This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa File: Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa (raw, json) Hash identifier: wwJ2iaOAypy2cu/YyFarYyFvvtG9167wYna2ztGjItM= Subject key identifier: 3E:FF:C1:E7:0A:CD:48:E2:10:DA:B3:AF:32:A5:77:30:C7:A0:1B:BC Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e Certificate serial: 019B797E538EBB1EEDF05FB97999C51B24CE Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 213.209.176.0/20 maxlen: 24 213.209.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:53:8e:bb:1e:ed:f0:5f:b9:79:99:c5:1b:24:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3effc1e70acd48e210dab3af32a57730c7a01bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:ea:5d:40:8c:3a:ca:c5:8d:6a:36:6d:89: 30:45:e5:dd:2f:5d:30:a6:6a:69:6e:f8:27:c5:c7: 79:8e:9d:8b:b9:c8:ba:07:96:11:f6:63:04:7c:07: e7:8d:99:75:8a:2b:e3:1c:95:c1:89:0e:cf:54:41: 0b:94:77:93:90:63:93:84:9f:06:dc:aa:6d:36:22: 0d:2e:10:3d:aa:67:cf:98:f6:65:72:2f:14:5e:9b: bc:31:35:69:63:b3:bd:b0:64:bd:fd:76:3c:ec:d2: 5d:aa:38:56:b0:b9:51:76:74:f2:a7:40:22:03:47: 5a:f6:15:8f:7f:35:55:9e:f5:93:b6:fb:94:75:f6: ca:b4:43:03:3a:60:de:76:bd:d4:c5:86:08:54:59: ed:c4:fe:04:2c:9b:79:9b:e4:42:b1:87:fb:97:34: d2:8b:f4:81:ff:fd:6a:e5:d6:3f:1e:8d:89:d0:81: 13:5a:15:18:fb:41:59:c5:d1:53:c8:a3:f0:b1:07: db:54:4f:70:44:c3:0b:05:77:aa:aa:98:ff:56:ce: 45:43:ec:7f:fb:7f:4b:af:c0:64:2d:c6:ad:38:2c: 58:61:83:6d:02:20:20:f3:ff:09:85:87:57:22:45: 2d:d7:6a:1f:e3:f7:ea:50:8b:4b:a0:f8:1d:1c:5e: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:C1:E7:0A:CD:48:E2:10:DA:B3:AF:32:A5:77:30:C7:A0:1B:BC X509v3 Authority Key Identifier: keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Pv_B5wrNSOIQ2rOvMqV3MMegG7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.209.176.0/20 Signature Algorithm: sha256WithRSAEncryption 02:b7:d8:49:6a:62:90:a7:f9:54:83:40:50:7d:10:db:f3:3b: 68:6f:9a:ee:2b:df:d4:91:ad:1e:38:01:81:e8:26:b1:4b:c5: 76:23:c5:ff:48:28:38:1c:e9:f0:95:76:82:53:f0:c0:8a:b2: 3f:ef:5c:1b:d0:04:3d:d4:b8:21:65:d3:38:f2:d5:3c:ab:03: 54:45:90:d0:b2:eb:6f:b8:45:5b:fb:c1:f3:91:e9:d8:f5:b4: 19:47:e0:aa:89:6c:05:cb:17:e0:6e:a2:e5:11:88:6d:dc:2c: b0:26:65:26:08:80:2a:77:2b:77:cd:c5:74:d6:cb:96:89:69: aa:78:52:83:96:13:aa:dd:e1:d5:aa:8c:6c:18:5e:ae:23:5a: 41:db:4b:49:47:f9:31:bf:e5:0b:93:4d:20:e5:0c:b7:a8:e2: ca:66:84:48:a6:51:e3:2e:a1:bf:b7:96:9b:45:6e:2b:ba:6b: 91:1e:d5:83:11:89:d4:83:2c:6e:74:a8:b7:27:10:fd:ea:56: 64:ec:87:01:1c:49:73:f7:7e:dd:e3:1b:ed:bc:bd:72:c7:e9: e2:0b:77:9e:be:9c:7e:56:58:ed:9d:42:41:2d:e5:67:ec:d0: 55:fd:d5:4b:59:e1:d4:36:b9:27:9f:fb:78:87:d8:a6:68:d4: c7:9d:69:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flOOux7t8F+5eZnFGyTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi NDE1M2UwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWZmYzFlNzBhY2Q0OGUyMTBkYWIzYWYzMmE1NzczMGM3YTAxYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4/qXUCMOsrFjWo2bYkwReXdL10w pmppbvgnxcd5jp2Luci6B5YR9mMEfAfnjZl1iivjHJXBiQ7PVEELlHeTkGOThJ8G 3KptNiINLhA9qmfPmPZlci8UXpu8MTVpY7O9sGS9/XY87NJdqjhWsLlRdnTyp0Ai A0da9hWPfzVVnvWTtvuUdfbKtEMDOmDedr3UxYYIVFntxP4ELJt5m+RCsYf7lzTS i/SB//1q5dY/Ho2J0IETWhUY+0FZxdFTyKPwsQfbVE9wRMMLBXeqqpj/Vs5FQ+x/ +39Lr8BkLcatOCxYYYNtAiAg8/8JhYdXIkUt12of4/fqUItLoPgdHF7newIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7/wecKzUjiENqzrzKldzDHoBu8MB8GA1UdIwQY MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt MWQzNzM0OTk5MjRlLzEvUHZfQjV3ck5TT0lRMnJPdk1xVjNNTWVnRzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1dGwMA0G CSqGSIb3DQEBCwUAA4IBAQACt9hJamKQp/lUg0BQfRDb8ztob5ruK9/Uka0eOAGB 6CaxS8V2I8X/SCg4HOnwlXaCU/DAirI/71wb0AQ91LghZdM48tU8qwNURZDQsutv uEVb+8HzkenY9bQZR+CqiWwFyxfgbqLlEYht3CywJmUmCIAqdyt3zcV01suWiWmq eFKDlhOq3eHVqoxsGF6uI1pB20tJR/kxv+ULk00g5Qy3qOLKZoRIplHjLqG/t5ab RW4rumuRHtWDEYnUgyxudKi3JxD96lZk7IcBHElz937d4xvtvL1yx+niC3eevpx+ VljtnUJBLeVn7NBV/dVLWeHUNrknn/t4h9imaNTHnWnY -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:31 2026 by rpki-client