This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pFo7CRTAPvilxRJ1eKilOPcs8p4.roa File: pFo7CRTAPvilxRJ1eKilOPcs8p4.roa (raw, json) Hash identifier: BlCFP+W/DUc9umPnP+oXEbKJtMGqiMZF9TWO7debvsc= Subject key identifier: A4:5A:3B:09:14:C0:3E:F8:A5:C5:12:75:78:A8:A5:38:F7:2C:F2:9E Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019AA01A64C93DB7C3FC5E50A3D71F65C79B Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pFo7CRTAPvilxRJ1eKilOPcs8p4.roa Signing time: Thu 20 Nov 2025 07:11:15 +0000 ROA not before: Thu 20 Nov 2025 07:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 83.147.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:1a:64:c9:3d:b7:c3:fc:5e:50:a3:d7:1f:65:c7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Nov 20 07:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a45a3b0914c03ef8a5c5127578a8a538f72cf29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:51:17:e6:bc:9b:4b:de:07:16:3e:7d:b1: 63:5a:64:7e:a3:8b:e7:58:e6:8d:f3:5d:2b:30:56: f1:c6:44:c6:5b:f8:95:13:66:fc:ab:93:0a:be:2c: f0:ec:89:da:31:2c:09:da:6a:ad:6c:24:b4:01:2b: ec:45:15:9b:0c:0f:88:57:db:d8:1a:97:2b:8c:e4: 91:be:c9:37:78:e0:6c:94:d5:e5:10:7e:7c:9e:d4: 76:45:24:11:2a:34:9f:0e:ed:cf:ba:e7:2b:f2:54: 80:ac:42:d4:ab:3d:3b:b0:ef:40:ed:3b:8b:44:8e: 4b:8e:39:f9:37:5e:fa:15:07:cd:81:ac:35:3f:94: bb:98:cf:25:8e:a2:b4:31:aa:61:ee:1e:9a:8d:ad: 76:b8:de:7f:ba:68:c2:bd:6a:19:de:e1:a3:7b:8d: 07:a5:6a:d9:3a:d1:8c:45:50:d3:c5:d0:54:1e:ce: 62:0f:d9:93:51:aa:57:66:3d:2a:f5:fe:86:66:66: 0d:5f:bb:a2:d5:76:9b:46:37:dc:d7:b7:b1:1e:27: 40:60:34:75:95:fd:44:9f:c9:d8:62:0f:9f:17:f4: be:c8:36:2b:92:cb:34:dd:f3:f8:ff:88:55:e5:3f: d4:0c:31:43:dd:80:b9:60:b4:36:7b:9b:cd:d1:fc: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:3B:09:14:C0:3E:F8:A5:C5:12:75:78:A8:A5:38:F7:2C:F2:9E X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/pFo7CRTAPvilxRJ1eKilOPcs8p4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.4.0/22 Signature Algorithm: sha256WithRSAEncryption bd:c8:8e:f8:c0:dc:03:07:40:95:87:5d:fa:07:d5:15:0c:22: b2:43:8b:a9:89:2a:3b:49:65:e9:a4:2b:2f:d1:c7:67:d6:63: 15:6f:1c:9a:70:6f:37:ad:eb:8c:55:ca:14:0f:6d:8b:20:f1: 42:79:06:fe:5b:9f:46:67:03:9d:f2:0c:fe:83:cc:35:fc:61: bb:ae:6c:07:00:e9:3a:41:92:a4:62:24:48:4a:24:ee:8b:31: 04:a1:0f:0b:ae:60:eb:32:6f:82:0c:ec:f1:63:67:01:6b:ec: b5:a1:8b:05:f6:ce:13:7f:e8:35:af:8e:0b:04:38:44:d1:aa: bb:da:1a:e2:45:4a:9c:ec:52:4f:50:4f:e8:88:5f:0e:d8:33: 7a:7d:4b:04:4b:ce:ed:15:6c:7d:a5:97:a5:22:d3:50:48:a2: 79:43:04:5b:cc:cd:f7:13:27:68:80:b8:0f:f0:fe:14:8c:81: 9c:45:31:73:a0:4d:95:40:5c:ef:c9:6c:91:c2:11:de:6f:9f: ad:57:b0:b1:fd:fe:e2:fe:b8:fa:3b:53:47:2c:d5:90:78:e1: 17:d4:33:1a:4e:e1:6b:72:48:ee:49:86:18:17:08:96:e1:aa: f5:f1:a0:31:ff:26:7a:44:45:6e:e3:50:71:d9:ae:e1:fe:8f: 99:6c:2f:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqgGmTJPbfD/F5Qo9cfZcebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjUxMTIwMDcxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDVhM2IwOTE0YzAzZWY4YTVjNTEyNzU3OGE4YTUzOGY3MmNmMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ZRF+a8m0veBxY+fbFjWmR+o4vn WOaN810rMFbxxkTGW/iVE2b8q5MKvizw7InaMSwJ2mqtbCS0ASvsRRWbDA+IV9vY GpcrjOSRvsk3eOBslNXlEH58ntR2RSQRKjSfDu3Puucr8lSArELUqz07sO9A7TuL RI5Ljjn5N176FQfNgaw1P5S7mM8ljqK0Maph7h6aja12uN5/umjCvWoZ3uGje40H pWrZOtGMRVDTxdBUHs5iD9mTUapXZj0q9f6GZmYNX7ui1XabRjfc17exHidAYDR1 lf1En8nYYg+fF/S+yDYrkss03fP4/4hV5T/UDDFD3YC5YLQ2e5vN0fyGGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRaOwkUwD74pcUSdXiopTj3LPKeMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvcEZvN0NSVEFQdmlseFJKMWVLaWxPUGNzOHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MEMA0G CSqGSIb3DQEBCwUAA4IBAQC9yI74wNwDB0CVh136B9UVDCKyQ4upiSo7SWXppCsv 0cdn1mMVbxyacG83reuMVcoUD22LIPFCeQb+W59GZwOd8gz+g8w1/GG7rmwHAOk6 QZKkYiRISiTuizEEoQ8LrmDrMm+CDOzxY2cBa+y1oYsF9s4Tf+g1r44LBDhE0aq7 2hriRUqc7FJPUE/oiF8O2DN6fUsES87tFWx9pZelItNQSKJ5QwRbzM33EydogLgP 8P4UjIGcRTFzoE2VQFzvyWyRwhHeb5+tV7Cx/f7i/rj6O1NHLNWQeOEX1DMaTuFr ckjuSYYYFwiW4ar18aAx/yZ6REVu41Bx2a7h/o+ZbC8l -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client