This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PcDEnF16ipXFcEH-vsK_io7oVoc.roa File: PcDEnF16ipXFcEH-vsK_io7oVoc.roa (raw, json) Hash identifier: yZwJOC83L4olnR7l2JQxr1gZBqjOiDDRJd8IM1RoYc8= Subject key identifier: 3D:C0:C4:9C:5D:7A:8A:95:C5:70:41:FE:BE:C2:BF:8A:8E:E8:56:87 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78069F0A951388283CF8FCC75C70F Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PcDEnF16ipXFcEH-vsK_io7oVoc.roa Signing time: Fri 02 Jan 2026 12:21:05 +0000 ROA not before: Fri 02 Jan 2026 12:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62133 IP address blocks: 85.30.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:80:69:f0:a9:51:38:82:83:cf:8f:cc:75:c7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dc0c49c5d7a8a95c57041febec2bf8a8ee85687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:a9:43:28:f0:3c:a1:2c:e1:93:e1:6f:b1: 3c:d8:4a:bc:30:01:5a:ca:0a:58:dc:bc:ed:49:02: 56:f0:06:d0:d3:bd:2e:69:3c:d7:db:da:38:4f:a3: 55:80:47:99:41:5f:d9:dc:2f:ca:50:0a:b9:ca:71: da:39:83:be:50:29:b3:eb:e1:df:b3:8d:ca:cd:17: d8:13:18:df:16:99:ed:32:7e:c8:26:0c:e4:8f:01: 19:11:41:cd:c3:f6:1e:27:b5:88:16:4d:b0:bd:c3: c3:c9:29:04:e4:30:65:fc:4b:2e:e9:32:e9:58:38: f1:16:50:cf:4e:7f:53:69:bb:bb:c4:3c:c9:f9:bf: b1:7d:4b:9d:3c:f8:38:e0:1e:37:c2:82:5c:c1:a1: 64:ab:27:7f:fc:96:69:87:0c:87:6d:e4:86:33:11: 5f:de:c5:cf:e8:7d:dd:3b:4f:f7:1c:cd:3f:8e:76: 1a:cc:f7:23:19:b0:a4:8b:a7:7d:34:3f:ff:65:22: e5:e2:22:c2:c8:a8:26:5b:87:9f:15:ac:17:09:48: eb:8d:44:8b:b5:d9:a7:cb:4e:97:06:f0:92:2a:f3: d0:99:79:36:65:66:0d:cb:59:b3:91:7d:f6:18:2c: d7:59:ba:48:e0:81:b1:b8:85:54:9d:df:77:17:93: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:C4:9C:5D:7A:8A:95:C5:70:41:FE:BE:C2:BF:8A:8E:E8:56:87 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PcDEnF16ipXFcEH-vsK_io7oVoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.30.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:08:70:74:d1:89:cd:92:ca:f2:d0:91:e1:82:9e:8b:74:1b: 66:0a:1a:be:11:b1:4a:99:d7:c4:1f:29:07:3b:9b:4a:70:f7: 7b:54:ff:21:42:f4:fb:20:5e:6b:e7:54:be:af:7a:fc:e3:69: ed:ee:52:0d:09:59:3a:fc:39:5a:cf:e0:55:30:2a:c5:87:b0: 2e:ed:25:f7:ae:e1:cf:f0:21:67:7c:3b:07:ff:3a:81:a5:b4: 08:9c:fb:99:bd:c1:14:9b:e7:64:5f:bc:cf:64:38:57:3f:64: 92:de:40:eb:67:72:98:38:e9:e4:ce:5a:57:9a:ea:51:98:ac: 85:3e:3b:3c:74:dc:e7:64:25:06:8c:08:53:10:d7:76:b8:61: 23:4e:17:69:85:8c:f0:e1:5a:d6:c6:74:30:7f:24:60:b2:52: f3:35:4d:4b:14:25:d5:81:c9:2b:73:ff:43:74:90:6d:2b:4a: ee:ec:9e:0e:a0:ae:89:ef:b7:dc:f8:96:6c:80:2b:8e:27:0d: 6d:9d:51:49:17:8f:41:32:e8:0d:7a:63:1c:d0:63:12:46:eb: a3:a2:12:4b:09:04:55:3c:00:f0:e5:81:83:8e:de:1d:64:06: ff:d0:59:82:30:ca:1c:d0:3b:5b:07:0c:7a:9d:f1:19:e9:c0: ac:77:26:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4Bp8KlROIKDz4/MdccPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGMwYzQ5YzVkN2E4YTk1YzU3MDQxZmViZWMyYmY4YThlZTg1Njg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQepQyjwPKEs4ZPhb7E82Eq8MAFa ygpY3LztSQJW8AbQ070uaTzX29o4T6NVgEeZQV/Z3C/KUAq5ynHaOYO+UCmz6+Hf s43KzRfYExjfFpntMn7IJgzkjwEZEUHNw/YeJ7WIFk2wvcPDySkE5DBl/Esu6TLp WDjxFlDPTn9Tabu7xDzJ+b+xfUudPPg44B43woJcwaFkqyd//JZphwyHbeSGMxFf 3sXP6H3dO0/3HM0/jnYazPcjGbCki6d9ND//ZSLl4iLCyKgmW4efFawXCUjrjUSL tdmny06XBvCSKvPQmXk2ZWYNy1mzkX32GCzXWbpI4IGxuIVUnd93F5PeXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3AxJxdeoqVxXBB/r7Cv4qO6FaHMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUGNERW5GMTZpcFhGY0VILXZzS19pbzdvVm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR7+MA0G CSqGSIb3DQEBCwUAA4IBAQCbCHB00YnNksry0JHhgp6LdBtmChq+EbFKmdfEHykH O5tKcPd7VP8hQvT7IF5r51S+r3r842nt7lINCVk6/Dlaz+BVMCrFh7Au7SX3ruHP 8CFnfDsH/zqBpbQInPuZvcEUm+dkX7zPZDhXP2SS3kDrZ3KYOOnkzlpXmupRmKyF Pjs8dNznZCUGjAhTENd2uGEjThdphYzw4VrWxnQwfyRgslLzNU1LFCXVgckrc/9D dJBtK0ru7J4OoK6J77fc+JZsgCuOJw1tnVFJF49BMugNemMc0GMSRuujohJLCQRV PADw5YGDjt4dZAb/0FmCMMoc0DtbBwx6nfEZ6cCsdyaG -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:02 2026 by rpki-client