This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/poLUczAkpZ-X35ck8qyvSthMHVI.roa File: poLUczAkpZ-X35ck8qyvSthMHVI.roa (raw, json) Hash identifier: 0jkj8MirRFlW0k6UiG4ranSvkFvq8sDiHxNpMa/cyFY= Subject key identifier: A6:82:D4:73:30:24:A5:9F:97:DF:97:24:F2:AC:AF:4A:D8:4C:1D:52 Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019B7BA4DF48D4B103B9C5D7AFC05290E75F Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/poLUczAkpZ-X35ck8qyvSthMHVI.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19994 IP address blocks: 185.194.86.0/24 maxlen: 24 185.194.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:df:48:d4:b1:03:b9:c5:d7:af:c0:52:90:e7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a682d4733024a59f97df9724f2acaf4ad84c1d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:74:4f:27:d0:e4:be:b9:84:23:d6:a9:3a: 15:58:97:3d:36:54:cc:45:3a:69:ab:64:d2:eb:7d: fa:44:ed:7b:da:77:94:60:6c:a4:ce:fb:5b:b5:57: 40:2a:69:ff:36:12:30:a7:18:24:7d:50:61:8b:92: 80:af:bf:ab:5b:e7:dc:9e:32:1b:64:7d:c3:9e:e8: 1f:b0:8b:97:f3:aa:30:e3:02:34:25:2a:75:6f:ac: c7:2f:c3:4b:75:d9:71:4e:24:e3:0e:c7:08:f1:15: c4:cf:9b:97:5f:4f:55:8c:0c:9f:ca:18:a3:73:43: c3:94:c1:4b:40:3d:b4:f8:5c:38:d5:09:72:32:53: 91:2f:c5:d9:5b:0c:38:38:9f:b8:14:d3:76:fe:de: da:c8:15:a9:db:df:74:2b:b0:24:e7:87:0b:02:70: 48:ed:04:bf:66:3c:f4:27:e5:ee:96:e1:4b:17:b2: 46:35:1f:59:db:cb:ac:5d:42:9b:e8:48:21:ee:af: 21:7f:aa:3d:f9:24:49:bd:67:3e:65:77:52:7c:91: 08:42:5e:07:db:b2:0a:7c:84:51:b8:d2:87:66:5d: 8a:4a:8d:59:84:9e:e0:00:3c:44:7d:a4:5a:10:35: a0:98:36:d7:0f:85:64:35:68:e0:54:c5:c9:2d:b5: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:82:D4:73:30:24:A5:9F:97:DF:97:24:F2:AC:AF:4A:D8:4C:1D:52 X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/poLUczAkpZ-X35ck8qyvSthMHVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.86.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:ef:d4:ac:88:38:2b:6b:61:95:e2:a0:26:b3:1a:0b:e1:a2: 8a:a7:44:9e:00:04:41:39:a1:c6:fb:c9:7a:2f:ee:98:92:45: d6:bf:ba:7f:19:6c:ca:a1:be:0a:ac:d3:e7:75:b0:71:58:8a: 65:fd:e0:b9:da:8e:10:0d:38:8b:83:d7:f3:5a:06:7f:ad:02: 73:af:b9:31:b3:ad:10:da:b8:b1:17:65:37:6b:d7:b9:bc:63: f9:3b:94:52:b8:fd:5d:8f:f0:9a:8d:c1:2b:ff:d5:cc:aa:02: 85:4e:89:b9:4e:c2:95:c1:7d:10:a1:2a:ff:12:fb:0f:61:0f: fd:b0:06:9f:e8:c0:f1:8a:61:83:bd:b1:75:b4:b2:be:fd:19: 4a:ec:35:00:30:7f:1c:ce:6e:6f:b1:57:6c:4b:ae:bf:8e:4d: 19:74:b0:67:dd:ed:fa:f9:70:9a:58:63:88:80:b6:3a:33:ff: 68:d2:41:81:7d:2a:63:12:1f:43:34:83:bd:25:51:5a:13:12: 47:fa:ed:a5:17:b6:5c:d4:69:52:f2:7e:51:4f:80:95:55:ba: 61:78:fb:e6:3c:da:3a:22:c2:cd:37:36:91:a6:d3:63:fa:13: 52:fd:d5:6d:0b:33:77:51:6d:9b:e0:d0:bc:0c:56:b0:9a:23: e4:7b:e4:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pN9I1LEDucXXr8BSkOdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjgyZDQ3MzMwMjRhNTlmOTdkZjk3MjRmMmFjYWY0YWQ4NGMxZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5F0TyfQ5L65hCPWqToVWJc9NlTM RTppq2TS6336RO172neUYGykzvtbtVdAKmn/NhIwpxgkfVBhi5KAr7+rW+fcnjIb ZH3DnugfsIuX86ow4wI0JSp1b6zHL8NLddlxTiTjDscI8RXEz5uXX09VjAyfyhij c0PDlMFLQD20+Fw41QlyMlORL8XZWww4OJ+4FNN2/t7ayBWp2990K7Ak54cLAnBI 7QS/Zjz0J+XuluFLF7JGNR9Z28usXUKb6Egh7q8hf6o9+SRJvWc+ZXdSfJEIQl4H 27IKfIRRuNKHZl2KSo1ZhJ7gADxEfaRaEDWgmDbXD4VkNWjgVMXJLbV4uwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKaC1HMwJKWfl9+XJPKsr0rYTB1SMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvcG9MVWN6QWtwWi1YMzVjazhxeXZTdGhNSFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucJWMA0G CSqGSIb3DQEBCwUAA4IBAQAP79SsiDgra2GV4qAmsxoL4aKKp0SeAARBOaHG+8l6 L+6YkkXWv7p/GWzKob4KrNPndbBxWIpl/eC52o4QDTiLg9fzWgZ/rQJzr7kxs60Q 2rixF2U3a9e5vGP5O5RSuP1dj/CajcEr/9XMqgKFTom5TsKVwX0QoSr/EvsPYQ/9 sAaf6MDximGDvbF1tLK+/RlK7DUAMH8czm5vsVdsS66/jk0ZdLBn3e36+XCaWGOI gLY6M/9o0kGBfSpjEh9DNIO9JVFaExJH+u2lF7Zc1GlS8n5RT4CVVbphePvmPNo6 IsLNNzaRptNj+hNS/dVtCzN3UW2b4NC8DFawmiPke+RE -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:51 2026 by rpki-client