This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/PnMPikrtO33Vh6NkdCxq2k4w26M.roa File: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (raw, json) Hash identifier: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc= Subject key identifier: 3E:73:0F:8A:4A:ED:3B:7D:D5:87:A3:64:74:2C:6A:DA:4E:30:DB:A3 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC1959404E80810F39BE668CE7746 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/PnMPikrtO33Vh6NkdCxq2k4w26M.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41236 IP address blocks: 86.107.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c1:95:94:04:e8:08:10:f3:9b:e6:68:ce:77:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e730f8a4aed3b7dd587a364742c6ada4e30dba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:e8:21:3c:38:22:c1:a1:e7:b4:fd:a3:5c: df:3b:66:5a:90:ba:2d:40:5a:ae:e7:93:53:06:d6: 4d:c9:40:c9:4b:21:c8:0d:be:d0:02:3c:25:11:18: d1:e4:01:3d:34:e8:10:ce:9d:24:43:56:76:73:90: 07:4f:1e:65:5a:30:be:56:d4:15:3f:ba:18:6b:69: 05:c4:88:25:b7:d1:88:67:dd:c1:5c:f4:6f:20:b5: 8f:86:6d:a9:1a:d5:38:29:73:b6:68:18:92:c2:27: 9f:ee:c8:8c:58:03:f6:21:27:9a:ba:6c:a1:54:92: 17:a2:3c:8f:e3:b4:b8:fd:44:95:1f:b0:33:57:be: db:3e:4c:d9:f0:ad:f6:62:d1:13:17:42:d0:3f:e3: 1f:1c:2f:b2:3a:70:1a:6e:09:64:f4:0e:53:a7:d7: a5:78:02:3b:a1:d4:18:7d:34:3d:88:4d:24:b4:e8: 6c:c9:c4:0a:c1:6a:47:15:74:85:21:a8:d6:23:e9: ba:22:01:49:41:ff:02:38:74:57:60:73:0b:81:61: 5d:a1:60:9c:bf:36:4c:40:94:f3:6a:dd:01:9a:32: 57:ba:0f:b6:02:dc:64:d8:ce:b6:1b:85:bc:be:44: 23:1f:4d:b2:3b:81:05:fd:7e:60:c3:4c:b7:b0:02: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:0F:8A:4A:ED:3B:7D:D5:87:A3:64:74:2C:6A:DA:4E:30:DB:A3 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/PnMPikrtO33Vh6NkdCxq2k4w26M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.58.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:05:a2:33:7c:d0:15:1b:1e:46:db:29:1e:ef:69:75:ff:1a: 0f:f5:01:ca:3c:67:6a:f5:47:ed:f5:56:8c:1c:e1:3c:a4:df: 40:4b:49:0b:61:39:76:0d:de:ae:2e:b2:d4:4a:4e:72:a8:1a: 63:24:1b:f7:91:1a:00:45:a2:cd:7d:38:72:bf:39:60:80:72: 85:3a:34:9a:be:b9:38:7d:01:49:8a:6f:aa:8f:ca:6a:80:16: 92:70:9f:73:5f:b5:ef:88:84:f3:68:84:16:c9:0c:fd:99:b3: 9b:15:b7:2e:29:9b:27:64:ca:13:01:7f:d9:20:ac:98:bc:86: 0a:35:6f:5b:a9:81:0c:9d:01:f8:6a:c1:ce:a2:06:a9:93:33: e6:0b:65:43:2a:e2:95:31:f1:9a:55:da:40:d0:76:0f:74:17: ba:36:df:90:2f:0c:1d:18:4e:c9:a2:77:37:92:af:0b:d6:52: 82:10:54:3a:51:f5:f3:a8:74:15:a3:cd:6e:ec:84:43:18:12: 98:92:17:b1:65:3e:f6:23:9d:aa:46:26:f8:ef:bc:8e:2e:2d: 80:10:94:51:5b:f1:93:46:76:1f:bd:5c:9f:dc:a9:43:57:ab: 2e:2e:3c:c9:88:b9:18:46:07:e5:c0:b3:0d:38:9d:03:36:95: 4a:e8:86:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568GVlAToCBDzm+ZozndGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTczMGY4YTRhZWQzYjdkZDU4N2EzNjQ3NDJjNmFkYTRlMzBkYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV3oITw4IsGh57T9o1zfO2ZakLot QFqu55NTBtZNyUDJSyHIDb7QAjwlERjR5AE9NOgQzp0kQ1Z2c5AHTx5lWjC+VtQV P7oYa2kFxIglt9GIZ93BXPRvILWPhm2pGtU4KXO2aBiSwief7siMWAP2ISeaumyh VJIXojyP47S4/USVH7AzV77bPkzZ8K32YtETF0LQP+MfHC+yOnAabglk9A5Tp9el eAI7odQYfTQ9iE0ktOhsycQKwWpHFXSFIajWI+m6IgFJQf8COHRXYHMLgWFdoWCc vzZMQJTzat0BmjJXug+2Atxk2M62G4W8vkQjH02yO4EF/X5gw0y3sAIu3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5zD4pK7Tt91YejZHQsatpOMNujMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvUG5NUGlrcnRPMzNWaDZOa2RDeHEyazR3MjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVms6MA0G CSqGSIb3DQEBCwUAA4IBAQB+BaIzfNAVGx5G2yke72l1/xoP9QHKPGdq9Uft9VaM HOE8pN9AS0kLYTl2Dd6uLrLUSk5yqBpjJBv3kRoARaLNfThyvzlggHKFOjSavrk4 fQFJim+qj8pqgBaScJ9zX7XviITzaIQWyQz9mbObFbcuKZsnZMoTAX/ZIKyYvIYK NW9bqYEMnQH4asHOogapkzPmC2VDKuKVMfGaVdpA0HYPdBe6Nt+QLwwdGE7Jonc3 kq8L1lKCEFQ6UfXzqHQVo81u7IRDGBKYkhexZT72I52qRib477yOLi2AEJRRW/GT RnYfvVyf3KlDV6suLjzJiLkYRgflwLMNOJ0DNpVK6IZ9 -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:02 2026 by rpki-client