This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/P3pv-gZEfvCnIHWDfdg0yxOLxts.roa File: P3pv-gZEfvCnIHWDfdg0yxOLxts.roa (raw, json) Hash identifier: 8lfgDiix8CJcXEjBEwv/AE7QhJ7ckMyzADEA5O86Bjg= Subject key identifier: 3F:7A:6F:FA:06:44:7E:F0:A7:20:75:83:7D:D8:34:CB:13:8B:C6:DB Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5 Certificate serial: 019B7B357692214C59CB05599A935AE7F82C Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/P3pv-gZEfvCnIHWDfdg0yxOLxts.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212088 IP address blocks: 185.89.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:76:92:21:4c:59:cb:05:59:9a:93:5a:e7:f8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f7a6ffa06447ef0a72075837dd834cb138bc6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:ac:46:2c:4c:83:02:66:c4:df:7d:56:05: b9:a1:8a:f9:ca:e1:36:c2:68:4d:19:a6:5b:53:69: 1a:1e:40:53:86:fe:40:f5:5e:08:27:fa:b7:b2:97: b2:83:63:34:4a:6f:ce:67:ac:d4:ae:fe:0d:70:ca: 81:8f:c5:65:83:43:0c:07:1c:34:46:fd:68:f6:5d: 5e:d2:5a:3e:5b:9a:0c:da:59:a2:29:19:f8:ad:cc: cd:7d:df:b4:df:24:41:52:e5:cc:bc:a5:81:88:58: d8:74:f3:6a:9d:0b:f7:1e:39:56:71:76:bf:83:3b: f6:af:6b:42:b8:77:99:21:cf:fc:16:55:5f:ff:8f: 1d:c9:e7:19:05:1a:40:26:7e:6f:91:a8:29:38:4f: 1c:4c:71:71:94:db:0d:ce:da:f4:d0:a8:b4:b2:cb: 6e:af:c1:26:fd:5f:bc:5f:ab:c0:94:3b:93:ab:17: db:cb:f7:a4:b1:c0:98:76:79:3f:e6:1d:eb:38:fa: 1e:0b:9c:a6:f5:41:24:d2:6a:8d:00:3c:9c:ef:2a: 8e:13:20:bd:6c:eb:75:90:52:d7:db:f3:b2:f4:5a: e3:a4:7e:f1:0d:83:c5:05:75:8f:4e:6c:f8:9b:af: 64:b9:d7:a0:40:73:99:ad:84:ba:e8:09:f4:0f:94: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:6F:FA:06:44:7E:F0:A7:20:75:83:7D:D8:34:CB:13:8B:C6:DB X509v3 Authority Key Identifier: keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/P3pv-gZEfvCnIHWDfdg0yxOLxts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.98.0/24 Signature Algorithm: sha256WithRSAEncryption ab:04:c9:f0:3b:6b:6d:1c:1a:8b:ef:dc:8d:a2:7c:31:85:05: cd:dc:7b:4d:c2:88:ce:cf:1c:76:b0:7f:c8:d7:d8:60:47:ba: 0e:4d:9e:42:df:18:79:34:3e:ee:55:e7:22:cd:60:95:0e:44: eb:82:4b:60:6c:02:d4:a6:7b:d5:92:40:ea:76:6c:92:79:4f: d9:af:31:23:33:70:75:36:ba:f9:da:4b:37:2b:3e:7e:8f:9f: 96:ae:89:c4:30:54:89:61:b6:51:53:9c:90:a7:47:54:a5:9c: b6:b0:09:84:b7:c3:3e:cc:8a:9a:75:e9:42:19:f3:e6:fc:d2: 2b:d3:26:8c:c2:e7:cc:83:d8:e8:51:93:97:7b:af:d6:35:34: 65:5a:82:fc:3c:46:d3:5a:69:e9:1f:b5:99:2c:a7:48:2f:63: e8:f2:4f:12:df:09:1c:2f:1e:95:7e:83:1b:e5:1f:64:bf:2f: f4:0e:b5:51:68:5a:27:43:5f:96:4a:12:f8:2c:e2:df:39:93: af:63:16:50:75:6c:c1:2a:34:4b:89:09:75:e4:30:68:2c:b9: 21:44:4e:ac:e6:b5:88:95:5c:46:4a:ce:86:a0:69:79:20:c7: 98:a8:73:23:68:a8:c3:ce:1f:29:0f:5e:9d:7c:fb:25:bc:b2: af:d1:5b:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXaSIUxZywVZmpNa5/gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3 NTU1YTUwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjdhNmZmYTA2NDQ3ZWYwYTcyMDc1ODM3ZGQ4MzRjYjEzOGJjNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKSsRixMgwJmxN99VgW5oYr5yuE2 wmhNGaZbU2kaHkBThv5A9V4IJ/q3speyg2M0Sm/OZ6zUrv4NcMqBj8Vlg0MMBxw0 Rv1o9l1e0lo+W5oM2lmiKRn4rczNfd+03yRBUuXMvKWBiFjYdPNqnQv3HjlWcXa/ gzv2r2tCuHeZIc/8FlVf/48dyecZBRpAJn5vkagpOE8cTHFxlNsNztr00Ki0sstu r8Em/V+8X6vAlDuTqxfby/ekscCYdnk/5h3rOPoeC5ym9UEk0mqNADyc7yqOEyC9 bOt1kFLX2/Oy9FrjpH7xDYPFBXWPTmz4m69kudegQHOZrYS66An0D5QetQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD96b/oGRH7wpyB1g33YNMsTi8bbMB8GA1UdIwQY MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct Y2EwNDc0YWRmMzczLzEvUDNwdi1nWkVmdkNuSUhXRGZkZzB5eE9MeHRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVliMA0G CSqGSIb3DQEBCwUAA4IBAQCrBMnwO2ttHBqL79yNonwxhQXN3HtNwojOzxx2sH/I 19hgR7oOTZ5C3xh5ND7uVecizWCVDkTrgktgbALUpnvVkkDqdmySeU/ZrzEjM3B1 Nrr52ks3Kz5+j5+WronEMFSJYbZRU5yQp0dUpZy2sAmEt8M+zIqadelCGfPm/NIr 0yaMwufMg9joUZOXe6/WNTRlWoL8PEbTWmnpH7WZLKdIL2Po8k8S3wkcLx6VfoMb 5R9kvy/0DrVRaFonQ1+WShL4LOLfOZOvYxZQdWzBKjRLiQl15DBoLLkhRE6s5rWI lVxGSs6GoGl5IMeYqHMjaKjDzh8pD16dfPslvLKv0VtC -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:37 2026 by rpki-client