This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PnH7JiAnhS52YTlK8hUDObAgyvQ.roa File: PnH7JiAnhS52YTlK8hUDObAgyvQ.roa (raw, json) Hash identifier: bqGBiJVpXsMf0ydRvh+w60Xxp60P3FVNVFgLx3EKJaM= Subject key identifier: 3E:71:FB:26:20:27:85:2E:76:61:39:4A:F2:15:03:39:B0:20:CA:F4 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA778E7DC7AA4E3CC7F922F92F63D6A Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PnH7JiAnhS52YTlK8hUDObAgyvQ.roa Signing time: Fri 02 Jan 2026 12:21:03 +0000 ROA not before: Fri 02 Jan 2026 12:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43132 IP address blocks: 62.183.80.0/21 maxlen: 21 85.172.174.0/23 maxlen: 23 85.173.96.0/19 maxlen: 19 178.34.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:78:e7:dc:7a:a4:e3:cc:7f:92:2f:92:f6:3d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e71fb262027852e7661394af2150339b020caf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:08:e2:d2:ad:a0:94:7e:69:b0:df:2c:f3: e4:53:92:19:cc:71:57:85:94:f4:0b:80:41:b2:d4: bb:6f:29:a1:1a:bf:ec:72:25:59:27:d3:97:30:f9: 91:60:06:d3:8f:82:10:10:93:21:00:e2:10:e0:ed: d5:11:bc:ae:18:14:d6:96:b5:dd:b4:1d:5b:1a:6c: a0:51:85:68:86:09:2a:cc:d4:c3:ac:79:ec:a6:f8: af:5d:6b:9e:7f:d0:21:e9:ca:3a:d8:f0:36:78:74: 3a:9f:29:60:8a:f4:92:82:59:6a:b5:b7:41:88:66: a1:83:12:99:1c:27:94:2c:a1:ed:46:4e:d0:d7:b2: b1:dd:f6:bc:a3:66:85:cb:da:37:b2:00:be:26:df: b6:9f:6e:ed:9b:60:93:66:7f:70:7a:2c:ee:d3:73: ae:8c:26:ad:49:90:57:f3:fd:cf:31:89:5a:3f:fb: 08:8c:fc:1c:14:b5:a4:d7:67:76:2d:1e:ab:97:cd: ec:22:ed:3e:65:92:71:24:5b:06:a1:c5:74:da:bc: d6:e9:cf:95:7d:80:43:f9:2b:c1:04:55:2e:72:4c: e9:d3:40:a8:66:74:2b:4b:7b:5d:33:48:dc:89:69: 76:f4:65:7d:38:a2:02:3a:da:fc:a9:6f:3f:c9:6a: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:FB:26:20:27:85:2E:76:61:39:4A:F2:15:03:39:B0:20:CA:F4 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PnH7JiAnhS52YTlK8hUDObAgyvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.183.80.0/21 85.172.174.0/23 85.173.96.0/19 178.34.208.0/20 Signature Algorithm: sha256WithRSAEncryption 35:3e:79:bb:9f:70:b6:d0:dd:fd:de:de:a9:d4:04:4c:55:f2: 63:c8:ff:e0:ae:fe:32:8d:3d:67:41:00:19:b6:2c:e2:02:34: 39:e4:f6:66:e2:1f:f0:75:fc:dc:22:ac:9c:4b:13:cf:c2:c3: 0a:0f:6f:36:aa:00:ac:0c:4f:d7:60:34:64:e8:33:a7:cc:77: 0f:63:8e:08:46:19:7e:d1:6f:f9:79:32:d2:c0:8a:50:94:0a: 01:a2:0e:df:a6:a8:c1:bb:b6:b7:f3:00:d6:9f:30:8f:27:b4: 47:08:59:6b:dd:9b:c6:76:75:bc:65:4c:1c:c2:3c:3f:85:54: 41:d0:d5:c6:29:2c:01:b0:4a:46:bb:b1:3d:db:3f:8b:3c:29: 3d:d8:35:e5:3f:f4:3b:55:be:a1:7a:2e:08:3f:52:4c:c8:4f: c3:13:0e:bf:58:58:09:b9:e8:54:7b:82:2e:88:9b:87:5c:ab: dc:44:c3:94:9c:7c:ee:4b:28:1b:87:c0:cd:14:43:7a:ef:95: 4e:e1:60:93:79:de:2d:93:f9:5f:da:74:29:43:f6:cc:69:6c: 16:b5:8f:ed:9d:28:6e:65:a6:c6:4a:51:51:f9:bd:f9:eb:f0: d3:ca:79:7b:6f:b8:9f:0a:67:fd:81:57:b8:4b:34:1c:bb:05: 3f:28:ab:68 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p3jn3Hqk48x/ki+S9j1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTcxZmIyNjIwMjc4NTJlNzY2MTM5NGFmMjE1MDMzOWIwMjBjYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1oI4tKtoJR+abDfLPPkU5IZzHFX hZT0C4BBstS7bymhGr/sciVZJ9OXMPmRYAbTj4IQEJMhAOIQ4O3VEbyuGBTWlrXd tB1bGmygUYVohgkqzNTDrHnspvivXWuef9Ah6co62PA2eHQ6nylgivSSgllqtbdB iGahgxKZHCeULKHtRk7Q17Kx3fa8o2aFy9o3sgC+Jt+2n27tm2CTZn9weizu03Ou jCatSZBX8/3PMYlaP/sIjPwcFLWk12d2LR6rl83sIu0+ZZJxJFsGocV02rzW6c+V fYBD+SvBBFUuckzp00CoZnQrS3tdM0jciWl29GV9OKICOtr8qW8/yWrtmwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD5x+yYgJ4UudmE5SvIVAzmwIMr0MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUG5IN0ppQW5oUzUyWVRsSzhoVURPYkFneXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDPrdQAwQB VayuAwQFVa1gAwQEsiLQMA0GCSqGSIb3DQEBCwUAA4IBAQA1Pnm7n3C20N393t6p 1ARMVfJjyP/grv4yjT1nQQAZtiziAjQ55PZm4h/wdfzcIqycSxPPwsMKD282qgCs DE/XYDRk6DOnzHcPY44IRhl+0W/5eTLSwIpQlAoBog7fpqjBu7a38wDWnzCPJ7RH CFlr3ZvGdnW8ZUwcwjw/hVRB0NXGKSwBsEpGu7E92z+LPCk92DXlP/Q7Vb6hei4I P1JMyE/DEw6/WFgJuehUe4IuiJuHXKvcRMOUnHzuSygbh8DNFEN675VO4WCTed4t k/lf2nQpQ/bMaWwWtY/tnShuZabGSlFR+b356/DTynl7b7ifCmf9gVe4SzQcuwU/ KKto -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:11 2026 by rpki-client