This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa File: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (raw, json) Hash identifier: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc= Subject key identifier: 3E:F1:CC:1C:3D:1A:7A:E4:3D:4F:73:2D:7C:8B:36:5E:62:72:40:E6 Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B7BA4EFEFF3934937700CD1699599B459 Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197229 IP address blocks: 212.72.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ef:ef:f3:93:49:37:70:0c:d1:69:95:99:b4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ef1cc1c3d1a7ae43d4f732d7c8b365e627240e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:9f:6c:5d:08:e6:a3:b5:be:b2:25:0d:79: a3:22:b0:84:42:9b:fe:66:eb:a1:e2:b4:5d:30:4a: 05:f3:2d:ad:7f:46:0d:08:a2:a2:ab:ed:64:b7:ed: cb:8b:fb:ca:0d:4f:6f:c1:ee:68:d5:1d:9a:a4:1b: be:32:de:69:2a:f9:72:e4:17:47:8c:cf:35:e3:96: ff:d8:0a:d4:48:69:b6:ba:a2:cd:db:22:2e:14:43: 04:e4:39:ea:32:f1:67:1b:b7:1b:b6:fd:d7:0e:37: b7:95:c1:f1:34:ab:01:81:ae:c3:a1:f6:b6:f4:d5: 70:1d:22:16:b1:f8:b5:42:eb:6d:45:b6:b1:ac:3b: ef:72:66:25:a6:56:0d:51:00:3f:33:3c:67:46:df: 02:a9:53:a6:4c:8a:88:a1:f0:2f:95:a5:cf:11:83: 34:f2:6c:08:b4:e8:43:8c:f2:f9:d8:93:3a:61:c9: ed:7f:0f:56:09:d1:c9:80:aa:36:90:32:1a:f4:15: 19:d9:4d:91:90:97:07:ab:73:7d:b6:6b:2f:bf:4f: 4a:7a:2c:ff:39:35:53:d1:e0:c2:f4:5c:17:b8:06: a9:78:ba:8f:c3:e9:80:11:12:94:04:11:30:16:89: 8f:2a:b9:88:92:97:df:aa:fb:ac:cc:8c:46:89:e2: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:CC:1C:3D:1A:7A:E4:3D:4F:73:2D:7C:8B:36:5E:62:72:40:E6 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.72.155.0/24 Signature Algorithm: sha256WithRSAEncryption 34:43:49:4b:3d:46:7a:f4:4f:d9:8f:3e:da:24:55:6e:30:07: 7e:b3:ce:d9:1b:b8:78:aa:d5:6c:26:59:8e:f8:1d:8e:d4:27: 38:eb:de:bd:e1:5b:30:2b:3b:9c:fd:ac:eb:02:ef:b8:be:bc: ce:12:96:c0:90:07:88:25:36:9b:39:cd:b9:62:9e:d6:10:fd: e7:4c:8b:b3:f4:76:44:b8:bc:8d:6c:3e:2b:9f:f2:5d:13:90: ca:fd:f1:19:f9:a0:62:c6:9a:1b:e0:21:aa:c2:95:5e:58:ec: 76:7b:79:16:21:95:b1:fc:39:af:91:a3:ff:1e:3f:77:93:44: 89:41:5e:4f:a5:7a:ac:64:9e:e7:b2:02:f5:9b:eb:01:ca:53: 65:cf:3b:15:4c:ef:78:73:38:ac:9a:e6:f2:96:4f:bf:0f:a3: d9:bf:f3:e6:3b:cc:de:04:fc:a4:62:f9:24:1b:82:88:05:89: ce:6c:d7:ba:35:b5:1d:9d:8f:b0:3b:03:85:70:66:47:84:e6: 95:39:1d:3f:99:d7:23:5d:9f:2b:04:55:8f:3c:f9:40:83:f3: 51:28:9a:ed:b6:16:c7:58:97:51:f7:78:ad:a0:d5:a5:3c:fa: 63:0a:fa:87:9a:ad:e8:4f:f8:8a:75:00:c2:7b:be:f5:7d:ae: 63:7f:cf:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pO/v85NJN3AM0WmVmbRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWYxY2MxYzNkMWE3YWU0M2Q0ZjczMmQ3YzhiMzY1ZTYyNzI0MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqfbF0I5qO1vrIlDXmjIrCEQpv+ Zuuh4rRdMEoF8y2tf0YNCKKiq+1kt+3Li/vKDU9vwe5o1R2apBu+Mt5pKvly5BdH jM8145b/2ArUSGm2uqLN2yIuFEME5DnqMvFnG7cbtv3XDje3lcHxNKsBga7Dofa2 9NVwHSIWsfi1QuttRbaxrDvvcmYlplYNUQA/MzxnRt8CqVOmTIqIofAvlaXPEYM0 8mwItOhDjPL52JM6Ycntfw9WCdHJgKo2kDIa9BUZ2U2RkJcHq3N9tmsvv09Keiz/ OTVT0eDC9FwXuAapeLqPw+mAERKUBBEwFomPKrmIkpffqvuszIxGieLvYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7xzBw9GnrkPU9zLXyLNl5ickDmMB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvUHZITUhEMGFldVE5VDNNdGZJczJYbUp5UU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EibMA0G CSqGSIb3DQEBCwUAA4IBAQA0Q0lLPUZ69E/Zjz7aJFVuMAd+s87ZG7h4qtVsJlmO +B2O1Cc469694VswKzuc/azrAu+4vrzOEpbAkAeIJTabOc25Yp7WEP3nTIuz9HZE uLyNbD4rn/JdE5DK/fEZ+aBixpob4CGqwpVeWOx2e3kWIZWx/DmvkaP/Hj93k0SJ QV5PpXqsZJ7nsgL1m+sBylNlzzsVTO94czismubylk+/D6PZv/PmO8zeBPykYvkk G4KIBYnObNe6NbUdnY+wOwOFcGZHhOaVOR0/mdcjXZ8rBFWPPPlAg/NRKJrtthbH WJdR93itoNWlPPpjCvqHmq3oT/iKdQDCe771fa5jf8/f -----END CERTIFICATE-----Generated at Thu Jan 15 21:36:34 2026 by rpki-client