This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/PPCzo4aoB52WIulHl2b-W42AOQQ.roa File: PPCzo4aoB52WIulHl2b-W42AOQQ.roa (raw, json) Hash identifier: v7GTmELXw/VVFQyWL5TMg5z0A0nUbHsal/nQ+BR/mNg= Subject key identifier: 3C:F0:B3:A3:86:A8:07:9D:96:22:E9:47:97:66:FE:5B:8D:80:39:04 Certificate issuer: /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Certificate serial: 019B7AC7BE595F89498FF7F215DFF06364DB Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/PPCzo4aoB52WIulHl2b-W42AOQQ.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 194.29.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:be:59:5f:89:49:8f:f7:f2:15:df:f0:63:64:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8 Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cf0b3a386a8079d9622e9479766fe5b8d803904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:06:ce:39:f3:1f:80:b4:b7:a1:8e:ac:9d: 37:d1:e8:75:8f:9b:eb:fd:3e:a1:e9:35:35:0c:00: aa:4a:2b:d5:8b:0d:9a:f9:bc:52:aa:f5:76:ff:c0: 88:04:53:f3:ef:21:2f:c2:12:2b:68:36:bf:58:35: 9a:38:c4:d7:12:8d:88:8d:a2:27:7f:31:22:f4:9e: 33:62:06:06:61:ff:d2:f5:35:a6:fe:a7:a7:1b:53: fd:15:36:c5:62:24:c3:a7:7b:b6:d9:a3:e0:0d:7c: a9:ce:9e:88:b8:44:64:52:06:99:4b:d4:3e:25:83: 18:42:46:e6:fa:0a:5e:a7:5f:7c:7c:74:e9:a8:78: e5:ce:d7:74:79:71:b0:9a:19:56:a9:7d:aa:a1:d4: f0:c0:c6:e6:7b:87:46:ec:45:0d:f1:60:0d:cd:51: 2f:ea:14:87:42:d5:11:8f:08:80:d4:c3:02:26:81: 34:b6:3e:31:a3:cb:0b:d7:67:c9:9c:4e:b7:1b:a9: 0f:c3:7d:ab:37:3f:76:12:b7:26:b9:e3:06:e0:29: b5:9c:45:b9:af:b2:28:c5:e4:7d:bc:e5:7f:30:1a: d9:5e:f9:41:85:b0:86:4d:ce:bf:9d:b3:c8:19:ab: b9:3e:4a:7a:73:a4:42:dc:04:3a:d6:a4:71:21:03: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F0:B3:A3:86:A8:07:9D:96:22:E9:47:97:66:FE:5B:8D:80:39:04 X509v3 Authority Key Identifier: keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/PPCzo4aoB52WIulHl2b-W42AOQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.29.79.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a0:dc:fa:3f:8d:8a:e8:b8:1d:69:05:68:88:9e:26:c8:61: 2f:66:12:b2:81:54:a2:45:99:7f:56:f3:df:8d:d2:a5:ae:04: 29:8b:70:a1:b6:ef:7e:72:a2:26:bc:81:d6:8e:c2:50:dc:a4: 16:b4:8b:2d:10:79:b3:77:f7:65:51:1d:ff:82:0b:46:6e:3d: 96:5f:d8:40:d0:52:ef:4d:3c:72:55:3e:20:e4:4a:66:ae:e6: 69:cc:61:32:72:16:37:cb:aa:2b:d9:cf:6e:18:f3:62:9d:65: e0:57:6a:49:c0:f3:64:3a:9e:0d:dc:80:b6:02:03:c6:24:b3: ca:46:f3:9b:e2:4a:34:2c:9a:6f:27:7e:c4:86:96:36:fd:cf: 18:9f:e4:06:e0:f3:dc:fc:ba:40:e6:6c:9a:eb:2d:45:c4:7e: 73:78:ee:4b:8b:68:d0:77:1a:f9:e7:86:1c:de:99:d1:d5:0b: 09:ba:db:e0:39:45:11:0c:35:81:8e:60:05:42:f1:49:b0:c2: e2:36:5d:5b:88:12:47:e5:24:9b:37:cc:4b:4b:db:b8:01:7d: 4f:70:cf:6f:f0:98:ff:f0:61:23:5d:85:d8:4b:2b:0d:8c:80: e5:c4:84:ef:dd:84:41:07:cf:bb:ac:0e:d0:f5:fc:9c:18:6e: e4:e2:3d:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x75ZX4lJj/fyFd/wY2TbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNDBhMDcxODBmY2YzMzYzNWY3NTdjYzE0NDllMGQ1ZGJk NGZkYjgwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2YwYjNhMzg2YTgwNzlkOTYyMmU5NDc5NzY2ZmU1YjhkODAzOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGUGzjnzH4C0t6GOrJ030eh1j5vr /T6h6TU1DACqSivViw2a+bxSqvV2/8CIBFPz7yEvwhIraDa/WDWaOMTXEo2IjaIn fzEi9J4zYgYGYf/S9TWm/qenG1P9FTbFYiTDp3u22aPgDXypzp6IuERkUgaZS9Q+ JYMYQkbm+gpep198fHTpqHjlztd0eXGwmhlWqX2qodTwwMbme4dG7EUN8WANzVEv 6hSHQtURjwiA1MMCJoE0tj4xo8sL12fJnE63G6kPw32rNz92ErcmueMG4Cm1nEW5 r7IoxeR9vOV/MBrZXvlBhbCGTc6/nbPIGau5Pkp6c6RC3AQ61qRxIQNCnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzws6OGqAedliLpR5dm/luNgDkEMB8GA1UdIwQY MBaAFCJAoHGA/PM2NfdXzBRJ4NXb1P24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEt ZDBiZDBlODAzZmQxLzEvUFBDem80YW9CNTJXSXVsSGwyYi1XNDJBT1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hMzE0Y2MtMDY2ZS00YzA5LWEzNmEtZDBiZDBlODAzZmQx LzEvSWtDZ2NZRDg4elkxOTFmTUZFbmcxZHZVX2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh1PMA0G CSqGSIb3DQEBCwUAA4IBAQBKoNz6P42K6LgdaQVoiJ4myGEvZhKygVSiRZl/VvPf jdKlrgQpi3Chtu9+cqImvIHWjsJQ3KQWtIstEHmzd/dlUR3/ggtGbj2WX9hA0FLv TTxyVT4g5EpmruZpzGEychY3y6or2c9uGPNinWXgV2pJwPNkOp4N3IC2AgPGJLPK RvOb4ko0LJpvJ37EhpY2/c8Yn+QG4PPc/LpA5mya6y1FxH5zeO5Li2jQdxr554Yc 3pnR1QsJutvgOUURDDWBjmAFQvFJsMLiNl1biBJH5SSbN8xLS9u4AX1PcM9v8Jj/ 8GEjXYXYSysNjIDlxITv3YRBB8+7rA7Q9fycGG7k4j10 -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:43 2026 by rpki-client