This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/PT0iPf8XMpQPl5BlUYwpygdKHKk.roa File: PT0iPf8XMpQPl5BlUYwpygdKHKk.roa (raw, json) Hash identifier: MxtogpRy0fRVdZ0U9S8IJN7sIIbc1nD0q6Peg//Vlxk= Subject key identifier: 3D:3D:22:3D:FF:17:32:94:0F:97:90:65:51:8C:29:CA:07:4A:1C:A9 Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f Certificate serial: 019B79104577CA52FCFBCC151372FE75AA0A Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/PT0iPf8XMpQPl5BlUYwpygdKHKk.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8387 IP address blocks: 212.95.17.0/24 maxlen: 24 213.162.64.0/23 maxlen: 23 213.162.78.0/24 maxlen: 24 2001:678:5a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:45:77:ca:52:fc:fb:cc:15:13:72:fe:75:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d3d223dff1732940f979065518c29ca074a1ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:05:63:06:5f:74:31:b7:18:e9:0d:b6:2b: 2b:41:dc:9f:58:49:94:4a:ff:5f:73:4b:65:3d:1d: 88:f6:e9:90:a4:92:14:5f:33:bd:59:66:b2:f3:50: 89:ea:ac:81:e0:77:8a:a7:3e:2d:79:18:a0:95:63: cc:1d:a2:c8:75:9f:67:28:01:7c:4b:2f:65:d7:18: f1:86:af:6e:32:fa:65:e0:16:d1:43:75:dd:c3:2a: 84:db:3c:69:23:af:a3:2e:98:45:88:5c:8e:3d:b8: 38:60:d6:d2:8d:e7:a9:f7:fd:ac:6f:79:17:90:1b: a4:34:c7:0b:91:cc:13:96:64:fa:6e:63:05:29:a0: 4d:d7:0b:89:9c:dc:71:4b:62:4f:87:98:3e:81:ee: 0e:23:e8:a8:50:a8:8d:a5:c6:e6:9b:68:44:2a:39: 92:63:14:53:f2:26:61:69:d7:08:dc:79:2b:b4:1b: a3:8c:5f:ce:36:77:44:5a:cd:93:57:a6:64:f0:e8: 39:8a:e7:37:95:eb:11:61:16:96:da:38:2c:74:9b: ae:44:45:47:76:00:9a:76:45:cc:e7:27:bb:1a:e0: e1:36:82:1c:1e:54:c5:4c:b4:4e:34:49:c7:af:22: 7d:83:19:92:f3:a3:46:73:4a:e9:2d:17:ec:79:33: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:22:3D:FF:17:32:94:0F:97:90:65:51:8C:29:CA:07:4A:1C:A9 X509v3 Authority Key Identifier: keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/PT0iPf8XMpQPl5BlUYwpygdKHKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.95.17.0/24 213.162.64.0/23 213.162.78.0/24 IPv6: 2001:678:5a8::/48 Signature Algorithm: sha256WithRSAEncryption 45:80:83:9c:ab:37:a2:14:97:ef:d7:50:b6:a1:eb:51:aa:75: b9:b2:78:f3:cf:3f:27:6d:a4:48:b2:31:3d:11:65:8e:8c:10: 59:92:cd:44:cc:ac:95:e6:36:25:75:5f:a5:70:66:4b:97:a2: 19:47:7b:fd:64:36:62:7f:0f:f9:d9:03:6b:29:a1:5e:93:e3: 3e:b1:ec:3f:ed:3a:f9:67:32:f2:32:41:85:92:73:86:5e:a1: c8:e9:68:a7:38:a3:f2:5e:d9:6a:68:dc:ef:c0:90:ca:87:ec: 94:b7:a0:f5:41:90:d6:db:07:4f:c9:62:5f:51:76:ff:70:f7: d9:5a:5d:94:c0:79:aa:e9:3c:c3:ff:d4:7b:d5:74:59:f3:01: 5c:08:94:e9:6d:2e:bc:d7:10:0b:54:78:d6:a5:00:bc:d1:41: 8c:52:4a:87:48:12:7c:60:af:22:ec:dd:14:1c:5c:83:0f:7f: cd:ae:1e:72:22:11:d4:bb:80:8e:92:4a:88:49:cb:33:b4:2a: 63:36:74:68:67:e0:c4:ee:00:60:c4:88:bd:78:ae:20:f6:2c: 08:41:82:26:a2:54:e2:dc:9e:6e:e7:de:10:7a:b9:da:28:64: 6c:ac:51:66:32:0b:c5:65:12:97:4b:b8:d0:ad:0b:28:f1:40: 6f:83:1c:a4 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EEV3ylL8+8wVE3L+daoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2JjNzYxNGI0OTg3OGJmMzdmZGUwYzE4ZDdjODUxYzJk MDdlNmYwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDNkMjIzZGZmMTczMjk0MGY5NzkwNjU1MThjMjljYTA3NGExY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe0FYwZfdDG3GOkNtisrQdyfWEmU Sv9fc0tlPR2I9umQpJIUXzO9WWay81CJ6qyB4HeKpz4teRiglWPMHaLIdZ9nKAF8 Sy9l1xjxhq9uMvpl4BbRQ3XdwyqE2zxpI6+jLphFiFyOPbg4YNbSjeep9/2sb3kX kBukNMcLkcwTlmT6bmMFKaBN1wuJnNxxS2JPh5g+ge4OI+ioUKiNpcbmm2hEKjmS YxRT8iZhadcI3HkrtBujjF/ONndEWs2TV6Zk8Og5iuc3lesRYRaW2jgsdJuuREVH dgCadkXM5ye7GuDhNoIcHlTFTLRONEnHryJ9gxmS86NGc0rpLRfseTNjxwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFD09Ij3/FzKUD5eQZVGMKcoHShypMB8GA1UdIwQY MBaAFAbLx2FLSYeL83/eDBjXyFHC0H5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnN2SFlVdEpoNHZ6Zjk0TUdOZklVY0xRZm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84NzdmOTktN2FjYy00ZDMwLTgzYzgt NTc1YTYwZGU2NmE0LzEvUFQwaVBmOFhNcFFQbDVCbFVZd3B5Z2RLSEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84NzdmOTktN2FjYy00ZDMwLTgzYzgtNTc1YTYwZGU2NmE0 LzEvQnN2SFlVdEpoNHZ6Zjk0TUdOZklVY0xRZm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQA1F8RAwQB 1aJAAwQA1aJOMA8EAgACMAkDBwAgAQZ4BagwDQYJKoZIhvcNAQELBQADggEBAEWA g5yrN6IUl+/XULah61GqdbmyePPPPydtpEiyMT0RZY6MEFmSzUTMrJXmNiV1X6Vw ZkuXohlHe/1kNmJ/D/nZA2spoV6T4z6x7D/tOvlnMvIyQYWSc4ZeocjpaKc4o/Je 2Wpo3O/AkMqH7JS3oPVBkNbbB0/JYl9Rdv9w99laXZTAearpPMP/1HvVdFnzAVwI lOltLrzXEAtUeNalALzRQYxSSodIEnxgryLs3RQcXIMPf82uHnIiEdS7gI6SSohJ yzO0KmM2dGhn4MTuAGDEiL14riD2LAhBgiaiVOLcnm7n3hB6udooZGysUWYyC8Vl EpdLuNCtCyjxQG+DHKQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:26 2026 by rpki-client