This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pv9Cpord1y0tCGV7NVJXrmWgS28.roa File: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (raw, json) Hash identifier: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4= Subject key identifier: A6:FF:42:A6:8A:DD:D7:2D:2D:08:65:7B:35:52:57:AE:65:A0:4B:6F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C79FE981C8A9369BACF49C5BF2FE Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pv9Cpord1y0tCGV7NVJXrmWgS28.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 5.178.3.0/24 maxlen: 24 46.23.96.0/24 maxlen: 24 46.23.98.0/24 maxlen: 24 109.205.212.0/24 maxlen: 24 164.215.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:9f:e9:81:c8:a9:36:9b:ac:f4:9c:5b:f2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ff42a68addd72d2d08657b355257ae65a04b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:25:02:52:a3:a0:3e:f7:c3:60:bd:66:86: f1:9d:af:4c:bc:3a:ed:7d:c1:43:02:7c:96:f4:ae: e8:55:0b:47:ca:8a:af:b5:ac:0f:a0:87:ec:3f:fe: 09:d0:2c:7a:9d:c9:03:9b:7f:db:cd:65:b0:87:c7: b8:47:05:2f:88:b3:63:a8:49:fa:46:f2:88:e6:c1: 5c:4f:5f:dc:46:63:22:67:20:20:71:9e:dd:73:f7: e9:66:34:9a:90:6b:e7:0f:ae:08:98:80:bf:1f:01: a8:cc:31:43:9c:ac:cd:7a:ed:8c:88:2f:3b:13:72: 49:8a:53:2a:2d:0e:14:50:b1:3e:08:12:fe:cb:91: 80:7b:20:ff:82:d5:bf:f7:46:38:ed:3a:71:0f:14: e7:65:e6:25:ba:3c:1f:dd:7d:cc:1f:d0:2b:a3:f6: 53:8b:d5:53:d4:5b:9b:28:1b:30:73:cf:37:0f:4f: f7:41:9d:6b:1d:ea:22:ee:a4:17:e9:01:03:b0:df: f2:2f:38:9c:e1:d2:dc:a4:9b:98:80:56:81:48:5d: 1b:43:38:32:ae:17:26:5d:3d:aa:ce:b2:89:d5:6d: 40:88:88:60:82:12:e4:42:5b:67:d5:ef:7a:44:32: c3:c0:58:74:35:1e:65:2b:fc:c6:68:73:c5:19:f5: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:42:A6:8A:DD:D7:2D:2D:08:65:7B:35:52:57:AE:65:A0:4B:6F X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pv9Cpord1y0tCGV7NVJXrmWgS28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.3.0/24 46.23.96.0/24 46.23.98.0/24 109.205.212.0/24 164.215.97.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:22:32:f4:7c:3f:26:4e:f7:e8:87:4f:89:58:c6:5f:d6:cb: 08:00:35:19:46:70:42:6e:32:ba:53:99:c3:e4:e3:cf:55:7c: 5e:e0:74:5d:e0:11:5a:d2:88:b7:4b:1a:36:a8:8d:5c:b0:57: f4:61:89:bd:1d:6b:32:b8:3d:11:11:14:3a:65:d5:b9:0d:ed: ed:96:83:01:48:5e:20:11:f1:22:89:58:5b:f6:6e:33:3e:61: e9:d3:a1:70:2b:36:57:f1:eb:f4:09:e6:ea:d8:5a:12:d4:0a: 7e:1b:51:82:d8:96:9c:41:61:12:83:b7:b5:0a:48:09:d1:4e: 0a:bd:d6:33:18:3e:57:c9:09:1d:8e:72:c2:31:56:20:be:4e: 55:6c:63:07:29:9b:52:a5:ca:0f:12:ee:81:aa:df:0b:dc:75: d4:6a:c1:aa:78:d5:5e:22:fb:14:66:c4:03:93:52:ab:f4:a4: 1d:ef:ac:d2:44:ee:7d:66:55:77:45:cb:0b:53:ec:f5:5e:1f: 3f:f1:62:1f:49:7f:ad:f2:a4:82:9f:0a:cc:6a:1e:0c:8b:5e: 1e:aa:2f:35:83:d7:58:55:9e:14:f0:1e:39:79:5d:12:52:5c: 2f:7e:83:0d:b0:c5:83:fa:aa:a1:2b:a4:68:5d:73:56:fe:0e: a3:0a:ca:dc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xsef6YHIqTabrPScW/L+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmZmNDJhNjhhZGRkNzJkMmQwODY1N2IzNTUyNTdhZTY1YTA0YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTYlAlKjoD73w2C9Zobxna9MvDrt fcFDAnyW9K7oVQtHyoqvtawPoIfsP/4J0Cx6nckDm3/bzWWwh8e4RwUviLNjqEn6 RvKI5sFcT1/cRmMiZyAgcZ7dc/fpZjSakGvnD64ImIC/HwGozDFDnKzNeu2MiC87 E3JJilMqLQ4UULE+CBL+y5GAeyD/gtW/90Y47TpxDxTnZeYlujwf3X3MH9Aro/ZT i9VT1FubKBswc883D0/3QZ1rHeoi7qQX6QEDsN/yLzic4dLcpJuYgFaBSF0bQzgy rhcmXT2qzrKJ1W1AiIhgghLkQltn1e96RDLDwFh0NR5lK/zGaHPFGfXQ5wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKb/QqaK3dctLQhlezVSV65loEtvMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvcHY5Q3BvcmQxeTB0Q0dWN05WSlhybVdnUzI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbIDAwQA LhdgAwQALhdiAwQAbc3UAwQApNdhMA0GCSqGSIb3DQEBCwUAA4IBAQBeIjL0fD8m Tvfoh0+JWMZf1ssIADUZRnBCbjK6U5nD5OPPVXxe4HRd4BFa0oi3Sxo2qI1csFf0 YYm9HWsyuD0RERQ6ZdW5De3tloMBSF4gEfEiiVhb9m4zPmHp06FwKzZX8ev0Cebq 2FoS1Ap+G1GC2JacQWESg7e1CkgJ0U4KvdYzGD5XyQkdjnLCMVYgvk5VbGMHKZtS pcoPEu6Bqt8L3HXUasGqeNVeIvsUZsQDk1Kr9KQd76zSRO59ZlV3RcsLU+z1Xh8/ 8WIfSX+t8qSCnwrMah4Mi14eqi81g9dYVZ4U8B45eV0SUlwvfoMNsMWD+qqhK6Ro XXNW/g6jCsrc -----END CERTIFICATE-----Generated at Thu Jan 1 21:36:24 2026 by rpki-client