This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa File: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (raw, json) Hash identifier: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I= Subject key identifier: 3F:E8:EF:3E:56:8B:2F:AA:EB:DA:E8:B9:7B:D0:FA:61:6C:61:BB:DC Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B7DCA796FA88481DDAD9F85480F99CECE Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207333 IP address blocks: 93.188.206.0/24 maxlen: 24 193.47.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:79:6f:a8:84:81:dd:ad:9f:85:48:0f:99:ce:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fe8ef3e568b2faaebdae8b97bd0fa616c61bbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:44:64:36:03:34:ee:b5:e5:92:4c:2d:81:8d: 4e:5e:a6:0d:97:91:ec:e9:32:ec:31:4e:5a:37:e2: 04:b6:f3:6f:f0:11:10:2c:f5:d1:80:4c:dc:de:de: 2e:e9:42:ba:0d:48:bb:f7:c5:87:7e:52:72:9c:77: 4c:26:d7:91:99:75:8d:9a:fb:86:39:c1:59:d0:84: 1b:b2:99:23:77:21:e9:5f:13:29:9c:05:36:32:c7: 21:32:61:7f:45:60:b1:02:a5:00:c5:3c:a5:0d:2e: 63:13:c4:99:18:20:89:3a:e6:d9:a2:12:12:3a:37: 30:76:91:e8:85:aa:90:d4:14:9d:97:6b:70:8c:12: 23:d2:83:6c:11:8e:af:81:13:e8:79:7f:00:d2:7b: 1f:1e:e1:de:d7:49:24:30:d8:40:92:50:ce:18:62: e8:da:48:a7:70:eb:c8:e0:21:d3:65:c2:8f:74:70: bd:75:3a:f9:98:45:b6:67:aa:54:f6:c0:5d:da:f9: c2:7c:a0:9d:79:32:50:91:1c:83:98:4f:f4:56:ea: 1f:c7:9a:8d:3f:2f:69:7e:de:7a:9c:35:cb:0f:9d: 4c:a2:de:4b:dc:a5:54:da:05:91:a7:2c:87:eb:83: 40:c4:d6:a8:92:e7:8a:03:35:df:ed:86:2f:f7:b9: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E8:EF:3E:56:8B:2F:AA:EB:DA:E8:B9:7B:D0:FA:61:6C:61:BB:DC X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.188.206.0/24 193.47.43.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b7:9c:dd:91:96:92:31:35:a5:e1:58:f1:1b:9e:39:8d:66: 20:d4:72:c6:74:d6:86:ca:ee:ef:49:43:1e:c8:50:05:f6:dc: 4b:7c:78:d0:ad:ae:1b:44:ec:db:63:4f:84:88:e0:92:db:cf: 81:12:54:fe:2b:cf:47:ff:5d:b3:04:b3:2e:95:c0:0d:70:d4: 68:08:b4:7b:b5:9a:35:20:3b:bc:5a:74:7e:db:16:ca:57:20: 84:bb:2d:86:cb:a6:ad:57:0c:be:a4:7f:f1:eb:fc:14:18:c2: 48:90:8c:8c:b3:40:5a:2a:3e:d1:48:86:52:b6:9c:89:f2:54: 7f:4c:ff:99:be:fe:02:12:2c:65:46:1e:d2:c0:32:44:01:d3: c4:07:a1:50:d6:9b:02:6a:b3:56:a8:f6:ba:a0:83:71:f0:69: c7:48:1d:06:50:46:fa:45:ca:58:26:5c:73:bf:bd:71:5d:ad: 82:2f:4d:7c:eb:62:43:85:7c:cb:35:e9:34:fd:59:fa:1d:0a: 24:a5:94:f1:44:b9:94:ae:f0:a1:74:02:e6:f5:74:ce:32:c8: 4a:e9:45:7e:82:ba:41:5b:45:6b:cf:24:1e:dd:1c:8e:36:30: f9:02:3a:d9:5d:e6:f7:f0:80:94:86:9f:ff:82:40:30:31:2c: 01:94:9c:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ynlvqISB3a2fhUgPmc7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmU4ZWYzZTU2OGIyZmFhZWJkYWU4Yjk3YmQwZmE2MTZjNjFiYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90RkNgM07rXlkkwtgY1OXqYNl5Hs 6TLsMU5aN+IEtvNv8BEQLPXRgEzc3t4u6UK6DUi798WHflJynHdMJteRmXWNmvuG OcFZ0IQbspkjdyHpXxMpnAU2MschMmF/RWCxAqUAxTylDS5jE8SZGCCJOubZohIS OjcwdpHohaqQ1BSdl2twjBIj0oNsEY6vgRPoeX8A0nsfHuHe10kkMNhAklDOGGLo 2kincOvI4CHTZcKPdHC9dTr5mEW2Z6pU9sBd2vnCfKCdeTJQkRyDmE/0Vuofx5qN Py9pft56nDXLD51Mot5L3KVU2gWRpyyH64NAxNaokueKAzXf7YYv97n1OQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD/o7z5Wiy+q69rouXvQ+mFsYbvcMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvUC1qdlBsYUxMNnJyMnVpNWU5RDZZV3hodTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbzOAwQA wS8rMA0GCSqGSIb3DQEBCwUAA4IBAQCEt5zdkZaSMTWl4VjxG545jWYg1HLGdNaG yu7vSUMeyFAF9txLfHjQra4bROzbY0+EiOCS28+BElT+K89H/12zBLMulcANcNRo CLR7tZo1IDu8WnR+2xbKVyCEuy2Gy6atVwy+pH/x6/wUGMJIkIyMs0BaKj7RSIZS tpyJ8lR/TP+Zvv4CEixlRh7SwDJEAdPEB6FQ1psCarNWqPa6oINx8GnHSB0GUEb6 RcpYJlxzv71xXa2CL01862JDhXzLNek0/Vn6HQokpZTxRLmUrvChdALm9XTOMshK 6UV+grpBW0VrzyQe3RyONjD5AjrZXeb38ICUhp//gkAwMSwBlJxT -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:47 2026 by rpki-client