This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_p0lm3To3Bm-yD5VkWNOjwtDdE4.roa File: _p0lm3To3Bm-yD5VkWNOjwtDdE4.roa (raw, json) Hash identifier: iC/p0Bh0/cEBHxztSuH7TjpwWhdMPnexaJ3zoa1qk14= Subject key identifier: FE:9D:25:9B:74:E8:DC:19:BE:C8:3E:55:91:63:4E:8F:0B:43:74:4E Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37F12563E79F203380922575E5EAF3 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_p0lm3To3Bm-yD5VkWNOjwtDdE4.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214361 IP address blocks: 178.239.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f1:25:63:e7:9f:20:33:80:92:25:75:e5:ea:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe9d259b74e8dc19bec83e5591634e8f0b43744e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:6a:65:91:49:bb:a9:8e:5d:5e:59:b2:8a: 98:3f:d1:f4:5d:86:8b:77:fc:3c:88:54:9f:6e:b4: d1:eb:26:ac:2c:81:a0:4d:61:2b:6b:c9:5a:3f:73: 81:b2:c4:cb:41:0e:2b:ac:ac:8b:9b:ba:e5:15:eb: 3d:70:b3:4b:d5:f8:a2:9f:26:9e:c1:78:18:fb:a3: e6:7c:b5:c5:06:39:5b:77:53:92:80:3b:32:13:5b: 94:40:79:54:4b:10:47:34:81:f2:65:c6:02:4d:35: 2f:e2:3f:07:07:62:76:a5:15:5e:53:2c:15:a9:dc: 98:17:40:d4:04:67:43:1f:8e:ac:e1:62:a4:78:0d: 09:43:2d:14:9a:46:60:1f:9e:11:a9:eb:7c:21:f6: 78:b5:ef:1a:ec:e5:8e:59:1c:21:b8:30:fa:1d:be: dd:c4:76:5a:52:35:41:6c:17:4c:bb:87:7c:d3:1e: bf:7c:ee:9c:37:2c:16:af:41:63:34:51:d9:6c:c3: 15:66:fd:68:0f:15:05:87:bd:56:f1:86:10:ba:7a: b0:6e:84:53:f2:66:66:38:45:cc:6f:9f:e3:13:3c: c5:3d:c3:4e:56:2f:be:2c:2f:5c:ae:66:48:e1:c3: c6:83:1b:c9:30:1c:38:2f:b7:6b:d8:7a:ce:c4:5f: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9D:25:9B:74:E8:DC:19:BE:C8:3E:55:91:63:4E:8F:0B:43:74:4E X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_p0lm3To3Bm-yD5VkWNOjwtDdE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.146.0/24 Signature Algorithm: sha256WithRSAEncryption ae:c0:fc:53:e3:40:04:e0:5c:51:df:fb:1e:cd:83:e1:e3:a2: 28:69:ca:89:31:e2:84:de:f4:ee:66:6f:53:25:6a:37:c2:38: 54:4b:ea:b5:37:ea:51:7f:28:7a:b5:60:79:53:aa:02:dd:92: 41:c7:97:49:12:51:c3:bf:96:98:fe:f5:4d:6a:b7:55:50:1a: af:12:35:f2:00:55:f5:65:1d:8a:0b:c6:1e:4c:3e:c7:49:44: 5d:fa:38:ac:6e:3f:4d:78:a2:7e:8a:1a:17:f3:53:c9:99:ee: 85:93:f9:e7:02:10:a5:2a:52:ba:7a:87:1c:87:ce:b5:a8:12: 74:20:b2:cd:6c:68:82:64:57:fd:94:b6:5d:01:77:e6:30:40: aa:17:f9:45:4c:39:91:e5:9a:1c:4c:c5:f5:d6:0a:3e:38:1a: 4a:af:af:b8:13:e2:32:e4:6d:c8:a7:53:f9:ff:75:ad:75:eb: 27:af:99:d0:67:97:b6:52:22:9d:51:2c:5a:8b:75:65:e2:dc: 12:fb:df:02:99:80:82:39:e6:20:d8:1d:8a:7e:23:ea:d7:2b: 94:95:7c:7e:fb:d5:e9:d9:3a:3c:60:7e:6e:dd:ca:ca:df:46: b3:ae:c1:ea:78:26:0e:54:99:2d:bf:a9:47:22:cc:73:94:d2: b7:e3:28:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/ElY+efIDOAkiV15erzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTlkMjU5Yjc0ZThkYzE5YmVjODNlNTU5MTYzNGU4ZjBiNDM3NDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vFqZZFJu6mOXV5ZsoqYP9H0XYaL d/w8iFSfbrTR6yasLIGgTWEra8laP3OBssTLQQ4rrKyLm7rlFes9cLNL1fiinyae wXgY+6PmfLXFBjlbd1OSgDsyE1uUQHlUSxBHNIHyZcYCTTUv4j8HB2J2pRVeUywV qdyYF0DUBGdDH46s4WKkeA0JQy0UmkZgH54Rqet8IfZ4te8a7OWOWRwhuDD6Hb7d xHZaUjVBbBdMu4d80x6/fO6cNywWr0FjNFHZbMMVZv1oDxUFh71W8YYQunqwboRT 8mZmOEXMb5/jEzzFPcNOVi++LC9crmZI4cPGgxvJMBw4L7dr2HrOxF8f9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6dJZt06NwZvsg+VZFjTo8LQ3ROMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvX3AwbG0zVG8zQm0teUQ1VmtXTk9qd3REZEU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+SMA0G CSqGSIb3DQEBCwUAA4IBAQCuwPxT40AE4FxR3/sezYPh46IoacqJMeKE3vTuZm9T JWo3wjhUS+q1N+pRfyh6tWB5U6oC3ZJBx5dJElHDv5aY/vVNardVUBqvEjXyAFX1 ZR2KC8YeTD7HSURd+jisbj9NeKJ+ihoX81PJme6Fk/nnAhClKlK6eocch861qBJ0 ILLNbGiCZFf9lLZdAXfmMECqF/lFTDmR5ZocTMX11go+OBpKr6+4E+Iy5G3Ip1P5 /3Wtdesnr5nQZ5e2UiKdUSxai3Vl4twS+98CmYCCOeYg2B2KfiPq1yuUlXx++9Xp 2To8YH5u3crK30azrsHqeCYOVJktv6lHIsxzlNK34yg6 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:29 2026 by rpki-client