This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/PKXuRc_5_wM56Jttnq1znbxTNrM.roa File: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (raw, json) Hash identifier: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw= Subject key identifier: 3C:A5:EE:45:CF:F9:FF:03:39:E8:9B:6D:9E:AD:73:9D:BC:53:36:B3 Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Certificate serial: 019B77C66124789793FF3953CFB3EECFB45A Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/PKXuRc_5_wM56Jttnq1znbxTNrM.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 93.93.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:24:78:97:93:ff:39:53:cf:b3:ee:cf:b4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca5ee45cff9ff0339e89b6d9ead739dbc5336b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:a0:64:b5:65:c9:18:e4:2f:c1:07:2b:25: 78:4a:ec:01:ee:24:26:24:ae:ea:1a:7b:e6:15:5f: cf:7b:fb:53:93:1c:d7:9d:be:13:a5:2c:37:09:a1: 53:0d:e0:83:e5:18:b1:be:ab:9a:85:68:da:84:9f: eb:9e:0c:06:14:4c:e0:99:b9:6a:57:43:eb:37:43: 88:81:55:ea:93:9b:c1:67:46:19:ce:38:1e:09:88: 83:8d:fe:4d:d8:5c:87:80:59:91:45:b9:5c:d1:6b: d5:ea:ec:e1:3b:bd:d2:31:66:50:9d:56:00:2c:97: 65:77:4c:00:d3:89:c4:bc:12:5a:f6:b7:dd:eb:2b: a4:e2:25:d7:bc:fc:1e:0a:cc:26:d2:28:a2:87:bc: 50:9f:bb:53:ec:8c:5c:83:0f:1b:9c:b1:bd:4f:9c: 0c:b4:5d:44:f3:e2:71:16:bf:8f:b3:40:93:b9:74: 88:d0:5d:6c:59:b4:1c:4f:0c:92:4b:19:5f:88:1b: dd:9c:62:d3:02:27:93:84:06:39:40:31:e9:66:aa: 51:d0:8c:38:a5:4e:68:5b:b6:f5:6a:dc:db:cf:58: 0a:16:18:7e:18:d7:5b:e7:12:57:d2:28:df:18:16: d2:e6:77:86:70:5c:d4:79:53:b2:58:98:8c:11:27: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:EE:45:CF:F9:FF:03:39:E8:9B:6D:9E:AD:73:9D:BC:53:36:B3 X509v3 Authority Key Identifier: keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/PKXuRc_5_wM56Jttnq1znbxTNrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.80.0/24 Signature Algorithm: sha256WithRSAEncryption 53:72:c8:f9:2f:a6:02:2b:a7:fb:a9:89:77:a5:2c:b8:a5:e1: bf:64:26:69:55:d1:66:0f:86:5e:36:47:3d:21:8c:d6:92:9d: 04:7e:02:b8:9f:63:e1:c0:48:28:e7:2e:4f:33:5f:15:6a:cd: d4:eb:82:f6:ac:d4:d8:89:f6:ea:9b:2a:65:53:a1:10:3a:b2: 7f:5e:29:3f:df:ed:ac:e5:82:ab:5c:4c:43:04:a2:cc:0c:e6: 1f:38:d0:57:c6:61:92:77:91:58:24:cb:8e:aa:b7:8a:71:cb: 0e:bd:55:a0:b8:d0:3e:4c:34:b6:58:5a:47:0f:d3:5d:2b:a2: 5d:c4:fd:c5:95:d2:50:e7:bf:fa:10:8f:d8:b5:12:b9:1b:ff: d0:6a:c0:10:44:2c:60:ad:9c:6f:e9:35:28:42:22:aa:66:3f: bc:39:78:5e:58:6a:24:29:44:82:52:ad:25:f1:8c:42:56:b9: 84:0b:5c:ff:ed:f8:a0:2f:b3:58:51:50:fc:25:c2:47:6b:8a: aa:d0:56:b4:24:7d:e9:ae:bd:f7:04:10:e9:82:f7:99:d6:49: 9b:8d:67:83:de:d6:9f:12:3d:74:e9:d5:a0:7f:6b:9f:a7:6c: ae:c9:de:41:00:21:4a:77:5b:26:14:c2:2f:67:78:0a:c6:e1: ee:4d:14:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmEkeJeT/zlTz7Puz7RaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj YTU2OTMwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2E1ZWU0NWNmZjlmZjAzMzllODliNmQ5ZWFkNzM5ZGJjNTMzNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ygZLVlyRjkL8EHKyV4SuwB7iQm JK7qGnvmFV/Pe/tTkxzXnb4TpSw3CaFTDeCD5RixvquahWjahJ/rngwGFEzgmblq V0PrN0OIgVXqk5vBZ0YZzjgeCYiDjf5N2FyHgFmRRblc0WvV6uzhO73SMWZQnVYA LJdld0wA04nEvBJa9rfd6yuk4iXXvPweCswm0iiih7xQn7tT7Ixcgw8bnLG9T5wM tF1E8+JxFr+Ps0CTuXSI0F1sWbQcTwySSxlfiBvdnGLTAieThAY5QDHpZqpR0Iw4 pU5oW7b1atzbz1gKFhh+GNdb5xJX0ijfGBbS5neGcFzUeVOyWJiMESempQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyl7kXP+f8DOeibbZ6tc528UzazMB8GA1UdIwQY MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt ODU0MTgyY2IwNmE2LzEvUEtYdVJjXzVfd001Nkp0dG5xMXpuYnhUTnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2 LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV1QMA0G CSqGSIb3DQEBCwUAA4IBAQBTcsj5L6YCK6f7qYl3pSy4peG/ZCZpVdFmD4ZeNkc9 IYzWkp0EfgK4n2PhwEgo5y5PM18Vas3U64L2rNTYifbqmyplU6EQOrJ/Xik/3+2s 5YKrXExDBKLMDOYfONBXxmGSd5FYJMuOqreKccsOvVWguNA+TDS2WFpHD9NdK6Jd xP3FldJQ57/6EI/YtRK5G//QasAQRCxgrZxv6TUoQiKqZj+8OXheWGokKUSCUq0l 8YxCVrmEC1z/7figL7NYUVD8JcJHa4qq0Fa0JH3prr33BBDpgveZ1kmbjWeD3taf Ej106dWgf2ufp2yuyd5BACFKd1smFMIvZ3gKxuHuTRQ7 -----END CERTIFICATE-----Generated at Sat Jan 3 01:34:36 2026 by rpki-client