This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/PVnKaPf91mf4o0pWWoMoyuOYLn0.roa File: PVnKaPf91mf4o0pWWoMoyuOYLn0.roa (raw, json) Hash identifier: bvYxvgOHnbm7x6gXSSyrjK4YHdzAS2cBUxtYdZAEIX4= Subject key identifier: 3D:59:CA:68:F7:FD:D6:67:F8:A3:4A:56:5A:83:28:CA:E3:98:2E:7D Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344 Certificate serial: 019B7BA5413166E24EB764F5460BA9B64B89 Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/PVnKaPf91mf4o0pWWoMoyuOYLn0.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204096 IP address blocks: 185.114.232.0/22 maxlen: 24 2a06:7280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:31:66:e2:4e:b7:64:f5:46:0b:a9:b6:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d59ca68f7fdd667f8a34a565a8328cae3982e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:f6:a0:a0:76:32:97:4d:1b:4b:5d:11:d6: 0a:da:47:a8:b3:a0:f4:a0:22:7b:b7:87:83:f3:03: af:3f:64:2a:5b:09:f4:f0:c5:a3:e6:56:2e:08:b5: 9b:6f:b5:8d:63:38:61:cc:28:f8:c8:cc:7b:25:30: 15:9d:06:de:d3:76:9d:ab:ca:63:a4:ae:c1:b0:84: e6:20:9e:01:d5:a1:2f:27:59:6d:7b:0c:79:3a:c5: a5:b6:8e:25:b7:94:ac:92:ea:a3:36:87:60:3b:6a: 21:c6:21:c2:b6:06:2a:ff:49:6a:2d:c7:dc:08:85: 64:fd:45:bc:d6:3f:ae:7b:20:09:2c:6d:98:a6:63: f1:af:05:4c:09:59:3a:54:bd:b2:da:f0:35:57:8d: 9a:cd:3c:3a:4e:20:dc:a5:b6:1c:22:8a:f5:a1:39: f7:0e:57:ce:99:9a:5e:2c:b4:72:33:64:52:79:0d: 8d:2b:26:84:7d:8f:80:b3:be:c1:57:9d:93:11:42: e0:be:78:e8:ba:ec:5e:bb:4a:78:36:23:71:79:dd: ae:f9:ab:cc:40:7d:fa:39:f4:e4:33:d4:ee:d4:00: 90:f4:b4:03:db:eb:5a:19:97:a4:72:c1:5b:99:e6: ed:7f:f2:1e:7f:73:95:c7:01:ef:0a:c1:de:db:e5: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:CA:68:F7:FD:D6:67:F8:A3:4A:56:5A:83:28:CA:E3:98:2E:7D X509v3 Authority Key Identifier: keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/PVnKaPf91mf4o0pWWoMoyuOYLn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.232.0/22 IPv6: 2a06:7280::/29 Signature Algorithm: sha256WithRSAEncryption 7c:34:a5:4b:7b:16:15:ef:4b:22:d7:1d:81:78:1d:11:f2:c9: 4e:b9:c0:eb:27:dc:28:44:bb:4a:ee:26:f8:b6:a2:dd:1a:da: 96:62:a6:45:b4:9d:a7:49:c9:f2:39:95:53:12:e1:9e:6d:41: d5:ca:d5:84:01:80:97:9e:c8:a6:6f:16:a9:22:5d:a3:9d:9a: a9:5e:72:f1:85:90:69:5a:a8:0a:99:7a:5d:8c:5d:97:a5:1a: 55:4b:c9:ca:76:c1:49:52:4f:f7:80:87:fe:42:19:59:42:bb: 1a:6a:a3:2a:4a:3b:1f:be:66:07:7f:b8:a4:61:5b:e5:2d:9d: dd:83:31:19:ab:8a:b8:12:c9:7b:4b:7f:e8:85:ed:05:d9:e4: 0d:dc:23:27:23:dd:ea:ba:48:0a:52:3d:c0:1b:94:70:55:e8: 86:f6:1b:e1:82:b8:53:eb:01:c9:ab:c4:88:a5:03:af:6c:42: c2:f0:35:c0:9b:e2:43:fb:7a:bd:88:ac:c8:b6:6a:1f:d6:99: 01:35:54:de:e6:f7:32:e1:5a:62:8c:ea:b9:b6:42:af:04:c7: ae:d9:5f:9d:c8:d6:14:66:89:80:a7:bf:a2:4b:9a:34:1e:73: d7:b6:1d:ed:01:0e:19:65:24:19:c1:b0:df:b4:f7:9f:51:97: ef:d9:89:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pUExZuJOt2T1RguptkuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx OGUzNDQwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDU5Y2E2OGY3ZmRkNjY3ZjhhMzRhNTY1YTgzMjhjYWUzOTgyZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h72oKB2MpdNG0tdEdYK2keos6D0 oCJ7t4eD8wOvP2QqWwn08MWj5lYuCLWbb7WNYzhhzCj4yMx7JTAVnQbe03adq8pj pK7BsITmIJ4B1aEvJ1ltewx5OsWlto4lt5SskuqjNodgO2ohxiHCtgYq/0lqLcfc CIVk/UW81j+ueyAJLG2YpmPxrwVMCVk6VL2y2vA1V42azTw6TiDcpbYcIor1oTn3 DlfOmZpeLLRyM2RSeQ2NKyaEfY+As77BV52TEULgvnjouuxeu0p4NiNxed2u+avM QH36OfTkM9Tu1ACQ9LQD2+taGZekcsFbmebtf/Ief3OVxwHvCsHe2+V4zwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD1Zymj3/dZn+KNKVlqDKMrjmC59MB8GA1UdIwQY MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt YTQwOWNhMzdhM2VhLzEvUFZuS2FQZjkxbWY0bzBwV1dvTW95dU9ZTG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXLoMA0E AgACMAcDBQMqBnKAMA0GCSqGSIb3DQEBCwUAA4IBAQB8NKVLexYV70si1x2BeB0R 8slOucDrJ9woRLtK7ib4tqLdGtqWYqZFtJ2nScnyOZVTEuGebUHVytWEAYCXnsim bxapIl2jnZqpXnLxhZBpWqgKmXpdjF2XpRpVS8nKdsFJUk/3gIf+QhlZQrsaaqMq SjsfvmYHf7ikYVvlLZ3dgzEZq4q4Esl7S3/ohe0F2eQN3CMnI93qukgKUj3AG5Rw VeiG9hvhgrhT6wHJq8SIpQOvbELC8DXAm+JD+3q9iKzItmof1pkBNVTe5vcy4Vpi jOq5tkKvBMeu2V+dyNYUZomAp7+iS5o0HnPXth3tAQ4ZZSQZwbDftPefUZfv2Ymx -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:34 2026 by rpki-client