This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/ppMWG70dCZCeOuNLM5-3mv7YI8Q.roa File: ppMWG70dCZCeOuNLM5-3mv7YI8Q.roa (raw, json) Hash identifier: UUUxzcdcUjZU1Xf71QA4yn6XPOOgTpbWk7XiBLQF1jw= Subject key identifier: A6:93:16:1B:BD:1D:09:90:9E:3A:E3:4B:33:9F:B7:9A:FE:D8:23:C4 Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2 Certificate serial: 019B78A322F495B7B27D88E5FAE859D7818D Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/ppMWG70dCZCeOuNLM5-3mv7YI8Q.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44019 IP address blocks: 31.128.176.0/22 maxlen: 22 146.19.241.0/24 maxlen: 24 193.238.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:22:f4:95:b7:b2:7d:88:e5:fa:e8:59:d7:81:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a693161bbd1d09909e3ae34b339fb79afed823c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:1e:7e:74:d6:e6:82:54:ce:24:fc:04:5e: 0a:a8:8f:ad:15:1f:b4:65:50:8f:a6:62:12:a1:14: 72:cc:f6:22:92:39:33:2e:c1:f1:c1:3f:b8:00:78: e0:74:2f:36:94:79:53:e9:25:f5:25:51:d8:78:d9: b9:75:c1:d7:5d:89:29:e8:cb:7d:af:b8:92:5d:a1: fa:ac:1a:35:05:6d:50:5f:03:28:96:8d:a2:5d:6d: 65:15:04:62:cc:37:da:27:8b:df:c4:78:d3:04:b0: a4:1b:22:80:a5:23:8b:ef:00:54:07:d2:7f:cd:65: 1e:1c:ae:6f:90:46:42:52:57:60:aa:53:8f:2b:33: a7:7d:9c:4f:4b:e9:8a:a2:2a:8e:6e:64:3f:b4:57: 29:dc:79:96:e4:38:7c:eb:69:4e:d1:f7:e8:a4:56: be:2b:9d:fd:fb:f6:fa:17:15:93:ae:c3:49:26:96: 2e:ab:47:e1:c5:7d:ab:52:c8:db:8c:18:36:ad:0d: 20:08:8d:40:15:37:20:ad:bb:16:00:2a:16:1b:e2: c0:c1:da:90:4f:3b:3f:0b:fc:6d:04:15:db:34:a3: a9:5b:8a:41:f9:58:b7:a9:9c:34:3b:2a:86:6e:3e: a5:35:6b:19:c4:eb:9c:f5:75:b4:54:ac:24:54:98: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:93:16:1B:BD:1D:09:90:9E:3A:E3:4B:33:9F:B7:9A:FE:D8:23:C4 X509v3 Authority Key Identifier: keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/ppMWG70dCZCeOuNLM5-3mv7YI8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.176.0/22 146.19.241.0/24 193.238.87.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:78:92:51:aa:fa:a1:a1:54:fb:b9:4b:98:6a:61:61:b5:33: db:4b:83:85:7d:c3:7a:23:45:aa:b4:79:fc:10:9b:d1:58:8a: e8:0d:c3:eb:f3:dc:13:8f:2a:7c:05:c7:64:21:28:df:32:2e: 58:27:b5:2a:98:0b:fe:07:17:23:bc:74:c6:77:b6:6f:1b:f6: cb:cd:06:d8:f2:bc:dd:ef:4e:e0:00:84:19:0f:50:34:ae:04: 3e:68:f8:71:c3:51:97:fa:fd:4f:b8:2b:d4:87:14:d6:44:69: 15:a6:5a:bd:08:29:c5:cb:bf:e3:8b:d7:b5:db:2e:18:6f:86: 12:ed:67:9c:4b:85:e5:7a:06:89:4d:52:eb:c3:ec:f3:ae:7d: 68:8e:a5:b9:d7:07:93:4e:b7:b8:d0:b8:ad:c6:07:50:92:af: c9:88:2c:ce:51:45:d8:27:10:c3:82:f5:62:9c:1b:41:90:98: 61:0e:e6:40:4c:82:b1:1f:5d:db:9d:11:1f:bb:84:8e:93:7f: 3f:b5:8a:f7:50:c2:a8:8d:b1:e7:dd:fb:3f:31:ec:f4:46:81: 81:9c:62:77:5c:4d:2a:f0:77:ae:d5:65:3b:61:50:04:ae:9a: 82:22:e0:a7:a6:33:1c:5d:4d:47:f7:60:ab:35:0d:a6:c5:22: 18:f7:3a:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyL0lbeyfYjl+uhZ14GNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNGM5M2FlMDUxY2UyNmNmYmM4N2VmZTA4ZTEwOWU0YjJj ZWUwYjIwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjkzMTYxYmJkMWQwOTkwOWUzYWUzNGIzMzlmYjc5YWZlZDgyM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGYefnTW5oJUziT8BF4KqI+tFR+0 ZVCPpmISoRRyzPYikjkzLsHxwT+4AHjgdC82lHlT6SX1JVHYeNm5dcHXXYkp6Mt9 r7iSXaH6rBo1BW1QXwMolo2iXW1lFQRizDfaJ4vfxHjTBLCkGyKApSOL7wBUB9J/ zWUeHK5vkEZCUldgqlOPKzOnfZxPS+mKoiqObmQ/tFcp3HmW5Dh862lO0ffopFa+ K539+/b6FxWTrsNJJpYuq0fhxX2rUsjbjBg2rQ0gCI1AFTcgrbsWACoWG+LAwdqQ Tzs/C/xtBBXbNKOpW4pB+Vi3qZw0OyqGbj6lNWsZxOuc9XW0VKwkVJic7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKaTFhu9HQmQnjrjSzOft5r+2CPEMB8GA1UdIwQY MBaAFC1Mk64FHOJs+8h+/gjhCeSyzuCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFV5VHJnVWM0bXo3eUg3LUNPRUo1TExPNExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZThjMWEtZTUwMS00ZjMxLTk5ZTkt M2E2NjQwMzYwOTkzLzEvcHBNV0c3MGRDWkNlT3VOTE01LTNtdjdZSThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lZThjMWEtZTUwMS00ZjMxLTk5ZTktM2E2NjQwMzYwOTkz LzEvTFV5VHJnVWM0bXo3eUg3LUNPRUo1TExPNExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4CwAwQA khPxAwQAwe5XMA0GCSqGSIb3DQEBCwUAA4IBAQCbeJJRqvqhoVT7uUuYamFhtTPb S4OFfcN6I0WqtHn8EJvRWIroDcPr89wTjyp8BcdkISjfMi5YJ7UqmAv+BxcjvHTG d7ZvG/bLzQbY8rzd707gAIQZD1A0rgQ+aPhxw1GX+v1PuCvUhxTWRGkVplq9CCnF y7/ji9e12y4Yb4YS7WecS4XlegaJTVLrw+zzrn1ojqW51weTTre40LitxgdQkq/J iCzOUUXYJxDDgvVinBtBkJhhDuZATIKxH13bnREfu4SOk38/tYr3UMKojbHn3fs/ Mez0RoGBnGJ3XE0q8Heu1WU7YVAErpqCIuCnpjMcXU1H92CrNQ2mxSIY9zoR -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:10 2026 by rpki-client