This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pFreL0ELwqUCEO8jgvaVDhmpTaE.roa File: pFreL0ELwqUCEO8jgvaVDhmpTaE.roa (raw, json) Hash identifier: j6gPD8Urcnyljz4W/n0fYekDNBzyuam4N75FRs+GRu4= Subject key identifier: A4:5A:DE:2F:41:0B:C2:A5:02:10:EF:23:82:F6:95:0E:19:A9:4D:A1 Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b Certificate serial: 019B7B367CD74359443E85D808EF4A065A05 Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pFreL0ELwqUCEO8jgvaVDhmpTaE.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35584 IP address blocks: 89.33.96.0/22 maxlen: 22 193.200.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7c:d7:43:59:44:3e:85:d8:08:ef:4a:06:5a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a45ade2f410bc2a50210ef2382f6950e19a94da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:e0:fe:32:a7:db:b3:1d:25:32:63:64:01: 19:71:ac:aa:df:81:18:bd:06:f8:01:92:04:75:7d: a7:9c:34:9f:f1:aa:a7:f2:13:a6:c8:a1:ef:25:f1: 37:bf:c0:a7:b1:00:7e:50:0f:fd:f4:4d:e0:83:e8: 76:1d:7d:f3:e5:58:73:20:45:4d:1b:c6:74:a9:4c: 9d:09:f3:59:6c:e3:da:8d:7b:42:e2:cc:3e:31:6a: 58:75:bc:3a:fc:1d:7f:f8:1c:ee:59:95:0a:64:30: e6:1e:8c:21:48:27:b3:73:c9:b5:c5:fe:77:50:7e: 22:67:d7:bc:47:37:83:d7:4c:fb:d5:74:23:4f:24: 59:c9:07:5d:16:9e:66:1f:c2:12:e7:18:ca:02:d8: 37:ca:cc:0d:93:5a:67:fc:2b:a4:2b:64:a6:9d:f9: 9a:c6:e0:0e:67:49:1a:13:32:55:36:62:de:e9:82: 14:cc:15:1a:8d:88:ef:2c:1b:30:51:6f:4f:3a:df: 60:d9:c7:32:b4:b1:a3:b0:ea:75:16:98:0d:5a:c2: 98:49:df:23:1a:81:55:39:1a:f2:f9:43:f8:8d:63: bf:da:de:c8:8c:c5:45:d5:8c:a2:eb:55:16:e0:ae: d4:2a:da:55:ea:9c:86:b1:89:5b:2e:5b:90:3c:84: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:DE:2F:41:0B:C2:A5:02:10:EF:23:82:F6:95:0E:19:A9:4D:A1 X509v3 Authority Key Identifier: keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/pFreL0ELwqUCEO8jgvaVDhmpTaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.96.0/22 193.200.200.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ad:da:fe:54:c1:22:b5:cd:21:a9:de:d5:80:e5:52:91:90: bb:64:9a:7c:cb:70:09:93:a7:23:af:7c:54:df:ff:c0:18:b7: 29:bc:fb:57:bf:95:ab:ec:8b:2f:9b:44:89:f0:d3:2a:c8:11: e7:e0:93:aa:f7:9d:b5:f5:0c:99:fc:91:d8:18:b6:85:1b:49: d9:9b:aa:8f:8d:3e:61:0c:49:cd:0f:74:39:8e:b3:66:a6:18: 6a:91:8f:a0:63:b6:45:99:df:67:f2:e5:85:2d:84:0f:06:9c: 1a:db:b9:f2:d8:18:10:ac:31:ce:78:dc:c1:5d:44:0c:11:47: 9c:f8:33:93:ef:5c:b5:a5:b8:c9:1c:64:21:b7:c0:66:30:a9: bf:c8:da:bb:e6:92:9f:ab:14:8b:da:59:39:de:06:b7:2c:77: fc:cb:11:e1:98:d7:bb:1b:df:a3:fb:e9:7e:b2:96:5b:4c:87: 35:25:32:13:66:14:f1:98:1a:1f:50:3b:5e:83:0f:67:8a:49: a4:51:7e:c6:db:57:7f:cb:f1:04:d8:b4:0d:8f:73:3b:e1:aa: 08:66:29:fe:ee:82:32:48:1f:f5:23:17:1e:47:8f:cc:84:38: 0e:1d:67:2e:c9:e0:e0:c6:82:0b:67:c5:71:72:15:d9:ba:58: a9:89:69:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NnzXQ1lEPoXYCO9KBloFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3 MjhlM2IwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDVhZGUyZjQxMGJjMmE1MDIxMGVmMjM4MmY2OTUwZTE5YTk0ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Lg/jKn27MdJTJjZAEZcayq34EY vQb4AZIEdX2nnDSf8aqn8hOmyKHvJfE3v8CnsQB+UA/99E3gg+h2HX3z5VhzIEVN G8Z0qUydCfNZbOPajXtC4sw+MWpYdbw6/B1/+BzuWZUKZDDmHowhSCezc8m1xf53 UH4iZ9e8RzeD10z71XQjTyRZyQddFp5mH8IS5xjKAtg3yswNk1pn/CukK2Smnfma xuAOZ0kaEzJVNmLe6YIUzBUajYjvLBswUW9POt9g2ccytLGjsOp1FpgNWsKYSd8j GoFVORry+UP4jWO/2t7IjMVF1Yyi61UW4K7UKtpV6pyGsYlbLluQPIQktQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKRa3i9BC8KlAhDvI4L2lQ4ZqU2hMB8GA1UdIwQY MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt NjU5OGI0Y2ViMDY5LzEvcEZyZUwwRUx3cVVDRU84amd2YVZEaG1wVGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5 LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWSFgAwQA wcjIMA0GCSqGSIb3DQEBCwUAA4IBAQBUrdr+VMEitc0hqd7VgOVSkZC7ZJp8y3AJ k6cjr3xU3//AGLcpvPtXv5Wr7Isvm0SJ8NMqyBHn4JOq95219QyZ/JHYGLaFG0nZ m6qPjT5hDEnND3Q5jrNmphhqkY+gY7ZFmd9n8uWFLYQPBpwa27ny2BgQrDHOeNzB XUQMEUec+DOT71y1pbjJHGQht8BmMKm/yNq75pKfqxSL2lk53ga3LHf8yxHhmNe7 G9+j++l+spZbTIc1JTITZhTxmBofUDtegw9nikmkUX7G21d/y/EE2LQNj3M74aoI Zin+7oIySB/1IxceR4/MhDgOHWcuyeDgxoILZ8VxchXZulipiWns -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:00 2026 by rpki-client