This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/PHWKar5TU6h_lZjEkMKqfIp601A.roa File: PHWKar5TU6h_lZjEkMKqfIp601A.roa (raw, json) Hash identifier: Aeqrve+PhkZPn8LtUxmzS3olY+bvpZRjJnDsa2PZ14U= Subject key identifier: 3C:75:8A:6A:BE:53:53:A8:7F:95:98:C4:90:C2:AA:7C:8A:7A:D3:50 Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Certificate serial: 019BDD49D39038130174BE9FA48C20E8778E Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/PHWKar5TU6h_lZjEkMKqfIp601A.roa Signing time: Tue 20 Jan 2026 21:22:41 +0000 ROA not before: Tue 20 Jan 2026 21:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57222 IP address blocks: 195.162.4.0/23 maxlen: 32 195.162.4.0/24 maxlen: 32 195.162.5.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:49:d3:90:38:13:01:74:be:9f:a4:8c:20:e8:77:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Validity Not Before: Jan 20 21:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c758a6abe5353a87f9598c490c2aa7c8a7ad350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:b0:67:57:ee:72:6b:67:05:51:8c:49:b6: 10:2c:2c:df:fa:38:d6:64:f0:c5:0b:ec:f5:f3:20: fc:ed:0d:10:3c:60:87:2e:cf:58:72:e8:03:c6:0a: 3a:90:5b:9e:c8:78:f2:21:3f:21:14:f2:9e:5a:50: 11:7b:2d:6a:ba:9b:ef:b6:91:97:e1:06:1a:1f:a5: a4:9e:c0:96:51:b5:1e:ed:d8:9b:e1:f5:8c:69:af: 79:80:25:2c:5c:bb:7c:98:98:bb:bd:6d:06:b2:6a: b4:86:d6:0f:ce:40:b9:8a:92:7b:ee:35:77:e1:f4: ad:7c:2c:26:c7:72:7e:5d:af:a4:48:aa:07:70:44: 64:0c:a6:d5:d6:05:82:a8:e8:c7:a3:b9:ea:e8:2b: 39:8f:8f:d6:08:e3:69:d5:87:a9:72:15:c1:88:bf: b8:cd:5b:87:4e:d0:2b:e1:0e:78:08:79:de:d3:8b: da:42:f0:37:9c:f3:09:eb:d9:a9:92:c7:6c:3d:b3: a7:27:f7:da:fa:dc:bd:80:96:22:dc:63:8e:44:45: 7f:f9:7e:3c:ae:3f:d6:81:08:22:36:0a:1d:73:45: cf:85:f2:27:4c:b0:b8:bf:b7:2f:ac:32:8d:ef:86: 8b:69:96:7c:92:35:0d:7c:6d:29:ce:59:f3:f4:53: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:8A:6A:BE:53:53:A8:7F:95:98:C4:90:C2:AA:7C:8A:7A:D3:50 X509v3 Authority Key Identifier: keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/PHWKar5TU6h_lZjEkMKqfIp601A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.4.0/23 Signature Algorithm: sha256WithRSAEncryption 54:6d:e3:72:5f:21:24:23:a6:32:1d:91:2a:59:57:4e:0b:45: c3:86:0b:87:78:a1:96:a4:cb:92:03:6f:db:5d:18:4a:83:c5: 16:fe:93:03:63:16:5a:2c:d9:de:25:24:52:58:5f:eb:da:0e: 2d:dc:0f:5d:93:2b:ac:21:df:f4:c6:9e:8b:c6:35:07:61:17: 5b:82:e7:2d:2f:8d:60:a3:0a:c5:72:70:a1:64:61:d0:0c:69: 24:67:11:c5:dd:4f:d2:05:e4:24:41:9e:e1:a9:4d:f0:39:8e: b9:b9:a5:8b:71:3d:20:fd:00:5c:13:d9:f2:f6:96:55:28:7b: 90:34:08:16:b6:7d:15:a5:fa:ae:10:ba:d0:3c:44:0f:23:1d: 52:08:e9:21:6c:54:72:c3:c9:32:31:85:2f:7d:72:df:42:2c: 7b:ed:2b:5b:61:6d:fe:f4:e5:d2:4f:e4:11:40:74:88:c2:48: 11:91:8b:1f:ee:a9:5a:e6:45:b7:e9:35:dd:c5:2c:cc:79:40: 30:b1:2b:63:4b:2e:83:53:1e:11:7c:d6:cb:4f:36:ee:5d:d6: 25:91:32:4e:b3:cc:51:a2:5c:1a:d1:0c:52:48:9d:b9:2a:ac: 07:25:a9:50:80:f0:59:d8:06:a1:c3:dc:26:74:27:0b:7c:16: 36:0c:4b:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvdSdOQOBMBdL6fpIwg6HeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz NDBhMTMwHhcNMjYwMTIwMjEyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzc1OGE2YWJlNTM1M2E4N2Y5NTk4YzQ5MGMyYWE3YzhhN2FkMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2WwZ1fucmtnBVGMSbYQLCzf+jjW ZPDFC+z18yD87Q0QPGCHLs9YcugDxgo6kFueyHjyIT8hFPKeWlARey1qupvvtpGX 4QYaH6WknsCWUbUe7dib4fWMaa95gCUsXLt8mJi7vW0Gsmq0htYPzkC5ipJ77jV3 4fStfCwmx3J+Xa+kSKoHcERkDKbV1gWCqOjHo7nq6Cs5j4/WCONp1YepchXBiL+4 zVuHTtAr4Q54CHne04vaQvA3nPMJ69mpksdsPbOnJ/fa+ty9gJYi3GOOREV/+X48 rj/WgQgiNgodc0XPhfInTLC4v7cvrDKN74aLaZZ8kjUNfG0pzlnz9FN7VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDx1imq+U1Oof5WYxJDCqnyKetNQMB8GA1UdIwQY MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt NGRjOWJmNjQyZGQyLzEvUEhXS2FyNVRVNmhfbFpqRWtNS3FmSXA2MDFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw6IEMA0G CSqGSIb3DQEBCwUAA4IBAQBUbeNyXyEkI6YyHZEqWVdOC0XDhguHeKGWpMuSA2/b XRhKg8UW/pMDYxZaLNneJSRSWF/r2g4t3A9dkyusId/0xp6LxjUHYRdbguctL41g owrFcnChZGHQDGkkZxHF3U/SBeQkQZ7hqU3wOY65uaWLcT0g/QBcE9ny9pZVKHuQ NAgWtn0VpfquELrQPEQPIx1SCOkhbFRyw8kyMYUvfXLfQix77StbYW3+9OXST+QR QHSIwkgRkYsf7qla5kW36TXdxSzMeUAwsStjSy6DUx4RfNbLTzbuXdYlkTJOs8xR olwa0QxSSJ25KqwHJalQgPBZ2Aahw9wmdCcLfBY2DEt8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:09 2026 by rpki-client