This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa
File: poleM__KgerSigoGNjL1HDmHPlU.roa (raw, json)
Hash identifier: uZBWl6v68DL2gdHCc0x9TYJ3yTXVxvI3n/lECuCiOCc=
Subject key identifier: A6:89:5E:33:FF:CA:81:EA:D2:8A:0A:06:36:32:F5:1C:39:87:3E:55
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019B7A5ABEBD4A77091DD9F279D9ABFC5101
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa
Signing time: Thu 01 Jan 2026 16:18:46 +0000
ROA not before: Thu 01 Jan 2026 16:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207594
IP address blocks: 194.105.84.0/22 maxlen: 22
194.105.92.0/22 maxlen: 22
212.38.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:be:bd:4a:77:09:1d:d9:f2:79:d9:ab:fc:51:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 16:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6895e33ffca81ead28a0a063632f51c39873e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:20:fc:15:fd:bb:d2:a6:19:ad:3b:6b:07:
ec:c1:44:f6:36:5d:dd:ea:37:72:83:52:1d:83:ac:
4e:17:c5:8d:f4:ee:61:22:7e:7a:76:d4:e7:d1:e7:
6e:b0:a6:3e:36:b7:76:16:02:fa:34:d2:81:29:e4:
fb:1b:25:57:b8:5d:c2:5e:a9:ef:54:0b:08:62:54:
27:f2:ab:6c:91:30:e7:8f:4b:8f:c6:4a:7d:9d:71:
4c:51:50:45:36:70:e1:0e:c8:fd:51:14:ce:38:3e:
11:49:31:2f:0d:20:3d:79:17:2f:12:9a:ae:09:f1:
93:0b:f6:d9:c3:66:f0:30:e0:fb:fb:16:cb:9b:45:
e7:b3:2c:d8:db:3e:e8:2b:ad:a3:9b:24:de:ca:3c:
02:11:92:69:bb:4c:36:c7:54:e3:9d:ae:a6:80:c8:
4a:75:73:07:a2:d3:29:c3:af:7c:3d:3e:df:f9:c2:
6c:13:07:5d:5f:20:e7:a5:05:bf:f3:5e:08:99:e8:
66:54:2b:a1:0e:82:f1:e9:93:d6:a8:78:6b:71:54:
36:4d:5a:e1:d2:e1:ef:d4:53:55:0f:aa:04:bc:27:
80:a7:d2:75:c8:1c:ac:91:fb:08:ba:84:54:1e:e4:
a3:f0:84:f1:56:11:5a:02:37:ce:b6:d9:d8:d8:d5:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:5E:33:FF:CA:81:EA:D2:8A:0A:06:36:32:F5:1C:39:87:3E:55
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.84.0/22
194.105.92.0/22
212.38.83.0/24
Signature Algorithm: sha256WithRSAEncryption
01:19:c6:2a:ce:bc:ca:6b:18:3e:dc:0d:04:7c:f3:b3:4e:db:
2d:b6:67:1c:c8:1c:03:f4:08:ed:95:c1:b4:f8:ce:6e:3e:35:
f2:cf:33:b8:39:2f:77:9e:65:15:1f:eb:84:c4:74:4f:43:be:
c6:4c:cd:f5:77:15:e8:dc:f2:3a:af:e0:e7:c2:f2:e5:ee:e3:
2d:0b:ce:47:55:36:66:1e:72:0b:77:df:05:df:ad:a5:ba:4a:
84:2f:e2:a6:8a:fa:7c:d9:63:7b:f7:5d:2f:4f:02:c8:52:1e:
36:e7:61:3b:6e:96:b9:57:dd:88:ad:64:14:96:e2:3d:dd:97:
12:dd:50:48:5e:1a:bc:c4:81:f4:76:56:b5:20:2a:c2:b3:79:
a6:da:7c:91:a9:a3:81:4e:ca:65:1a:55:2b:66:3d:b8:5a:82:
21:bb:21:36:00:37:e1:11:09:fb:e2:15:2e:41:7b:6b:6e:09:
57:55:fd:7b:35:3d:00:71:a9:82:7d:21:9f:d7:41:f5:e8:35:
fb:54:93:0d:b1:a4:42:a0:db:f2:eb:44:b7:32:95:b6:fb:26:
62:85:1c:4f:fc:61:2d:7d:29:ec:94:a7:e8:ed:79:d8:d5:e6:
3b:11:fe:de:2f:39:25:33:85:cd:e0:ef:d5:cf:e3:43:64:1c:
e6:08:1b:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt6Wr69SncJHdnyedmr/FEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjg5NWUzM2ZmY2E4MWVhZDI4YTBhMDYzNjMyZjUxYzM5ODczZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgMg/BX9u9KmGa07awfswUT2Nl3d
6jdyg1Idg6xOF8WN9O5hIn56dtTn0edusKY+Nrd2FgL6NNKBKeT7GyVXuF3CXqnv
VAsIYlQn8qtskTDnj0uPxkp9nXFMUVBFNnDhDsj9URTOOD4RSTEvDSA9eRcvEpqu
CfGTC/bZw2bwMOD7+xbLm0XnsyzY2z7oK62jmyTeyjwCEZJpu0w2x1Tjna6mgMhK
dXMHotMpw698PT7f+cJsEwddXyDnpQW/814ImehmVCuhDoLx6ZPWqHhrcVQ2TVrh
0uHv1FNVD6oEvCeAp9J1yByskfsIuoRUHuSj8ITxVhFaAjfOttnY2NW5xwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKaJXjP/yoHq0ooKBjYy9Rw5hz5VMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcG9sZU1fX0tnZXJTaWdvR05qTDFIRG1IUGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCwmlUAwQC
wmlcAwQA1CZTMA0GCSqGSIb3DQEBCwUAA4IBAQABGcYqzrzKaxg+3A0EfPOzTtst
tmccyBwD9AjtlcG0+M5uPjXyzzO4OS93nmUVH+uExHRPQ77GTM31dxXo3PI6r+Dn
wvLl7uMtC85HVTZmHnILd98F362lukqEL+Kmivp82WN7910vTwLIUh4252E7bpa5
V92IrWQUluI93ZcS3VBIXhq8xIH0dla1ICrCs3mm2nyRqaOBTsplGlUrZj24WoIh
uyE2ADfhEQn74hUuQXtrbglXVf17NT0AcamCfSGf10H16DX7VJMNsaRCoNvy60S3
MpW2+yZihRxP/GEtfSnslKfo7XnY1eY7Ef7eLzklM4XN4O/Vz+NDZBzmCBsF
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:48:01 2026 by rpki-client