This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PpN955svl-HLDw6fLf58eCV0ziY.roa File: PpN955svl-HLDw6fLf58eCV0ziY.roa (raw, json) Hash identifier: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8= Subject key identifier: 3E:93:7D:E7:9B:2F:97:E1:CB:0F:0E:9F:2D:FE:7C:78:25:74:CE:26 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32CFD1CAF538ADEC113B63769D8BF Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PpN955svl-HLDw6fLf58eCV0ziY.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47910 IP address blocks: 2a02:bc8:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:fd:1c:af:53:8a:de:c1:13:b6:37:69:d8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e937de79b2f97e1cb0f0e9f2dfe7c782574ce26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:91:d6:d9:cc:a6:26:5a:b3:88:e7:d5:48: 41:68:35:a7:ed:56:39:72:32:d6:ac:ab:ec:74:d9: b9:67:88:3a:39:19:c3:07:47:d2:4b:9b:21:5d:f7: a2:12:79:9d:a6:2a:3b:d7:05:12:3f:38:e9:dc:6e: 38:8c:c2:00:b0:e0:11:50:c9:00:5b:11:04:ea:76: f8:fa:16:8d:5b:97:31:94:06:79:21:8c:34:bc:fb: ef:32:41:8c:44:64:31:2f:a6:3f:e5:41:36:f8:cb: 03:92:d6:7e:1b:78:c6:77:2d:1b:6b:b4:ae:c5:8c: 64:ab:e3:8f:a5:9e:a5:b1:49:36:a1:ae:e0:b7:da: 6d:3c:08:c1:7f:80:f1:4f:70:79:b7:7b:e9:5e:f0: eb:73:f1:cd:b6:cd:5b:0e:16:0e:4a:a6:0d:35:02: 94:1c:93:df:16:b9:b8:2d:ae:75:f0:66:97:13:67: 49:35:9c:c4:b1:5d:44:72:df:d1:99:9f:2c:3b:36: 2c:ee:79:09:09:7e:2b:c7:73:f0:5c:a3:20:d6:44: 58:22:2a:ad:2a:23:58:93:45:a9:7a:0b:a6:2d:a9: 99:6c:b1:3a:4b:e9:91:6d:28:d7:b4:42:38:9c:ec: 62:af:cc:5a:30:2e:f3:96:76:ca:b1:43:04:90:1c: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:93:7D:E7:9B:2F:97:E1:CB:0F:0E:9F:2D:FE:7C:78:25:74:CE:26 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PpN955svl-HLDw6fLf58eCV0ziY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:bc8:38::/48 Signature Algorithm: sha256WithRSAEncryption 94:46:0f:5e:19:c3:2c:78:dc:5c:bd:d5:40:b9:50:b3:2a:ac: 46:07:ce:86:5f:4b:11:a8:9c:dc:e9:d1:5c:37:21:74:dc:60: 42:b3:b3:1e:c3:59:41:70:09:ea:3b:83:c6:8b:f6:db:6b:ee: 25:08:94:67:b6:cc:19:1e:a2:a7:37:b4:7e:8d:29:da:51:cd: 09:21:e8:0c:d1:28:a1:8a:14:bf:9d:79:1e:41:34:2a:cc:29: 10:a9:57:6b:01:22:2b:e9:f4:55:56:76:0a:a4:5d:a1:48:e8: e7:ce:ce:e2:ce:bb:0a:eb:6c:dd:4f:a0:38:b7:5f:e1:d3:1f: 73:19:92:13:57:03:e5:09:ad:43:2c:e4:00:5f:0e:40:79:71: 1b:74:51:c2:e8:b9:d9:f4:e5:b1:17:34:a2:6d:2a:5a:78:2e: b4:ac:c7:9c:12:90:5c:a0:d3:99:3b:60:59:56:a7:ba:ed:b5: 37:37:b2:c6:3c:79:5c:8d:fe:a1:87:e3:4d:e4:8b:5f:cf:a7: 54:03:3b:90:98:83:ac:21:72:9e:8d:cc:f8:3d:92:a8:f8:a5: 58:31:c7:c4:d2:27:41:26:27:f6:43:41:ba:e3:b0:3b:3f:83: 01:84:1f:84:b9:31:1b:7c:26:f0:4e:3d:ed:b7:09:56:a8:7a: 6a:a9:30:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oyz9HK9Tit7BE7Y3adi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTkzN2RlNzliMmY5N2UxY2IwZjBlOWYyZGZlN2M3ODI1NzRjZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6+R1tnMpiZas4jn1UhBaDWn7VY5 cjLWrKvsdNm5Z4g6ORnDB0fSS5shXfeiEnmdpio71wUSPzjp3G44jMIAsOARUMkA WxEE6nb4+haNW5cxlAZ5IYw0vPvvMkGMRGQxL6Y/5UE2+MsDktZ+G3jGdy0ba7Su xYxkq+OPpZ6lsUk2oa7gt9ptPAjBf4DxT3B5t3vpXvDrc/HNts1bDhYOSqYNNQKU HJPfFrm4La518GaXE2dJNZzEsV1Ect/RmZ8sOzYs7nkJCX4rx3PwXKMg1kRYIiqt KiNYk0WpegumLamZbLE6S+mRbSjXtEI4nOxir8xaMC7zlnbKsUMEkByf2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD6TfeebL5fhyw8Ony3+fHgldM4mMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvUHBOOTU1c3ZsLUhMRHc2ZkxmNThlQ1YwemlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgILyAA4 MA0GCSqGSIb3DQEBCwUAA4IBAQCURg9eGcMseNxcvdVAuVCzKqxGB86GX0sRqJzc 6dFcNyF03GBCs7Mew1lBcAnqO4PGi/bba+4lCJRntswZHqKnN7R+jSnaUc0JIegM 0SihihS/nXkeQTQqzCkQqVdrASIr6fRVVnYKpF2hSOjnzs7izrsK62zdT6A4t1/h 0x9zGZITVwPlCa1DLOQAXw5AeXEbdFHC6LnZ9OWxFzSibSpaeC60rMecEpBcoNOZ O2BZVqe67bU3N7LGPHlcjf6hh+NN5Itfz6dUAzuQmIOsIXKejcz4PZKo+KVYMcfE 0idBJif2Q0G647A7P4MBhB+EuTEbfCbwTj3ttwlWqHpqqTBM -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client