This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/PHd3RlGosSCiiJlgByr5DyGNERo.roa File: PHd3RlGosSCiiJlgByr5DyGNERo.roa (raw, json) Hash identifier: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM= Subject key identifier: 3C:77:77:46:51:A8:B1:20:A2:88:99:60:07:2A:F9:0F:21:8D:11:1A Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019B77592620596E2C9F177ABB183C2AB563 Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/PHd3RlGosSCiiJlgByr5DyGNERo.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9044 IP address blocks: 82.220.0.0/16 maxlen: 24 185.252.240.0/22 maxlen: 23 194.124.208.0/24 maxlen: 24 212.41.64.0/18 maxlen: 19 212.101.0.0/19 maxlen: 20 2001:1680::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:20:59:6e:2c:9f:17:7a:bb:18:3c:2a:b5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c77774651a8b120a2889960072af90f218d111a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:00:be:11:78:e2:64:fc:7d:6b:5a:18:e0: 00:a6:22:aa:a8:83:41:28:d3:dc:04:09:a3:5f:f2: bd:19:1f:6f:28:be:25:6a:ef:1b:ae:37:e9:f5:75: 50:32:9d:0e:b4:b6:99:aa:81:82:9f:fe:ff:63:45: ed:6a:06:5e:1d:8e:e5:69:c0:9d:81:18:db:2a:59: 68:29:94:fe:02:96:a7:0d:03:36:00:7c:9f:f6:5d: cf:bf:2e:28:34:f6:9f:bb:dc:98:43:77:2c:18:6f: cc:80:ae:4f:35:5b:52:ae:35:f0:0a:14:d3:4e:fa: f1:87:9b:ea:8c:33:de:98:bb:7a:b4:8a:ec:6f:1f: b3:95:16:87:05:63:19:25:df:37:a6:c7:b4:8c:05: 48:38:2e:53:93:5c:b5:22:b0:90:6e:30:69:fb:2f: 30:73:8a:a0:19:16:c9:0a:8a:a6:04:58:26:c5:8d: 2a:96:e4:11:cd:b3:27:9f:ee:29:4c:10:94:51:36: 05:eb:a1:88:43:67:e1:1a:75:2e:09:89:a8:d2:17: b3:1c:97:7b:d3:47:25:01:1f:cb:16:c8:91:5b:75: c4:cf:8b:54:d1:cf:21:ca:ab:7b:b6:4f:3a:c7:2e: fe:fa:1d:00:a0:b6:39:8f:24:17:de:b4:80:0a:6b: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:77:46:51:A8:B1:20:A2:88:99:60:07:2A:F9:0F:21:8D:11:1A X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/PHd3RlGosSCiiJlgByr5DyGNERo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.220.0.0/16 185.252.240.0/22 194.124.208.0/24 212.41.64.0/18 212.101.0.0/19 IPv6: 2001:1680::/29 Signature Algorithm: sha256WithRSAEncryption 36:ea:94:07:df:c8:e1:ce:51:fb:c2:55:be:1b:9e:cd:13:3d: 59:45:19:a9:73:f2:b8:7a:2b:6d:ff:38:82:79:be:72:33:2c: 0c:0e:72:b5:f9:da:dd:7c:e6:25:d4:d1:70:59:5a:45:65:ca: 5e:c0:c1:78:e0:ef:29:53:07:76:ec:7f:26:1f:ff:08:92:d0: 17:52:21:6b:56:56:19:0b:90:0d:f3:31:a2:71:41:90:ac:53: b5:7e:e7:ce:2b:4e:f7:a0:fc:87:0a:3f:47:e3:b9:1d:b7:82: b0:2a:79:ed:72:e7:35:64:f0:5f:2a:a8:cb:f7:d1:2b:b7:4e: f5:50:f7:ba:5b:80:59:19:64:66:0e:d5:19:a3:5e:6f:ed:15: 82:da:64:4e:ee:66:0c:e2:00:dd:e4:7e:e3:26:4a:19:dc:d5: 37:a0:2e:fd:4b:fd:c4:c9:91:51:d0:e0:50:5f:85:83:a7:66: ed:14:18:a4:31:07:12:81:17:60:00:ff:ac:aa:90:dc:53:ae: 35:d1:e6:4e:b6:0d:9a:2a:c4:3d:86:d3:d8:22:05:f1:e8:16: 36:f6:c6:80:15:8c:69:37:6b:5d:9c:f4:6b:3b:da:39:32:60: 19:57:6c:0d:fc:3b:81:db:58:e3:b8:8f:23:57:cb:7d:77:c4: 00:46:ca:fb -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt3WSYgWW4snxd6uxg8KrVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzc3Nzc0NjUxYThiMTIwYTI4ODk5NjAwNzJhZjkwZjIxOGQxMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9MAvhF44mT8fWtaGOAApiKqqINB KNPcBAmjX/K9GR9vKL4lau8brjfp9XVQMp0OtLaZqoGCn/7/Y0XtagZeHY7lacCd gRjbKlloKZT+ApanDQM2AHyf9l3Pvy4oNPafu9yYQ3csGG/MgK5PNVtSrjXwChTT Tvrxh5vqjDPemLt6tIrsbx+zlRaHBWMZJd83pse0jAVIOC5Tk1y1IrCQbjBp+y8w c4qgGRbJCoqmBFgmxY0qluQRzbMnn+4pTBCUUTYF66GIQ2fhGnUuCYmo0hezHJd7 00clAR/LFsiRW3XEz4tU0c8hyqt7tk86xy7++h0AoLY5jyQX3rSACmujBwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFDx3d0ZRqLEgooiZYAcq+Q8hjREaMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUEhkM1JsR29zU0NpaUpsZ0J5cjVEeUdORVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMAUtwDBAK5 /PADBADCfNADBAbUKUADBAXUZQAwDQQCAAIwBwMFAyABFoAwDQYJKoZIhvcNAQEL BQADggEBADbqlAffyOHOUfvCVb4bns0TPVlFGalz8rh6K23/OIJ5vnIzLAwOcrX5 2t185iXU0XBZWkVlyl7AwXjg7ylTB3bsfyYf/wiS0BdSIWtWVhkLkA3zMaJxQZCs U7V+584rTveg/IcKP0fjuR23grAqee1y5zVk8F8qqMv30Su3TvVQ97pbgFkZZGYO 1RmjXm/tFYLaZE7uZgziAN3kfuMmShnc1TegLv1L/cTJkVHQ4FBfhYOnZu0UGKQx BxKBF2AA/6yqkNxTrjXR5k62DZoqxD2G09giBfHoFjb2xoAVjGk3a12c9Gs72jky YBlXbA38O4HbWOO4jyNXy313xABGyvs= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:03 2026 by rpki-client