This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/pnTV-xEaMoeNed3d1zVxVfZqK_E.roa File: pnTV-xEaMoeNed3d1zVxVfZqK_E.roa (raw, json) Hash identifier: cQ4cTJqwVUYM1dCbNyuS7CuucIG4Wq7i0SfCs2VPf1M= Subject key identifier: A6:74:D5:FB:11:1A:32:87:8D:79:DD:DD:D7:35:71:55:F6:6A:2B:F1 Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f Certificate serial: 019B79ECCF6A8964901EB2FBA1F338AFD0CF Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/pnTV-xEaMoeNed3d1zVxVfZqK_E.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209948 IP address blocks: 212.81.52.0/24 maxlen: 24 212.81.53.0/24 maxlen: 24 212.81.54.0/24 maxlen: 24 212.81.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:cf:6a:89:64:90:1e:b2:fb:a1:f3:38:af:d0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a674d5fb111a32878d79ddddd7357155f66a2bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:eb:21:56:fa:30:e2:93:06:b5:68:14:b8: 31:2b:80:46:5e:01:b7:af:c6:db:eb:e8:24:35:0c: 3e:8c:06:9b:b8:d0:44:ea:2f:fc:aa:c2:61:36:98: fe:17:1e:f8:6e:1f:c7:b2:fa:b8:bb:4f:5b:ce:93: cf:2c:13:9e:61:f4:c6:ec:17:dd:2a:63:af:fa:94: 62:d4:c3:d3:98:fa:93:6f:83:e0:37:7e:e8:ab:ad: 25:a2:36:01:f5:f6:de:45:f9:ce:2e:5f:aa:84:74: 01:e9:ab:a1:d5:b4:d1:38:ec:56:b4:d1:72:79:34: 11:77:46:b2:16:c6:b1:fa:8a:75:dd:d3:01:65:8b: e2:6e:22:b7:f8:b1:92:4f:91:e7:af:10:4a:7d:4c: a4:8e:85:46:44:a5:8b:83:eb:d5:ac:55:64:55:f0: 11:bf:16:bc:10:3a:d0:b5:b1:51:5f:4b:1c:26:d0: 6e:1c:7d:51:34:6b:87:dc:af:0c:58:8f:03:17:f1: 43:d4:46:33:dc:bb:0c:0a:65:b3:05:cc:f0:b5:7c: 06:11:3c:f1:05:07:26:e1:20:66:c5:b3:d3:5d:c0: f9:cd:10:52:ad:fe:08:75:fd:f3:a0:b0:93:67:ce: ee:15:a4:0d:2f:01:fb:90:e7:92:f7:6d:f9:6b:c6: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:D5:FB:11:1A:32:87:8D:79:DD:DD:D7:35:71:55:F6:6A:2B:F1 X509v3 Authority Key Identifier: keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/pnTV-xEaMoeNed3d1zVxVfZqK_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.52.0/22 Signature Algorithm: sha256WithRSAEncryption 03:c9:ea:4f:c1:b2:93:ac:1d:20:ed:8d:ed:ab:d5:d3:5f:f3: 34:44:02:a4:f9:21:44:14:64:32:4f:b2:61:06:c5:dc:55:6f: 71:f2:93:f6:1e:c0:37:7a:3c:3b:6f:27:d7:f1:e7:da:a1:39: 5f:68:94:43:6d:11:29:0f:19:2c:c9:bc:6d:e4:3c:dc:b4:32: 5f:79:96:92:ab:a9:b4:4b:48:ce:08:16:55:27:c3:42:6c:4b: 06:4c:af:cb:e4:e8:0e:9f:93:37:91:15:7e:29:ed:6e:75:35: 9e:4e:ee:2a:1e:0a:b7:3d:1d:e2:41:d1:93:91:57:26:cb:2f: a0:2b:b9:3a:15:0b:2a:e0:92:c1:2c:26:b7:48:35:43:f2:91: 33:c0:f5:37:89:7d:69:d9:07:e3:0b:9e:1e:60:4f:9a:a5:b4: 8f:4a:d0:88:3d:7b:a4:76:de:f2:34:b7:29:a4:7e:48:95:ad: d9:78:c8:9e:ab:e7:14:d3:67:a6:14:84:ff:60:6a:96:b4:6e: 75:84:f0:64:5f:71:a1:fa:86:68:40:ee:c3:94:0a:d5:20:5e: 19:2b:32:0f:db:0e:8e:34:2c:b4:06:ae:80:7e:f6:87:22:73: e7:02:fc:cd:c7:1c:2a:51:f7:b1:ae:a8:5c:e6:7a:f8:88:a1: 4f:b3:0b:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57M9qiWSQHrL7ofM4r9DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDg4OTEyMGM0ZTBiZmY0ZWNlOWEyYWJiODYyZDRjMGNk OGEzMWYwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc0ZDVmYjExMWEzMjg3OGQ3OWRkZGRkNzM1NzE1NWY2NmEyYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF7rIVb6MOKTBrVoFLgxK4BGXgG3 r8bb6+gkNQw+jAabuNBE6i/8qsJhNpj+Fx74bh/Hsvq4u09bzpPPLBOeYfTG7Bfd KmOv+pRi1MPTmPqTb4PgN37oq60lojYB9fbeRfnOLl+qhHQB6auh1bTROOxWtNFy eTQRd0ayFsax+op13dMBZYvibiK3+LGST5HnrxBKfUykjoVGRKWLg+vVrFVkVfAR vxa8EDrQtbFRX0scJtBuHH1RNGuH3K8MWI8DF/FD1EYz3LsMCmWzBczwtXwGETzx BQcm4SBmxbPTXcD5zRBSrf4Idf3zoLCTZ87uFaQNLwH7kOeS9235a8Y/hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZ01fsRGjKHjXnd3dc1cVX2aivxMB8GA1UdIwQY MBaAFLlIiRIMTgv/Ts6aKruGLUwM2KMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDIt ODVkMzMyNjA0YWFmLzEvcG5UVi14RWFNb2VOZWQzZDF6VnhWZlpxS19FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kZjU2NzAtOTZhYi00ZWVlLWIwZDItODVkMzMyNjA0YWFm LzEvdVVpSkVneE9DXzlPenBvcXU0WXRUQXpZb3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1FE0MA0G CSqGSIb3DQEBCwUAA4IBAQADyepPwbKTrB0g7Y3tq9XTX/M0RAKk+SFEFGQyT7Jh BsXcVW9x8pP2HsA3ejw7byfX8efaoTlfaJRDbREpDxksybxt5DzctDJfeZaSq6m0 S0jOCBZVJ8NCbEsGTK/L5OgOn5M3kRV+Ke1udTWeTu4qHgq3PR3iQdGTkVcmyy+g K7k6FQsq4JLBLCa3SDVD8pEzwPU3iX1p2QfjC54eYE+apbSPStCIPXukdt7yNLcp pH5Ila3ZeMieq+cU02emFIT/YGqWtG51hPBkX3Gh+oZoQO7DlArVIF4ZKzIP2w6O NCy0Bq6AfvaHInPnAvzNxxwqUfexrqhc5nr4iKFPswt/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:22 2026 by rpki-client