This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa File: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (raw, json) Hash identifier: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A= Subject key identifier: 3F:5B:B8:78:4A:4C:96:DF:55:3F:50:3F:43:B6:DA:F6:E7:28:F8:31 Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Certificate serial: 019B7834FD4B443573E7FE573AB9C775C2FD Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48422 IP address blocks: 185.93.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fd:4b:44:35:73:e7:fe:57:3a:b9:c7:75:c2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5bb8784a4c96df553f503f43b6daf6e728f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:d3:ea:08:06:da:e3:f7:5d:2d:f2:8b:e7: 42:67:dc:59:cd:b4:d3:d7:73:1c:a9:8b:3c:63:0c: 1d:19:82:c6:ca:72:b3:51:7c:89:b9:c0:49:95:8f: 40:dd:5e:d1:37:02:0b:62:a0:6a:1b:a6:56:79:3f: 2f:de:b9:26:0a:f3:b7:1f:33:05:3f:69:16:e6:e7: cb:e7:75:da:f8:af:64:31:97:3c:94:71:fe:c8:5a: 2c:6c:4d:fe:08:88:76:cf:11:0b:32:cc:65:b2:dd: 90:c5:50:7c:82:94:be:83:32:f7:55:00:86:5a:fd: 26:e5:c1:b6:fe:1f:19:cd:1b:ce:1a:a6:ca:47:a4: d1:72:fe:fe:87:91:bc:7b:7d:d7:44:e1:e3:10:19: a7:13:ff:c5:f1:63:26:4c:b8:1d:ec:ac:cd:48:d2: 42:a1:2e:1d:9d:af:19:41:a8:cd:d3:3b:ee:72:5b: 9e:41:ca:21:38:a7:6a:07:ee:ed:19:e7:95:98:02: 03:1a:cc:fb:b0:cd:2e:fb:35:88:15:05:8a:1c:3b: 2f:3f:59:9b:79:1a:32:df:e2:7c:55:41:64:44:46: 4c:53:e7:5c:f0:9e:7a:a8:99:98:9c:1d:06:b8:c4: e0:1a:e3:71:3f:76:70:01:ac:3f:8f:f4:1d:cc:32: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5B:B8:78:4A:4C:96:DF:55:3F:50:3F:43:B6:DA:F6:E7:28:F8:31 X509v3 Authority Key Identifier: keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.184.0/24 Signature Algorithm: sha256WithRSAEncryption 07:cc:ab:f6:1e:65:4f:f0:3c:d8:48:ef:f0:9e:f1:51:35:15: 05:2b:a9:21:de:8f:9d:80:fb:9f:db:30:fe:ec:09:3e:97:33: a4:f4:16:94:69:2b:ac:3e:0f:85:43:4e:03:22:9b:16:2d:d2: 4a:42:e0:f4:89:f9:34:b5:87:50:bc:4f:59:a5:67:8c:ac:3a: 9f:26:bb:5e:7f:e2:33:d6:0c:9a:8e:4a:fc:eb:5b:c2:16:21: e2:99:c4:a2:68:00:23:65:c2:58:e5:d3:fa:ee:ba:dc:bc:c9: 3b:33:22:24:0b:52:9d:97:64:6a:09:cc:5b:8c:9f:eb:99:1a: f6:a3:e8:40:0e:2b:9e:27:bc:e4:12:58:85:39:29:7a:81:b4: 74:74:46:d5:b0:1a:d7:ca:69:0d:00:40:75:f5:cb:21:16:e9: fc:a1:de:84:b2:89:4a:fd:12:87:d7:89:0f:51:d5:ba:a1:d9: 67:1e:07:4f:88:94:95:34:86:2f:e8:cf:51:f1:2a:2b:0e:3e: b1:3f:47:3b:f0:37:49:ea:db:5d:57:60:03:7d:6a:38:13:ba: 8f:a9:ed:5f:b2:bb:93:88:b4:ea:73:c4:67:6d:e3:bb:71:60: f7:ea:4b:20:ff:f5:eb:ee:2e:4b:e3:2b:ab:3a:49:e0:61:a6: 56:b9:98:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NP1LRDVz5/5XOrnHdcL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3 MTFlMWUwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjViYjg3ODRhNGM5NmRmNTUzZjUwM2Y0M2I2ZGFmNmU3MjhmODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SfT6ggG2uP3XS3yi+dCZ9xZzbTT 13McqYs8YwwdGYLGynKzUXyJucBJlY9A3V7RNwILYqBqG6ZWeT8v3rkmCvO3HzMF P2kW5ufL53Xa+K9kMZc8lHH+yFosbE3+CIh2zxELMsxlst2QxVB8gpS+gzL3VQCG Wv0m5cG2/h8ZzRvOGqbKR6TRcv7+h5G8e33XROHjEBmnE//F8WMmTLgd7KzNSNJC oS4dna8ZQajN0zvuclueQcohOKdqB+7tGeeVmAIDGsz7sM0u+zWIFQWKHDsvP1mb eRoy3+J8VUFkREZMU+dc8J56qJmYnB0GuMTgGuNxP3ZwAaw/j/QdzDKFxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9buHhKTJbfVT9QP0O22vbnKPgxMB8GA1UdIwQY MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct NTI4YTYzYmU0Yzg3LzEvUDF1NGVFcE1sdDlWUDFBX1E3YmE5dWNvLURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3 LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV24MA0G CSqGSIb3DQEBCwUAA4IBAQAHzKv2HmVP8DzYSO/wnvFRNRUFK6kh3o+dgPuf2zD+ 7Ak+lzOk9BaUaSusPg+FQ04DIpsWLdJKQuD0ifk0tYdQvE9ZpWeMrDqfJrtef+Iz 1gyajkr861vCFiHimcSiaAAjZcJY5dP67rrcvMk7MyIkC1Kdl2RqCcxbjJ/rmRr2 o+hADiueJ7zkEliFOSl6gbR0dEbVsBrXymkNAEB19cshFun8od6EsolK/RKH14kP UdW6odlnHgdPiJSVNIYv6M9R8SorDj6xP0c78DdJ6ttdV2ADfWo4E7qPqe1fsruT iLTqc8RnbeO7cWD36ksg//Xr7i5L4yurOkngYaZWuZgc -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:23 2026 by rpki-client