAKafREmkHGfeg_qAOjMfzNKk8s.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214837 IP address blocks: 193.53.35.0/24 maxlen: 24 193.53.82.0/24 maxlen: 24 2a14:57c0::/29 maxlen: 29 2a14:57c0:e::/48 maxlen: 48 2a14:57c0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cf:ef:b4:28:28:98:fc:24:93:69:02:89:94:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e475c9202606e6667e94a779e903db697a59025 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c029a7d112690719f7a0fea00e8cc7f334a93cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:43:ac:a8:f7:5e:22:80:59:eb:d0:35:b4: d4:f2:97:e8:ea:a0:fe:09:41:56:c3:62:1f:b6:ad: 2e:b5:d2:80:5f:1f:89:5b:39:ba:c6:e8:8e:e7:63: 31:91:f4:23:32:b7:0a:dc:d4:9d:52:a3:8c:c1:53: ee:86:d4:7c:1f:9a:23:0a:cb:cd:81:10:2c:b4:62: b2:85:36:5d:8c:06:48:99:a5:84:16:06:3d:24:dc: a0:a7:8d:c5:ab:45:32:83:d9:79:c8:e0:84:9c:84: 3d:31:1c:a1:30:e8:5f:e6:00:2a:56:e8:d9:04:e4: 3a:df:07:3d:d1:1d:c9:a8:80:e7:7a:36:de:0c:13: 73:c6:43:8a:e2:84:c9:e6:40:db:46:9a:e5:aa:95: 78:d8:0f:ee:06:c0:f2:ad:f1:55:e6:ed:db:f5:5a: 41:09:72:16:f4:84:78:ba:d7:d2:d4:bb:ec:61:58: a2:60:7a:17:eb:c2:fa:6b:50:ef:d7:2d:47:af:40: be:c4:97:73:00:bc:e2:4f:2b:d3:4b:e8:72:5e:9e: 12:89:48:e3:24:cd:05:88:fa:e4:d4:13:96:3d:c0: be:2f:ad:66:a5:7f:3f:67:d3:af:dc:5f:87:f9:6d: 64:81:5e:f5:ac:6e:f3:ce:09:8e:3a:6b:59:9e:44: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:02:9A:7D:11:26:90:71:9F:7A:0F:EA:00:E8:CC:7F:33:4A:93:CB X509v3 Authority Key Identifier: keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/PAKafREmkHGfeg_qAOjMfzNKk8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.35.0/24 193.53.82.0/24 IPv6: 2a14:57c0::/29 Signature Algorithm: sha256WithRSAEncryption 5e:c9:aa:15:67:5d:b3:63:9a:08:6a:53:40:e0:bc:67:a6:d6: 7e:ee:f6:f0:26:ec:12:28:26:78:64:e1:cf:81:59:a7:ea:1d: b6:ff:56:9e:f1:e9:7d:84:c1:bf:8c:bf:26:0b:5c:e6:ec:73: 43:09:2a:5c:c1:a5:67:b7:ed:d8:2c:78:39:3c:b6:d0:3c:a9: f9:e9:b8:ac:d4:4d:cf:8a:e0:b1:83:e5:22:08:46:ce:1c:9f: 8d:69:d9:5a:df:9d:90:39:33:2e:fe:6a:91:aa:37:47:ff:61: 38:3b:b9:11:16:99:c9:2a:df:1a:4a:74:65:ce:af:f5:e5:29: 22:36:26:49:ef:fc:52:f6:8c:b0:a6:3d:7e:b6:4f:74:81:20: f8:cc:ca:96:67:c2:8b:ce:c7:5b:71:78:4a:ab:1c:e9:80:64: b4:b7:b5:a5:75:9b:83:f7:20:6b:71:fa:f4:bd:0e:a5:8d:5c: 29:b8:79:5d:ad:60:f6:b3:a2:e7:87:ac:98:2b:52:c2:34:67: bb:be:a9:00:13:bb:04:37:d9:b1:26:bb:3b:11:d3:67:83:f5: 80:00:b6:9c:da:c5:7e:f9:c8:11:c6:8d:e1:c8:3d:98:5c:d0: e9:e6:3b:fe:9f:1b:07:6a:03:99:ef:17:74:a4:8f:9f:49:d6: 38:14:f4:b2 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ps/vtCgomPwkk2kCiZQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh NTkwMjUwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzAyOWE3ZDExMjY5MDcxOWY3YTBmZWEwMGU4Y2M3ZjMzNGE5M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKpDrKj3XiKAWevQNbTU8pfo6qD+ CUFWw2Iftq0utdKAXx+JWzm6xuiO52MxkfQjMrcK3NSdUqOMwVPuhtR8H5ojCsvN gRAstGKyhTZdjAZImaWEFgY9JNygp43Fq0Uyg9l5yOCEnIQ9MRyhMOhf5gAqVujZ BOQ63wc90R3JqIDnejbeDBNzxkOK4oTJ5kDbRprlqpV42A/uBsDyrfFV5u3b9VpB CXIW9IR4utfS1LvsYViiYHoX68L6a1Dv1y1Hr0C+xJdzALziTyvTS+hyXp4SiUjj JM0FiPrk1BOWPcC+L61mpX8/Z9Ov3F+H+W1kgV71rG7zzgmOOmtZnkRGlwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDwCmn0RJpBxn3oP6gDozH8zSpPLMB8GA1UdIwQY MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt Y2NiYjZlOTBhMTliLzEvUEFLYWZSRW1rSEdmZWdfcUFPak1mek5LazhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwTUjAwQA wTVSMA0EAgACMAcDBQMqFFfAMA0GCSqGSIb3DQEBCwUAA4IBAQBeyaoVZ12zY5oI alNA4LxnptZ+7vbwJuwSKCZ4ZOHPgVmn6h22/1ae8el9hMG/jL8mC1zm7HNDCSpc waVnt+3YLHg5PLbQPKn56bis1E3PiuCxg+UiCEbOHJ+Nadla352QOTMu/mqRqjdH /2E4O7kRFpnJKt8aSnRlzq/15SkiNiZJ7/xS9oywpj1+tk90gSD4zMqWZ8KLzsdb cXhKqxzpgGS0t7WldZuD9yBrcfr0vQ6ljVwpuHldrWD2s6Lnh6yYK1LCNGe7vqkA E7sEN9mxJrs7EdNng/WAALac2sV++cgRxo3hyD2YXNDp5jv+nxsHagOZ7xd0pI+f SdY4FPSy -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:33 2026 by rpki-client