This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PP9oA_E391BIuSGTuqgWVwQAMqM.roa File: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (raw, json) Hash identifier: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE= Subject key identifier: 3C:FF:68:03:F1:37:F7:50:48:B9:21:93:BA:A8:16:57:04:00:32:A3 Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D26F39C5397177DE4E19B5E4FF88D Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PP9oA_E391BIuSGTuqgWVwQAMqM.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.141.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:f3:9c:53:97:17:7d:e4:e1:9b:5e:4f:f8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cff6803f137f75048b92193baa81657040032a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:5b:09:bf:db:c5:31:3c:11:29:cb:5c:20: 1f:ad:5a:06:2f:a0:7c:bc:a4:67:d8:28:5b:94:88: 86:dc:27:e9:15:9c:b7:eb:ca:20:14:58:f3:1a:66: 34:59:c8:5f:b3:70:7a:35:c5:49:46:f9:54:44:87: 43:8a:91:6a:6b:21:2d:d1:2c:44:9f:89:fa:29:49: 62:fa:60:f7:a3:e9:89:a9:90:c5:ff:2f:f9:a8:5a: 5d:70:aa:15:81:09:02:a0:f1:b7:2e:cb:0e:d9:cd: aa:d6:40:a0:d3:a2:fd:0a:9a:da:bc:43:d1:7f:c7: 81:76:70:f0:cc:c3:18:24:1a:df:b4:a0:9c:74:5a: 1d:b1:32:ec:f5:b7:07:ab:f5:93:1a:50:07:c9:ff: 84:ef:28:54:c0:4f:a6:7f:42:85:38:97:a3:cb:39: db:db:be:6c:58:70:0f:ca:d6:d4:b9:ea:f4:27:f7: d7:f5:ef:bb:87:2e:c9:c0:f2:3f:b7:43:c3:a7:a5: 91:57:27:dc:39:c6:10:81:d7:01:7b:a5:01:64:97: b6:28:2b:22:e2:3c:94:24:e2:89:25:36:5a:76:7c: e7:0a:b5:a8:8a:6b:09:fe:72:57:9f:87:b5:0c:da: 49:b6:f3:3a:a1:36:cb:2f:dd:da:e8:a9:3e:c9:f6: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FF:68:03:F1:37:F7:50:48:B9:21:93:BA:A8:16:57:04:00:32:A3 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PP9oA_E391BIuSGTuqgWVwQAMqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.214.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d8:76:9f:a1:ca:3e:e6:c0:ea:24:5a:10:ca:fc:99:10:d6: 9f:ce:17:ee:06:51:d3:b0:64:80:25:b4:c4:f8:3e:ea:6f:9e: fc:17:a0:18:f6:6d:58:26:ed:d7:fb:dd:0c:84:8c:bd:be:05: 1c:18:38:70:5c:04:a7:21:19:b3:41:39:ad:ed:46:16:f0:52: e3:b6:65:ff:29:2a:b3:13:78:2e:36:ac:97:de:f9:b1:8c:2d: fb:9f:89:fe:06:9a:68:8e:7c:27:dd:d6:27:ed:26:03:88:b5: 71:1b:07:93:e7:53:4a:05:4c:7d:df:d6:bb:5a:f8:4a:bd:90: d4:a9:2d:60:82:5c:ea:18:36:3a:54:3a:07:c4:c8:4b:63:71: 08:4c:99:a1:b9:04:77:2a:b3:e9:99:c7:47:81:e1:5d:65:2c: 52:f2:11:81:6c:78:b8:58:ba:b9:4f:df:23:66:e5:ac:62:4a: 63:42:1b:c0:a3:1f:84:00:f1:73:b9:33:56:a5:9c:4a:3e:14: 04:7d:65:00:aa:54:37:75:2f:38:6c:b0:94:db:30:95:26:08: f4:43:d9:45:96:d0:03:5b:c7:dd:05:be:7e:97:58:19:a2:56: 14:7d:1c:ea:25:a7:b2:8d:c7:ea:51:08:ba:22:f0:a0:98:5d: 3a:37:35:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSbznFOXF33k4ZteT/iNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2ZmNjgwM2YxMzdmNzUwNDhiOTIxOTNiYWE4MTY1NzA0MDAzMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bVbCb/bxTE8ESnLXCAfrVoGL6B8 vKRn2ChblIiG3CfpFZy368ogFFjzGmY0Wchfs3B6NcVJRvlURIdDipFqayEt0SxE n4n6KUli+mD3o+mJqZDF/y/5qFpdcKoVgQkCoPG3LssO2c2q1kCg06L9CpravEPR f8eBdnDwzMMYJBrftKCcdFodsTLs9bcHq/WTGlAHyf+E7yhUwE+mf0KFOJejyznb 275sWHAPytbUuer0J/fX9e+7hy7JwPI/t0PDp6WRVyfcOcYQgdcBe6UBZJe2KCsi 4jyUJOKJJTZadnznCrWoimsJ/nJXn4e1DNpJtvM6oTbLL93a6Kk+yfbK5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDz/aAPxN/dQSLkhk7qoFlcEADKjMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvUFA5b0FfRTM5MUJJdVNHVHVxZ1dWd1FBTXFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3WMA0G CSqGSIb3DQEBCwUAA4IBAQCI2Hafoco+5sDqJFoQyvyZENafzhfuBlHTsGSAJbTE +D7qb578F6AY9m1YJu3X+90MhIy9vgUcGDhwXASnIRmzQTmt7UYW8FLjtmX/KSqz E3guNqyX3vmxjC37n4n+Bppojnwn3dYn7SYDiLVxGweT51NKBUx939a7WvhKvZDU qS1gglzqGDY6VDoHxMhLY3EITJmhuQR3KrPpmcdHgeFdZSxS8hGBbHi4WLq5T98j ZuWsYkpjQhvAox+EAPFzuTNWpZxKPhQEfWUAqlQ3dS84bLCU2zCVJgj0Q9lFltAD W8fdBb5+l1gZolYUfRzqJaeyjcfqUQi6IvCgmF06NzXE -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:03 2026 by rpki-client