This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/pHBlaOzJKSvAUt9M5i_e3Sw04hA.roa File: pHBlaOzJKSvAUt9M5i_e3Sw04hA.roa (raw, json) Hash identifier: ZJP+Sl3ofDvy/ggw9zZUH/ZOSkJHrccGxo5ogTR0IRM= Subject key identifier: A4:70:65:68:EC:C9:29:2B:C0:52:DF:4C:E6:2F:DE:DD:2C:34:E2:10 Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3 Certificate serial: 019B78A319802FBCFA7B406DA129B4FEA63B Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/pHBlaOzJKSvAUt9M5i_e3Sw04hA.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 193.241.212.0/24 maxlen: 24 193.241.244.0/23 maxlen: 23 193.241.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:80:2f:bc:fa:7b:40:6d:a1:29:b4:fe:a6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3 Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4706568ecc9292bc052df4ce62fdedd2c34e210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:04:71:b4:cd:a4:87:27:7c:2c:dc:f1:4a:8d: 02:9f:84:5a:93:dc:7b:87:df:c8:b0:5b:43:57:3b: 8c:c4:09:dc:ae:51:ae:b3:b5:bb:f5:ba:cd:b5:d7: 8a:97:b5:11:db:8b:67:ec:b6:8f:4c:89:85:32:f3: 12:9e:f8:c9:fe:02:82:10:57:ea:39:0d:8b:91:9f: 0b:f0:c1:f6:26:e0:80:32:69:ca:35:0d:20:49:81: 1d:98:df:99:b4:b9:ea:ee:3d:1e:cc:e8:3e:cf:b1: 18:2b:64:1f:bc:e1:a3:cf:f3:73:1a:9a:c2:57:13: 63:c5:42:99:d3:39:18:2b:99:1c:fc:af:a5:d3:6d: 17:55:06:64:b1:af:67:76:bd:4f:aa:dc:98:c1:cc: 76:3b:de:4b:61:78:4c:7f:bf:6a:13:b6:d8:71:ea: f2:bc:40:fa:6b:22:dd:db:aa:31:87:89:5e:ea:f3: 76:5b:4d:aa:4c:8b:a9:89:fb:75:74:49:18:b3:64: 44:44:61:11:3c:50:b9:89:e0:06:25:8c:11:1a:84: 7b:b4:d0:84:03:6a:63:12:47:83:9d:0a:a0:32:df: be:1b:11:72:79:1c:d2:de:49:ef:14:93:03:06:63: ef:4a:23:ea:14:e4:c5:50:e7:60:01:7c:08:40:5b: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:65:68:EC:C9:29:2B:C0:52:DF:4C:E6:2F:DE:DD:2C:34:E2:10 X509v3 Authority Key Identifier: keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/pHBlaOzJKSvAUt9M5i_e3Sw04hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.241.212.0/24 193.241.244.0/23 193.241.252.0/23 Signature Algorithm: sha256WithRSAEncryption 96:56:3d:47:c5:9f:e3:ae:ef:be:bd:84:d1:e4:75:f3:87:43: fd:76:32:96:b0:44:96:7f:d2:a0:94:3b:2d:23:42:b0:26:45: fb:14:ee:8a:33:93:2c:76:c0:37:71:aa:42:f4:38:a0:23:e5: ab:e6:3c:0e:b9:71:da:80:65:bd:51:1d:d5:e9:fb:3c:a5:cb: 63:61:c7:32:72:67:0d:3d:90:3a:cb:9c:66:cd:00:cc:9a:b4: 2c:cd:e7:49:e9:ef:68:09:18:e4:eb:bc:49:a2:7e:09:d2:02: 36:a3:fc:20:1a:4b:3e:2f:30:49:9c:bb:c5:e6:c6:69:56:c1: 73:70:0f:d7:4a:68:63:37:63:45:05:33:55:55:44:a3:56:39: c5:10:57:8b:50:ba:c1:a2:64:bc:2c:cd:3c:8f:6b:17:71:2d: 6f:32:d9:bd:72:44:00:8c:fc:3b:c9:d6:39:91:81:b9:47:56: 25:5d:46:72:03:b6:be:8b:7b:e6:e8:3b:c9:9d:7c:d9:10:2c: 9b:c4:48:f8:14:24:93:ed:40:1f:a3:38:24:b2:33:48:e9:c0: 8e:14:e2:58:b9:2d:13:2a:80:57:47:98:4b:44:0c:5f:4d:85: 71:f6:9a:6a:1d:37:e1:fd:cb:62:a0:f1:a5:05:2c:11:49:ef: 74:b3:fa:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oxmAL7z6e0BtoSm0/qY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZWI4Y2JiYWFmMjVhNzFiZjJmY2FiNmUxMTA1N2ViZjkx ZjAxZTMwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDcwNjU2OGVjYzkyOTJiYzA1MmRmNGNlNjJmZGVkZDJjMzRlMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwRxtM2khyd8LNzxSo0Cn4Rak9x7 h9/IsFtDVzuMxAncrlGus7W79brNtdeKl7UR24tn7LaPTImFMvMSnvjJ/gKCEFfq OQ2LkZ8L8MH2JuCAMmnKNQ0gSYEdmN+ZtLnq7j0ezOg+z7EYK2QfvOGjz/NzGprC VxNjxUKZ0zkYK5kc/K+l020XVQZksa9ndr1PqtyYwcx2O95LYXhMf79qE7bYcery vED6ayLd26oxh4le6vN2W02qTIupift1dEkYs2RERGERPFC5ieAGJYwRGoR7tNCE A2pjEkeDnQqgMt++GxFyeRzS3knvFJMDBmPvSiPqFOTFUOdgAXwIQFtteQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKRwZWjsySkrwFLfTOYv3t0sNOIQMB8GA1UdIwQY MBaAFAXrjLuq8lpxvy/KtuEQV+v5HwHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2Qt ZjI3YzYyOGI4MzUzLzEvcEhCbGFPekpLU3ZBVXQ5TTVpX2UzU3cwNGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2QtZjI3YzYyOGI4MzUz LzEvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwfHUAwQB wfH0AwQBwfH8MA0GCSqGSIb3DQEBCwUAA4IBAQCWVj1HxZ/jru++vYTR5HXzh0P9 djKWsESWf9KglDstI0KwJkX7FO6KM5MsdsA3capC9DigI+Wr5jwOuXHagGW9UR3V 6fs8pctjYccycmcNPZA6y5xmzQDMmrQszedJ6e9oCRjk67xJon4J0gI2o/wgGks+ LzBJnLvF5sZpVsFzcA/XSmhjN2NFBTNVVUSjVjnFEFeLULrBomS8LM08j2sXcS1v Mtm9ckQAjPw7ydY5kYG5R1YlXUZyA7a+i3vm6DvJnXzZECybxEj4FCST7UAfozgk sjNI6cCOFOJYuS0TKoBXR5hLRAxfTYVx9ppqHTfh/ctioPGlBSwRSe90s/rR -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:31 2026 by rpki-client