This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/ppVBATzjCDPLKHQd3o4jFf9lhxY.roa File: ppVBATzjCDPLKHQd3o4jFf9lhxY.roa (raw, json) Hash identifier: 4QaAZx/54RVk/xsTNzwOX4eDHF+9k00rM5X1Yd0pNtY= Subject key identifier: A6:95:41:01:3C:E3:08:33:CB:28:74:1D:DE:8E:23:15:FF:65:87:16 Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Certificate serial: 019B7D5C6388E78EEB14916FCBA37D5D5190 Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/ppVBATzjCDPLKHQd3o4jFf9lhxY.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1120 IP address blocks: 78.104.145.0/24 maxlen: 24 193.170.120.96/28 maxlen: 28 193.171.3.0/24 maxlen: 24 193.171.255.0/24 maxlen: 24 2001:628:453::/48 maxlen: 48 2001:628:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:63:88:e7:8e:eb:14:91:6f:cb:a3:7d:5d:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a69541013ce30833cb28741dde8e2315ff658716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:2b:b1:19:7f:fe:7c:17:9a:cc:05:b0:3d: 08:73:eb:e3:d9:b3:1e:35:1a:fe:28:da:58:de:6e: 29:10:10:c5:ad:40:4e:3d:e8:6e:9b:4a:e8:b7:f7: 94:2c:88:21:8b:c7:ca:43:ce:e0:e7:af:d1:21:28: be:2f:cd:e1:87:35:19:b5:29:49:cd:4e:bb:2e:2f: b8:3d:0f:c8:a3:31:e8:da:57:4e:b5:33:41:64:73: 7f:23:89:ba:cd:97:d1:4d:54:0a:ea:c7:1f:da:07: e8:d8:39:69:17:69:c7:0f:0c:54:44:85:df:95:52: 5a:8f:72:3b:77:54:6f:77:db:f1:5a:32:e3:4b:f2: b0:41:af:92:06:f9:19:34:6d:6e:76:22:14:c8:c9: 3c:fd:f7:aa:15:11:6d:01:38:8d:7a:b3:c1:72:8a: 4f:00:53:62:74:51:9d:56:7e:4b:88:cf:47:cb:fd: 75:0d:66:aa:34:33:8e:6a:4f:ec:9f:9e:89:13:22: 9d:88:18:55:ba:43:d1:21:bd:4a:6c:5f:e8:9a:4e: 23:d6:a3:81:e1:fe:e3:30:d8:f2:24:1f:1c:53:00: 13:6c:89:ec:dc:9e:42:58:82:97:d6:c2:ab:04:95: c4:6d:80:f2:69:18:39:7f:97:a5:80:3d:3e:3d:d4: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:41:01:3C:E3:08:33:CB:28:74:1D:DE:8E:23:15:FF:65:87:16 X509v3 Authority Key Identifier: keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/ppVBATzjCDPLKHQd3o4jFf9lhxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.104.145.0/24 193.170.120.96/28 193.171.3.0/24 193.171.255.0/24 IPv6: 2001:628:453::/48 2001:628:2000::/48 Signature Algorithm: sha256WithRSAEncryption 21:33:13:43:90:5d:17:34:5d:83:0c:2a:31:f5:03:f3:38:d2: dc:67:cd:62:fe:33:7d:6f:11:12:4b:7a:90:07:1d:a7:c0:0d: 01:98:d4:3f:42:98:f9:ed:fb:a1:c2:f4:5a:17:ee:fd:a4:e4: e4:a0:59:bf:bb:87:6d:c6:00:2c:8c:8c:a3:fb:ed:3e:15:b8: 45:e9:d1:2e:ac:d8:0b:ec:f8:e2:cb:16:e5:e1:3e:1b:53:30: 73:7b:e0:87:2a:ff:32:6b:4d:14:a1:94:e8:7a:2f:f0:49:25: 0b:67:97:ba:10:b9:a0:ae:31:72:18:05:04:e2:f3:98:7f:f8: c0:8d:6d:13:60:b4:27:e5:45:47:2d:c6:0c:88:0a:2f:36:11: 13:36:79:7d:26:3b:d6:7f:59:2e:16:d0:df:23:75:35:ea:e4: 87:74:f5:35:c3:7d:a1:03:2e:6d:87:a3:76:a2:83:4e:e7:dd: 62:6c:d7:ee:04:21:e5:65:15:d2:ca:2b:d9:ac:7e:a8:2b:17: 24:bd:e5:b6:ba:bf:4d:cb:79:fb:68:dc:44:fc:16:50:19:a1: de:7d:d7:0c:45:32:a6:3e:10:a8:17:dc:a2:5f:14:ba:c3:d5: aa:1f:a5:03:91:e2:27:73:0d:03:48:f2:a0:fe:ee:83:dd:f4: a3:20:41:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9XGOI547rFJFvy6N9XVGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDg0NDhjNWNiOTAzOThlNGMyODVjZWM5YzBmNDc2NmFj OTMxZGYwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjk1NDEwMTNjZTMwODMzY2IyODc0MWRkZThlMjMxNWZmNjU4NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9wrsRl//nwXmswFsD0Ic+vj2bMe NRr+KNpY3m4pEBDFrUBOPehum0rot/eULIghi8fKQ87g56/RISi+L83hhzUZtSlJ zU67Li+4PQ/IozHo2ldOtTNBZHN/I4m6zZfRTVQK6scf2gfo2DlpF2nHDwxURIXf lVJaj3I7d1Rvd9vxWjLjS/KwQa+SBvkZNG1udiIUyMk8/feqFRFtATiNerPBcopP AFNidFGdVn5LiM9Hy/11DWaqNDOOak/sn56JEyKdiBhVukPRIb1KbF/omk4j1qOB 4f7jMNjyJB8cUwATbIns3J5CWIKX1sKrBJXEbYDyaRg5f5elgD0+PdS4dQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFKaVQQE84wgzyyh0Hd6OIxX/ZYcWMB8GA1UdIwQY MBaAFCPYRIxcuQOY5MKFzsnA9HZqyTHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUt Zjc3MmEwMTM5MDE2LzEvcHBWQkFUempDRFBMS0hRZDNvNGpGZjlsaHhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUtZjc3MmEwMTM5MDE2 LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAfBAIAATAZAwQATmiRAwUE wap4YAMEAMGrAwMEAMGr/zAYBAIAAjASAwcAIAEGKARTAwcAIAEGKCAAMA0GCSqG SIb3DQEBCwUAA4IBAQAhMxNDkF0XNF2DDCox9QPzONLcZ81i/jN9bxESS3qQBx2n wA0BmNQ/Qpj57fuhwvRaF+79pOTkoFm/u4dtxgAsjIyj++0+FbhF6dEurNgL7Pji yxbl4T4bUzBze+CHKv8ya00UoZToei/wSSULZ5e6ELmgrjFyGAUE4vOYf/jAjW0T YLQn5UVHLcYMiAovNhETNnl9JjvWf1kuFtDfI3U16uSHdPU1w32hAy5th6N2ooNO 591ibNfuBCHlZRXSyivZrH6oKxckveW2ur9Ny3n7aNxE/BZQGaHefdcMRTKmPhCo F9yiXxS6w9WqH6UDkeIncw0DSPKg/u6D3fSjIEHY -----END CERTIFICATE-----Generated at Tue Jan 27 12:42:35 2026 by rpki-client