This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa File: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (raw, json) Hash identifier: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM= Subject key identifier: 3F:06:34:BF:71:60:A8:F2:BB:52:C3:BC:FD:36:B8:31:E8:12:16:53 Certificate issuer: /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Certificate serial: 019B78A2F9FC7C32036967F9209EBC8637E3 Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 217.113.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f9:fc:7c:32:03:69:67:f9:20:9e:bc:86:37:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0634bf7160a8f2bb52c3bcfd36b831e8121653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:b2:98:f0:90:db:c8:72:50:66:7c:20:ab: f2:9d:f5:e1:7f:ce:f4:7c:96:94:d8:07:96:6f:f4: 67:e2:a0:af:77:15:d7:31:1e:d2:7c:a2:87:89:be: 80:ac:0d:60:17:2d:80:02:40:32:aa:44:ea:35:2d: 7b:ee:fa:9b:6f:6d:fd:69:1a:4b:11:35:ca:55:7f: 7d:92:b8:d8:a2:d3:7d:53:25:53:0e:74:53:c9:5c: 35:c3:f8:ac:aa:51:7c:3a:10:ea:6b:fb:1d:c0:8d: c0:28:4d:74:07:d7:cd:6c:da:b4:e9:eb:6a:d5:c9: e0:28:41:1d:21:a8:5e:b7:36:66:ea:e9:20:43:6e: 8c:0e:3e:37:c2:04:7a:94:f6:9f:65:07:41:a5:ee: 72:b7:80:e0:ed:3c:1a:85:ff:03:35:84:67:36:bb: b1:38:f0:3d:44:8d:49:50:cf:e2:86:4a:66:fd:74: 7e:4a:a0:f1:fd:18:c1:28:b9:fb:ef:53:aa:e3:b1: 96:35:f0:9b:82:a6:e2:cb:7a:31:11:b9:0d:d4:71: 22:03:c6:87:7a:bf:2d:f4:35:aa:95:a2:cb:4d:06: d6:ff:35:ea:1a:8e:d7:dc:3c:4a:3b:34:3b:a6:2a: 04:8c:91:26:4c:ac:34:2b:45:7c:4f:df:1d:e3:79: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:34:BF:71:60:A8:F2:BB:52:C3:BC:FD:36:B8:31:E8:12:16:53 X509v3 Authority Key Identifier: keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.60.0/24 Signature Algorithm: sha256WithRSAEncryption 35:bb:58:44:e0:50:cd:d5:e5:b9:0b:f7:aa:f1:9a:2d:e6:2a: 95:d5:b9:21:08:43:2d:69:5f:62:ff:b9:cf:ae:b2:5c:da:c5: 03:1c:6d:9a:ab:4e:1a:b1:29:18:c2:0e:d0:6b:4a:f8:31:8a: 08:e4:b8:41:20:59:26:c9:a7:56:e3:08:a5:b9:89:21:88:5f: 08:5f:b1:87:29:5a:8d:15:69:4d:ad:ed:24:c3:5c:bb:00:01: d7:04:5d:70:ff:92:ef:65:be:eb:1d:6d:3e:de:05:77:8f:9b: 49:74:1b:e1:f7:2b:4f:90:4c:68:b8:e9:16:49:29:46:05:2d: ea:5c:33:ec:21:b4:49:f3:56:e5:01:d3:5e:eb:a9:7f:ce:ce: b7:74:99:0a:cb:20:76:6b:3e:db:37:1b:ed:e1:02:16:88:36: a9:9a:17:36:fa:e7:26:28:3d:1f:79:4d:e7:86:55:c8:8f:9f: 4f:78:b8:08:95:9e:cf:11:87:84:20:71:2a:55:d8:8e:60:32: 70:74:88:34:59:a8:dc:c9:38:30:11:f9:46:77:ab:d6:5c:33: b6:ae:8f:ba:a9:a9:f7:47:7b:94:51:b4:c6:4e:0d:da:a3:ce: 80:7e:6f:a0:2d:37:b5:ce:b7:0e:eb:2f:ae:2d:4c:3c:6a:33: aa:2e:38:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovn8fDIDaWf5IJ68hjfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk MGVlZjUwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjA2MzRiZjcxNjBhOGYyYmI1MmMzYmNmZDM2YjgzMWU4MTIxNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g6ymPCQ28hyUGZ8IKvynfXhf870 fJaU2AeWb/Rn4qCvdxXXMR7SfKKHib6ArA1gFy2AAkAyqkTqNS177vqbb239aRpL ETXKVX99krjYotN9UyVTDnRTyVw1w/isqlF8OhDqa/sdwI3AKE10B9fNbNq06etq 1cngKEEdIahetzZm6ukgQ26MDj43wgR6lPafZQdBpe5yt4Dg7Twahf8DNYRnNrux OPA9RI1JUM/ihkpm/XR+SqDx/RjBKLn771Oq47GWNfCbgqbiy3oxEbkN1HEiA8aH er8t9DWqlaLLTQbW/zXqGo7X3DxKOzQ7pioEjJEmTKw0K0V8T98d43ljhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8GNL9xYKjyu1LDvP02uDHoEhZTMB8GA1UdIwQY MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt OWNjNjk1OWZmM2U5LzEvUHdZMHYzRmdxUEs3VXNPOF9UYTRNZWdTRmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5 LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XE8MA0G CSqGSIb3DQEBCwUAA4IBAQA1u1hE4FDN1eW5C/eq8Zot5iqV1bkhCEMtaV9i/7nP rrJc2sUDHG2aq04asSkYwg7Qa0r4MYoI5LhBIFkmyadW4wiluYkhiF8IX7GHKVqN FWlNre0kw1y7AAHXBF1w/5LvZb7rHW0+3gV3j5tJdBvh9ytPkExouOkWSSlGBS3q XDPsIbRJ81blAdNe66l/zs63dJkKyyB2az7bNxvt4QIWiDapmhc2+ucmKD0feU3n hlXIj59PeLgIlZ7PEYeEIHEqVdiOYDJwdIg0WajcyTgwEflGd6vWXDO2ro+6qan3 R3uUUbTGTg3ao86Afm+gLTe1zrcO6y+uLUw8ajOqLjhl -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:56 2026 by rpki-client