This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/pbvwVvPR96blsrXDIp8CkksnWJc.roa File: pbvwVvPR96blsrXDIp8CkksnWJc.roa (raw, json) Hash identifier: kBNX9VrGunaS60zRgYQFfxUyjaOrUW8r0utqLwXdD4A= Subject key identifier: A5:BB:F0:56:F3:D1:F7:A6:E5:B2:B5:C3:22:9F:02:92:4B:27:58:97 Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Certificate serial: 019C0ED9094ADC2BEA0C1BD31DDA58D7144E Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/pbvwVvPR96blsrXDIp8CkksnWJc.roa Signing time: Fri 30 Jan 2026 12:20:30 +0000 ROA not before: Fri 30 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35168 IP address blocks: 89.38.164.0/22 maxlen: 22 89.38.164.0/24 maxlen: 24 89.38.165.0/24 maxlen: 24 89.38.166.0/24 maxlen: 24 89.38.167.0/24 maxlen: 24 2a01:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:d9:09:4a:dc:2b:ea:0c:1b:d3:1d:da:58:d7:14:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Validity Not Before: Jan 30 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5bbf056f3d1f7a6e5b2b5c3229f02924b275897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:eb:46:84:14:39:c6:3b:3c:1d:ad:03:3a: 23:5d:87:9b:7a:00:76:b2:43:b7:ae:04:2c:0f:50: b5:f9:15:7a:4e:d3:e5:48:93:59:18:63:fd:1a:97: 6d:ad:9b:3f:37:43:58:f1:4d:91:c9:79:0e:2f:b7: c2:2b:ea:0e:9d:72:d4:86:18:f3:35:8a:0d:89:f4: 85:bf:9e:08:e1:b1:d0:71:9e:25:8f:16:90:92:fb: d6:9e:49:66:16:a4:be:0b:07:98:f8:2e:f5:2b:1b: e0:03:54:28:7c:f6:62:81:43:58:d1:66:77:ba:70: 44:22:78:d7:7e:8e:70:7f:c9:78:3c:f0:6c:58:2a: f0:01:b8:f8:8b:53:ed:a8:7d:da:f8:db:8c:83:dc: 4a:8b:39:e5:04:f4:04:7e:60:6e:45:0b:5a:92:62: 68:2a:ae:f9:6a:2a:ef:96:0a:48:ee:23:c0:37:75: 64:71:57:f3:ae:55:d8:b3:6a:0c:b1:59:d5:fa:1f: 54:e9:72:34:72:77:05:c1:ef:26:a4:07:c0:31:57: 0b:16:32:d9:c6:73:aa:8a:64:31:b3:b3:1d:41:5b: 2e:95:cf:59:bd:ef:0b:53:bc:42:5d:29:cc:ef:13: a5:0e:aa:a8:27:80:63:8e:29:09:97:a6:95:b6:71: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BB:F0:56:F3:D1:F7:A6:E5:B2:B5:C3:22:9F:02:92:4B:27:58:97 X509v3 Authority Key Identifier: keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/pbvwVvPR96blsrXDIp8CkksnWJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.164.0/22 IPv6: 2a01:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 36:67:25:d9:bc:f1:5b:52:1e:02:81:1f:33:11:da:a3:c6:fb: 0b:eb:4f:a9:58:e8:7e:e9:a3:aa:9a:a9:62:e2:a9:9d:29:20: ae:4d:83:bd:68:8e:dc:50:4f:1f:93:b7:f6:02:13:7e:45:e8: e5:83:43:9a:52:70:1c:12:26:11:d2:fa:db:62:de:b7:ac:65: 98:c3:91:9d:57:6b:6c:ea:b5:b5:ce:a2:48:e8:a1:0e:98:ae: 44:9f:b0:42:b5:b2:d6:23:66:7e:cb:ce:84:ea:de:e4:83:c3: e8:52:01:ca:8c:30:f0:18:e4:52:ed:51:35:c6:16:44:a3:9a: c2:b2:1e:57:01:bf:40:bc:d3:85:7c:22:c4:3b:d9:84:17:f6: 77:8c:a6:90:e9:4c:7c:bc:cd:85:61:73:1c:f7:b8:ce:c2:66: 9c:d7:ea:d1:33:c5:04:e1:c1:c3:34:5d:ea:47:d7:ff:1d:35: ed:f7:48:7c:78:37:06:f3:6e:81:40:85:c7:ed:fb:57:58:02: f5:3b:d2:ee:4b:04:60:fc:0c:2e:1e:06:c8:96:02:57:f4:39: 07:3d:30:54:cf:d4:79:1e:c2:c3:c5:91:41:9d:1f:69:ba:6b: 4f:82:6c:d9:71:17:2e:5b:11:57:2d:93:5e:76:08:84:3b:55: b8:11:75:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwO2QlK3CvqDBvTHdpY1xROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy MjdjZDQwHhcNMjYwMTMwMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWJiZjA1NmYzZDFmN2E2ZTViMmI1YzMyMjlmMDI5MjRiMjc1ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pPrRoQUOcY7PB2tAzojXYebegB2 skO3rgQsD1C1+RV6TtPlSJNZGGP9GpdtrZs/N0NY8U2RyXkOL7fCK+oOnXLUhhjz NYoNifSFv54I4bHQcZ4ljxaQkvvWnklmFqS+CweY+C71KxvgA1QofPZigUNY0WZ3 unBEInjXfo5wf8l4PPBsWCrwAbj4i1PtqH3a+NuMg9xKiznlBPQEfmBuRQtakmJo Kq75airvlgpI7iPAN3VkcVfzrlXYs2oMsVnV+h9U6XI0cncFwe8mpAfAMVcLFjLZ xnOqimQxs7MdQVsulc9Zve8LU7xCXSnM7xOlDqqoJ4BjjikJl6aVtnHSGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKW78Fbz0fem5bK1wyKfApJLJ1iXMB8GA1UdIwQY MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt ZDU1ZjVlMGZmNDNmLzEvcGJ2d1Z2UFI5NmJsc3JYRElwOENra3NuV0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCWSakMA0E AgACMAcDBQAqAWjAMA0GCSqGSIb3DQEBCwUAA4IBAQA2ZyXZvPFbUh4CgR8zEdqj xvsL60+pWOh+6aOqmqli4qmdKSCuTYO9aI7cUE8fk7f2AhN+Rejlg0OaUnAcEiYR 0vrbYt63rGWYw5GdV2ts6rW1zqJI6KEOmK5En7BCtbLWI2Z+y86E6t7kg8PoUgHK jDDwGORS7VE1xhZEo5rCsh5XAb9AvNOFfCLEO9mEF/Z3jKaQ6Ux8vM2FYXMc97jO wmac1+rRM8UE4cHDNF3qR9f/HTXt90h8eDcG826BQIXH7ftXWAL1O9LuSwRg/Awu HgbIlgJX9DkHPTBUz9R5HsLDxZFBnR9pumtPgmzZcRcuWxFXLZNedgiEO1W4EXVx -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:28 2026 by rpki-client