This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa File: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (raw, json) Hash identifier: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0= Subject key identifier: A6:6B:F1:D3:08:12:67:E7:BA:0A:CC:5B:97:3F:14:34:6F:06:2E:1E Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80DACC190FFB25BD6CDE0BF3F4936 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213296 IP address blocks: 45.80.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0d:ac:c1:90:ff:b2:5b:d6:cd:e0:bf:3f:49:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a66bf1d3081267e7ba0acc5b973f14346f062e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:12:29:70:e1:4e:af:b9:3b:07:fb:61:32: 9d:38:1b:c9:a8:e9:4a:ed:1f:bb:d6:b2:ee:4b:83: 2b:38:04:5c:93:da:71:ab:4e:d4:97:4c:75:b2:b1: e4:b0:b0:27:39:2e:c8:17:b2:47:73:fc:1c:5f:54: e8:8d:4f:c0:8f:74:3a:ca:90:aa:36:82:20:03:82: 9f:5b:69:d9:0a:c9:0e:89:31:1d:de:a1:4b:f2:7b: a4:af:4f:da:87:e6:92:25:fc:96:cb:61:73:ec:e0: 5e:ca:60:df:fb:a1:6f:59:d2:f8:4a:54:d4:78:d4: 27:7c:2f:10:c9:e4:26:06:17:26:fc:d5:f2:e4:d2: e5:b1:71:34:0f:d7:86:ed:b6:47:b6:1a:c4:5c:82: db:a3:f8:e8:73:72:a5:2c:f2:01:b3:5b:58:29:83: f4:10:ba:f1:c9:a2:66:81:3f:eb:9b:dc:05:59:f4: b3:ab:5e:06:ed:0f:60:b0:ff:7b:07:6e:67:06:59: a4:72:b4:f7:1b:c5:c7:0f:3e:03:35:f8:ef:ee:7f: 19:16:96:62:f6:08:1e:f0:71:c2:78:1c:7e:9b:bd: a5:1c:20:8a:00:10:29:7a:a2:16:71:bb:ba:bf:f1: 7c:2a:9c:f3:0d:19:72:89:86:8e:cd:77:cc:7d:84: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6B:F1:D3:08:12:67:E7:BA:0A:CC:5B:97:3F:14:34:6F:06:2E:1E X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.228.0/22 Signature Algorithm: sha256WithRSAEncryption b0:ac:6d:64:1e:5c:1a:84:18:b8:61:62:52:46:d9:79:2c:69: 97:d5:88:1a:d1:85:8b:6e:f3:7b:1e:40:8e:3f:73:8a:da:47: da:e7:92:b4:1a:4e:f4:f2:6f:27:00:4f:ec:81:26:75:4f:da: d5:ab:8b:f5:1d:8a:94:91:92:7c:e7:9a:d9:cf:09:fe:bb:53: c3:9c:9f:81:c7:18:97:e2:82:62:a7:2c:87:f0:16:bf:2b:d8: c4:7a:c6:23:5c:ac:82:39:81:65:aa:da:a5:b8:af:4e:83:c9: 59:aa:ca:7c:02:99:f0:10:4b:35:97:ad:0a:a6:31:a9:b5:23: 09:3c:53:7e:f0:1f:82:b7:7a:db:bf:e4:a4:9b:91:77:0e:26: a3:a2:f3:b6:92:b2:a5:46:2c:5f:e1:ee:c7:20:3c:5e:b1:f3: 08:a4:ac:21:70:c0:98:91:ef:a9:2e:0b:46:84:0f:82:8e:4f: a3:e4:fa:c4:d8:83:5c:c6:2b:c9:cc:55:dd:3a:f4:c1:c9:47: d9:7e:39:07:0e:b4:fd:ec:c2:da:e0:f1:7f:72:a3:24:34:7b: b1:09:7d:a1:02:54:45:a7:a8:a6:67:ca:9e:7e:e7:41:01:1d: fe:ed:36:b7:00:21:05:f4:6d:18:77:20:c9:70:cf:64:a2:ea: 84:d6:db:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yA2swZD/slvWzeC/P0k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjZiZjFkMzA4MTI2N2U3YmEwYWNjNWI5NzNmMTQzNDZmMDYyZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh8SKXDhTq+5Owf7YTKdOBvJqOlK 7R+71rLuS4MrOARck9pxq07Ul0x1srHksLAnOS7IF7JHc/wcX1TojU/Aj3Q6ypCq NoIgA4KfW2nZCskOiTEd3qFL8nukr0/ah+aSJfyWy2Fz7OBeymDf+6FvWdL4SlTU eNQnfC8QyeQmBhcm/NXy5NLlsXE0D9eG7bZHthrEXILbo/joc3KlLPIBs1tYKYP0 ELrxyaJmgT/rm9wFWfSzq14G7Q9gsP97B25nBlmkcrT3G8XHDz4DNfjv7n8ZFpZi 9gge8HHCeBx+m72lHCCKABApeqIWcbu6v/F8KpzzDRlyiYaOzXfMfYSv5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZr8dMIEmfnugrMW5c/FDRvBi4eMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvcG12eDB3Z1NaLWU2Q3N4Ymx6OFVORzhHTGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVDkMA0G CSqGSIb3DQEBCwUAA4IBAQCwrG1kHlwahBi4YWJSRtl5LGmX1Yga0YWLbvN7HkCO P3OK2kfa55K0Gk708m8nAE/sgSZ1T9rVq4v1HYqUkZJ855rZzwn+u1PDnJ+BxxiX 4oJipyyH8Ba/K9jEesYjXKyCOYFlqtqluK9Og8lZqsp8ApnwEEs1l60KpjGptSMJ PFN+8B+Ct3rbv+Skm5F3DiajovO2krKlRixf4e7HIDxesfMIpKwhcMCYke+pLgtG hA+Cjk+j5PrE2INcxivJzFXdOvTByUfZfjkHDrT97MLa4PF/cqMkNHuxCX2hAlRF p6imZ8qefudBAR3+7Ta3ACEF9G0YdyDJcM9kouqE1tvU -----END CERTIFICATE-----Generated at Tue Jan 20 00:54:56 2026 by rpki-client