This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/pVERtNhFi8FWjU9Y4DiQboSkUcg.roa File: pVERtNhFi8FWjU9Y4DiQboSkUcg.roa (raw, json) Hash identifier: zXHM3oZaOO62QcqG4BH7LRDl6S8yZxF21aaBpfwYUVw= Subject key identifier: A5:51:11:B4:D8:45:8B:C1:56:8D:4F:58:E0:38:90:6E:84:A4:51:C8 Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Certificate serial: 019B7F1502112D15B2951456BC193E6094F8 Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/pVERtNhFi8FWjU9Y4DiQboSkUcg.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2860 IP address blocks: 78.29.128.0/18 maxlen: 18 81.20.240.0/20 maxlen: 20 81.20.248.0/22 maxlen: 22 81.20.252.0/22 maxlen: 22 128.65.224.0/19 maxlen: 19 185.218.12.0/22 maxlen: 22 2a0b:c1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:02:11:2d:15:b2:95:14:56:bc:19:3e:60:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a55111b4d8458bc1568d4f58e038906e84a451c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:e9:f5:a1:33:21:c5:93:51:9e:95:73:c0: 4d:93:7a:3e:73:fd:c1:ec:64:ab:cf:fd:b4:2f:e0: 43:a4:05:59:ea:b6:96:f7:2d:e8:2e:c0:e1:42:07: 4b:8f:41:a6:f8:73:59:c0:8b:21:b8:3d:7b:d5:cd: 93:81:93:72:38:43:19:10:a5:08:e2:80:1b:40:23: 38:4e:e7:6f:45:51:ed:8b:25:8b:5a:f2:63:dc:8e: eb:c2:d8:ab:c1:e8:1e:e1:24:3a:cf:64:23:f1:75: 5e:d2:6e:41:f2:dc:83:78:bd:49:56:b5:0e:8a:cc: 3e:61:9d:9a:30:2d:34:4a:72:3f:31:a1:f8:1c:81: 0a:d5:b1:fb:bf:08:19:7c:5a:0d:22:5e:1d:8b:68: 5c:c9:54:bd:9d:59:b8:17:ed:cc:91:78:3f:f7:94: ab:70:9d:f4:82:1e:d7:91:5b:d1:46:ad:d9:75:13: 15:d5:17:1a:1e:32:53:26:57:53:ee:6c:06:aa:05: 8e:5d:da:8d:e0:11:94:99:b9:4a:be:9e:cf:55:bc: ac:95:37:af:45:bf:ac:ea:d7:2c:50:00:9c:65:5f: 7a:9e:ea:77:a3:7a:ed:e7:51:b0:77:73:41:a2:77: ce:c6:89:e9:ae:a6:bf:d2:dd:7b:fe:66:82:c6:0d: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:51:11:B4:D8:45:8B:C1:56:8D:4F:58:E0:38:90:6E:84:A4:51:C8 X509v3 Authority Key Identifier: keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/pVERtNhFi8FWjU9Y4DiQboSkUcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.29.128.0/18 81.20.240.0/20 128.65.224.0/19 185.218.12.0/22 IPv6: 2a0b:c1c0::/29 Signature Algorithm: sha256WithRSAEncryption c0:d8:04:3e:d8:d0:ff:07:7f:38:29:50:02:6b:a0:7d:87:aa: 43:fd:d3:e0:5b:a5:77:3c:73:92:06:19:1b:a2:c7:29:09:ae: 8b:c7:4e:00:d0:82:27:ce:99:60:f5:56:68:3b:84:bb:a0:59: 3a:04:a0:85:73:ce:d0:e5:91:9c:64:c0:1d:4e:aa:82:0c:fb: 0a:0e:ab:fb:c2:39:75:50:fb:18:1f:8f:3c:30:80:1b:f8:77: f7:ae:fc:6c:37:20:25:40:ba:0a:8f:cc:89:ad:e5:38:f5:6e: 73:2b:6f:aa:d7:fb:80:7b:17:db:d9:6f:4f:be:59:60:a5:d1: d8:63:63:23:79:b3:26:ff:4a:be:87:98:23:a1:3c:e3:ad:35: 87:00:41:4f:8b:1f:c5:ef:01:8d:3d:82:ba:85:e8:c9:26:5a: 99:9d:d7:9c:f3:a9:b8:d7:24:50:06:9b:0c:4e:a7:ec:60:0b: ea:49:5b:3a:14:e6:9b:fa:16:3b:c3:61:74:37:e7:ac:4b:46: 2b:b1:53:f1:24:28:ab:4e:6c:f4:32:33:ea:1a:dc:99:6d:d2: 5c:fe:ad:6d:4f:4f:e2:c8:03:a5:72:c1:19:3a:1b:8f:82:31: 55:fe:ec:60:59:32:3d:d4:d6:c2:4c:98:45:40:3a:4f:5b:c0: 0b:93:b1:f9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FQIRLRWylRRWvBk+YJT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWViOWU2OTJiYTllOTNkOGI5NWE2NDg4ZDVjODc1NjA5 ZDRhZWMwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTUxMTFiNGQ4NDU4YmMxNTY4ZDRmNThlMDM4OTA2ZTg0YTQ1MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/zp9aEzIcWTUZ6Vc8BNk3o+c/3B 7GSrz/20L+BDpAVZ6raW9y3oLsDhQgdLj0Gm+HNZwIshuD171c2TgZNyOEMZEKUI 4oAbQCM4TudvRVHtiyWLWvJj3I7rwtirwege4SQ6z2Qj8XVe0m5B8tyDeL1JVrUO isw+YZ2aMC00SnI/MaH4HIEK1bH7vwgZfFoNIl4di2hcyVS9nVm4F+3MkXg/95Sr cJ30gh7XkVvRRq3ZdRMV1RcaHjJTJldT7mwGqgWOXdqN4BGUmblKvp7PVbyslTev Rb+s6tcsUACcZV96nup3o3rt51Gwd3NBonfOxonprqa/0t17/maCxg38PQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKVREbTYRYvBVo1PWOA4kG6EpFHIMB8GA1UdIwQY MBaAFDruueaSup6T2LlaZIjVyHVgnUrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTkt NTAzM2Y4ZDc5YmU3LzEvcFZFUnROaEZpOEZXalU5WTREaVFib1NrVWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zZTI1OWItYjZkYy00Y2Y0LWFjMTktNTAzM2Y4ZDc5YmU3 LzEvT3U2NTVwSzZucFBZdVZwa2lOWElkV0NkU3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGTh2AAwQE URTwAwQFgEHgAwQCudoMMA0EAgACMAcDBQMqC8HAMA0GCSqGSIb3DQEBCwUAA4IB AQDA2AQ+2ND/B384KVACa6B9h6pD/dPgW6V3PHOSBhkboscpCa6Lx04A0IInzplg 9VZoO4S7oFk6BKCFc87Q5ZGcZMAdTqqCDPsKDqv7wjl1UPsYH488MIAb+Hf3rvxs NyAlQLoKj8yJreU49W5zK2+q1/uAexfb2W9PvllgpdHYY2MjebMm/0q+h5gjoTzj rTWHAEFPix/F7wGNPYK6hejJJlqZndec86m41yRQBpsMTqfsYAvqSVs6FOab+hY7 w2F0N+esS0YrsVPxJCirTmz0MjPqGtyZbdJc/q1tT0/iyAOlcsEZOhuPgjFV/uxg WTI91NbCTJhFQDpPW8ALk7H5 -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:49 2026 by rpki-client