This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/PpxITNQh5rwveRhR0CAzHgBfCVU.roa File: PpxITNQh5rwveRhR0CAzHgBfCVU.roa (raw, json) Hash identifier: KAdMNKWtFvUpec9XnyPVWp3RCK1f3NfNNeIJd63bYhE= Subject key identifier: 3E:9C:48:4C:D4:21:E6:BC:2F:79:18:51:D0:20:33:1E:00:5F:09:55 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA496A2D056DC0CE952961B28733F03 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/PpxITNQh5rwveRhR0CAzHgBfCVU.roa Signing time: Thu 01 Jan 2026 22:19:02 +0000 ROA not before: Thu 01 Jan 2026 22:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49587 IP address blocks: 5.180.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:96:a2:d0:56:dc:0c:e9:52:96:1b:28:73:3f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e9c484cd421e6bc2f791851d020331e005f0955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:bf:2e:8a:85:9e:62:6f:4c:e5:c3:71:97: bb:76:a7:9b:2a:40:29:b5:7b:22:fe:30:95:61:df: 2e:ff:d2:b5:05:64:29:a2:6c:78:23:05:50:45:38: 18:ef:ad:d1:41:aa:b6:41:cc:af:db:0c:a4:a8:06: ca:0f:ad:55:9f:dd:9e:06:9f:92:99:f4:f8:b3:42: b3:0d:2c:3a:ec:39:7f:d3:26:21:a5:bf:5c:fb:7a: ca:82:63:af:a7:4d:f1:9a:c3:6d:50:22:6d:2d:4c: f1:5e:88:29:76:9b:4a:9a:df:3f:b6:c0:b4:f4:b1: 79:f3:ef:5c:f9:26:f0:ff:76:3d:a9:38:a6:52:1c: f9:f7:86:e9:d7:ee:c0:94:53:31:c9:24:e4:ef:46: 11:a4:a2:dd:3e:ef:1b:43:26:bc:34:ae:f5:fe:21: 8a:70:f5:68:09:5a:44:63:ee:ab:71:4d:73:c3:ac: 85:a9:69:1c:59:0e:15:e0:6b:17:d2:37:1b:01:ea: 3a:6e:3c:25:16:3f:c2:df:0c:ea:cb:64:54:db:b9: c8:40:ed:ae:6a:81:be:0f:7d:8d:98:2a:85:f8:c2: 4b:b5:3c:ce:ab:ee:fe:9b:c9:45:59:d2:90:00:9f: 86:5b:24:78:8c:76:51:45:d0:9d:5f:97:85:6b:6a: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:48:4C:D4:21:E6:BC:2F:79:18:51:D0:20:33:1E:00:5F:09:55 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/PpxITNQh5rwveRhR0CAzHgBfCVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.18.0/24 Signature Algorithm: sha256WithRSAEncryption 02:2f:73:de:1a:fd:da:65:9f:0d:3e:10:7b:b2:27:ac:f3:2b: 8f:17:47:e0:a9:4a:a9:50:5b:23:e1:0a:ce:16:10:16:f1:e1: fb:7c:c6:5a:8e:c6:1a:55:71:e8:5c:00:87:e7:9f:94:82:08: 3d:66:22:e4:50:79:1d:08:5d:89:b9:2d:25:a4:30:cb:98:10: 33:5a:8a:50:d0:18:98:97:d3:aa:0f:2c:07:58:9e:ea:e4:7d: 8b:03:36:7a:ca:7b:3b:95:a8:ca:3e:22:a1:95:44:fa:26:65: d7:86:bb:3f:ee:7d:6f:ba:7c:02:b8:32:56:cf:60:ae:da:9b: 75:c3:e4:b4:d3:56:e0:2e:c6:a4:80:3e:6f:c4:71:50:d3:28: ff:b2:d7:0d:ce:db:f0:16:8a:3a:35:7f:b4:41:fa:0a:d5:9a: 0b:56:5e:5e:70:68:1b:0e:b8:80:1b:94:e4:16:75:f7:02:fb: 6f:f5:c1:1a:6b:8a:ce:3c:06:b9:2c:46:55:23:0f:b4:e4:74: ce:4c:3b:78:48:5a:62:28:35:3f:c8:58:9c:20:fa:a3:35:69: d6:c4:7e:d3:32:4d:12:66:bf:37:7c:59:56:b9:88:82:6c:f8: 18:99:0b:53:b7:24:a9:09:cb:b9:7e:b1:1f:7f:9e:f3:bc:4d: 23:a0:10:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJai0FbcDOlSlhsocz8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTljNDg0Y2Q0MjFlNmJjMmY3OTE4NTFkMDIwMzMxZTAwNWYwOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kS/LoqFnmJvTOXDcZe7dqebKkAp tXsi/jCVYd8u/9K1BWQpomx4IwVQRTgY763RQaq2Qcyv2wykqAbKD61Vn92eBp+S mfT4s0KzDSw67Dl/0yYhpb9c+3rKgmOvp03xmsNtUCJtLUzxXogpdptKmt8/tsC0 9LF58+9c+Sbw/3Y9qTimUhz594bp1+7AlFMxySTk70YRpKLdPu8bQya8NK71/iGK cPVoCVpEY+6rcU1zw6yFqWkcWQ4V4GsX0jcbAeo6bjwlFj/C3wzqy2RU27nIQO2u aoG+D32NmCqF+MJLtTzOq+7+m8lFWdKQAJ+GWyR4jHZRRdCdX5eFa2rjqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6cSEzUIea8L3kYUdAgMx4AXwlVMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvUHB4SVROUWg1cnd2ZVJoUjBDQXpIZ0JmQ1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQSMA0G CSqGSIb3DQEBCwUAA4IBAQACL3PeGv3aZZ8NPhB7sies8yuPF0fgqUqpUFsj4QrO FhAW8eH7fMZajsYaVXHoXACH55+Uggg9ZiLkUHkdCF2JuS0lpDDLmBAzWopQ0BiY l9OqDywHWJ7q5H2LAzZ6yns7lajKPiKhlUT6JmXXhrs/7n1vunwCuDJWz2Cu2pt1 w+S001bgLsakgD5vxHFQ0yj/stcNztvwFoo6NX+0QfoK1ZoLVl5ecGgbDriAG5Tk FnX3Avtv9cEaa4rOPAa5LEZVIw+05HTOTDt4SFpiKDU/yFicIPqjNWnWxH7TMk0S Zr83fFlWuYiCbPgYmQtTtySpCcu5frEff57zvE0joBCI -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:54 2026 by rpki-client