This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa File: PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa (raw, json) Hash identifier: +O0z/YSUkd6JHKZv79DXkMbJM2o6FO1n11oA1lofFBg= Subject key identifier: 3C:D4:F0:6E:38:34:84:49:5A:12:6F:59:A6:99:BB:0E:5E:EB:FA:AC Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Certificate serial: 019B7C11E5438F64B3DF2ECAFEFDB0AEE6C2 Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa Signing time: Fri 02 Jan 2026 00:18:26 +0000 ROA not before: Fri 02 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20495 IP address blocks: 77.74.48.0/21 maxlen: 32 185.58.56.0/22 maxlen: 32 193.16.154.0/24 maxlen: 32 193.189.149.0/24 maxlen: 32 195.210.56.0/23 maxlen: 32 2a01:310::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e5:43:8f:64:b3:df:2e:ca:fe:fd:b0:ae:e6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e Validity Not Before: Jan 2 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cd4f06e383484495a126f59a699bb0e5eebfaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:c3:94:81:45:2b:28:83:32:f5:ed:a3:5f: 2f:ee:3f:4c:5c:74:1c:b5:c4:ab:7d:bb:58:1f:2c: 2e:de:7e:55:52:38:7e:ef:32:d7:78:d5:3e:f7:82: 2e:92:47:ae:3d:9a:07:a8:cb:c2:e9:70:74:66:36: 83:cd:e2:31:59:7f:72:5a:5c:6d:4b:bd:cf:e1:42: 5b:63:98:5b:5c:76:e5:23:e8:8d:8b:7d:f5:d8:0a: 09:dd:f9:d1:da:61:00:a3:87:23:60:0b:66:aa:a2: c0:88:80:b5:34:fc:19:25:90:ea:2d:c5:13:34:9c: 96:02:d0:e2:b7:0c:39:96:7c:36:8e:79:e9:af:93: e0:4d:90:df:cd:1b:a3:45:f0:ed:53:3a:c3:72:bf: b3:b7:ca:47:8e:8c:3c:e8:7b:f7:74:7b:75:32:4d: 0b:06:1b:c7:1c:6d:c1:42:f8:a8:ff:f6:d7:aa:b8: bb:9b:30:82:48:9e:c1:90:6a:65:78:77:45:a8:0b: 7d:7f:58:ef:46:3f:71:30:38:e6:b2:c6:ac:77:07: de:91:e0:d6:2e:cd:9b:a7:13:08:7f:f7:88:4b:ce: 01:3c:09:0b:d6:60:0b:f4:8f:21:30:8b:39:c0:ed: eb:dd:65:cc:c8:40:7c:14:5f:b8:f0:82:ac:26:04: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:F0:6E:38:34:84:49:5A:12:6F:59:A6:99:BB:0E:5E:EB:FA:AC X509v3 Authority Key Identifier: keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/PNTwbjg0hElaEm9Zppm7Dl7r-qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.48.0/21 185.58.56.0/22 193.16.154.0/24 193.189.149.0/24 195.210.56.0/23 IPv6: 2a01:310::/32 Signature Algorithm: sha256WithRSAEncryption 79:79:fc:ff:c5:27:88:c3:90:95:31:cd:c3:47:24:a1:76:4a: 28:d5:7b:5e:5b:f9:90:fe:b0:f7:c4:dc:a0:8e:17:76:36:bb: 3a:47:1b:1b:2b:56:5c:97:17:32:99:45:42:c9:be:cb:f7:7a: 56:77:80:ba:30:22:9d:80:1c:26:68:3a:de:e1:29:03:c9:98: e1:ef:3d:73:77:fe:08:0f:75:db:36:67:5f:a6:f9:45:67:34: fe:23:ac:6a:79:ab:59:b2:fb:fc:7f:09:61:49:a4:4d:cd:7b: e6:ba:25:4d:d7:44:0f:4d:df:9d:ce:31:d4:79:a6:51:69:e3: 89:30:15:fa:cc:f7:64:d1:e2:ab:f6:ce:1a:f6:92:d9:c0:84: e7:65:8b:33:a3:ea:4a:35:9b:64:02:f9:3d:c6:ce:c0:dd:55: 90:59:9a:ee:2b:81:f7:83:0f:76:97:75:86:53:fb:38:0a:2c: bb:3d:75:aa:73:79:86:8e:ac:80:91:4b:84:27:5e:1d:00:60: 22:08:5c:da:bc:3e:24:6f:5e:a3:f8:66:d6:fd:a2:f5:b5:a7: b2:ef:14:30:27:74:9f:11:91:1f:14:84:e6:44:ea:d3:03:29: 8a:f3:ca:7a:a6:06:05:c1:49:e7:4c:2c:11:2c:57:0a:91:d4: f4:12:59:0f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EeVDj2Sz3y7K/v2wrubCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm ZGZiOWUwHhcNMjYwMTAyMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Q0ZjA2ZTM4MzQ4NDQ5NWExMjZmNTlhNjk5YmIwZTVlZWJmYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu73DlIFFKyiDMvXto18v7j9MXHQc tcSrfbtYHywu3n5VUjh+7zLXeNU+94IukkeuPZoHqMvC6XB0ZjaDzeIxWX9yWlxt S73P4UJbY5hbXHblI+iNi3312AoJ3fnR2mEAo4cjYAtmqqLAiIC1NPwZJZDqLcUT NJyWAtDitww5lnw2jnnpr5PgTZDfzRujRfDtUzrDcr+zt8pHjow86Hv3dHt1Mk0L BhvHHG3BQvio//bXqri7mzCCSJ7BkGpleHdFqAt9f1jvRj9xMDjmssasdwfekeDW Ls2bpxMIf/eIS84BPAkL1mAL9I8hMIs5wO3r3WXMyEB8FF+48IKsJgQMTwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFDzU8G44NIRJWhJvWaaZuw5e6/qsMB8GA1UdIwQY MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt ZmM0NGE4YWNlMzcwLzEvUE5Ud2JqZzBoRWxhRW05WnBwbTdEbDdyLXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDTUowAwQC uTo4AwQAwRCaAwQAwb2VAwQBw9I4MA0EAgACMAcDBQAqAQMQMA0GCSqGSIb3DQEB CwUAA4IBAQB5efz/xSeIw5CVMc3DRyShdkoo1XteW/mQ/rD3xNygjhd2Nrs6Rxsb K1ZclxcymUVCyb7L93pWd4C6MCKdgBwmaDre4SkDyZjh7z1zd/4ID3XbNmdfpvlF ZzT+I6xqeatZsvv8fwlhSaRNzXvmuiVN10QPTd+dzjHUeaZRaeOJMBX6zPdk0eKr 9s4a9pLZwITnZYszo+pKNZtkAvk9xs7A3VWQWZruK4H3gw92l3WGU/s4Ciy7PXWq c3mGjqyAkUuEJ14dAGAiCFzavD4kb16j+GbW/aL1taey7xQwJ3SfEZEfFITmROrT AymK88p6pgYFwUnnTCwRLFcKkdT0ElkP -----END CERTIFICATE-----Generated at Mon Jan 26 01:44:35 2026 by rpki-client