This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/PMopp0pb43IV-3YVKympni_YLmU.roa File: PMopp0pb43IV-3YVKympni_YLmU.roa (raw, json) Hash identifier: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc= Subject key identifier: 3C:CA:29:A7:4A:5B:E3:72:15:FB:76:15:2B:29:A9:9E:2F:D8:2E:65 Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0 Certificate serial: 019B7EA50B6D8FE64D70539112533276162C Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/PMopp0pb43IV-3YVKympni_YLmU.roa Signing time: Fri 02 Jan 2026 12:18:24 +0000 ROA not before: Fri 02 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29691 IP address blocks: 5.148.160.0/19 maxlen: 19 92.42.184.0/21 maxlen: 21 94.230.208.0/20 maxlen: 20 178.209.32.0/19 maxlen: 19 185.88.236.0/22 maxlen: 22 193.17.85.0/24 maxlen: 24 217.150.240.0/20 maxlen: 20 2001:67c:2f98::/48 maxlen: 48 2a02:418::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:0b:6d:8f:e6:4d:70:53:91:12:53:32:76:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0 Validity Not Before: Jan 2 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cca29a74a5be37215fb76152b29a99e2fd82e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:31:e6:0e:0e:88:20:33:01:07:58:30:2d:4c: e4:d3:9e:22:ee:2c:fb:6b:ea:9f:80:98:b7:86:ce: 10:28:2a:dc:be:47:1f:65:f9:85:fc:46:2b:ed:ca: a9:79:7f:4e:d4:a8:48:b5:2b:39:93:86:87:03:3f: b8:04:35:a7:f6:0e:f5:4c:f2:65:64:64:6e:93:42: 1c:15:9f:55:5f:e9:f4:a5:63:d2:fe:a6:1a:f4:12: b5:7a:96:58:71:bf:00:8b:f4:40:a1:78:03:c8:3a: cb:91:f3:f8:11:29:8e:3a:b6:b7:63:d6:2f:14:f3: ff:c1:3e:bb:8f:d1:19:f9:2a:55:3e:d4:d3:5c:8d: 2d:4d:38:5b:97:01:86:d3:22:0b:b4:56:93:cc:d8: 3e:29:0e:31:c5:ca:05:84:8a:d0:e3:af:21:2e:84: 78:cb:28:a7:e1:72:44:c6:c4:19:11:51:94:42:5d: f4:2f:d4:d2:2a:74:c9:96:a1:8a:8f:b7:a0:c5:92: 6a:ae:9f:e3:d9:b4:d0:c6:c9:00:2b:be:33:70:82: 89:b8:76:bf:52:d2:2f:b5:a2:91:8c:9c:55:91:06: 88:3b:6d:e6:02:5c:be:4d:27:a0:fe:6e:55:3a:91: 9d:a9:88:12:b4:d9:58:ec:c2:c9:34:3a:dd:8a:7d: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:29:A7:4A:5B:E3:72:15:FB:76:15:2B:29:A9:9E:2F:D8:2E:65 X509v3 Authority Key Identifier: keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/PMopp0pb43IV-3YVKympni_YLmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.148.160.0/19 92.42.184.0/21 94.230.208.0/20 178.209.32.0/19 185.88.236.0/22 193.17.85.0/24 217.150.240.0/20 IPv6: 2001:67c:2f98::/48 2a02:418::/29 Signature Algorithm: sha256WithRSAEncryption 0b:48:04:cb:44:c6:97:65:d6:77:de:30:2a:77:57:32:fb:bd: 78:b1:32:ec:a5:e8:27:9d:12:dc:f0:38:b2:06:30:e7:34:a6: 49:8f:b8:67:f6:f5:f8:dc:25:24:8d:2d:27:b4:e5:f3:8b:2b: 73:30:c3:a2:0c:60:d0:21:d0:a1:71:78:24:30:9d:a8:67:b5: 83:aa:86:c7:ca:98:b3:b8:73:2b:c0:bd:fd:05:8d:ff:f6:e5: 17:b1:c7:b7:b7:22:db:97:00:cb:46:4b:d0:20:84:11:d2:20: 2d:c8:01:01:e6:c4:68:1f:1c:ef:ec:b9:a8:2f:4d:2c:f4:27: 4f:84:55:fa:4c:85:14:c0:88:79:bc:89:50:04:a9:72:4d:36: 04:cc:48:0d:41:46:46:72:85:08:80:a4:9b:c4:ef:cb:55:fa: c4:38:48:30:04:0d:6c:ce:91:d6:40:46:e8:dc:68:4b:12:cf: eb:5a:85:8f:12:cf:81:21:64:79:e3:2e:c5:49:2a:e2:01:7f: 23:e2:2b:07:83:69:c4:20:da:17:13:ea:f3:e9:54:83:0e:d3: 7b:09:ee:d1:e6:f7:58:63:bc:17:c5:14:03:6a:41:0f:87:26: 56:a9:07:c4:fd:41:24:44:d8:d3:a3:f6:31:c2:16:1d:50:89: 7a:cc:ee:4e -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+pQttj+ZNcFORElMydhYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4 MTdlZTAwHhcNMjYwMTAyMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2NhMjlhNzRhNWJlMzcyMTVmYjc2MTUyYjI5YTk5ZTJmZDgyZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7THmDg6IIDMBB1gwLUzk054i7iz7 a+qfgJi3hs4QKCrcvkcfZfmF/EYr7cqpeX9O1KhItSs5k4aHAz+4BDWn9g71TPJl ZGRuk0IcFZ9VX+n0pWPS/qYa9BK1epZYcb8Ai/RAoXgDyDrLkfP4ESmOOra3Y9Yv FPP/wT67j9EZ+SpVPtTTXI0tTThblwGG0yILtFaTzNg+KQ4xxcoFhIrQ468hLoR4 yyin4XJExsQZEVGUQl30L9TSKnTJlqGKj7egxZJqrp/j2bTQxskAK74zcIKJuHa/ UtIvtaKRjJxVkQaIO23mAly+TSeg/m5VOpGdqYgStNlY7MLJNDrdin1dKQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFDzKKadKW+NyFft2FSspqZ4v2C5lMB8GA1UdIwQY MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt Njk2NzAzNzM2NjIxLzEvUE1vcHAwcGI0M0lWLTNZVkt5bXBuaV9ZTG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQFBZSgAwQD XCq4AwQEXubQAwQFstEgAwQCuVjsAwQAwRFVAwQE2ZbwMBYEAgACMBADBwAgAQZ8 L5gDBQMqAgQYMA0GCSqGSIb3DQEBCwUAA4IBAQALSATLRMaXZdZ33jAqd1cy+714 sTLspegnnRLc8DiyBjDnNKZJj7hn9vX43CUkjS0ntOXziytzMMOiDGDQIdChcXgk MJ2oZ7WDqobHypizuHMrwL39BY3/9uUXsce3tyLblwDLRkvQIIQR0iAtyAEB5sRo Hxzv7LmoL00s9CdPhFX6TIUUwIh5vIlQBKlyTTYEzEgNQUZGcoUIgKSbxO/LVfrE OEgwBA1szpHWQEbo3GhLEs/rWoWPEs+BIWR54y7FSSriAX8j4isHg2nEINoXE+rz 6VSDDtN7Ce7R5vdYY7wXxRQDakEPhyZWqQfE/UEkRNjTo/YxwhYdUIl6zO5O -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:08 2026 by rpki-client