This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PmmKQCH4vWIiNzOH68DJj1VWGd4.roa File: PmmKQCH4vWIiNzOH68DJj1VWGd4.roa (raw, json) Hash identifier: 76cgbunifbJBRSTwrJrVj76+hbpV0Ehgh3MDEWxbXCM= Subject key identifier: 3E:69:8A:40:21:F8:BD:62:22:37:33:87:EB:C0:C9:8F:55:56:19:DE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CB11CABDDB30589EBDD9482E1F1D Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PmmKQCH4vWIiNzOH68DJj1VWGd4.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60860 IP address blocks: 89.185.8.0/24 maxlen: 24 89.185.12.0/24 maxlen: 24 93.185.214.0/24 maxlen: 24 109.72.122.0/24 maxlen: 24 185.30.200.0/23 maxlen: 23 185.30.202.0/24 maxlen: 24 185.30.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cb:11:ca:bd:db:30:58:9e:bd:d9:48:2e:1f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e698a4021f8bd6222373387ebc0c98f555619de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:38:0c:28:05:f6:22:37:68:19:27:5c:12: 7e:25:f6:90:98:c5:13:f7:11:eb:1b:2f:89:b7:02: e5:52:44:90:aa:3b:86:2e:c7:0f:5c:45:76:57:f8: 77:92:48:79:cf:44:c1:8d:7e:5c:1c:ef:c0:3c:7b: e8:2a:2b:80:ad:67:84:17:8b:e3:29:06:89:1a:a5: e7:0b:10:61:c6:25:b2:46:9f:42:36:31:1f:60:00: 5b:50:8f:c7:6e:67:e1:31:cd:df:55:86:d5:76:e1: 41:32:44:55:48:93:fd:0c:81:0a:ac:cf:76:5b:9f: bd:67:8b:41:94:bd:c0:a7:03:1c:34:46:9b:5f:c9: a3:55:d5:24:30:85:22:61:46:3c:a4:31:8f:fd:22: c8:72:c8:53:05:35:13:62:72:03:c6:72:30:46:73: 1d:ab:b3:2f:b8:8c:92:ea:9a:59:36:22:71:97:c5: 90:31:b6:98:a2:af:af:79:11:ed:2e:de:b2:c5:a6: e7:68:b9:9d:0e:0e:2c:8e:56:97:c6:f3:01:40:77: 3e:ab:8e:bd:d8:9b:bf:16:e6:ff:f6:ce:20:95:eb: cc:b4:30:1b:1f:62:c2:3e:71:e8:3f:35:52:73:d5: 0d:c6:41:ad:d4:73:94:bb:03:ba:7c:94:e4:74:7a: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:8A:40:21:F8:BD:62:22:37:33:87:EB:C0:C9:8F:55:56:19:DE X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/PmmKQCH4vWIiNzOH68DJj1VWGd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.8.0/24 89.185.12.0/24 93.185.214.0/24 109.72.122.0/24 185.30.200.0/22 Signature Algorithm: sha256WithRSAEncryption 72:cd:07:91:8b:1a:94:da:aa:bc:c4:56:0c:f0:7d:64:9c:6b: 4f:a5:c4:fc:ea:d8:3c:14:1d:b9:d9:ad:45:1c:06:60:ba:4a: 71:e2:59:98:ab:53:4c:30:63:8b:97:b9:67:3e:ca:bc:bb:24: 13:1a:e0:ab:48:6b:54:ba:54:5b:8f:03:d6:49:8b:47:5d:8a: de:7c:22:dc:f6:02:a4:b5:19:ec:14:c9:c8:c5:21:01:31:b5: c4:89:41:65:9e:da:e5:29:47:67:8a:52:c2:e0:9b:23:f6:ca: bb:e4:6d:00:d5:a4:ed:f1:b1:5e:f3:43:6b:be:8b:70:ab:ab: 7d:15:df:61:5d:9e:64:fe:03:53:a5:6b:2f:93:de:65:29:68: d4:17:e0:d2:55:d1:c9:1a:19:39:46:a1:5d:07:12:0a:63:9e: bc:d4:b7:7c:8c:1a:ca:51:5b:31:17:4b:b0:96:25:67:c2:65: 6b:cc:a7:74:b0:86:56:5c:54:3e:26:32:f7:05:5f:4a:bb:2b: 44:a1:4a:6e:b4:1a:e4:e2:30:8c:08:b0:fb:2a:b6:4c:08:36: 22:2f:81:29:1d:f5:49:0d:74:9f:ee:39:31:bf:d2:81:36:76: 99:ae:4d:b1:d2:60:82:cb:ca:e5:81:89:ff:7c:c9:d0:d1:9f: 58:d8:2c:59 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ossRyr3bMFievdlILh8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTY5OGE0MDIxZjhiZDYyMjIzNzMzODdlYmMwYzk4ZjU1NTYxOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtA4DCgF9iI3aBknXBJ+JfaQmMUT 9xHrGy+JtwLlUkSQqjuGLscPXEV2V/h3kkh5z0TBjX5cHO/APHvoKiuArWeEF4vj KQaJGqXnCxBhxiWyRp9CNjEfYABbUI/HbmfhMc3fVYbVduFBMkRVSJP9DIEKrM92 W5+9Z4tBlL3ApwMcNEabX8mjVdUkMIUiYUY8pDGP/SLIcshTBTUTYnIDxnIwRnMd q7MvuIyS6ppZNiJxl8WQMbaYoq+veRHtLt6yxabnaLmdDg4sjlaXxvMBQHc+q469 2Ju/Fub/9s4glevMtDAbH2LCPnHoPzVSc9UNxkGt1HOUuwO6fJTkdHqr7QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFD5pikAh+L1iIjczh+vAyY9VVhneMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvUG1tS1FDSDR2V0lpTnpPSDY4REpqMVZXR2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWbkIAwQA WbkMAwQAXbnWAwQAbUh6AwQCuR7IMA0GCSqGSIb3DQEBCwUAA4IBAQByzQeRixqU 2qq8xFYM8H1knGtPpcT86tg8FB252a1FHAZgukpx4lmYq1NMMGOLl7lnPsq8uyQT GuCrSGtUulRbjwPWSYtHXYrefCLc9gKktRnsFMnIxSEBMbXEiUFlntrlKUdnilLC 4Jsj9sq75G0A1aTt8bFe80Nrvotwq6t9Fd9hXZ5k/gNTpWsvk95lKWjUF+DSVdHJ Ghk5RqFdBxIKY5681Ld8jBrKUVsxF0uwliVnwmVrzKd0sIZWXFQ+JjL3BV9KuytE oUputBrk4jCMCLD7KrZMCDYiL4EpHfVJDXSf7jkxv9KBNnaZrk2x0mCCy8rlgYn/ fMnQ0Z9Y2CxZ -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:38 2026 by rpki-client