This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/P36bForyKz3A1xYxUt5uRvnbjGo.roa File: P36bForyKz3A1xYxUt5uRvnbjGo.roa (raw, json) Hash identifier: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o= Subject key identifier: 3F:7E:9B:16:8A:F2:2B:3D:C0:D7:16:31:52:DE:6E:46:F9:DB:8C:6A Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019B9368D2502D88F5078FC2D3998C4809A8 Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/P36bForyKz3A1xYxUt5uRvnbjGo.roa Signing time: Tue 06 Jan 2026 13:04:38 +0000 ROA not before: Tue 06 Jan 2026 13:04:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 185.73.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:68:d2:50:2d:88:f5:07:8f:c2:d3:99:8c:48:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Jan 6 13:04:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f7e9b168af22b3dc0d7163152de6e46f9db8c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:29:98:bf:70:5e:20:95:8d:67:b1:c1:9b:a3: a6:32:a8:e6:8f:de:80:e2:c2:6b:7f:32:0b:56:79: 72:c4:c9:9d:93:83:86:62:a0:69:ad:d6:2e:df:b4: 40:b2:97:25:2b:08:ee:8c:b1:bf:3d:43:0a:88:fa: 6e:9b:8b:87:e0:44:ac:c4:ea:5d:7b:4d:b1:34:e7: d8:79:95:cc:12:6d:6f:47:3d:39:90:6d:0f:54:e2: 6e:4d:83:a1:30:c7:28:8d:6c:b6:69:38:f0:75:1f: 68:7f:c7:05:01:ee:0f:f2:e3:fd:af:4d:dc:26:56: 2b:73:39:00:ed:91:92:a7:96:bf:fe:0c:02:e6:06: 37:12:fc:76:e9:77:64:d8:45:a2:a1:05:2d:40:45: cb:90:5a:7d:c2:4e:bf:5e:3b:b9:f1:90:29:b3:ce: f9:b8:ff:bf:d5:39:4b:54:7c:59:17:93:64:1e:ff: ae:01:84:7b:69:50:f3:e2:89:46:13:85:46:63:71: b2:a1:93:56:a2:57:bd:7b:1e:4f:fe:02:9f:16:c2: 72:72:f9:fe:4e:45:76:59:11:ab:bf:5a:20:fb:2c: 35:ea:fb:7b:ba:70:49:e2:7c:af:58:20:89:01:c5: 61:1d:f6:42:f4:23:e6:88:91:f1:4a:59:9a:78:d5: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:9B:16:8A:F2:2B:3D:C0:D7:16:31:52:DE:6E:46:F9:DB:8C:6A X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/P36bForyKz3A1xYxUt5uRvnbjGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.127.0/24 Signature Algorithm: sha256WithRSAEncryption 77:01:c7:52:00:43:14:d1:bb:14:fe:32:85:e7:3f:6f:f0:05: 40:5c:5f:5c:40:f4:fe:8c:ec:37:4f:b5:23:96:d8:5b:ee:84: 69:ee:e5:b3:d8:d3:54:5d:b6:56:2b:e5:dd:75:5b:dc:dc:24: 71:11:d5:dd:24:35:3f:c4:7a:59:5d:13:cd:54:c8:d0:e1:7b: 3f:df:5b:f7:b8:64:c8:99:c5:da:ae:b5:c9:20:49:d4:51:ba: ac:c4:98:66:56:75:1f:9f:5b:5c:ac:1c:3f:38:8f:59:f0:4f: 37:cc:f2:70:95:17:20:f6:58:10:67:19:db:8d:81:30:94:e1: 0c:c0:40:f8:40:e3:0f:e7:f7:97:e5:22:a0:0a:3e:de:19:2c: 42:52:5c:91:06:3d:4a:c2:b4:a2:e9:63:c7:29:be:12:53:c7: b2:7b:65:0a:0a:27:c1:b1:b4:bc:e1:1a:79:ee:c5:1d:28:65: c7:d0:8b:02:92:42:41:c9:05:78:78:02:e7:5e:14:1c:dd:9a: 4f:de:c4:39:07:41:57:d7:f7:94:5c:24:07:ee:0c:46:1a:c7: ca:85:42:bd:2e:bf:d0:97:34:48:a0:0e:6a:fa:48:e5:66:c5: 26:f9:58:d2:16:50:aa:88:64:ea:8d:9f:87:31:61:63:79:14: 81:80:43:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuTaNJQLYj1B4/C05mMSAmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwMTA2MTMwNDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjdlOWIxNjhhZjIyYjNkYzBkNzE2MzE1MmRlNmU0NmY5ZGI4YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmimYv3BeIJWNZ7HBm6OmMqjmj96A 4sJrfzILVnlyxMmdk4OGYqBprdYu37RAspclKwjujLG/PUMKiPpum4uH4ESsxOpd e02xNOfYeZXMEm1vRz05kG0PVOJuTYOhMMcojWy2aTjwdR9of8cFAe4P8uP9r03c JlYrczkA7ZGSp5a//gwC5gY3Evx26Xdk2EWioQUtQEXLkFp9wk6/Xju58ZAps875 uP+/1TlLVHxZF5NkHv+uAYR7aVDz4olGE4VGY3GyoZNWole9ex5P/gKfFsJycvn+ TkV2WRGrv1og+yw16vt7unBJ4nyvWCCJAcVhHfZC9CPmiJHxSlmaeNX7MQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9+mxaK8is9wNcWMVLebkb524xqMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvUDM2YkZvcnlLejNBMXhZeFV0NXVSdm5iakdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUl/MA0G CSqGSIb3DQEBCwUAA4IBAQB3AcdSAEMU0bsU/jKF5z9v8AVAXF9cQPT+jOw3T7Uj lthb7oRp7uWz2NNUXbZWK+XddVvc3CRxEdXdJDU/xHpZXRPNVMjQ4Xs/31v3uGTI mcXarrXJIEnUUbqsxJhmVnUfn1tcrBw/OI9Z8E83zPJwlRcg9lgQZxnbjYEwlOEM wED4QOMP5/eX5SKgCj7eGSxCUlyRBj1KwrSi6WPHKb4SU8eye2UKCifBsbS84Rp5 7sUdKGXH0IsCkkJByQV4eALnXhQc3ZpP3sQ5B0FX1/eUXCQH7gxGGsfKhUK9Lr/Q lzRIoA5q+kjlZsUm+VjSFlCqiGTqjZ+HMWFjeRSBgEOW -----END CERTIFICATE-----Generated at Mon Jan 12 13:29:08 2026 by rpki-client