This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PA7sPCUFuBxlyeNmc4UbhS4nBZ4.roa File: PA7sPCUFuBxlyeNmc4UbhS4nBZ4.roa (raw, json) Hash identifier: gE4R7QAMAAFnYp+UW6sJQiUcUpyoSqES6oXgsvOv4Gk= Subject key identifier: 3C:0E:EC:3C:25:05:B8:1C:65:C9:E3:66:73:85:1B:85:2E:27:05:9E Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA784EE5917B8E27F9F0FA26F5FBC39 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PA7sPCUFuBxlyeNmc4UbhS4nBZ4.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201851 IP address blocks: 178.34.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:84:ee:59:17:b8:e2:7f:9f:0f:a2:6f:5f:bc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c0eec3c2505b81c65c9e36673851b852e27059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:42:a5:ff:84:71:84:83:41:d1:6d:7d:91: c4:34:11:4d:25:ca:11:19:c5:94:4e:75:0e:7a:80: 31:4a:ea:b9:6e:dd:b4:77:19:fb:9e:47:cb:27:b8: f0:cb:50:0c:6e:ac:48:a2:6b:30:cb:58:98:9e:e4: d3:fb:a4:fc:a4:8a:d5:78:52:52:e9:fb:6b:f4:bd: a9:d1:ba:24:76:f5:a7:7e:0f:d9:21:cf:e7:ea:05: d1:2c:b5:bb:73:b0:2c:91:71:e5:4c:76:7e:ee:cc: 45:dd:54:2f:0c:94:1c:3f:45:06:71:6b:70:d8:7e: cf:d6:8f:19:10:aa:c9:30:1c:41:e1:b4:7f:6a:74: 3c:1f:ad:f8:99:60:3b:c8:77:f0:ba:19:43:fa:e7: c2:45:7b:9f:f7:4f:73:eb:5f:e4:a2:b3:7c:d3:4e: 5e:c0:ed:9a:86:af:9c:4b:3b:c9:16:73:bd:30:c9: a5:4c:70:fc:f6:59:60:62:b7:1a:41:69:4b:ae:62: b0:35:0c:68:3f:b9:09:08:ef:c2:53:c3:ab:b9:51: fc:05:90:c5:12:1c:a2:44:12:02:2b:c9:71:22:04: 82:e6:11:16:55:34:73:f7:d8:90:8e:64:d9:de:96: 64:1e:18:1a:28:e8:b5:d6:1f:be:c4:41:18:bd:4f: a4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:EC:3C:25:05:B8:1C:65:C9:E3:66:73:85:1B:85:2E:27:05:9E X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/PA7sPCUFuBxlyeNmc4UbhS4nBZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.34.77.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:63:42:35:d8:d0:e6:03:55:3e:44:f0:87:aa:0b:06:cd:95: 2d:36:40:34:cc:21:85:eb:16:7c:d4:59:72:a5:e5:19:a3:36: 1b:cd:e4:5c:75:54:ae:f7:7a:d7:46:96:e9:c7:85:07:b4:26: 8d:2f:6b:f2:80:32:86:c5:ad:c1:2f:6e:c8:73:ff:95:08:b7: 13:c2:07:79:ce:6c:22:93:88:4b:32:56:f6:19:9e:ab:a1:96: fb:da:5e:93:eb:9f:cb:17:0d:84:7e:f7:09:68:22:d5:2c:5a: 70:ae:08:50:c7:af:1e:55:f7:a1:51:1b:7b:72:f5:53:11:f1: 3e:2c:49:aa:32:e7:90:17:9c:f7:83:7e:be:bd:0d:9a:6d:26: f4:0f:1d:be:a5:a8:82:9d:02:f0:51:c9:eb:8a:f7:bf:d1:8c: 9d:44:91:6a:98:bd:ef:2e:9a:3c:d8:9a:fa:56:ca:99:47:cf: 7e:6c:43:e0:d1:11:a8:f6:96:88:c8:c4:b5:b8:ab:38:08:59: 0a:f3:67:e0:c1:bc:8a:10:fe:9b:14:de:d6:66:f0:9e:c3:ec: 7f:30:d3:65:7e:32:ac:55:3c:a0:28:0f:de:0b:bb:4c:df:5c: 55:26:c0:b5:9a:81:98:26:86:e9:ba:65:6c:19:8b:82:05:91: 3e:29:7b:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4TuWRe44n+fD6JvX7w5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzBlZWMzYzI1MDViODFjNjVjOWUzNjY3Mzg1MWI4NTJlMjcwNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6FCpf+EcYSDQdFtfZHENBFNJcoR GcWUTnUOeoAxSuq5bt20dxn7nkfLJ7jwy1AMbqxIomswy1iYnuTT+6T8pIrVeFJS 6ftr9L2p0bokdvWnfg/ZIc/n6gXRLLW7c7AskXHlTHZ+7sxF3VQvDJQcP0UGcWtw 2H7P1o8ZEKrJMBxB4bR/anQ8H634mWA7yHfwuhlD+ufCRXuf909z61/korN8005e wO2ahq+cSzvJFnO9MMmlTHD89llgYrcaQWlLrmKwNQxoP7kJCO/CU8OruVH8BZDF EhyiRBICK8lxIgSC5hEWVTRz99iQjmTZ3pZkHhgaKOi11h++xEEYvU+kUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwO7DwlBbgcZcnjZnOFG4UuJwWeMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUEE3c1BDVUZ1QnhseWVObWM0VWJoUzRuQlo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsiJNMA0G CSqGSIb3DQEBCwUAA4IBAQBvY0I12NDmA1U+RPCHqgsGzZUtNkA0zCGF6xZ81Fly peUZozYbzeRcdVSu93rXRpbpx4UHtCaNL2vygDKGxa3BL27Ic/+VCLcTwgd5zmwi k4hLMlb2GZ6roZb72l6T65/LFw2EfvcJaCLVLFpwrghQx68eVfehURt7cvVTEfE+ LEmqMueQF5z3g36+vQ2abSb0Dx2+paiCnQLwUcnrive/0YydRJFqmL3vLpo82Jr6 VsqZR89+bEPg0RGo9paIyMS1uKs4CFkK82fgwbyKEP6bFN7WZvCew+x/MNNlfjKs VTygKA/eC7tM31xVJsC1moGYJobpumVsGYuCBZE+KXtc -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:03 2026 by rpki-client