This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa File: pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa (raw, json) Hash identifier: xUeQdptZzqoAGQubj2MviaZ8/z+Eg6EPbQmMGzslfVM= Subject key identifier: A6:64:85:E1:93:60:30:08:97:9D:99:89:C4:2A:5D:9B:5A:41:EB:E8 Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019BB28C8E6DEDCEE7959E0E2C5A659AD092 Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa Signing time: Mon 12 Jan 2026 14:11:54 +0000 ROA not before: Mon 12 Jan 2026 14:11:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 72.251.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:8c:8e:6d:ed:ce:e7:95:9e:0e:2c:5a:65:9a:d0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Jan 12 14:11:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a66485e193603008979d9989c42a5d9b5a41ebe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:fd:11:3f:00:49:f6:b8:04:b0:75:17:46: e3:90:94:02:70:e2:c3:5d:a6:14:70:b9:fa:3e:ae: b9:7d:0f:c5:55:49:56:84:46:20:b5:04:94:d9:00: 1d:15:ab:94:c0:5c:d7:b4:51:46:ef:e6:30:74:89: fb:f7:8a:dd:b1:f8:80:7e:8e:b4:e0:33:f2:65:c0: 71:7e:1b:c7:70:64:ea:2c:cc:c6:29:0f:10:48:96: b7:cc:b1:a4:06:bc:25:4a:a5:a6:1a:13:b6:b8:40: 29:e4:d4:2f:1b:21:49:ab:95:c5:bd:96:9a:41:d3: 6d:d1:ef:c4:ba:7e:56:e5:96:bb:80:66:e3:d5:42: 49:c5:60:49:da:8d:86:af:c2:05:81:f7:77:3a:86: c6:7c:ab:0d:f0:a9:0e:1e:4b:0b:d8:fa:88:7b:9a: 6a:dc:23:39:30:57:4a:63:de:ca:26:94:2b:5a:0a: ef:c4:8a:af:e9:5f:a6:6e:35:74:a8:e3:e8:c8:77: f1:f4:5a:bd:11:7c:f7:11:6f:17:e3:27:af:4d:7a: 27:48:ef:cb:c0:d7:5b:5e:c4:83:e2:aa:63:ef:46: c6:d4:02:86:bd:e6:46:3b:c9:bf:03:a7:36:21:29: b7:8d:23:87:d2:4e:eb:68:a8:e8:e2:f3:9f:f8:b8: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:64:85:E1:93:60:30:08:97:9D:99:89:C4:2A:5D:9B:5A:41:EB:E8 X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/pmSF4ZNgMAiXnZmJxCpdm1pB6-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.251.223.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c2:af:78:ec:0d:3f:c3:55:00:d3:f4:14:da:7d:b6:4d:92: 0c:54:d4:ce:c1:06:c6:a8:2c:70:73:ec:37:0a:57:9e:ac:84: fe:ec:1f:0b:4c:92:be:04:03:3b:c2:eb:5a:a3:97:2a:ff:e0: ce:59:a9:cf:83:e2:a4:e0:79:ea:64:77:52:5c:7c:bb:3f:90: 72:78:ab:9d:48:8c:10:22:5c:c0:23:fe:ac:85:a7:a0:67:06: 4b:df:48:16:86:22:b3:68:3d:94:1b:7e:38:b8:e4:ab:4d:fb: be:83:3b:3f:d4:d0:38:ae:db:cd:45:18:c9:98:d9:18:d1:ed: 7f:e6:cc:3c:0d:7d:b7:f6:35:20:00:c9:c6:5c:9d:a8:82:24: 41:0b:ea:19:73:6e:b3:72:ad:e0:a5:5a:a6:ca:c1:88:ec:e6: 42:6d:3b:73:6f:5b:91:ee:7f:2d:00:49:50:e7:1b:a1:17:6a: be:60:56:88:13:fd:aa:e8:cc:87:7e:74:94:99:ab:14:bb:ba: 47:68:8f:41:7f:ca:c1:1f:90:83:70:4b:c8:ac:fd:10:4a:e3: b0:e0:db:e0:a3:af:e0:8d:28:b2:f4:1b:5e:11:af:cb:d0:ab: 35:84:8a:b5:26:cd:6d:15:60:bb:e9:18:d0:a5:9a:48:7d:f1: d2:c6:d8:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuyjI5t7c7nlZ4OLFplmtCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjYwMTEyMTQxMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjY0ODVlMTkzNjAzMDA4OTc5ZDk5ODljNDJhNWQ5YjVhNDFlYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgP9ET8ASfa4BLB1F0bjkJQCcOLD XaYUcLn6Pq65fQ/FVUlWhEYgtQSU2QAdFauUwFzXtFFG7+YwdIn794rdsfiAfo60 4DPyZcBxfhvHcGTqLMzGKQ8QSJa3zLGkBrwlSqWmGhO2uEAp5NQvGyFJq5XFvZaa QdNt0e/Eun5W5Za7gGbj1UJJxWBJ2o2Gr8IFgfd3OobGfKsN8KkOHksL2PqIe5pq 3CM5MFdKY97KJpQrWgrvxIqv6V+mbjV0qOPoyHfx9Fq9EXz3EW8X4yevTXonSO/L wNdbXsSD4qpj70bG1AKGveZGO8m/A6c2ISm3jSOH0k7raKjo4vOf+Lh+BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZkheGTYDAIl52ZicQqXZtaQevoMB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvcG1TRjRaTmdNQWlYblptSnhDcGRtMXBCNi1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPvfMA0G CSqGSIb3DQEBCwUAA4IBAQCzwq947A0/w1UA0/QU2n22TZIMVNTOwQbGqCxwc+w3 CleerIT+7B8LTJK+BAM7wutao5cq/+DOWanPg+Kk4HnqZHdSXHy7P5ByeKudSIwQ IlzAI/6shaegZwZL30gWhiKzaD2UG344uOSrTfu+gzs/1NA4rtvNRRjJmNkY0e1/ 5sw8DX239jUgAMnGXJ2ogiRBC+oZc26zcq3gpVqmysGI7OZCbTtzb1uR7n8tAElQ 5xuhF2q+YFaIE/2q6MyHfnSUmasUu7pHaI9Bf8rBH5CDcEvIrP0QSuOw4Nvgo6/g jSiy9BteEa/L0Ks1hIq1Js1tFWC76RjQpZpIffHSxthN -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:19 2026 by rpki-client