This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Papbt_pvhlrPlAtSJ68EySBbwv8.roa File: Papbt_pvhlrPlAtSJ68EySBbwv8.roa (raw, json) Hash identifier: lNhJqJxNZfT/GiSNvex/R8gg7XoALaGXf+E+dlTNT6s= Subject key identifier: 3D:AA:5B:B7:FA:6F:86:5A:CF:94:0B:52:27:AF:04:C9:20:5B:C2:FF Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3918AB87435F1C402C2BF66C010D62 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Papbt_pvhlrPlAtSJ68EySBbwv8.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 85.142.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:18:ab:87:43:5f:1c:40:2c:2b:f6:6c:01:0d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3daa5bb7fa6f865acf940b5227af04c9205bc2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:a2:f5:13:a9:e1:14:1a:56:5d:af:2c:cb: 47:d8:4e:20:86:35:33:b7:0b:a5:f3:af:a0:f8:11: 19:62:b0:d2:26:c9:bb:fb:20:b0:59:9d:78:f6:27: 70:af:4d:30:38:6b:25:31:a3:29:e3:f6:a1:f7:63: 76:ea:fc:e0:6b:56:6b:4d:be:55:b4:3d:f8:fb:b2: d1:46:24:12:1b:85:6f:07:3b:af:b3:11:e8:45:42: e2:27:b7:af:e9:9e:a7:d3:0d:95:af:28:25:2f:c9: b3:ef:24:0a:e5:4d:76:10:2f:d1:6f:c6:94:0b:ef: 42:91:7b:83:03:2a:9b:71:41:e3:ca:1e:80:e2:ae: 18:14:c5:92:45:11:d7:51:be:df:4f:f9:22:67:01: 91:36:b0:ce:82:0c:08:46:c3:c1:39:5a:fb:83:12: e2:4c:7a:9c:3c:2e:7e:fd:f2:05:20:f6:59:f2:49: e8:32:79:7e:c1:86:d5:4c:b4:97:62:3b:f8:f1:f2: 3a:17:40:25:05:82:a1:4a:59:f2:f7:cd:b7:bd:90: bf:e7:16:a0:60:04:94:93:01:ed:16:48:68:01:37: 99:eb:d0:23:4c:46:67:8f:8f:40:fe:26:c7:f1:6b: aa:c0:b6:0f:6c:5c:6a:b0:71:79:29:6a:02:a6:f7: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:5B:B7:FA:6F:86:5A:CF:94:0B:52:27:AF:04:C9:20:5B:C2:FF X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Papbt_pvhlrPlAtSJ68EySBbwv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.88.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:a9:9e:21:bb:71:e0:88:a9:1b:44:cd:0f:1e:db:44:8a:35: 48:64:12:43:27:9a:f2:d9:b5:e7:38:14:1c:10:c8:aa:82:7d: a7:82:1b:b0:f4:10:aa:4e:23:be:93:b9:6a:f4:79:57:66:38: 7d:c1:5e:4b:da:a3:35:7a:ac:bc:b8:31:fd:d0:db:be:c6:85: 93:55:ed:05:1b:93:04:7a:72:7e:d2:79:43:03:34:42:48:4a: f1:6d:f0:c9:4b:1b:85:a1:a9:b5:6a:3d:e1:b8:86:81:54:da: 26:cd:31:5a:af:27:14:12:bf:91:ff:f5:f8:2d:4a:de:e1:27: f9:d4:19:d9:95:d1:d5:fd:7e:f5:59:54:0a:06:57:ba:0d:1a: 55:27:7c:85:02:94:e3:d6:92:99:41:89:87:2a:03:b2:c9:9c: 0a:49:42:9a:48:fb:d2:e5:18:fe:66:69:04:fc:4b:8e:23:b9: 55:96:1a:87:b3:27:68:85:21:99:8b:58:f6:71:21:e6:a8:ad: 3e:1f:8a:f6:98:55:ba:51:cb:86:e8:0d:95:20:b4:03:6e:49: 6c:73:e7:07:38:5a:e8:74:12:21:98:cb:ed:fa:5c:6d:d5:6a: c7:bf:22:cb:82:a5:a1:14:fc:e2:8a:28:2a:cc:a3:38:1e:66: a8:52:e9:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORirh0NfHEAsK/ZsAQ1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFhNWJiN2ZhNmY4NjVhY2Y5NDBiNTIyN2FmMDRjOTIwNWJjMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHei9ROp4RQaVl2vLMtH2E4ghjUz twul86+g+BEZYrDSJsm7+yCwWZ149idwr00wOGslMaMp4/ah92N26vzga1ZrTb5V tD34+7LRRiQSG4VvBzuvsxHoRULiJ7ev6Z6n0w2VryglL8mz7yQK5U12EC/Rb8aU C+9CkXuDAyqbcUHjyh6A4q4YFMWSRRHXUb7fT/kiZwGRNrDOggwIRsPBOVr7gxLi THqcPC5+/fIFIPZZ8knoMnl+wYbVTLSXYjv48fI6F0AlBYKhSlny9823vZC/5xag YASUkwHtFkhoATeZ69AjTEZnj49A/ibH8WuqwLYPbFxqsHF5KWoCpvfwcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2qW7f6b4Zaz5QLUievBMkgW8L/MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvUGFwYnRfcHZobHJQbEF0U0o2OEV5U0Jid3Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVY5YMA0G CSqGSIb3DQEBCwUAA4IBAQAsqZ4hu3HgiKkbRM0PHttEijVIZBJDJ5ry2bXnOBQc EMiqgn2nghuw9BCqTiO+k7lq9HlXZjh9wV5L2qM1eqy8uDH90Nu+xoWTVe0FG5ME enJ+0nlDAzRCSErxbfDJSxuFoam1aj3huIaBVNomzTFarycUEr+R//X4LUre4Sf5 1BnZldHV/X71WVQKBle6DRpVJ3yFApTj1pKZQYmHKgOyyZwKSUKaSPvS5Rj+ZmkE /EuOI7lVlhqHsydohSGZi1j2cSHmqK0+H4r2mFW6UcuG6A2VILQDbklsc+cHOFro dBIhmMvt+lxt1WrHvyLLgqWhFPziiigqzKM4HmaoUulf -----END CERTIFICATE-----Generated at Sun Jan 25 14:33:22 2026 by rpki-client