This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/PBfzv0iiF6HGojmLt5BzWIMbg9A.roa File: PBfzv0iiF6HGojmLt5BzWIMbg9A.roa (raw, json) Hash identifier: nIjIXxuKfTGMh/FzfYXRKGadZaZtFRAFEH76fiqro7Y= Subject key identifier: 3C:17:F3:BF:48:A2:17:A1:C6:A2:39:8B:B7:90:73:58:83:1B:83:D0 Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Certificate serial: 019B7BA50C9F2A45CE8A3B47FDFB49E489A3 Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/PBfzv0iiF6HGojmLt5BzWIMbg9A.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 217.31.9.0/24 maxlen: 24 217.31.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0c:9f:2a:45:ce:8a:3b:47:fd:fb:49:e4:89:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c17f3bf48a217a1c6a2398bb7907358831b83d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:9a:4b:84:19:cd:31:73:d8:41:cb:61:9e: ee:e0:8a:7f:7b:9c:57:76:9f:3f:36:7b:ef:f3:84: 6b:12:19:29:2c:47:ed:d5:9b:3a:3a:ac:6c:e6:5c: 1b:a5:b9:40:bc:ea:32:9e:41:37:56:c5:68:e2:24: 0e:06:1a:e2:63:af:a1:13:58:2f:eb:97:d4:09:4e: c9:11:48:cd:6d:ce:79:5c:d9:d4:f3:18:ba:83:82: 50:ff:d5:9f:74:21:34:d8:32:03:f5:01:24:31:9b: 82:6f:db:eb:b7:55:01:20:5a:43:b4:76:74:02:f5: 3d:cb:d1:a0:35:b6:ff:5a:a2:67:9e:d6:a3:dc:3e: 08:9d:31:2b:19:e0:36:ca:1c:0f:b0:9a:df:19:c2: 71:15:d9:8c:94:3b:fb:d2:b8:14:9a:18:e8:7a:46: 7d:51:60:bc:e4:4f:2c:eb:64:ec:6a:16:01:37:40: 88:4f:8a:6d:f4:fb:19:26:3d:02:3c:5a:5c:ac:c2: 21:c9:8c:7b:82:91:7a:d0:34:3d:3e:f7:96:a3:ca: ca:0b:58:75:4b:04:b4:3e:25:31:e7:1b:4b:d2:11: 04:00:19:5f:c0:89:58:56:34:2d:3f:b5:a1:46:b0: 13:02:b5:e4:ca:b6:42:52:8f:bb:43:8e:aa:52:71: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:F3:BF:48:A2:17:A1:C6:A2:39:8B:B7:90:73:58:83:1B:83:D0 X509v3 Authority Key Identifier: keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/PBfzv0iiF6HGojmLt5BzWIMbg9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.31.9.0-217.31.11.255 Signature Algorithm: sha256WithRSAEncryption bf:5d:53:d9:59:83:e1:7e:a6:01:18:74:3a:5b:cc:bd:fb:f3: 0c:94:ad:9f:d3:93:db:03:4d:5b:43:b1:95:b0:e7:de:c2:13: 08:89:a5:03:dc:b6:8f:b4:5b:8d:8b:2b:33:ad:4d:58:b4:52: 03:53:a0:eb:c7:34:76:0e:c9:5b:04:2d:0b:05:cd:8f:8c:1b: a3:9d:33:b2:a0:fd:6e:bd:91:b0:b0:0f:0d:fe:27:c1:db:b0: 95:f4:f9:04:1c:68:f0:d1:fb:b1:62:86:cb:10:6f:fb:53:aa: 0f:24:71:b4:67:89:c2:5b:8f:24:5a:3e:15:80:bd:31:c7:52: 64:ec:fb:41:f9:92:44:37:c5:2a:10:14:a8:e2:6f:64:5d:69: 57:29:bd:27:3c:c6:f6:68:4c:c9:31:86:cb:d5:c8:4c:4e:4f: 24:85:dc:d9:28:6a:b8:fd:d6:2f:e9:e3:37:be:e5:0a:01:75: 4a:f7:93:6a:1f:f0:9c:64:57:0c:09:ab:44:b6:ee:4d:61:ad: 30:e3:70:f8:8d:83:64:0d:b6:6c:e6:5c:b3:1f:cb:28:fb:6a: 1a:e0:05:13:12:cf:14:28:01:85:6a:c4:50:ef:bd:28:aa:86: 3b:d1:68:18:59:81:a6:da:3e:81:9b:f3:ba:8b:49:61:c4:91: 0d:a2:fc:ee -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pQyfKkXOijtH/ftJ5ImjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx ODkwM2MwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzE3ZjNiZjQ4YTIxN2ExYzZhMjM5OGJiNzkwNzM1ODgzMWI4M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQqaS4QZzTFz2EHLYZ7u4Ip/e5xX dp8/Nnvv84RrEhkpLEft1Zs6Oqxs5lwbpblAvOoynkE3VsVo4iQOBhriY6+hE1gv 65fUCU7JEUjNbc55XNnU8xi6g4JQ/9WfdCE02DID9QEkMZuCb9vrt1UBIFpDtHZ0 AvU9y9GgNbb/WqJnntaj3D4InTErGeA2yhwPsJrfGcJxFdmMlDv70rgUmhjoekZ9 UWC85E8s62TsahYBN0CIT4pt9PsZJj0CPFpcrMIhyYx7gpF60DQ9PveWo8rKC1h1 SwS0PiUx5xtL0hEEABlfwIlYVjQtP7WhRrATArXkyrZCUo+7Q46qUnHPhQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDwX879IohehxqI5i7eQc1iDG4PQMB8GA1UdIwQY MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt ZmY5N2Y2MmEwOTQ1LzEvUEJmenYwaWlGNkhHb2ptTHQ1QnpXSU1iZzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1 LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZHwkD BALZHwgwDQYJKoZIhvcNAQELBQADggEBAL9dU9lZg+F+pgEYdDpbzL378wyUrZ/T k9sDTVtDsZWw597CEwiJpQPcto+0W42LKzOtTVi0UgNToOvHNHYOyVsELQsFzY+M G6OdM7Kg/W69kbCwDw3+J8HbsJX0+QQcaPDR+7FihssQb/tTqg8kcbRnicJbjyRa PhWAvTHHUmTs+0H5kkQ3xSoQFKjib2RdaVcpvSc8xvZoTMkxhsvVyExOTySF3Nko arj91i/p4ze+5QoBdUr3k2of8JxkVwwJq0S27k1hrTDjcPiNg2QNtmzmXLMfyyj7 ahrgBRMSzxQoAYVqxFDvvSiqhjvRaBhZgabaPoGb87qLSWHEkQ2i/O4= -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:29 2026 by rpki-client