This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/_pMAzQKRKR13xl3uGDGCl2hCPIo.roa File: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (raw, json) Hash identifier: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM= Subject key identifier: FE:93:00:CD:02:91:29:1D:77:C6:5D:EE:18:31:82:97:68:42:3C:8A Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068 Certificate serial: 019B7F12FA1B90E709BECB336E0CDDA4BD0A Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/_pMAzQKRKR13xl3uGDGCl2hCPIo.roa Signing time: Fri 02 Jan 2026 14:18:28 +0000 ROA not before: Fri 02 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207846 IP address blocks: 185.194.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:fa:1b:90:e7:09:be:cb:33:6e:0c:dd:a4:bd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068 Validity Not Before: Jan 2 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe9300cd0291291d77c65dee1831829768423c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:44:61:e1:f8:a8:a1:36:59:07:41:e0:b4:9c: f7:84:7a:48:ff:d4:3a:4b:34:70:3e:a7:06:84:48: 26:5c:88:dc:e9:f1:89:04:2b:57:10:b0:f8:ac:d6: 74:b9:70:8e:37:7b:bc:ea:87:0b:53:93:d5:dd:fe: 02:44:96:65:63:10:bd:5e:78:5d:a5:58:aa:c6:22: 53:0d:02:d2:a6:66:c6:14:55:b2:d5:ba:2b:71:a8: 8c:bf:e7:22:ec:e6:c7:4a:3b:26:18:61:58:02:30: da:10:f9:4f:58:d6:06:2a:da:eb:e0:d1:3a:14:59: 06:31:d0:cc:46:82:60:48:9e:f0:d1:88:cd:ca:33: 88:8c:fa:ce:8a:00:27:15:1b:6d:13:ff:42:8f:48: 89:20:35:be:92:d3:1f:9b:b0:7e:ae:ae:90:37:9b: 44:36:8d:55:31:56:3e:01:a6:7f:ff:70:37:25:15: 16:42:fd:93:88:7f:35:56:d3:4c:5c:dc:bf:05:94: 33:16:42:61:0f:e2:de:3a:e2:bb:c9:ce:81:68:96: f1:f4:68:1d:f7:b2:92:7e:89:c0:d6:8a:50:30:1d: b8:57:f0:0b:25:ff:6a:91:da:34:05:2d:4a:b6:c1: 65:a1:06:73:bb:86:87:5a:22:f8:bb:94:91:fb:b9: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:00:CD:02:91:29:1D:77:C6:5D:EE:18:31:82:97:68:42:3C:8A X509v3 Authority Key Identifier: keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/_pMAzQKRKR13xl3uGDGCl2hCPIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.114.0/24 Signature Algorithm: sha256WithRSAEncryption a3:a7:f7:45:93:28:7c:15:18:60:05:a6:fe:8e:4d:8e:9f:38: 18:35:fe:93:3f:47:d4:ce:33:21:bf:56:90:8a:5e:06:ad:7a: 04:18:ec:ca:76:ff:ae:84:3d:99:82:d8:c9:4c:7e:e2:7a:0a: e9:11:b9:c2:cf:e5:4d:6e:0b:6e:b3:91:e6:03:84:74:32:de: 26:e2:3d:11:74:74:37:58:ad:88:17:88:e0:66:59:ec:d6:ad: 88:ba:00:7e:e1:de:70:45:10:dd:b6:a1:e1:71:d8:38:40:44: d0:08:4b:9e:72:b8:42:43:fc:4e:0d:10:b5:35:61:b0:d2:59: 48:19:9b:99:06:a6:ab:2e:68:eb:28:e4:25:fb:65:66:72:38: a0:01:13:a6:4a:26:6e:45:04:2d:9b:91:8c:d3:63:a4:7f:20: 5f:51:ee:e2:46:ed:6b:f4:f3:eb:d4:7b:f6:2f:5c:42:97:1b: 65:71:1b:b7:ad:86:49:65:72:3a:4b:b7:dc:2d:52:29:bd:9f: 6d:95:7b:6c:5b:11:11:71:fa:5f:7a:c6:a7:66:06:00:4a:9b: a4:ce:6d:5d:a6:d5:84:d8:1f:da:e9:04:0f:c0:44:5e:eb:f2: 4c:1f:ae:32:15:dc:63:a8:82:fe:eb:dc:cc:23:a0:18:e6:f6: f0:83:01:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/EvobkOcJvsszbgzdpL0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1 YjEwNjgwHhcNMjYwMTAyMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTkzMDBjZDAyOTEyOTFkNzdjNjVkZWUxODMxODI5NzY4NDIzYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90Rh4fiooTZZB0HgtJz3hHpI/9Q6 SzRwPqcGhEgmXIjc6fGJBCtXELD4rNZ0uXCON3u86ocLU5PV3f4CRJZlYxC9Xnhd pViqxiJTDQLSpmbGFFWy1borcaiMv+ci7ObHSjsmGGFYAjDaEPlPWNYGKtrr4NE6 FFkGMdDMRoJgSJ7w0YjNyjOIjPrOigAnFRttE/9Cj0iJIDW+ktMfm7B+rq6QN5tE No1VMVY+AaZ//3A3JRUWQv2TiH81VtNMXNy/BZQzFkJhD+LeOuK7yc6BaJbx9Ggd 97KSfonA1opQMB24V/ALJf9qkdo0BS1KtsFloQZzu4aHWiL4u5SR+7lWEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6TAM0CkSkdd8Zd7hgxgpdoQjyKMB8GA1UdIwQY MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt MGY1ZjA5YjJlYjE0LzEvX3BNQXpRS1JLUjEzeGwzdUdER0NsMmhDUElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0 LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucJyMA0G CSqGSIb3DQEBCwUAA4IBAQCjp/dFkyh8FRhgBab+jk2OnzgYNf6TP0fUzjMhv1aQ il4GrXoEGOzKdv+uhD2ZgtjJTH7iegrpEbnCz+VNbgtus5HmA4R0Mt4m4j0RdHQ3 WK2IF4jgZlns1q2IugB+4d5wRRDdtqHhcdg4QETQCEuecrhCQ/xODRC1NWGw0llI GZuZBqarLmjrKOQl+2VmcjigAROmSiZuRQQtm5GM02OkfyBfUe7iRu1r9PPr1Hv2 L1xClxtlcRu3rYZJZXI6S7fcLVIpvZ9tlXtsWxERcfpfesanZgYASpukzm1dptWE 2B/a6QQPwERe6/JMH64yFdxjqIL+69zMI6AY5vbwgwF0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:33 2026 by rpki-client