This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/Pa-REvh5sObWkBoz7bJgJfUNNtY.roa File: Pa-REvh5sObWkBoz7bJgJfUNNtY.roa (raw, json) Hash identifier: VTVwzFjol2i2vqCqnvi41UK4vnNgLEigWpUo/HfYOUM= Subject key identifier: 3D:AF:91:12:F8:79:B0:E6:D6:90:1A:33:ED:B2:60:25:F5:0D:36:D6 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B7B362B34C96671F8014DA7AE14AB1D0B Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/Pa-REvh5sObWkBoz7bJgJfUNNtY.roa Signing time: Thu 01 Jan 2026 20:18:26 +0000 ROA not before: Thu 01 Jan 2026 20:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15410 IP address blocks: 62.80.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2b:34:c9:66:71:f8:01:4d:a7:ae:14:ab:1d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3daf9112f879b0e6d6901a33edb26025f50d36d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:3c:35:c5:8d:0e:72:00:15:9f:b4:b9:ea: 7c:50:66:f2:57:e0:da:17:aa:d8:91:03:2e:8d:94: aa:a5:c6:1f:8c:3a:ce:c6:3f:80:ff:cd:ef:9c:c7: ed:5e:a6:34:12:ef:21:62:5e:09:b3:4c:be:bf:1e: a1:5d:62:10:2f:41:63:7a:c2:5e:34:ce:f0:47:c9: 88:a0:2b:dc:24:86:59:14:dd:d7:99:fc:66:37:48: 07:cd:74:dc:5d:29:f5:3f:29:87:d0:9c:2d:be:97: d5:90:5b:83:18:2d:79:d8:67:1d:1a:81:bd:d4:46: a3:dc:04:e8:be:78:da:63:23:aa:30:58:1e:1f:0c: 72:fd:76:f9:aa:a6:67:3e:87:22:d9:6b:29:cc:b1: 57:d9:1a:77:5a:d6:88:15:96:c5:1e:52:ae:4e:19: c5:d2:7c:93:f0:37:9d:aa:f9:fc:60:e8:b0:b1:52: 8c:bb:21:85:70:34:58:8e:31:f5:93:9a:27:f9:df: b5:42:40:a3:d8:b4:fb:ff:bd:1b:4a:c2:41:e1:e5: 7d:16:f8:05:ae:9d:8a:df:96:ff:41:e8:4c:22:64: 66:c9:4e:d4:74:a2:27:c7:44:d5:93:b0:7b:31:48: 7f:2c:5c:a7:64:26:31:ba:7d:94:50:4e:ce:7a:65: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AF:91:12:F8:79:B0:E6:D6:90:1A:33:ED:B2:60:25:F5:0D:36:D6 X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/Pa-REvh5sObWkBoz7bJgJfUNNtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.80.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:d4:57:40:b5:20:34:3c:6d:47:fa:fe:ac:37:07:3f:ee:d3: 17:ad:78:6f:d9:d3:93:e1:5f:a3:3d:af:15:ad:2e:c5:a9:8a: de:6d:79:0e:d2:aa:3a:6c:c5:1e:22:0c:9f:50:f3:e9:91:74: aa:6c:db:2c:07:37:8b:38:49:be:2b:2e:03:27:12:56:b0:9e: e0:44:66:34:15:a1:38:1f:5d:22:dc:d4:26:9d:2f:43:55:e4: 36:d4:8f:14:a3:70:c8:2d:78:b6:51:40:4a:d3:30:5b:b0:b3: 84:53:51:c2:45:43:da:e9:f0:60:7a:ff:9b:b4:99:36:fb:f2: 44:11:6c:e7:c8:e0:ec:7b:7c:b4:0b:4c:aa:de:6f:2e:15:67: ac:ef:7f:a7:e4:ab:3a:69:cc:83:e2:5c:77:3c:f8:b9:b0:91: ac:f2:f9:ea:3b:dc:6f:2a:2e:5d:96:db:c1:b1:cc:70:d5:59: 4f:8f:a8:d6:fd:5d:d0:02:15:04:57:7a:12:52:6e:a0:fb:0b: 17:75:56:46:1e:a9:89:33:ab:c8:1b:b9:2c:a8:3c:3c:f7:4a: 8b:67:91:01:c7:07:8a:1e:2d:41:d4:b7:5d:10:13:3d:32:82: bc:41:54:8b:c2:b5:f7:d6:3d:38:32:62:ef:ea:9e:8c:2d:2a: 42:d4:97:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nis0yWZx+AFNp64Uqx0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFmOTExMmY4NzliMGU2ZDY5MDFhMzNlZGIyNjAyNWY1MGQzNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssg8NcWNDnIAFZ+0uep8UGbyV+Da F6rYkQMujZSqpcYfjDrOxj+A/83vnMftXqY0Eu8hYl4Js0y+vx6hXWIQL0FjesJe NM7wR8mIoCvcJIZZFN3XmfxmN0gHzXTcXSn1PymH0JwtvpfVkFuDGC152GcdGoG9 1Eaj3ATovnjaYyOqMFgeHwxy/Xb5qqZnPoci2WspzLFX2Rp3WtaIFZbFHlKuThnF 0nyT8Dedqvn8YOiwsVKMuyGFcDRYjjH1k5on+d+1QkCj2LT7/70bSsJB4eV9FvgF rp2K35b/QehMImRmyU7UdKInx0TVk7B7MUh/LFynZCYxun2UUE7OemXDkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2vkRL4ebDm1pAaM+2yYCX1DTbWMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvUGEtUkV2aDVzT2JXa0JvejdiSmdKZlVOTnRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPlBAMA0G CSqGSIb3DQEBCwUAA4IBAQAt1FdAtSA0PG1H+v6sNwc/7tMXrXhv2dOT4V+jPa8V rS7FqYrebXkO0qo6bMUeIgyfUPPpkXSqbNssBzeLOEm+Ky4DJxJWsJ7gRGY0FaE4 H10i3NQmnS9DVeQ21I8Uo3DILXi2UUBK0zBbsLOEU1HCRUPa6fBgev+btJk2+/JE EWznyODse3y0C0yq3m8uFWes73+n5Ks6acyD4lx3PPi5sJGs8vnqO9xvKi5dltvB scxw1VlPj6jW/V3QAhUEV3oSUm6g+wsXdVZGHqmJM6vIG7ksqDw890qLZ5EBxweK Hi1B1LddEBM9MoK8QVSLwrX31j04MmLv6p6MLSpC1JeL -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:48 2026 by rpki-client