This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/PPSBbdrAtgcgXON-ZEnuVTdydek.roa File: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (raw, json) Hash identifier: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak= Subject key identifier: 3C:F4:81:6D:DA:C0:B6:07:20:5C:E3:7E:64:49:EE:55:37:72:75:E9 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019B7C8069AC051B3D2AA5B0813E10334F76 Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/PPSBbdrAtgcgXON-ZEnuVTdydek.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146943 IP address blocks: 45.67.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:69:ac:05:1b:3d:2a:a5:b0:81:3e:10:33:4f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cf4816ddac0b607205ce37e6449ee55377275e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:b5:38:56:a3:03:9d:9b:62:dd:3f:a3:71: dd:09:ca:3f:70:64:f2:bb:93:a6:da:5b:3f:83:ff: a7:13:57:37:1f:a1:22:70:20:d0:e7:a7:17:4a:bb: 7b:23:18:f6:e4:ff:55:ef:cc:80:80:b3:4f:e6:6a: e3:fb:91:9b:fd:fa:81:75:6c:23:61:86:b3:14:c8: f0:e4:aa:97:ef:d3:75:32:b0:69:a0:04:73:43:46: 24:ea:30:92:5c:d5:7f:80:dc:33:ca:45:70:1a:0c: 85:1a:7c:79:90:73:18:c5:b5:eb:fe:f5:2d:9e:ce: 87:a7:a6:c3:70:8b:ed:49:2e:f0:d8:3a:22:5d:ce: 98:a6:74:58:c1:4d:6d:df:3d:c5:cf:43:34:6c:f7: 38:71:54:aa:f6:6a:d8:21:5c:52:ee:7e:25:44:16: 1a:05:c7:cb:66:f4:ee:cd:ea:a9:ab:46:33:e0:d3: 73:0b:1d:bd:a5:2e:6b:eb:65:4a:d4:44:21:83:33: 0e:e4:d8:fc:e8:e5:eb:4e:ee:c4:4e:8b:75:4c:10: c7:8a:64:53:ef:42:01:38:6c:a6:1e:bb:2c:ce:9c: 43:c9:dc:37:e9:a8:e8:84:e1:85:9c:0e:53:be:ea: 9b:78:22:23:90:c4:67:11:de:e7:3d:b7:11:1c:21: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:81:6D:DA:C0:B6:07:20:5C:E3:7E:64:49:EE:55:37:72:75:E9 X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/PPSBbdrAtgcgXON-ZEnuVTdydek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c9:0a:ce:bb:dd:a8:dd:55:c4:b6:39:8a:33:a4:1f:3a:bd: 1e:d0:b3:1d:71:5e:ab:a2:fe:dc:64:a8:22:97:92:1b:a6:f6: 4e:ba:78:d6:d3:30:fb:4b:04:1a:43:d8:d2:88:75:19:16:e8: ec:49:7d:7e:53:0f:d1:99:74:b4:57:a1:ea:cb:07:33:ae:4f: 12:88:9c:d5:57:ca:ab:91:bf:9d:e3:73:61:97:30:6b:bd:c1: 0d:48:06:7d:d5:16:01:7f:30:ed:05:97:5a:52:3e:24:1b:8c: 40:24:57:83:0b:fb:06:78:59:1c:57:4a:e2:37:f8:f7:6a:0f: 26:f4:d9:b7:5a:a3:a9:9d:6c:41:03:77:0d:f0:6d:64:cd:11: 03:33:40:4e:95:50:87:5d:e3:4b:ce:d8:34:23:37:fd:15:72: 03:d7:9f:d7:27:6e:36:d8:48:ce:27:02:eb:99:3f:6a:f0:63: e8:ad:93:42:cc:ea:17:e3:6f:81:26:41:2f:75:62:a4:4b:a3: 0a:cd:3a:9e:f9:45:c9:f2:14:21:db:d5:14:a0:18:77:f8:c7: 6a:3f:ce:95:d3:99:e9:c5:c8:8c:06:c9:bb:d0:79:09:67:ab: 71:53:cc:65:11:f2:03:5f:85:70:c6:9f:b6:e4:fc:29:5c:0a: a5:a4:a0:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGmsBRs9KqWwgT4QM092MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Y0ODE2ZGRhYzBiNjA3MjA1Y2UzN2U2NDQ5ZWU1NTM3NzI3NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfK1OFajA52bYt0/o3HdCco/cGTy u5Om2ls/g/+nE1c3H6EicCDQ56cXSrt7Ixj25P9V78yAgLNP5mrj+5Gb/fqBdWwj YYazFMjw5KqX79N1MrBpoARzQ0Yk6jCSXNV/gNwzykVwGgyFGnx5kHMYxbXr/vUt ns6Hp6bDcIvtSS7w2DoiXc6YpnRYwU1t3z3Fz0M0bPc4cVSq9mrYIVxS7n4lRBYa BcfLZvTuzeqpq0Yz4NNzCx29pS5r62VK1EQhgzMO5Nj86OXrTu7ETot1TBDHimRT 70IBOGymHrsszpxDydw36ajohOGFnA5TvuqbeCIjkMRnEd7nPbcRHCGJEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDz0gW3awLYHIFzjfmRJ7lU3cnXpMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvUFBTQmJkckF0Z2NnWE9OLVpFbnVWVGR5ZGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUM0MA0G CSqGSIb3DQEBCwUAA4IBAQA9yQrOu92o3VXEtjmKM6QfOr0e0LMdcV6rov7cZKgi l5IbpvZOunjW0zD7SwQaQ9jSiHUZFujsSX1+Uw/RmXS0V6Hqywczrk8SiJzVV8qr kb+d43NhlzBrvcENSAZ91RYBfzDtBZdaUj4kG4xAJFeDC/sGeFkcV0riN/j3ag8m 9Nm3WqOpnWxBA3cN8G1kzREDM0BOlVCHXeNLztg0Izf9FXID15/XJ2422EjOJwLr mT9q8GPorZNCzOoX42+BJkEvdWKkS6MKzTqe+UXJ8hQh29UUoBh3+MdqP86V05np xciMBsm70HkJZ6txU8xlEfIDX4Vwxp+25PwpXAqlpKBR -----END CERTIFICATE-----Generated at Thu Jan 22 23:32:53 2026 by rpki-client