This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Px4XmExl2QONyqSP6s8-qLoIeoI.roa File: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (raw, json) Hash identifier: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8= Subject key identifier: 3F:1E:17:98:4C:65:D9:03:8D:CA:A4:8F:EA:CF:3E:A8:BA:08:7A:82 Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B7EA63BEB4707AC031663ECB716F2CF24 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Px4XmExl2QONyqSP6s8-qLoIeoI.roa Signing time: Fri 02 Jan 2026 12:19:42 +0000 ROA not before: Fri 02 Jan 2026 12:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213183 IP address blocks: 194.42.98.0/23 maxlen: 23 194.147.93.0/24 maxlen: 24 194.147.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3b:eb:47:07:ac:03:16:63:ec:b7:16:f2:cf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1e17984c65d9038dcaa48feacf3ea8ba087a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:bd:17:31:9b:7b:ac:a1:67:00:f9:0f:a1: 6e:c1:fd:03:7d:76:51:1d:be:ce:42:fe:b7:8d:63: 0c:3e:21:cf:15:c3:48:15:7f:14:c7:27:c9:3c:ed: 92:af:f1:3b:d2:85:90:f7:99:36:10:65:a0:94:30: 60:1c:49:aa:1c:4b:ef:e0:c1:65:34:1f:f5:00:27: 7e:81:b1:de:c6:23:1f:82:70:cd:cc:ae:be:d8:da: 74:f0:49:ea:49:d3:f9:cb:01:ec:fe:1a:5e:3d:31: a4:09:d9:14:ab:1d:90:f2:fe:10:8e:67:a5:db:29: ff:61:17:1b:d0:e7:3b:c2:3e:2e:cd:2d:20:59:a9: 85:60:88:23:bf:38:ce:6b:68:99:f2:31:3d:54:42: 25:72:94:1b:74:dd:20:ea:9b:64:30:51:03:50:bb: e9:94:15:82:72:48:26:59:57:ed:17:cc:b7:f9:ee: 68:77:49:49:71:16:c0:13:ee:1a:bc:6c:ad:8e:ca: 87:96:f4:70:e0:e6:61:d3:db:32:3d:34:4d:6f:42: 99:19:8c:de:5f:a8:90:66:fe:10:f0:65:86:bb:d1: db:81:03:50:ce:71:42:bf:e2:d3:81:af:6c:52:6c: 76:68:5c:98:ad:29:9f:aa:33:38:2d:b5:60:48:d7: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:17:98:4C:65:D9:03:8D:CA:A4:8F:EA:CF:3E:A8:BA:08:7A:82 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Px4XmExl2QONyqSP6s8-qLoIeoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.98.0/23 194.147.93.0-194.147.94.255 Signature Algorithm: sha256WithRSAEncryption 62:bf:30:5a:0f:c2:95:12:37:b6:ae:1a:d2:96:e1:ea:78:17: 19:ab:c3:a9:73:ac:ab:eb:49:67:ba:6b:d5:50:cd:88:64:4f: e7:e8:8d:a7:15:50:5d:ae:09:51:d6:ac:d2:b0:bb:90:4f:fc: 14:5c:a5:f2:56:59:e4:6b:45:16:bf:d5:e1:c5:67:58:99:d2: 3f:04:e2:fe:ad:4d:5b:98:bc:10:f7:39:12:f8:7c:81:03:27: df:27:3a:79:84:4d:ac:82:da:20:25:2f:bc:ec:53:d2:b2:64: ef:e2:58:1e:8e:88:3a:54:97:26:3d:c3:0f:c5:d1:04:4a:f2: 02:6d:f8:26:5c:5b:22:37:90:4f:6d:c5:b8:91:b9:08:b0:b0: ee:78:ef:80:10:9e:05:59:99:f2:52:36:6d:d5:d7:2d:32:a2: 3a:7a:6a:3b:9a:8b:24:87:f4:03:dd:cc:36:ab:7e:96:b2:be: d3:f6:ed:9c:1b:7f:55:dd:c0:f0:82:1a:1e:58:45:77:9b:46: 6b:ee:2a:b7:8d:28:4d:5f:25:67:d0:00:5d:2b:8b:7d:aa:65: 84:42:c0:89:95:99:de:9e:18:b8:dc:f0:bc:30:99:a2:77:60: 71:6a:02:47:9e:b2:14:39:76:a7:0e:1b:7b:3a:61:7a:cd:bb: 77:79:5a:06 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pjvrRwesAxZj7LcW8s8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFlMTc5ODRjNjVkOTAzOGRjYWE0OGZlYWNmM2VhOGJhMDg3YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssO9FzGbe6yhZwD5D6Fuwf0DfXZR Hb7OQv63jWMMPiHPFcNIFX8UxyfJPO2Sr/E70oWQ95k2EGWglDBgHEmqHEvv4MFl NB/1ACd+gbHexiMfgnDNzK6+2Np08EnqSdP5ywHs/hpePTGkCdkUqx2Q8v4Qjmel 2yn/YRcb0Oc7wj4uzS0gWamFYIgjvzjOa2iZ8jE9VEIlcpQbdN0g6ptkMFEDULvp lBWCckgmWVftF8y3+e5od0lJcRbAE+4avGytjsqHlvRw4OZh09syPTRNb0KZGYze X6iQZv4Q8GWGu9HbgQNQznFCv+LTga9sUmx2aFyYrSmfqjM4LbVgSNfjlwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFD8eF5hMZdkDjcqkj+rPPqi6CHqCMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvUHg0WG1FeGwyUU9OeXFTUDZzOC1xTG9JZW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBwipiMAwD BADCk10DBADCk14wDQYJKoZIhvcNAQELBQADggEBAGK/MFoPwpUSN7auGtKW4ep4 Fxmrw6lzrKvrSWe6a9VQzYhkT+fojacVUF2uCVHWrNKwu5BP/BRcpfJWWeRrRRa/ 1eHFZ1iZ0j8E4v6tTVuYvBD3ORL4fIEDJ98nOnmETayC2iAlL7zsU9KyZO/iWB6O iDpUlyY9ww/F0QRK8gJt+CZcWyI3kE9txbiRuQiwsO5474AQngVZmfJSNm3V1y0y ojp6ajuaiySH9APdzDarfpayvtP27Zwbf1XdwPCCGh5YRXebRmvuKreNKE1fJWfQ AF0ri32qZYRCwImVmd6eGLjc8LwwmaJ3YHFqAkeeshQ5dqcOG3s6YXrNu3d5WgY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:47 2026 by rpki-client