This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa File: PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa (raw, json) Hash identifier: 24ateHwuMk5CGZJvNYulALkvFpYFOYXvbKO8p0Z7NPQ= Subject key identifier: 3E:F5:07:7B:EA:67:E2:79:DA:39:85:AD:8C:8A:5B:6C:E8:EB:1A:FA Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b Certificate serial: 019B76EAF591DA0134F192157CAD993F449E Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15372 IP address blocks: 176.111.245.0/24 maxlen: 24 2001:67c:12b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f5:91:da:01:34:f1:92:15:7c:ad:99:3f:44:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ef5077bea67e279da3985ad8c8a5b6ce8eb1afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:bf:e9:e6:a0:5c:f7:0d:a0:6a:91:43:b9: ca:de:aa:90:42:ad:30:d4:ce:1c:d3:04:47:76:c4: e7:6f:8e:e1:52:1e:dc:20:6a:6c:67:08:4d:64:3f: 1e:96:09:34:1a:bc:fe:66:e5:89:62:02:a4:f4:b7: cc:71:21:31:9c:c4:a9:9d:11:dc:73:6a:6f:01:7c: 06:77:d6:8a:0a:ba:40:82:c6:7f:ee:d0:42:84:fb: aa:7e:be:28:78:47:8a:4d:8e:a8:aa:5d:69:bc:8d: 8d:03:ea:58:f0:00:e4:15:e6:9f:f3:ef:a4:01:ab: ac:9f:74:50:5c:c7:6d:2f:c1:fc:5f:5d:65:49:83: 30:b3:01:ff:30:81:50:f1:a2:c2:ef:af:91:a4:5c: 82:96:1e:9e:df:06:ea:23:25:04:b6:dc:b0:45:af: d7:0d:f6:0e:37:1f:c8:51:80:96:f6:b7:e5:22:da: 81:50:29:5c:4d:de:88:44:ca:f6:59:88:87:e6:a3: 77:84:57:8a:61:3f:08:f6:1b:8c:7b:f4:e3:a2:ae: 3b:3d:e2:78:84:c1:e3:0b:13:a3:7d:fe:13:8a:20: ae:26:21:17:c6:5b:12:4f:18:5f:ac:4e:b2:7d:b8: 49:0b:7b:68:ef:4d:bf:53:2e:5a:26:50:e2:99:d9: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F5:07:7B:EA:67:E2:79:DA:39:85:AD:8C:8A:5B:6C:E8:EB:1A:FA X509v3 Authority Key Identifier: keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/PvUHe-pn4nnaOYWtjIpbbOjrGvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.245.0/24 IPv6: 2001:67c:12b8::/48 Signature Algorithm: sha256WithRSAEncryption 3f:59:e5:27:ef:d3:f3:1e:b4:59:92:8a:c9:3d:39:12:1d:c3: 4b:ad:a0:52:30:6c:1c:f0:4b:d3:97:e4:9f:e3:6a:86:0f:e2: ca:32:02:b4:ab:88:4f:72:a5:0f:62:f0:a6:a3:e7:b4:0b:c2: 41:02:86:08:30:68:03:f9:9d:1d:cf:ac:4d:25:ed:f9:53:4b: 6f:f9:34:30:c7:dd:36:8e:53:79:7d:1c:1b:a2:1f:c2:99:7d: 41:fd:e9:5c:44:3c:d2:b3:bd:38:be:b7:d6:6c:71:50:44:cd: d2:e6:9a:e4:ac:73:79:58:c3:a7:cd:68:0a:1f:5f:42:cb:69: 9b:d6:e5:0b:56:38:1e:fe:21:8b:17:a4:f3:2c:bc:73:f6:dd: 02:a0:25:c8:a5:87:0f:0b:cc:2c:21:f1:d5:37:e7:3d:a2:ff: 44:7f:b1:90:58:23:a9:40:4a:1c:3b:d2:5b:43:bb:25:cb:09: c2:e1:07:7a:ff:0d:e4:b7:d4:ce:23:ec:79:22:8a:16:1c:a7: 97:a8:53:44:a0:b9:37:48:39:32:5f:c2:41:e3:01:9f:95:14: 62:d0:57:67:16:e9:a7:cc:5b:10:7e:c4:0a:ad:6c:3c:8b:29: 51:53:f3:45:50:18:82:95:36:32:87:fa:93:c9:64:e0:bd:89: d8:32:37:cb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26vWR2gE08ZIVfK2ZP0SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYWFlNTE0YzVmOTk0MDM5MTQzNTYxNGQ3OTQwNGJlZTEy MDliM2IwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWY1MDc3YmVhNjdlMjc5ZGEzOTg1YWQ4YzhhNWI2Y2U4ZWIxYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUK/6eagXPcNoGqRQ7nK3qqQQq0w 1M4c0wRHdsTnb47hUh7cIGpsZwhNZD8elgk0Grz+ZuWJYgKk9LfMcSExnMSpnRHc c2pvAXwGd9aKCrpAgsZ/7tBChPuqfr4oeEeKTY6oql1pvI2NA+pY8ADkFeaf8++k Aausn3RQXMdtL8H8X11lSYMwswH/MIFQ8aLC76+RpFyClh6e3wbqIyUEttywRa/X DfYONx/IUYCW9rflItqBUClcTd6IRMr2WYiH5qN3hFeKYT8I9huMe/Tjoq47PeJ4 hMHjCxOjff4TiiCuJiEXxlsSTxhfrE6yfbhJC3to702/Uy5aJlDimdk8xQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD71B3vqZ+J52jmFrYyKW2zo6xr6MB8GA1UdIwQY MBaAFPyq5RTF+ZQDkUNWFNeUBL7hIJs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEt NjdhOThlMjU2Y2M3LzEvUHZVSGUtcG40bm5hT1lXdGpJcGJiT2pyR3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81NjJlMWQtOTUyYS00ZmVhLTllNGEtNjdhOThlMjU2Y2M3 LzEvX0tybEZNWDVsQU9SUTFZVTE1UUV2dUVnbXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsG/1MA8E AgACMAkDBwAgAQZ8ErgwDQYJKoZIhvcNAQELBQADggEBAD9Z5Sfv0/MetFmSisk9 ORIdw0utoFIwbBzwS9OX5J/jaoYP4soyArSriE9ypQ9i8Kaj57QLwkEChggwaAP5 nR3PrE0l7flTS2/5NDDH3TaOU3l9HBuiH8KZfUH96VxEPNKzvTi+t9ZscVBEzdLm muSsc3lYw6fNaAofX0LLaZvW5QtWOB7+IYsXpPMsvHP23QKgJcilhw8LzCwh8dU3 5z2i/0R/sZBYI6lAShw70ltDuyXLCcLhB3r/DeS31M4j7HkiihYcp5eoU0SguTdI OTJfwkHjAZ+VFGLQV2cW6afMWxB+xAqtbDyLKVFT80VQGIKVNjKH+pPJZOC9idgy N8s= -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:55 2026 by rpki-client