This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa File: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (raw, json) Hash identifier: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w= Subject key identifier: A6:F7:2A:A0:DB:C9:15:D5:A8:10:C8:3C:40:52:44:CC:79:BC:CF:B1 Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019B79107406BE1AE052BEEE13C358E32E63 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198227 IP address blocks: 217.147.170.0/24 maxlen: 24 217.147.173.0/24 maxlen: 24 217.147.174.0/24 maxlen: 24 217.147.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:06:be:1a:e0:52:be:ee:13:c3:58:e3:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6f72aa0dbc915d5a810c83c405244cc79bccfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:60:27:fb:2d:1a:b8:5b:8a:a1:d7:02:d1: 53:13:81:49:06:2e:b1:a1:38:cf:5f:42:8f:df:20: 21:61:fb:d2:8c:49:3a:f9:b0:ea:d7:e6:d9:2e:eb: 78:e7:1a:61:c0:df:d3:f3:e6:8e:29:66:db:89:97: 7b:f2:26:f4:c7:64:7f:25:b0:8c:98:23:1e:e0:0c: 24:d4:56:bd:22:80:40:6d:ad:5a:e7:3c:a7:d0:6c: f2:88:44:e1:93:c8:5f:d3:c2:8b:1f:1d:b3:e3:f1: 7a:6b:3b:f6:9c:eb:ed:bc:2c:8b:ad:d8:39:89:a1: 08:83:b4:56:72:2f:7c:95:7e:9a:e7:00:ea:e2:23: 99:2d:0b:da:5d:e9:2e:4d:be:30:ba:f9:cb:da:9c: 5e:69:6b:a4:0b:e1:46:f7:a0:eb:4f:55:80:e7:28: da:ae:83:56:21:b3:d8:85:71:5e:a7:e2:2d:2d:35: 3c:9a:15:fc:4c:2e:21:94:d6:c4:4f:da:d8:ae:ae: b3:89:77:20:62:3c:4f:b9:fb:93:d9:5c:b9:71:12: 7d:ba:ff:49:d1:b6:c0:83:9f:d4:ff:2d:51:19:91: 94:b1:a1:b2:c3:42:52:db:ed:01:42:4e:bd:cc:00: 61:31:95:09:d8:3f:70:e3:3a:8a:94:e5:5d:2b:19: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:2A:A0:DB:C9:15:D5:A8:10:C8:3C:40:52:44:CC:79:BC:CF:B1 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.170.0/24 217.147.173.0-217.147.175.255 Signature Algorithm: sha256WithRSAEncryption 36:d0:9b:2d:e4:21:6f:7d:39:dd:b0:95:ca:ca:fe:ca:46:cd: 62:78:34:f3:dc:ad:f6:0e:f0:e3:2e:48:5e:48:6b:5f:ef:0c: b0:06:73:2d:6a:cf:0b:a3:e7:66:cd:05:54:20:74:c6:76:f8: fe:9c:c5:fc:7f:be:59:ee:5a:6f:a5:b1:35:cb:29:b9:5e:ae: 92:fc:19:e1:96:7d:01:a4:e0:61:77:2f:43:04:e6:5e:fc:8d: 08:4f:3f:75:7f:16:3d:67:18:d2:04:1c:a5:01:33:b2:c7:c6: 9d:30:4b:8b:79:23:6c:12:75:d9:29:a6:ac:07:e1:59:db:0a: 5f:15:cb:30:83:c4:ca:c5:eb:9e:29:ef:92:88:0c:83:54:2a: be:f3:61:51:77:e5:ad:87:f9:2a:2e:7b:df:d9:b6:b4:8a:6e: 57:b7:70:d1:50:e2:02:92:2a:a0:46:48:c0:02:65:f3:2f:a3: c2:3e:d1:8e:7d:f4:ff:c5:de:25:f0:7a:23:f7:6b:00:fc:3f: 4d:fe:7d:91:c8:01:b8:bc:fb:d9:69:23:45:10:54:50:11:bd: 8c:a7:36:50:d7:6d:f8:e7:0c:73:45:fd:2d:a4:3e:29:3b:b8: b3:e2:c0:f6:a4:ef:4d:2c:ba:2e:f9:c3:ce:0c:36:0d:7b:92: 31:44:6d:ab -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EHQGvhrgUr7uE8NY4y5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmY3MmFhMGRiYzkxNWQ1YTgxMGM4M2M0MDUyNDRjYzc5YmNjZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8pgJ/stGrhbiqHXAtFTE4FJBi6x oTjPX0KP3yAhYfvSjEk6+bDq1+bZLut45xphwN/T8+aOKWbbiZd78ib0x2R/JbCM mCMe4Awk1Fa9IoBAba1a5zyn0GzyiEThk8hf08KLHx2z4/F6azv2nOvtvCyLrdg5 iaEIg7RWci98lX6a5wDq4iOZLQvaXekuTb4wuvnL2pxeaWukC+FG96DrT1WA5yja roNWIbPYhXFep+ItLTU8mhX8TC4hlNbET9rYrq6ziXcgYjxPufuT2Vy5cRJ9uv9J 0bbAg5/U/y1RGZGUsaGyw0JS2+0BQk69zABhMZUJ2D9w4zqKlOVdKxnsTQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKb3KqDbyRXVqBDIPEBSRMx5vM+xMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvcHZjcW9OdkpGZFdvRU1nOFFGSkV6SG04ejdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA2ZOqMAwD BADZk60DBATZk6AwDQYJKoZIhvcNAQELBQADggEBADbQmy3kIW99Od2wlcrK/spG zWJ4NPPcrfYO8OMuSF5Ia1/vDLAGcy1qzwuj52bNBVQgdMZ2+P6cxfx/vlnuWm+l sTXLKblerpL8GeGWfQGk4GF3L0ME5l78jQhPP3V/Fj1nGNIEHKUBM7LHxp0wS4t5 I2wSddkppqwH4VnbCl8VyzCDxMrF654p75KIDINUKr7zYVF35a2H+Soue9/ZtrSK ble3cNFQ4gKSKqBGSMACZfMvo8I+0Y599P/F3iXweiP3awD8P03+fZHIAbi8+9lp I0UQVFARvYynNlDXbfjnDHNF/S2kPik7uLPiwPak700sui75w84MNg17kjFEbas= -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:05 2026 by rpki-client