This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PAT-1ixXWzm9Bfubciqff_m-8kY.roa File: PAT-1ixXWzm9Bfubciqff_m-8kY.roa (raw, json) Hash identifier: nHull2wN05E21by+dWEX9iqYF+MEaBy9skelAofF8sQ= Subject key identifier: 3C:04:FE:D6:2C:57:5B:39:BD:05:FB:9B:72:2A:9F:7F:F9:BE:F2:46 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019A777F12B832A90BA8C3D1466DC5B69CF5 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PAT-1ixXWzm9Bfubciqff_m-8kY.roa Signing time: Wed 12 Nov 2025 09:56:47 +0000 ROA not before: Wed 12 Nov 2025 09:56:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 82.163.68.0/22 maxlen: 24 149.126.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:7f:12:b8:32:a9:0b:a8:c3:d1:46:6d:c5:b6:9c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Nov 12 09:56:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c04fed62c575b39bd05fb9b722a9f7ff9bef246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:07:67:62:1c:55:1e:cf:2f:b8:0e:d1:cd: 60:4a:cd:8e:cd:6c:07:c2:48:11:19:78:31:60:75: 89:e5:ac:ac:5f:63:b8:b6:e3:fc:2c:5a:b3:5e:9a: be:33:0e:b1:b9:f1:d8:f8:8a:fd:7d:d6:17:cd:e4: c1:ca:d1:9c:39:0e:77:e2:04:a5:2a:8a:25:a8:56: 6c:f7:fa:1d:3d:e4:40:26:32:52:5b:fa:f2:b6:29: 88:f4:74:e2:82:d4:4a:e9:ce:e2:11:84:a1:b4:ee: 5e:ea:46:bc:f9:ef:57:34:6f:64:93:b5:c9:79:99: 02:9a:fa:8d:84:1b:f6:60:dc:6f:5c:a8:02:f3:21: 4e:5f:82:90:01:f3:37:24:63:3d:2c:80:44:85:29: 66:4a:a9:0e:fc:cf:ea:a3:8a:9c:19:b9:86:ac:31: 3e:ff:7f:97:fa:80:6e:94:91:1e:09:fe:61:25:f0: ea:9e:d2:09:83:43:2d:5d:6d:17:a8:06:32:07:26: d0:e9:75:85:29:d5:9e:fe:53:b4:21:c2:fb:ff:f2: 2f:66:04:1e:1b:69:71:6d:69:2b:9b:57:9b:e9:69: 46:4a:96:77:9a:7b:5d:4e:cc:14:57:e6:85:35:71: 06:09:28:88:24:15:78:3e:d5:13:b2:9c:a2:d7:2c: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:04:FE:D6:2C:57:5B:39:BD:05:FB:9B:72:2A:9F:7F:F9:BE:F2:46 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PAT-1ixXWzm9Bfubciqff_m-8kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.68.0/22 149.126.88.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:39:20:f0:68:2a:f8:0e:fd:75:76:07:b0:b9:de:0c:94:0c: 85:c5:2a:96:4f:4f:b1:a0:ef:6d:1f:7e:e6:23:44:1c:20:37: d1:18:c7:45:61:9f:1f:0b:ff:1a:be:44:f3:ce:18:37:bf:5d: 52:de:ed:54:c8:07:5c:ec:9c:6c:12:39:da:fb:ce:39:a4:70: 82:e2:7f:1f:08:ff:cd:c1:f2:5a:4a:14:71:af:b3:da:46:1d: b8:72:7f:ad:01:fb:a2:b8:57:3f:36:b7:ae:9a:8c:b8:fc:c9: d7:60:ec:f8:c8:d5:35:fb:1a:45:da:21:c2:58:3f:25:21:38: 47:9d:9f:26:36:88:61:3b:fb:23:2d:15:4c:9b:46:6b:04:f2: 6a:df:6b:da:87:66:27:f1:a4:b8:12:02:8f:26:d4:cf:57:1b: 57:74:96:9c:f4:af:b7:0d:37:c3:1c:9c:c9:f1:ab:91:2c:11: 10:38:ae:39:bb:53:de:57:dd:5c:4f:ec:7c:99:84:0b:48:3c: 52:d7:23:8d:43:1b:fa:1c:f3:59:56:e8:5f:36:0e:d7:f5:84: e9:d9:ce:48:29:7b:05:0a:a1:39:ee:03:91:a4:e2:0a:19:26: 5b:4a:15:4b:99:01:d5:34:46:34:cc:4e:f5:08:60:0a:5d:d8: a4:80:27:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp3fxK4MqkLqMPRRm3Ftpz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUxMTEyMDk1NjQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA0ZmVkNjJjNTc1YjM5YmQwNWZiOWI3MjJhOWY3ZmY5YmVmMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70HZ2IcVR7PL7gO0c1gSs2OzWwH wkgRGXgxYHWJ5aysX2O4tuP8LFqzXpq+Mw6xufHY+Ir9fdYXzeTBytGcOQ534gSl KoolqFZs9/odPeRAJjJSW/rytimI9HTigtRK6c7iEYShtO5e6ka8+e9XNG9kk7XJ eZkCmvqNhBv2YNxvXKgC8yFOX4KQAfM3JGM9LIBEhSlmSqkO/M/qo4qcGbmGrDE+ /3+X+oBulJEeCf5hJfDqntIJg0MtXW0XqAYyBybQ6XWFKdWe/lO0IcL7//IvZgQe G2lxbWkrm1eb6WlGSpZ3mntdTswUV+aFNXEGCSiIJBV4PtUTspyi1ywEAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDwE/tYsV1s5vQX7m3Iqn3/5vvJGMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvUEFULTFpeFhXem05QmZ1YmNpcWZmX20tOGtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUqNEAwQC lX5YMA0GCSqGSIb3DQEBCwUAA4IBAQCKOSDwaCr4Dv11dgewud4MlAyFxSqWT0+x oO9tH37mI0QcIDfRGMdFYZ8fC/8avkTzzhg3v11S3u1UyAdc7JxsEjna+845pHCC 4n8fCP/NwfJaShRxr7PaRh24cn+tAfuiuFc/Nreumoy4/MnXYOz4yNU1+xpF2iHC WD8lIThHnZ8mNohhO/sjLRVMm0ZrBPJq32vah2Yn8aS4EgKPJtTPVxtXdJac9K+3 DTfDHJzJ8auRLBEQOK45u1PeV91cT+x8mYQLSDxS1yONQxv6HPNZVuhfNg7X9YTp 2c5IKXsFCqE57gORpOIKGSZbShVLmQHVNEY0zE71CGAKXdikgCea -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:49 2025 by rpki-client