This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/PUdF0qnObTDmme1fVFnKr-sXNkg.roa File: PUdF0qnObTDmme1fVFnKr-sXNkg.roa (raw, json) Hash identifier: Td+QtY5qt43Ea+nzPXK3xHo8WH0yXZilv2y1rWD2fcA= Subject key identifier: 3D:47:45:D2:A9:CE:6D:30:E6:99:ED:5F:54:59:CA:AF:EB:17:36:48 Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019B7759606F363D50BA323FEB31B391794C Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/PUdF0qnObTDmme1fVFnKr-sXNkg.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398704 IP address blocks: 185.129.208.0/22 maxlen: 22 185.199.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:60:6f:36:3d:50:ba:32:3f:eb:31:b3:91:79:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d4745d2a9ce6d30e699ed5f5459caafeb173648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:0a:d7:18:31:53:69:d6:67:11:e7:48:c0: 69:52:43:93:10:eb:71:6f:c0:72:30:35:c6:df:8d: ce:39:7c:c9:af:a9:c5:3d:92:36:f9:38:b8:c2:28: 5e:9c:84:b6:64:ea:80:39:85:12:80:36:53:d6:c3: 45:e6:87:fe:79:45:f5:a6:1b:53:a5:07:7a:52:b7: 2f:33:5c:05:2c:68:94:6c:ef:9a:ce:57:9d:ad:2e: c9:3b:80:87:0e:3f:f4:f5:4f:b9:84:e9:cd:89:05: c0:41:72:73:26:16:61:0e:2b:98:e4:e7:e1:97:e9: a8:a7:06:92:2c:b7:f7:07:b5:bb:66:41:f1:69:42: 69:64:30:02:91:b7:26:c7:9a:e4:bd:6e:0c:9b:b7: 0b:bb:45:00:3d:73:d2:71:3f:a1:ee:05:50:25:bf: 81:c2:9b:b5:23:40:06:f5:ff:9a:b6:a6:7e:9b:9b: 1a:81:ea:a0:b1:78:b9:92:6f:b3:4c:c4:5e:d1:43: 13:80:68:7b:d5:20:66:e4:2a:9a:80:27:36:6c:d4: 61:e5:60:9c:6b:f6:01:b7:c6:d0:d9:ac:60:fc:53: 3d:91:ff:8d:06:79:d5:30:3b:fa:49:ab:63:58:5d: 65:e3:cc:4a:0b:2c:68:f4:60:3f:0b:99:9c:6d:9c: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:47:45:D2:A9:CE:6D:30:E6:99:ED:5F:54:59:CA:AF:EB:17:36:48 X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/PUdF0qnObTDmme1fVFnKr-sXNkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.208.0/22 185.199.196.0/22 Signature Algorithm: sha256WithRSAEncryption 73:49:d5:e0:40:82:66:7c:bd:1f:f8:3c:6d:6c:0b:ca:34:c3: fd:1a:ea:b5:df:02:36:cc:86:a5:82:da:a4:91:9d:a0:df:cb: 20:35:ea:f7:b3:e0:df:32:c8:0c:b2:ce:35:e9:68:25:e2:5a: af:be:e1:95:36:16:21:99:d0:84:3d:a5:88:3e:fa:e0:97:2b: fa:ef:45:95:28:72:b7:4c:6f:c3:45:24:ad:bc:7e:97:27:c4: d5:dd:9a:29:5f:7b:82:34:95:ef:98:ec:b1:82:49:2e:7e:33: 9f:6d:49:ba:15:77:ed:2c:99:c8:6e:e1:e8:13:f8:73:c1:17: b5:4d:51:fc:c8:85:35:b0:a6:41:cf:a6:22:e1:f0:a3:61:8c: 76:2e:94:bd:0c:77:96:5a:cc:a9:b2:5e:b1:7e:84:0a:59:dd: 2f:8c:80:c8:d2:05:fa:d0:9d:96:31:72:70:09:8a:d9:2c:8b: ec:70:42:30:00:29:32:28:40:61:c1:15:a8:48:8f:08:82:e9: 0c:57:a1:d9:da:df:ca:e0:9b:b7:45:55:4c:34:d2:b8:87:99: 9b:1e:df:04:a1:3d:a5:20:f3:ca:4c:73:d4:e3:5e:64:5e:24: 5e:ec:c3:d5:4b:a9:0f:6f:85:12:90:a4:d3:39:29:d9:9f:f5: 62:86:16:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WWBvNj1QujI/6zGzkXlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQ3NDVkMmE5Y2U2ZDMwZTY5OWVkNWY1NDU5Y2FhZmViMTczNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EcK1xgxU2nWZxHnSMBpUkOTEOtx b8ByMDXG343OOXzJr6nFPZI2+Ti4wihenIS2ZOqAOYUSgDZT1sNF5of+eUX1phtT pQd6UrcvM1wFLGiUbO+azledrS7JO4CHDj/09U+5hOnNiQXAQXJzJhZhDiuY5Ofh l+mopwaSLLf3B7W7ZkHxaUJpZDACkbcmx5rkvW4Mm7cLu0UAPXPScT+h7gVQJb+B wpu1I0AG9f+atqZ+m5sageqgsXi5km+zTMRe0UMTgGh71SBm5CqagCc2bNRh5WCc a/YBt8bQ2axg/FM9kf+NBnnVMDv6SatjWF1l48xKCyxo9GA/C5mcbZwoPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1HRdKpzm0w5pntX1RZyq/rFzZIMB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEvUFVkRjBxbk9iVERtbWUxZlZGbktyLXNYTmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYHQAwQC ucfEMA0GCSqGSIb3DQEBCwUAA4IBAQBzSdXgQIJmfL0f+DxtbAvKNMP9Guq13wI2 zIalgtqkkZ2g38sgNer3s+DfMsgMss416Wgl4lqvvuGVNhYhmdCEPaWIPvrglyv6 70WVKHK3TG/DRSStvH6XJ8TV3ZopX3uCNJXvmOyxgkkufjOfbUm6FXftLJnIbuHo E/hzwRe1TVH8yIU1sKZBz6Yi4fCjYYx2LpS9DHeWWsypsl6xfoQKWd0vjIDI0gX6 0J2WMXJwCYrZLIvscEIwACkyKEBhwRWoSI8IgukMV6HZ2t/K4Ju3RVVMNNK4h5mb Ht8EoT2lIPPKTHPU415kXiRe7MPVS6kPb4USkKTTOSnZn/VihhbL -----END CERTIFICATE-----Generated at Sun Jan 25 07:56:20 2026 by rpki-client