This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/pcCJjdQXi7xfdCba21j2NH3xu1Y.roa File: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (raw, json) Hash identifier: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU= Subject key identifier: A5:C0:89:8D:D4:17:8B:BC:5F:74:26:DA:DB:58:F6:34:7D:F1:BB:56 Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019B79EC378CD757ED67AF1E480B1E8E52FB Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/pcCJjdQXi7xfdCba21j2NH3xu1Y.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56648 IP address blocks: 185.20.5.0/24 maxlen: 24 2a13:2900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:37:8c:d7:57:ed:67:af:1e:48:0b:1e:8e:52:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c0898dd4178bbc5f7426dadb58f6347df1bb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:1e:f4:d8:16:96:a8:60:53:94:d9:33:d8: 42:07:cc:4e:d0:02:e0:52:44:e8:94:3d:25:c2:46: 5d:01:b1:f8:13:0d:81:13:d2:47:6e:81:ac:96:09: a1:c6:e1:e1:a6:0b:0e:fb:50:ec:89:4e:a2:da:d0: 05:b7:69:92:5f:ff:f1:38:02:77:2c:fe:72:ff:36: f1:fd:84:b4:7d:25:b2:a0:ec:51:c7:e7:a9:01:a8: e7:3b:fc:0f:26:36:d9:96:ad:ff:55:9b:04:b2:19: 0c:79:b6:3f:42:22:d8:65:40:01:af:94:22:a6:5f: 3b:9a:9b:3d:51:61:a8:fc:25:76:fb:32:b5:be:f3: a6:b2:66:ed:99:94:72:a8:c1:b4:63:6d:60:48:65: ff:4d:a1:a9:b7:53:12:f5:76:58:c2:4a:27:e2:1e: 89:68:04:ed:91:22:f6:bf:55:69:dd:ba:30:73:5f: 4e:a0:0e:63:cc:72:04:1a:85:73:c3:33:0a:c7:c4: 9d:2d:dc:66:42:6b:d0:0f:df:3e:64:51:20:4e:48: 3b:e4:87:23:84:35:3b:27:48:20:d5:91:e3:67:51: 6c:30:78:f8:88:ce:f1:42:d3:31:f6:79:ac:64:f1: 93:11:6d:ed:e8:1c:9f:db:6a:89:18:83:0c:82:ce: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:89:8D:D4:17:8B:BC:5F:74:26:DA:DB:58:F6:34:7D:F1:BB:56 X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/pcCJjdQXi7xfdCba21j2NH3xu1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.5.0/24 IPv6: 2a13:2900::/29 Signature Algorithm: sha256WithRSAEncryption 24:01:59:49:02:a3:e9:fa:34:9c:54:d9:f2:26:87:1a:26:3d: 0d:9c:77:04:1e:71:aa:b3:a4:62:d4:73:64:c4:24:bc:e7:c5: d3:c8:d1:5c:5b:14:4a:bd:df:9d:41:0f:79:cf:9a:f9:6b:5c: 0a:1a:5a:26:70:33:8b:50:cd:5c:55:de:9e:7c:57:c2:dc:e4: cc:23:9d:d4:19:20:59:78:86:d1:4d:2f:45:8f:fa:e7:46:b8: 9d:11:db:08:74:80:ba:04:cc:fc:72:bc:92:dd:b3:62:c3:d3: a8:61:63:3a:3d:40:ca:69:4f:d3:d0:35:f0:19:ea:87:1f:c4: ba:48:54:f4:e2:76:55:9b:94:89:3c:4c:cd:dd:3b:cd:b2:e0: 23:20:68:4b:ea:a0:1f:44:a5:53:f7:74:ee:ce:69:4e:a1:d2: 4c:da:bc:e9:76:e0:d7:55:a2:d8:f4:41:bb:ca:9a:8e:5f:ef: 21:dc:26:e3:32:4d:7b:e0:ab:ad:c6:bf:05:b3:77:ee:bf:8a: 05:28:f9:85:02:65:0e:91:e5:6f:f2:c3:1d:bb:03:4e:2f:2a: af:d7:bc:e2:0f:f0:52:e1:47:01:aa:d1:76:4e:16:8e:51:4a: 1e:86:51:ce:cb:1a:d3:9b:a2:f0:46:c0:09:cc:46:2c:e8:84: 6b:e4:e2:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57DeM11ftZ68eSAsejlL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWMwODk4ZGQ0MTc4YmJjNWY3NDI2ZGFkYjU4ZjYzNDdkZjFiYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP8e9NgWlqhgU5TZM9hCB8xO0ALg UkTolD0lwkZdAbH4Ew2BE9JHboGslgmhxuHhpgsO+1DsiU6i2tAFt2mSX//xOAJ3 LP5y/zbx/YS0fSWyoOxRx+epAajnO/wPJjbZlq3/VZsEshkMebY/QiLYZUABr5Qi pl87mps9UWGo/CV2+zK1vvOmsmbtmZRyqMG0Y21gSGX/TaGpt1MS9XZYwkon4h6J aATtkSL2v1Vp3bowc19OoA5jzHIEGoVzwzMKx8SdLdxmQmvQD98+ZFEgTkg75Icj hDU7J0gg1ZHjZ1FsMHj4iM7xQtMx9nmsZPGTEW3t6Byf22qJGIMMgs6EBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKXAiY3UF4u8X3Qm2ttY9jR98btWMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvcGNDSmpkUVhpN3hmZENiYTIxajJOSDN4dTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRQFMA0E AgACMAcDBQMqEykAMA0GCSqGSIb3DQEBCwUAA4IBAQAkAVlJAqPp+jScVNnyJoca Jj0NnHcEHnGqs6Ri1HNkxCS858XTyNFcWxRKvd+dQQ95z5r5a1wKGlomcDOLUM1c Vd6efFfC3OTMI53UGSBZeIbRTS9Fj/rnRridEdsIdIC6BMz8cryS3bNiw9OoYWM6 PUDKaU/T0DXwGeqHH8S6SFT04nZVm5SJPEzN3TvNsuAjIGhL6qAfRKVT93TuzmlO odJM2rzpduDXVaLY9EG7ypqOX+8h3CbjMk174Kutxr8Fs3fuv4oFKPmFAmUOkeVv 8sMduwNOLyqv17ziD/BS4UcBqtF2ThaOUUoehlHOyxrTm6LwRsAJzEYs6IRr5OKu -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:30 2026 by rpki-client