This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0PS11i5r6_XriyYDfmzviKAWbi8.roa File: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (raw, json) Hash identifier: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U= Subject key identifier: D0:F4:B5:D6:2E:6B:EB:F5:EB:8B:26:03:7E:6C:EF:88:A0:16:6E:2F Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019B7DCB23DCE99D3D15B7FBD4CEE5FFD7F3 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0PS11i5r6_XriyYDfmzviKAWbi8.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200220 IP address blocks: 78.138.9.0/24 maxlen: 24 79.132.135.0/24 maxlen: 24 185.178.231.0/24 maxlen: 24 2a0b:7140:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:23:dc:e9:9d:3d:15:b7:fb:d4:ce:e5:ff:d7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f4b5d62e6bebf5eb8b26037e6cef88a0166e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:9c:ca:3d:94:77:b2:44:06:3e:c3:c4:3d: 10:d0:c4:5d:29:ea:82:44:37:bd:95:b7:bc:60:79: 91:0d:91:2f:b0:29:54:15:bb:b2:ca:70:f8:08:d0: 74:33:a5:5a:49:52:00:ef:8c:b7:3e:79:ab:cf:d4: f0:12:ae:18:97:75:a6:4d:0e:98:28:8f:32:b5:eb: ab:2c:47:a7:77:f5:61:f0:b3:f1:ae:27:b2:ec:45: 05:84:0a:06:8d:fd:45:b4:29:29:f0:2d:c4:de:42: 60:54:6f:f9:66:b1:d3:77:bd:66:9f:44:4a:e4:fa: 36:1b:87:8a:35:28:73:f3:e8:ea:a1:9f:fa:9b:fd: a7:5f:1d:0f:6b:e3:64:31:d2:02:2b:df:fd:22:8e: 29:66:6c:f1:78:56:89:94:a7:6a:92:9e:b3:28:aa: 1a:86:82:84:db:19:93:c0:0c:d8:ce:c6:de:89:fb: ff:b1:7d:c5:25:94:48:e4:5b:4b:ee:58:d7:42:43: fb:f5:a8:91:29:d8:13:ed:91:be:b7:f6:0a:9b:8e: c0:7b:dd:98:73:8a:15:e5:4f:b1:9e:96:11:41:0c: 0b:9f:15:af:b3:99:00:85:50:a1:8c:8e:28:14:63: 9c:66:4a:06:5d:b1:c9:05:f2:ff:d4:16:25:9f:1d: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:B5:D6:2E:6B:EB:F5:EB:8B:26:03:7E:6C:EF:88:A0:16:6E:2F X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/0PS11i5r6_XriyYDfmzviKAWbi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.138.9.0/24 79.132.135.0/24 185.178.231.0/24 IPv6: 2a0b:7140:9::/48 Signature Algorithm: sha256WithRSAEncryption 55:f3:f7:b1:5f:a4:ad:91:74:48:f9:0b:af:e6:de:86:d3:8e: 99:80:33:d9:5f:8a:ae:0d:82:99:2d:00:1d:4e:dc:9b:94:2d: 81:42:a1:63:fd:47:6b:e4:12:d3:ac:dc:35:c3:d4:a3:17:8e: 2d:4b:52:63:d0:f1:9a:4f:e7:b0:f4:44:8d:e5:6c:bb:90:ea: d2:bd:22:2e:eb:32:f8:e9:2d:6b:80:e1:c8:63:84:e9:af:91: ac:f5:cf:9d:1f:58:ac:fd:c3:d9:78:b8:fd:6b:3b:31:9e:71: eb:3d:f4:1f:70:4a:7e:16:cb:5e:bb:3b:5a:35:71:d4:cf:31: 01:ec:b7:9b:5e:83:13:a5:eb:0c:28:d0:80:63:8d:04:d5:9d: 62:e3:22:e7:6e:52:da:dd:d1:19:00:a5:a8:e9:93:31:1b:e0: 61:d7:fe:6b:81:eb:b2:e3:c6:87:93:8c:d8:d8:cc:bd:a5:db: 6a:15:fd:8c:b4:9a:20:e2:8c:d1:2f:66:34:00:00:98:6f:b6: 6c:22:1a:c0:7b:7c:67:28:a8:c2:38:11:e0:ff:c4:24:a2:ec: e7:3f:36:be:11:e5:df:6a:74:59:1c:f4:a1:c9:38:48:10:91: 51:36:4b:54:47:66:62:ff:e0:f7:bc:ec:28:cb:ff:b8:ab:27: 8c:21:03:ad -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9yyPc6Z09Fbf71M7l/9fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGY0YjVkNjJlNmJlYmY1ZWI4YjI2MDM3ZTZjZWY4OGEwMTY2ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMScyj2Ud7JEBj7DxD0Q0MRdKeqC RDe9lbe8YHmRDZEvsClUFbuyynD4CNB0M6VaSVIA74y3Pnmrz9TwEq4Yl3WmTQ6Y KI8yteurLEend/Vh8LPxriey7EUFhAoGjf1FtCkp8C3E3kJgVG/5ZrHTd71mn0RK 5Po2G4eKNShz8+jqoZ/6m/2nXx0Pa+NkMdICK9/9Io4pZmzxeFaJlKdqkp6zKKoa hoKE2xmTwAzYzsbeifv/sX3FJZRI5FtL7ljXQkP79aiRKdgT7ZG+t/YKm47Ae92Y c4oV5U+xnpYRQQwLnxWvs5kAhVChjI4oFGOcZkoGXbHJBfL/1BYlnx2ZIQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFND0tdYua+v164smA35s74igFm4vMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvMFBTMTFpNXI2X1hyaXlZRGZtenZpS0FXYmk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQATooJAwQA T4SHAwQAubLnMA8EAgACMAkDBwAqC3FAAAkwDQYJKoZIhvcNAQELBQADggEBAFXz 97FfpK2RdEj5C6/m3obTjpmAM9lfiq4NgpktAB1O3JuULYFCoWP9R2vkEtOs3DXD 1KMXji1LUmPQ8ZpP57D0RI3lbLuQ6tK9Ii7rMvjpLWuA4chjhOmvkaz1z50fWKz9 w9l4uP1rOzGeces99B9wSn4Wy167O1o1cdTPMQHst5tegxOl6wwo0IBjjQTVnWLj IuduUtrd0RkApajpkzEb4GHX/muB67LjxoeTjNjYzL2l22oV/Yy0miDijNEvZjQA AJhvtmwiGsB7fGcoqMI4EeD/xCSi7Oc/Nr4R5d9qdFkc9KHJOEgQkVE2S1RHZmL/ 4Pe87CjL/7irJ4whA60= -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:34 2026 by rpki-client