This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PvZxX2vu6RKD1z-Et9YfDCSBqLM.roa File: PvZxX2vu6RKD1z-Et9YfDCSBqLM.roa (raw, json) Hash identifier: bXxn+kuan8psuOvq/4c9xR+21Wi0cfOpnYBYNQs/7S0= Subject key identifier: 3E:F6:71:5F:6B:EE:E9:12:83:D7:3F:84:B7:D6:1F:0C:24:81:A8:B3 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78346B0513A801979EC1FD7D79EED259 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PvZxX2vu6RKD1z-Et9YfDCSBqLM.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50920 IP address blocks: 194.103.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6b:05:13:a8:01:97:9e:c1:fd:7d:79:ee:d2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ef6715f6beee91283d73f84b7d61f0c2481a8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:e5:49:b4:d5:c2:87:15:75:e5:2a:da:fb: 83:80:a2:6c:f8:57:97:69:28:e0:c9:f9:a2:8d:99: af:6c:de:19:84:45:3b:f7:59:3a:38:37:23:42:e7: f5:20:18:6e:d0:ce:5c:9d:bc:32:d1:f1:6a:8a:78: 9a:52:d4:e7:c4:ac:d8:5f:00:51:f2:10:28:91:3a: fc:68:0a:64:2c:b8:e3:2b:1a:0f:34:aa:1a:53:11: 87:00:73:d6:95:82:61:eb:d6:70:c4:b8:b1:cd:83: a6:be:48:0f:32:fc:ed:7a:bc:92:28:03:a5:27:60: 6c:43:fd:d4:d8:ae:74:94:e6:88:09:65:8d:e3:f3: 7b:5e:2d:23:7e:de:3b:7b:8c:3a:ab:3b:4c:f6:e6: 7c:2e:aa:f5:a8:d1:14:7e:ac:86:b4:db:3d:67:d5: d4:c7:b9:78:d2:64:ba:c1:d0:74:ba:d4:1f:1b:55: 20:c6:74:74:e2:fc:f3:fe:9d:38:09:36:78:57:b1: db:4a:ef:d4:c6:9d:15:91:e0:a5:d5:dd:3e:90:e0: ae:8e:1f:5f:c4:24:dd:1b:3a:a9:2f:84:b8:7d:be: 2f:76:61:2d:30:39:da:23:3a:33:77:43:be:97:13: a4:3b:f4:25:60:1c:55:0b:01:e0:91:31:cb:eb:fd: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F6:71:5F:6B:EE:E9:12:83:D7:3F:84:B7:D6:1F:0C:24:81:A8:B3 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PvZxX2vu6RKD1z-Et9YfDCSBqLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.103.64.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:9d:10:81:03:50:d8:c9:57:76:83:83:1f:9b:3a:40:d5:64: f4:fb:af:f5:fc:9d:00:bd:36:30:99:83:db:9a:5c:47:82:59: 21:fc:08:f3:00:da:82:6c:9b:ae:0c:64:1d:ac:b5:48:57:f0: ad:ac:d6:82:c6:58:e2:1a:5e:4b:7d:4f:29:ba:b3:92:88:77: 79:a1:11:72:b1:2b:2f:9b:ca:b2:e0:56:c4:42:df:0c:d4:f8: db:c9:4c:a3:b3:fc:a9:a6:83:2a:63:a5:5d:05:56:20:a6:be: 09:27:a8:d6:84:46:48:de:05:b8:8c:3b:73:76:71:f4:c3:41: e0:3f:88:05:14:20:b1:58:f3:6c:a6:11:8a:08:3c:aa:66:01: d5:ff:78:7c:b8:a0:9d:7b:59:5d:c9:38:97:f5:41:f5:62:33: aa:ae:94:4e:3e:ae:63:e2:eb:7e:76:c9:0b:28:b3:5a:b7:7d: c9:d1:ac:6a:22:6f:01:7c:e7:69:93:55:fc:57:70:0e:a8:14: f6:d1:01:c5:f0:07:82:16:0c:cc:b9:42:81:81:58:b3:80:46: 69:05:1b:df:4f:45:06:aa:3b:e3:4d:ce:06:a8:1e:46:95:39: 4f:fe:22:de:5a:9c:d8:0a:cf:7a:27:82:cb:f5:a2:9f:47:8a: 7d:6a:fc:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGsFE6gBl57B/X157tJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWY2NzE1ZjZiZWVlOTEyODNkNzNmODRiN2Q2MWYwYzI0ODFhOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx7lSbTVwocVdeUq2vuDgKJs+FeX aSjgyfmijZmvbN4ZhEU791k6ODcjQuf1IBhu0M5cnbwy0fFqiniaUtTnxKzYXwBR 8hAokTr8aApkLLjjKxoPNKoaUxGHAHPWlYJh69ZwxLixzYOmvkgPMvzterySKAOl J2BsQ/3U2K50lOaICWWN4/N7Xi0jft47e4w6qztM9uZ8Lqr1qNEUfqyGtNs9Z9XU x7l40mS6wdB0utQfG1UgxnR04vzz/p04CTZ4V7HbSu/Uxp0VkeCl1d0+kOCujh9f xCTdGzqpL4S4fb4vdmEtMDnaIzozd0O+lxOkO/QlYBxVCwHgkTHL6/2vNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD72cV9r7ukSg9c/hLfWHwwkgaizMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUHZaeFgydnU2UktEMXotRXQ5WWZEQ1NCcUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwmdAMA0G CSqGSIb3DQEBCwUAA4IBAQA/nRCBA1DYyVd2g4MfmzpA1WT0+6/1/J0AvTYwmYPb mlxHglkh/AjzANqCbJuuDGQdrLVIV/CtrNaCxljiGl5LfU8purOSiHd5oRFysSsv m8qy4FbEQt8M1PjbyUyjs/yppoMqY6VdBVYgpr4JJ6jWhEZI3gW4jDtzdnH0w0Hg P4gFFCCxWPNsphGKCDyqZgHV/3h8uKCde1ldyTiX9UH1YjOqrpROPq5j4ut+dskL KLNat33J0axqIm8BfOdpk1X8V3AOqBT20QHF8AeCFgzMuUKBgVizgEZpBRvfT0UG qjvjTc4GqB5GlTlP/iLeWpzYCs96J4LL9aKfR4p9avx9 -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:02 2026 by rpki-client