This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/PAfqhrbdkl_yRiUylPK1xIqq4lg.roa File: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (raw, json) Hash identifier: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y= Subject key identifier: 3C:07:EA:86:B6:DD:92:5F:F2:46:25:32:94:F2:B5:C4:8A:AA:E2:58 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF27138CF3837AE0348A4BFF3604866 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/PAfqhrbdkl_yRiUylPK1xIqq4lg.roa Signing time: Fri 02 Jan 2026 18:22:33 +0000 ROA not before: Fri 02 Jan 2026 18:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41017 IP address blocks: 85.14.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:71:38:cf:38:37:ae:03:48:a4:bf:f3:60:48:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c07ea86b6dd925ff246253294f2b5c48aaae258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:04:b7:d8:16:0d:ca:49:c7:25:f3:6c:88: 73:73:da:bc:59:d1:e8:1a:6b:28:75:57:f4:75:e6: fa:af:fd:24:02:f3:99:13:64:51:d2:b9:04:3d:de: 24:11:6c:7b:81:7e:3c:37:69:aa:45:9d:33:f4:e7: fc:3d:80:06:47:14:a5:31:38:4f:d2:2b:47:05:8b: da:3b:20:59:21:33:46:e0:12:c4:13:15:76:91:10: cd:8e:92:76:d6:ae:77:17:7f:e1:d6:42:df:aa:49: 42:40:8d:94:94:14:e4:74:c2:8a:34:66:50:99:a9: 3f:84:aa:5c:36:6b:46:4e:47:71:0b:3e:1c:f6:b3: 35:42:8b:79:51:50:33:31:73:ab:9e:bc:4a:86:9f: 4e:e2:41:48:31:ec:68:a8:79:63:3a:0c:7e:da:94: ab:05:5b:50:c2:86:45:ab:c9:3d:1d:a6:b6:2c:0b: d5:cf:18:38:cd:93:38:7f:eb:b0:46:2e:73:0e:68: cc:b9:2a:61:60:cc:d4:a6:a9:ec:16:41:ae:33:93: 2c:2b:b2:6d:5a:ea:f7:6b:1a:96:45:a5:cc:04:ba: 3b:b6:d4:a0:10:be:8f:88:76:e1:e0:e5:89:da:b5: 63:ef:8d:32:d6:53:9a:67:c8:f0:bd:5f:64:97:5c: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:EA:86:B6:DD:92:5F:F2:46:25:32:94:F2:B5:C4:8A:AA:E2:58 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/PAfqhrbdkl_yRiUylPK1xIqq4lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.14.41.0/24 Signature Algorithm: sha256WithRSAEncryption 37:82:8e:55:da:5b:44:6e:44:1a:a8:a3:67:30:c8:cf:58:c0: 47:37:cc:b6:9e:57:22:4b:60:ab:17:cc:14:ed:36:c5:30:ce: ed:94:d5:38:11:62:99:28:99:89:aa:e1:04:ed:9e:7e:85:71: d0:39:46:0f:10:fc:e2:38:92:6c:dc:0c:96:0a:2f:82:86:43: a6:d5:b3:d7:52:53:6c:af:b5:57:21:37:6f:b1:8f:4d:48:28: c4:b1:18:0e:20:e3:42:23:d7:59:55:d7:78:99:7e:63:92:a3: 7d:c3:cb:cb:a7:6b:7f:d2:6d:07:9e:38:af:71:3c:3d:05:d3: 26:75:fe:5b:35:3d:d0:92:7a:18:d0:f3:1c:66:71:ec:35:05: 0a:84:68:b9:5f:bd:b5:4c:b4:57:bd:75:94:52:1c:c7:4a:5c: b1:33:9a:5b:22:45:46:c2:62:14:56:84:31:11:6f:78:23:83: 3f:20:75:e5:ac:dc:04:2b:65:19:d5:0a:3e:fc:60:41:63:ea: ae:b7:49:49:04:56:34:d1:e5:10:63:12:3b:a2:5f:f6:f7:24: a3:b9:4e:05:14:03:43:4f:8f:91:99:76:74:98:f0:72:04:d2: 4d:3e:e8:67:ee:ac:b3:b0:d6:b6:f0:70:cc:b7:3d:d1:c0:9a: 73:65:9e:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nE4zzg3rgNIpL/zYEhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA3ZWE4NmI2ZGQ5MjVmZjI0NjI1MzI5NGYyYjVjNDhhYWFlMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvQEt9gWDcpJxyXzbIhzc9q8WdHo GmsodVf0deb6r/0kAvOZE2RR0rkEPd4kEWx7gX48N2mqRZ0z9Of8PYAGRxSlMThP 0itHBYvaOyBZITNG4BLEExV2kRDNjpJ21q53F3/h1kLfqklCQI2UlBTkdMKKNGZQ mak/hKpcNmtGTkdxCz4c9rM1Qot5UVAzMXOrnrxKhp9O4kFIMexoqHljOgx+2pSr BVtQwoZFq8k9Haa2LAvVzxg4zZM4f+uwRi5zDmjMuSphYMzUpqnsFkGuM5MsK7Jt Wur3axqWRaXMBLo7ttSgEL6PiHbh4OWJ2rVj740y1lOaZ8jwvV9kl1zHfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwH6oa23ZJf8kYlMpTytcSKquJYMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUEFmcWhyYmRrbF95UmlVeWxQSzF4SXFxNGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQ4pMA0G CSqGSIb3DQEBCwUAA4IBAQA3go5V2ltEbkQaqKNnMMjPWMBHN8y2nlciS2CrF8wU 7TbFMM7tlNU4EWKZKJmJquEE7Z5+hXHQOUYPEPziOJJs3AyWCi+ChkOm1bPXUlNs r7VXITdvsY9NSCjEsRgOIONCI9dZVdd4mX5jkqN9w8vLp2t/0m0HnjivcTw9BdMm df5bNT3QknoY0PMcZnHsNQUKhGi5X721TLRXvXWUUhzHSlyxM5pbIkVGwmIUVoQx EW94I4M/IHXlrNwEK2UZ1Qo+/GBBY+qut0lJBFY00eUQYxI7ol/29ySjuU4FFAND T4+RmXZ0mPByBNJNPuhn7qyzsNa28HDMtz3RwJpzZZ4h -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:28 2026 by rpki-client