This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/ppKOK1k4bpVipnmImPdupSEmNC0.roa File: ppKOK1k4bpVipnmImPdupSEmNC0.roa (raw, json) Hash identifier: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g= Subject key identifier: A6:92:8E:2B:59:38:6E:95:62:A6:79:88:98:F7:6E:A5:21:26:34:2D Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Certificate serial: 019B7CED48A1C232F1C39ED0E665129C1018 Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/ppKOK1k4bpVipnmImPdupSEmNC0.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 193.19.196.0/24 maxlen: 24 193.19.197.0/24 maxlen: 24 194.125.246.0/24 maxlen: 24 194.125.247.0/24 maxlen: 24 195.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:48:a1:c2:32:f1:c3:9e:d0:e6:65:12:9c:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6928e2b59386e9562a6798898f76ea52126342d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:3a:45:25:24:3b:9b:2c:ad:9d:4e:ac:9b: 95:c0:f8:a3:c0:c3:03:8b:62:66:ba:fb:59:fa:d2: 49:50:e5:4b:dc:49:4e:79:6d:ef:02:9b:6f:df:62: 45:9b:9f:ce:a0:4b:2a:79:ef:ae:62:03:a6:77:4c: a9:ae:67:45:ae:6a:c0:37:28:6e:0a:c0:3d:6b:78: 35:db:b9:26:db:5e:d2:6e:fb:98:8a:69:98:72:11: af:d9:91:3a:bb:e6:b4:9c:69:03:4c:e5:81:37:b2: f6:95:f1:a8:bf:e4:4c:81:46:b4:1a:62:89:c6:72: 69:fe:48:ea:2c:e5:a4:db:b1:54:fb:15:af:fc:39: ea:1c:7b:64:2b:a1:82:2c:97:13:00:37:e3:6b:5a: 5a:d1:88:a7:9b:0d:2d:9e:ad:08:29:67:5f:6a:b8: f9:b3:0d:a1:8b:d6:02:e3:73:85:d1:24:63:f9:0c: 7a:4d:57:72:2d:4b:52:a7:d1:c5:b7:09:28:2a:44: 4f:f4:ef:4e:35:c4:2a:b5:41:13:df:d5:c0:f6:cf: 84:46:41:88:81:1c:f3:68:89:a6:3d:33:c3:e1:06: bd:7d:05:21:ef:08:22:14:f7:19:8f:a7:61:7d:bf: 27:a5:86:94:f4:80:60:04:90:10:f3:e3:b7:af:81: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:92:8E:2B:59:38:6E:95:62:A6:79:88:98:F7:6E:A5:21:26:34:2D X509v3 Authority Key Identifier: keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/ppKOK1k4bpVipnmImPdupSEmNC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.196.0/23 194.125.246.0/23 195.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption 57:b2:08:82:08:84:fd:35:28:67:d8:cf:5a:2e:a3:ac:99:a8: 4f:35:b2:28:61:83:3e:00:90:ce:66:53:4d:40:ce:93:df:fd: a9:f6:99:a5:65:bf:d3:ef:db:1e:fc:35:51:9a:a9:48:4f:3d: c8:c3:03:96:bb:e2:cb:c2:71:0b:13:c3:7e:08:28:5e:5c:e9: b6:bf:8e:66:9f:d1:51:5c:45:40:51:60:9c:f4:a8:e5:44:ae: 1c:be:de:78:f9:ae:1c:bf:07:0d:eb:22:34:d5:16:cb:6c:79: dc:77:51:2e:01:b7:b7:cc:7c:06:30:49:26:e0:bd:2b:6b:b3: 01:40:a0:27:8f:25:93:04:e1:55:cb:69:e6:df:67:e2:6d:04: 76:4f:84:23:a7:3b:d7:cb:a0:8d:72:00:7b:8c:31:79:a0:bd: 97:a9:01:96:e4:f7:5d:ca:3f:fb:9f:1c:54:4e:d3:17:d2:66: e6:f3:c1:46:cb:06:a1:6e:bc:3c:a6:27:ae:a8:4d:bc:f1:3b: bb:d2:b9:88:29:1c:7a:b0:86:4d:9a:99:fc:06:61:9b:fe:ce: b8:51:d0:fb:c4:c0:e6:7f:52:b6:54:70:bd:cf:dd:5a:ff:50: 6f:4a:c2:93:1f:cb:62:41:0d:19:ae:0e:21:15:1d:c7:3a:5b: bc:30:a2:80 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87UihwjLxw57Q5mUSnBAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj ZDNkZjQwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjkyOGUyYjU5Mzg2ZTk1NjJhNjc5ODg5OGY3NmVhNTIxMjYzNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5E6RSUkO5ssrZ1OrJuVwPijwMMD i2JmuvtZ+tJJUOVL3ElOeW3vAptv32JFm5/OoEsqee+uYgOmd0yprmdFrmrANyhu CsA9a3g127km217SbvuYimmYchGv2ZE6u+a0nGkDTOWBN7L2lfGov+RMgUa0GmKJ xnJp/kjqLOWk27FU+xWv/DnqHHtkK6GCLJcTADfja1pa0Yinmw0tnq0IKWdfarj5 sw2hi9YC43OF0SRj+Qx6TVdyLUtSp9HFtwkoKkRP9O9ONcQqtUET39XA9s+ERkGI gRzzaImmPTPD4Qa9fQUh7wgiFPcZj6dhfb8npYaU9IBgBJAQ8+O3r4E45QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKaSjitZOG6VYqZ5iJj3bqUhJjQtMB8GA1UdIwQY MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt ZDJlMTBjOTc2NDVmLzEvcHBLT0sxazRicFZpcG5tSW1QZHVwU0VtTkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRPEAwQB wn32AwQAwxaeMA0GCSqGSIb3DQEBCwUAA4IBAQBXsgiCCIT9NShn2M9aLqOsmahP NbIoYYM+AJDOZlNNQM6T3/2p9pmlZb/T79se/DVRmqlITz3IwwOWu+LLwnELE8N+ CCheXOm2v45mn9FRXEVAUWCc9KjlRK4cvt54+a4cvwcN6yI01RbLbHncd1EuAbe3 zHwGMEkm4L0ra7MBQKAnjyWTBOFVy2nm32fibQR2T4QjpzvXy6CNcgB7jDF5oL2X qQGW5Pddyj/7nxxUTtMX0mbm88FGywahbrw8pieuqE288Tu70rmIKRx6sIZNmpn8 BmGb/s64UdD7xMDmf1K2VHC9z91a/1BvSsKTH8tiQQ0Zrg4hFR3HOlu8MKKA -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:44 2026 by rpki-client