This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/p0HbPFfnwggjbYCEugxFJ_HG2yI.roa File: p0HbPFfnwggjbYCEugxFJ_HG2yI.roa (raw, json) Hash identifier: drTL/DJEGCCNAe04lSPkR1n9D8oRXBBImBv5kVogkjQ= Subject key identifier: A7:41:DB:3C:57:E7:C2:08:23:6D:80:84:BA:0C:45:27:F1:C6:DB:22 Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b Certificate serial: 019B7DC95B81EA25FE5E7595314A37850EEF Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/p0HbPFfnwggjbYCEugxFJ_HG2yI.roa Signing time: Fri 02 Jan 2026 08:18:26 +0000 ROA not before: Fri 02 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9714 IP address blocks: 185.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:5b:81:ea:25:fe:5e:75:95:31:4a:37:85:0e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b Validity Not Before: Jan 2 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a741db3c57e7c208236d8084ba0c4527f1c6db22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:5d:5b:dc:28:f0:9f:fa:73:c6:e6:d7:4a: 3d:dc:70:9a:e8:e4:04:3d:ba:91:56:34:58:d0:f4: 4a:f3:33:d7:ac:fc:bc:c8:6d:0d:92:04:43:d5:91: b4:06:07:26:d0:2d:27:4b:1e:f7:33:29:99:94:7b: 4d:77:07:36:7d:ff:9a:fb:ac:07:bc:ea:18:76:d1: a6:79:2f:b8:57:8f:dc:7c:8a:2b:c2:cd:a6:12:61: d7:05:e5:de:dd:24:15:85:71:91:6a:6b:c7:30:8a: 0b:df:b4:80:2d:57:f1:31:14:50:cb:e6:b3:09:de: 32:67:18:9e:2c:cb:6d:d5:65:f1:15:28:8e:51:aa: 87:66:60:f8:9a:40:ed:56:4b:bd:e5:ba:28:9f:f7: ce:11:59:73:a7:1a:a1:5c:08:b5:83:9e:a9:01:aa: 83:7c:73:9a:fe:61:16:9c:b0:65:ac:2f:5a:6e:56: ce:75:0c:ce:d7:15:66:1b:fd:6b:61:8f:41:98:2a: 4e:34:7d:eb:f0:b3:53:e4:12:fe:25:88:a5:5a:cd: ef:03:da:6f:06:01:b9:cc:80:1b:7a:03:5f:ad:9b: de:8f:9d:56:b5:59:d0:e2:cb:1d:55:e0:14:65:43: 9d:c8:26:67:d2:3d:4b:e2:90:16:48:41:01:31:9c: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:41:DB:3C:57:E7:C2:08:23:6D:80:84:BA:0C:45:27:F1:C6:DB:22 X509v3 Authority Key Identifier: keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/p0HbPFfnwggjbYCEugxFJ_HG2yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.191.0/24 Signature Algorithm: sha256WithRSAEncryption 48:a1:3d:46:fe:10:57:9f:ae:ca:41:dc:94:42:10:2e:0c:93: 16:96:34:c1:5e:be:3b:12:8d:f6:39:60:36:5d:17:a6:06:61: 55:ed:67:9d:38:2b:10:16:8f:17:d3:7b:2e:43:6a:16:0d:46: 14:3d:8c:f7:52:0f:37:bf:a4:cd:dc:ef:97:05:27:53:0e:8b: 25:af:01:1c:cc:69:a1:e1:d3:d0:a1:fb:8e:ca:10:ce:29:ac: d8:01:b7:c7:ed:1d:06:33:ff:39:f5:59:0b:00:a0:cc:37:51: 7d:af:e8:f7:36:fb:78:ab:1c:30:14:67:06:db:ff:24:32:43: 60:3a:a3:85:ff:bd:c4:44:af:53:64:86:db:64:39:31:83:29: 67:b0:bc:5a:39:9f:91:5e:30:f5:03:d3:de:b3:42:fd:a6:cb: 2c:13:70:a0:5a:76:3f:1a:88:8e:77:56:0a:20:b2:4a:37:3c: 51:7a:6e:81:33:32:dc:07:1a:93:bd:8d:43:ea:98:29:18:7f: 38:71:08:83:b5:c6:53:17:de:4a:be:ec:b0:5a:ce:bf:de:bf: 80:49:fc:df:da:d2:c5:9a:a4:17:6d:54:bc:17:7d:8e:2d:34: 05:be:4d:08:9d:76:b4:3b:a5:0d:86:d1:fe:21:72:50:f1:cc: 31:a5:a4:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yVuB6iX+XnWVMUo3hQ7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMzk5ZDQ0MzViYjg1ZmFlOTEwYWJlMzhlNjg1MzMyMDRk ZmQ2MGIwHhcNMjYwMTAyMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQxZGIzYzU3ZTdjMjA4MjM2ZDgwODRiYTBjNDUyN2YxYzZkYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13FdW9wo8J/6c8bm10o93HCa6OQE PbqRVjRY0PRK8zPXrPy8yG0NkgRD1ZG0Bgcm0C0nSx73MymZlHtNdwc2ff+a+6wH vOoYdtGmeS+4V4/cfIorws2mEmHXBeXe3SQVhXGRamvHMIoL37SALVfxMRRQy+az Cd4yZxieLMtt1WXxFSiOUaqHZmD4mkDtVku95boon/fOEVlzpxqhXAi1g56pAaqD fHOa/mEWnLBlrC9ablbOdQzO1xVmG/1rYY9BmCpONH3r8LNT5BL+JYilWs3vA9pv BgG5zIAbegNfrZvej51WtVnQ4ssdVeAUZUOdyCZn0j1L4pAWSEEBMZyGXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdB2zxX58III22AhLoMRSfxxtsiMB8GA1UdIwQY MBaAFFA5nUQ1u4X66RCr445oUzIE39YLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQt MzRmZmRiNDQyMTEzLzEvcDBIYlBGZm53Z2dqYllDRXVneEZKX0hHMnlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80ZjNmMDgtOTg2Yi00OGU0LTg1ZGQtMzRmZmRiNDQyMTEz LzEvVURtZFJEVzdoZnJwRUt2amptaFRNZ1RmMWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuae/MA0G CSqGSIb3DQEBCwUAA4IBAQBIoT1G/hBXn67KQdyUQhAuDJMWljTBXr47Eo32OWA2 XRemBmFV7WedOCsQFo8X03suQ2oWDUYUPYz3Ug83v6TN3O+XBSdTDoslrwEczGmh 4dPQofuOyhDOKazYAbfH7R0GM/859VkLAKDMN1F9r+j3Nvt4qxwwFGcG2/8kMkNg OqOF/73ERK9TZIbbZDkxgylnsLxaOZ+RXjD1A9Pes0L9psssE3CgWnY/GoiOd1YK ILJKNzxRem6BMzLcBxqTvY1D6pgpGH84cQiDtcZTF95KvuywWs6/3r+ASfzf2tLF mqQXbVS8F32OLTQFvk0InXa0O6UNhtH+IXJQ8cwxpaRx -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:49 2026 by rpki-client