This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PAgTss81EypznIUSXUrAempw_so.roa File: PAgTss81EypznIUSXUrAempw_so.roa (raw, json) Hash identifier: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0= Subject key identifier: 3C:08:13:B2:CF:35:13:2A:73:9C:85:12:5D:4A:C0:7A:6A:70:FE:CA Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Certificate serial: 019B7E3786FC5F6C61D89294DC6FA3327326 Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PAgTss81EypznIUSXUrAempw_so.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57513 IP address blocks: 185.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:86:fc:5f:6c:61:d8:92:94:dc:6f:a3:32:73:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c0813b2cf35132a739c85125d4ac07a6a70feca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:b3:50:6b:a7:22:0a:3a:74:ee:41:80:b0: 86:fb:fb:ed:58:31:6e:68:a2:05:04:bf:2f:ce:21: 8d:e1:be:49:70:db:33:86:20:20:76:60:be:84:67: 7a:af:d1:f5:a6:96:65:44:40:c9:49:16:6d:0c:6e: 8e:00:e6:17:f7:e3:cb:88:20:a4:d0:d7:9a:e9:56: 5b:d0:07:ea:c1:41:88:77:e6:54:b0:64:05:18:19: b5:d9:c2:d0:c4:68:11:a2:2e:17:2c:99:72:cf:3f: 00:b4:c2:05:9c:e8:d8:e8:a4:29:4a:0e:24:95:c8: c1:c0:c0:89:a0:11:62:36:00:eb:89:89:f6:76:ec: f5:3e:c5:f6:ab:25:dc:a7:7e:a2:67:46:00:a0:31: 1c:a0:ae:6e:32:12:54:14:b4:75:a5:fc:be:9a:3a: d0:13:78:a4:a7:4e:66:6a:4c:cd:b9:cb:fb:04:70: 31:ba:b6:22:e2:eb:48:5e:6b:6e:e4:14:e6:43:b4: 9b:ef:59:91:97:30:4d:16:17:ab:9c:6e:52:dc:f4: c3:81:30:ee:93:11:2c:16:2a:54:bd:b0:d0:cc:c0: 32:ec:82:fb:8c:dc:93:1a:d0:13:fd:f4:5f:87:de: de:0c:0f:e6:5e:47:bc:f1:e5:a1:f2:c5:d6:bb:5b: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:13:B2:CF:35:13:2A:73:9C:85:12:5D:4A:C0:7A:6A:70:FE:CA X509v3 Authority Key Identifier: keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PAgTss81EypznIUSXUrAempw_so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.148.0/24 Signature Algorithm: sha256WithRSAEncryption c2:41:16:35:c4:2c:7a:9b:a3:6e:b8:a4:24:cd:9f:78:93:c2: ef:f9:f6:78:fa:e0:7d:ef:5c:24:16:79:9b:f5:d0:43:65:b2: 7b:c4:1b:aa:2a:42:68:67:6c:a9:b4:7e:91:3c:a9:03:34:ec: 1e:8d:ba:1b:e2:ff:ba:68:c3:f8:81:3a:0f:6e:47:58:c8:1e: 0b:fa:b4:44:eb:5c:ec:d4:d1:46:37:a4:0e:ce:63:f6:e5:fb: 1a:d3:27:40:66:f1:a1:dc:ee:f7:51:74:96:de:c4:f7:02:8f: 6a:4b:83:c4:66:8f:b8:45:b6:58:46:31:45:d1:ab:33:dd:d2: 4c:db:f8:29:0f:d4:a5:b3:75:68:15:a9:39:0c:36:4f:8b:76: 26:7c:d1:c6:53:85:54:55:f3:21:34:6c:e1:a8:89:df:5d:5b: c3:a0:e3:28:d3:c7:c3:a8:34:8b:6f:b9:e9:01:df:f5:2a:a5: 67:74:2b:4c:09:18:ae:95:ec:1b:b4:7e:6b:ad:7c:5b:78:5f: 87:9d:d2:0a:30:f0:60:f0:38:ff:e7:d3:be:cb:b3:58:5a:db: 9a:b7:fe:0c:d4:19:db:46:e8:44:3f:99:52:5c:73:41:22:b0: 85:af:dd:45:f8:76:76:69:1a:1d:03:f0:af:8e:ef:98:41:58: 65:c9:38:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N4b8X2xh2JKU3G+jMnMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi ZWQ3ODYwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA4MTNiMmNmMzUxMzJhNzM5Yzg1MTI1ZDRhYzA3YTZhNzBmZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8OzUGunIgo6dO5BgLCG+/vtWDFu aKIFBL8vziGN4b5JcNszhiAgdmC+hGd6r9H1ppZlREDJSRZtDG6OAOYX9+PLiCCk 0Nea6VZb0AfqwUGId+ZUsGQFGBm12cLQxGgRoi4XLJlyzz8AtMIFnOjY6KQpSg4k lcjBwMCJoBFiNgDriYn2duz1PsX2qyXcp36iZ0YAoDEcoK5uMhJUFLR1pfy+mjrQ E3ikp05makzNucv7BHAxurYi4utIXmtu5BTmQ7Sb71mRlzBNFhernG5S3PTDgTDu kxEsFipUvbDQzMAy7IL7jNyTGtAT/fRfh97eDA/mXke88eWh8sXWu1sYcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwIE7LPNRMqc5yFEl1KwHpqcP7KMB8GA1UdIwQY MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt NjdiYTdhMjE1NjMwLzEvUEFnVHNzODFFeXB6bklVU1hVckFlbXB3X3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYSUMA0G CSqGSIb3DQEBCwUAA4IBAQDCQRY1xCx6m6NuuKQkzZ94k8Lv+fZ4+uB971wkFnmb 9dBDZbJ7xBuqKkJoZ2yptH6RPKkDNOwejbob4v+6aMP4gToPbkdYyB4L+rRE61zs 1NFGN6QOzmP25fsa0ydAZvGh3O73UXSW3sT3Ao9qS4PEZo+4RbZYRjFF0asz3dJM 2/gpD9Sls3VoFak5DDZPi3YmfNHGU4VUVfMhNGzhqInfXVvDoOMo08fDqDSLb7np Ad/1KqVndCtMCRiulewbtH5rrXxbeF+HndIKMPBg8Dj/59O+y7NYWtuat/4M1Bnb RuhEP5lSXHNBIrCFr91F+HZ2aRodA/Cvju+YQVhlyTgW -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:30 2026 by rpki-client