This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa File: PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa (raw, json) Hash identifier: tFLry/v07lnhSlHBjf2oO0BxwozcI2XhOgOvdmFzcjY= Subject key identifier: 3F:1C:4D:54:D2:F9:04:E0:77:42:B0:19:66:F4:B9:6A:12:4A:2C:E4 Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019B7E382444D70BFD0C51A9AD29B8E17C53 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.126.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:24:44:d7:0b:fd:0c:51:a9:ad:29:b8:e1:7c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1c4d54d2f904e07742b01966f4b96a124a2ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:9c:b9:7d:5b:be:61:37:54:7b:62:cd:e3: 74:f2:d2:f9:b4:69:5b:c8:93:dd:70:cb:66:56:6f: ff:c1:2c:2b:7e:fa:bf:1f:25:ab:6e:75:33:d8:ef: 6e:ca:96:e7:36:59:71:97:66:d5:cc:1e:f2:4b:08: 06:5f:23:de:fd:c8:2e:b9:77:10:1e:3b:74:69:4a: 4f:6c:b3:ae:d9:43:5c:48:b2:6c:a2:bb:d7:d8:56: 6f:6f:2c:c5:2b:79:7b:2a:6e:35:7d:c6:c6:6c:de: 06:4e:40:01:ad:3c:d0:5a:f6:27:0b:f3:2d:4d:0a: c8:8d:2d:b9:ae:4b:c5:e4:6b:10:f3:e2:86:ae:fc: 65:63:21:aa:f4:00:11:8d:49:59:91:d4:0d:99:f0: da:9f:f0:6a:ce:79:d2:cf:49:e4:27:e1:78:8f:dc: 9b:a2:c2:6a:28:b3:08:b3:db:ed:52:0a:a5:ea:81: d7:dd:72:69:a7:9a:d3:5d:95:6a:38:ae:56:1c:06: 2a:0d:ff:91:8f:68:ed:30:1e:12:74:7a:54:0c:65: e3:68:ba:5e:71:6d:78:61:97:35:db:a9:02:16:20: 1d:f8:62:a1:4d:24:3d:09:2b:e0:d0:2f:db:c9:7f: fd:28:67:36:e6:59:db:55:2a:c3:3e:db:c6:52:f7: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:4D:54:D2:F9:04:E0:77:42:B0:19:66:F4:B9:6A:12:4A:2C:E4 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/PxxNVNL5BOB3QrAZZvS5ahJKLOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.156.0/23 Signature Algorithm: sha256WithRSAEncryption 40:a4:21:1e:40:bb:16:3f:c1:fe:3e:45:80:8a:2b:e7:0a:c4: 66:5b:c6:4b:05:cb:15:02:c5:96:28:39:bd:23:8c:6d:1c:97: 38:96:d2:09:b0:10:67:c3:b8:3f:bd:ad:c7:3b:ef:71:cd:88: 7b:df:43:1e:81:4f:af:54:59:63:c5:c9:73:73:b1:60:c7:91: ab:80:98:1a:de:8b:00:61:c3:fb:a6:51:6a:98:42:fa:97:bc: 7f:8d:a5:be:34:9c:5b:9e:6c:e4:f1:72:a6:f9:0c:e2:cd:7c: 39:31:17:ef:91:7e:9d:3b:da:b9:c2:08:47:29:38:58:87:86: a6:00:cf:1c:ea:ab:63:53:35:f3:7d:e0:b5:4b:88:3e:c3:13: ee:e1:a1:2f:58:14:b6:5e:9a:87:34:9b:ff:6b:76:b6:87:4f: b9:41:bf:43:a0:16:f8:25:75:fb:14:03:5e:be:83:9b:3f:df: d2:1f:0f:49:e9:0b:c3:65:1b:1a:e8:36:e1:60:25:d3:95:85: 63:a2:2e:c3:71:aa:ff:89:83:26:3c:f4:18:1f:4e:74:92:8e: f2:f8:a9:51:09:eb:1e:0e:5a:ce:35:a0:e9:3b:40:0c:10:a0: 42:9b:42:fd:d1:c4:5a:e7:ce:f4:cc:00:bf:ca:d5:f0:66:8f: e6:6e:0e:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCRE1wv9DFGprSm44XxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFjNGQ1NGQyZjkwNGUwNzc0MmIwMTk2NmY0Yjk2YTEyNGEyY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K2cuX1bvmE3VHtizeN08tL5tGlb yJPdcMtmVm//wSwrfvq/HyWrbnUz2O9uypbnNllxl2bVzB7ySwgGXyPe/cguuXcQ Hjt0aUpPbLOu2UNcSLJsorvX2FZvbyzFK3l7Km41fcbGbN4GTkABrTzQWvYnC/Mt TQrIjS25rkvF5GsQ8+KGrvxlYyGq9AARjUlZkdQNmfDan/BqznnSz0nkJ+F4j9yb osJqKLMIs9vtUgql6oHX3XJpp5rTXZVqOK5WHAYqDf+Rj2jtMB4SdHpUDGXjaLpe cW14YZc126kCFiAd+GKhTSQ9CSvg0C/byX/9KGc25lnbVSrDPtvGUveulwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8cTVTS+QTgd0KwGWb0uWoSSizkMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvUHh4TlZOTDVCT0IzUXJBWlp2UzVhaEpLTE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6cMA0G CSqGSIb3DQEBCwUAA4IBAQBApCEeQLsWP8H+PkWAiivnCsRmW8ZLBcsVAsWWKDm9 I4xtHJc4ltIJsBBnw7g/va3HO+9xzYh730MegU+vVFljxclzc7Fgx5GrgJga3osA YcP7plFqmEL6l7x/jaW+NJxbnmzk8XKm+QzizXw5MRfvkX6dO9q5wghHKThYh4am AM8c6qtjUzXzfeC1S4g+wxPu4aEvWBS2XpqHNJv/a3a2h0+5Qb9DoBb4JXX7FANe voObP9/SHw9J6QvDZRsa6DbhYCXTlYVjoi7Dcar/iYMmPPQYH050ko7y+KlRCese DlrONaDpO0AMEKBCm0L90cRa5870zAC/ytXwZo/mbg7y -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:27 2026 by rpki-client