This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/PvoOGCPl9_uRABB0axn6ZoPjSfw.roa File: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (raw, json) Hash identifier: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4= Subject key identifier: 3E:FA:0E:18:23:E5:F7:FB:91:00:10:74:6B:19:FA:66:83:E3:49:FC Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Certificate serial: 019B775886E1B40DC34D5B860E3A7F5D8EA3 Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/PvoOGCPl9_uRABB0axn6ZoPjSfw.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21083 IP address blocks: 194.8.57.0/24 maxlen: 24 2001:67c:14d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:86:e1:b4:0d:c3:4d:5b:86:0e:3a:7f:5d:8e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3efa0e1823e5f7fb910010746b19fa6683e349fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:fe:ee:3e:5f:25:df:78:34:df:e7:8a:b3: 45:55:ac:83:30:17:bf:d2:61:a4:9e:47:df:20:58: 83:6c:97:bc:f7:78:a4:ed:23:43:8c:0d:a1:54:d0: 2f:b4:3b:9c:d0:5b:ec:44:40:66:f5:e6:4c:07:40: 46:97:9b:03:41:c1:3c:be:2d:f3:c8:ad:d3:47:d5: 6e:46:80:67:5c:b7:b6:fb:7a:9b:8f:85:f1:c1:0b: f6:58:33:2b:fe:77:c7:e5:78:92:f8:75:cd:13:3e: 06:d0:ff:34:2c:a6:37:c5:ed:c3:1c:b5:82:9a:d9: 80:14:fe:76:65:05:07:e7:01:95:7a:6a:7a:71:ef: a4:fe:ef:4c:31:12:50:bb:89:dd:63:7e:47:32:e1: d0:9e:97:a0:8f:13:36:6e:ff:99:7c:e6:d9:df:25: ee:e6:81:e7:11:8f:b7:d9:d3:45:39:f8:a9:1e:93: f0:53:34:cc:ae:d1:cd:4d:ab:82:9a:ce:22:a4:ab: dc:e2:13:9b:49:79:a3:f6:a6:e0:5c:5f:0a:3b:34: 4c:ed:41:e4:a3:d3:68:3b:0a:bc:cc:ce:53:1d:3d: c6:4c:ec:76:1e:46:8f:7e:e4:73:e0:07:79:9e:78: 84:72:4d:c3:ae:54:51:1f:4a:1f:bd:f8:db:cd:8a: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:0E:18:23:E5:F7:FB:91:00:10:74:6B:19:FA:66:83:E3:49:FC X509v3 Authority Key Identifier: keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/PvoOGCPl9_uRABB0axn6ZoPjSfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.57.0/24 IPv6: 2001:67c:14d::/48 Signature Algorithm: sha256WithRSAEncryption 7d:bf:03:26:ad:9b:81:8c:4a:7a:55:7c:ec:bf:9d:f2:82:84: 71:07:55:6c:db:4f:6d:17:0b:cc:e9:29:e4:e5:14:20:3b:53: e6:ec:54:a8:19:04:d4:06:a2:e0:41:3f:d9:30:13:cf:89:86: 93:66:fb:2b:f1:da:09:c8:7b:63:04:ba:52:72:9d:94:fc:6f: 9c:07:98:e6:f8:54:ed:76:63:f5:c9:c9:e4:ba:c9:e1:f6:c1: 9d:63:73:b5:1e:70:c1:64:60:c8:9a:85:07:7d:c3:ef:8b:53: f1:41:14:9f:2a:bf:fc:e8:28:4a:c6:27:70:72:5f:50:22:ba: a9:fc:99:79:3f:69:df:b0:ef:bb:0a:e3:e8:a1:4a:e8:b3:50: 11:98:78:3f:99:60:ff:69:23:e5:4d:6a:68:ac:69:86:3e:8f: ab:e3:af:2e:4c:09:28:ef:a7:41:79:0a:3d:a9:20:62:4f:2f: f1:21:3f:8c:8c:90:0c:ce:40:3b:18:12:06:ca:1a:93:71:8f: 52:e1:38:17:56:89:44:a9:3d:fa:47:1c:2e:58:c8:f9:a5:ea: d8:35:9e:93:23:04:83:25:13:7c:2c:48:d2:c6:30:5b:8b:b8: ba:be:f6:55:7c:f7:80:f0:ac:08:4e:e5:db:45:0f:67:ad:aa: bc:48:71:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WIbhtA3DTVuGDjp/XY6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2 M2U1OGYwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWZhMGUxODIzZTVmN2ZiOTEwMDEwNzQ2YjE5ZmE2NjgzZTM0OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzr+7j5fJd94NN/nirNFVayDMBe/ 0mGknkffIFiDbJe893ik7SNDjA2hVNAvtDuc0FvsREBm9eZMB0BGl5sDQcE8vi3z yK3TR9VuRoBnXLe2+3qbj4XxwQv2WDMr/nfH5XiS+HXNEz4G0P80LKY3xe3DHLWC mtmAFP52ZQUH5wGVemp6ce+k/u9MMRJQu4ndY35HMuHQnpegjxM2bv+ZfObZ3yXu 5oHnEY+32dNFOfipHpPwUzTMrtHNTauCms4ipKvc4hObSXmj9qbgXF8KOzRM7UHk o9NoOwq8zM5THT3GTOx2HkaPfuRz4Ad5nniEck3DrlRRH0ofvfjbzYpYSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD76Dhgj5ff7kQAQdGsZ+maD40n8MB8GA1UdIwQY MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt NjNlZWJlMDMyNWVjLzEvUHZvT0dDUGw5X3VSQUJCMGF4bjZab1BqU2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgg5MA8E AgACMAkDBwAgAQZ8AU0wDQYJKoZIhvcNAQELBQADggEBAH2/Ayatm4GMSnpVfOy/ nfKChHEHVWzbT20XC8zpKeTlFCA7U+bsVKgZBNQGouBBP9kwE8+JhpNm+yvx2gnI e2MEulJynZT8b5wHmOb4VO12Y/XJyeS6yeH2wZ1jc7UecMFkYMiahQd9w++LU/FB FJ8qv/zoKErGJ3ByX1Aiuqn8mXk/ad+w77sK4+ihSuizUBGYeD+ZYP9pI+VNamis aYY+j6vjry5MCSjvp0F5Cj2pIGJPL/EhP4yMkAzOQDsYEgbKGpNxj1LhOBdWiUSp PfpHHC5YyPml6tg1npMjBIMlE3wsSNLGMFuLuLq+9lV894DwrAhO5dtFD2etqrxI ccs= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:49 2026 by rpki-client