This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pup7KKGu6INuR9GPvvhFR29g5Oc.roa File: pup7KKGu6INuR9GPvvhFR29g5Oc.roa (raw, json) Hash identifier: 7AwIieGtN+w625KKmDmNhVi+0hmbjN0Jhpfdv8RT964= Subject key identifier: A6:EA:7B:28:A1:AE:E8:83:6E:47:D1:8F:BE:F8:45:47:6F:60:E4:E7 Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Certificate serial: 019B77C742E5870A816F21E02BE0B491194E Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pup7KKGu6INuR9GPvvhFR29g5Oc.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.149.135.0/24 maxlen: 24 2a0b:85c7:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:e5:87:0a:81:6f:21:e0:2b:e0:b4:91:19:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ea7b28a1aee8836e47d18fbef845476f60e4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:9f:b0:89:4b:ff:52:64:60:9c:ba:19:b3: 61:b8:fb:d5:8b:5b:b0:a4:80:26:ec:75:1d:e8:9a: fb:b0:fe:23:1f:9e:c1:26:b2:29:e9:af:ef:d3:f5: 6f:a1:59:b5:f8:d3:c1:7d:07:82:07:91:7f:cf:a5: 0e:9e:70:d6:45:89:ee:c0:ee:9f:38:54:66:30:96: 8e:29:70:94:e4:ce:8d:52:cb:54:b7:18:c7:02:f0: 24:f9:7b:84:0c:a9:14:ec:25:2d:29:30:1a:cf:9a: 33:f2:1b:c9:5d:d0:91:c1:48:42:ab:59:70:cd:6e: ca:3d:67:ad:53:1b:16:bc:c4:34:e3:fc:58:87:19: e3:48:ed:38:a8:f6:b2:8d:f8:02:41:3d:f7:e3:52: aa:da:84:e7:71:f1:b3:48:19:45:41:91:75:ae:7a: 85:b7:71:f9:7f:c9:8a:16:7e:25:e2:40:89:54:aa: 2d:23:e9:70:bc:12:c8:2e:e4:fb:9a:2d:f9:0c:c7: 59:36:ca:d8:95:c2:74:ca:45:25:40:5b:27:f0:17: a8:02:c4:02:33:6b:bd:fe:61:17:8a:34:e0:f5:cd: a9:f6:75:66:66:7d:4a:0d:8f:13:7a:ea:24:80:6a: 56:ce:f0:83:c2:76:07:6a:d9:53:02:66:3f:00:95: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:7B:28:A1:AE:E8:83:6E:47:D1:8F:BE:F8:45:47:6F:60:E4:E7 X509v3 Authority Key Identifier: keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pup7KKGu6INuR9GPvvhFR29g5Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.135.0/24 IPv6: 2a0b:85c7:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 81:4d:cf:f7:e0:31:98:2f:74:1a:20:ea:5c:b2:2e:d0:7a:6f: 97:fa:9e:8d:c8:b5:fd:a4:74:98:67:43:c0:43:6e:d1:84:c4: 33:d5:f5:d8:45:8e:8e:2c:2e:00:08:7a:21:0e:0e:cc:0c:d0: 43:df:dc:5e:90:5c:c5:d0:4c:c1:dd:af:ba:e1:2c:c9:85:69: 87:c9:28:f2:17:eb:a7:47:53:dd:a7:3e:94:a6:aa:6b:0a:ba: 0b:98:9b:32:23:df:89:2d:01:fd:85:6c:8f:ab:6a:a7:9c:aa: 47:41:79:6b:84:85:ab:a6:34:e3:5a:ef:a2:28:48:ef:ff:ae: 69:d8:16:44:67:5f:f8:cb:e1:71:c1:b6:3e:57:60:db:a6:09: 22:c2:36:db:61:d9:36:a7:76:b5:be:e0:36:c2:d3:9f:44:c5: a6:50:c4:c9:6e:d3:d9:b7:3d:13:26:8f:c4:15:d7:67:97:d0: aa:2d:6d:a9:30:36:3f:9b:ab:a3:40:3e:73:43:39:0c:72:fb: 3c:2d:c1:bb:b3:03:97:99:43:de:c8:9f:89:de:61:3e:0f:be: a2:e1:2b:08:da:fd:25:e3:f5:c4:77:28:7f:52:56:b2:52:3e: 38:27:ac:49:6c:01:d3:15:70:39:e3:0a:9e:d9:d7:f8:9b:e0: 1d:2b:89:e3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x0LlhwqBbyHgK+C0kRlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk NTA1YmIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmVhN2IyOGExYWVlODgzNmU0N2QxOGZiZWY4NDU0NzZmNjBlNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSCfsIlL/1JkYJy6GbNhuPvVi1uw pIAm7HUd6Jr7sP4jH57BJrIp6a/v0/VvoVm1+NPBfQeCB5F/z6UOnnDWRYnuwO6f OFRmMJaOKXCU5M6NUstUtxjHAvAk+XuEDKkU7CUtKTAaz5oz8hvJXdCRwUhCq1lw zW7KPWetUxsWvMQ04/xYhxnjSO04qPayjfgCQT3341Kq2oTncfGzSBlFQZF1rnqF t3H5f8mKFn4l4kCJVKotI+lwvBLILuT7mi35DMdZNsrYlcJ0ykUlQFsn8BeoAsQC M2u9/mEXijTg9c2p9nVmZn1KDY8TeuokgGpWzvCDwnYHatlTAmY/AJW6aQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKbqeyihruiDbkfRj774RUdvYOTnMB8GA1UdIwQY MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt Y2U1MDA4MjdmZjdmLzEvcHVwN0tLR3U2SU51UjlHUHZ2aEZSMjlnNU9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuZWHMA8E AgACMAkDBwAqC4XH//8wDQYJKoZIhvcNAQELBQADggEBAIFNz/fgMZgvdBog6lyy LtB6b5f6no3Itf2kdJhnQ8BDbtGExDPV9dhFjo4sLgAIeiEODswM0EPf3F6QXMXQ TMHdr7rhLMmFaYfJKPIX66dHU92nPpSmqmsKuguYmzIj34ktAf2FbI+raqecqkdB eWuEhaumNONa76IoSO//rmnYFkRnX/jL4XHBtj5XYNumCSLCNtth2TandrW+4DbC 059ExaZQxMlu09m3PRMmj8QV12eX0KotbakwNj+bq6NAPnNDOQxy+zwtwbuzA5eZ Q97In4neYT4PvqLhKwja/SXj9cR3KH9SVrJSPjgnrElsAdMVcDnjCp7Z1/ib4B0r ieM= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:32 2026 by rpki-client