This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/PPgnUS1OTeT8xtOKOgFCmjzijW0.roa File: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (raw, json) Hash identifier: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4= Subject key identifier: 3C:F8:27:51:2D:4E:4D:E4:FC:C6:D3:8A:3A:01:42:9A:3C:E2:8D:6D Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019B79112409C401C36E7F72229612740992 Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/PPgnUS1OTeT8xtOKOgFCmjzijW0.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41743 IP address blocks: 176.115.136.0/21 maxlen: 21 176.115.136.0/24 maxlen: 24 176.115.137.0/24 maxlen: 24 176.115.138.0/24 maxlen: 24 176.115.139.0/24 maxlen: 24 176.115.140.0/23 maxlen: 23 176.115.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:24:09:c4:01:c3:6e:7f:72:22:96:12:74:09:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cf827512d4e4de4fcc6d38a3a01429a3ce28d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:a0:fe:3f:4f:4f:60:cf:1e:9e:90:f9:28: 5b:2b:91:3d:a3:7e:81:28:9b:0b:5d:16:42:5d:0d: 0a:1d:08:21:06:73:52:09:92:a1:14:ca:b8:a1:05: af:94:2c:a3:00:e7:ed:ff:8a:ab:ed:4f:82:1c:d7: 24:19:94:ce:c3:c5:f2:b5:55:ce:fe:a3:92:a1:70: dc:90:2d:3e:27:d6:04:c8:f3:2e:3c:75:f9:da:9a: 2a:33:fc:22:15:65:39:f8:69:ed:d7:52:5b:c8:60: 60:40:58:17:5c:f3:c0:99:7c:b6:dc:24:7c:77:73: 47:5e:c7:4a:d4:86:0c:fc:87:a5:81:89:90:48:a9: 38:af:73:ad:4c:08:8f:fa:60:e2:aa:b8:8b:b5:8d: 65:67:67:07:34:cb:72:84:b0:28:63:3e:c4:55:ba: ec:c7:f5:a4:11:06:1b:d1:db:2e:30:43:f1:eb:d9: 2d:b6:0d:88:f0:64:8d:c9:da:80:57:54:a1:78:a1: 4a:6d:0f:77:a6:b7:66:38:d1:38:40:76:c7:94:93: 27:15:01:13:dc:3d:b2:00:bd:df:e9:07:10:3e:c6: d8:15:11:c2:a0:90:66:d1:ba:84:98:42:c3:a6:41: 84:bb:d3:49:90:88:f8:a8:60:17:31:c3:02:b5:f8: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F8:27:51:2D:4E:4D:E4:FC:C6:D3:8A:3A:01:42:9A:3C:E2:8D:6D X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/PPgnUS1OTeT8xtOKOgFCmjzijW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.136.0/21 Signature Algorithm: sha256WithRSAEncryption a8:e3:29:39:81:87:d0:7d:04:54:89:98:33:47:9d:0e:10:7b: 59:d7:6c:44:e6:b3:5c:0d:24:a4:59:e4:a8:a5:3f:aa:06:8e: 8e:69:12:20:51:ee:95:26:74:66:66:3f:b9:5d:9c:f3:66:30: ba:1f:55:25:41:06:f1:25:8d:bc:82:23:6e:40:2a:9a:01:b7: 21:d8:64:ad:7d:70:1b:8a:43:d3:eb:44:a0:c9:17:29:76:ce: 35:b2:12:cb:97:1c:ec:8f:8b:68:3e:87:28:6c:00:fc:89:6a: 3e:9b:b6:54:6e:c5:13:7e:f3:c9:2d:a6:a1:11:c2:c7:f5:7f: 9c:2b:ac:17:98:0a:21:42:82:20:4a:16:cd:fb:27:74:72:a1: b7:8e:f5:a7:51:24:72:28:27:45:d5:d9:50:cf:b5:62:25:6b: 4c:79:de:0c:75:c3:26:2d:ad:2a:85:49:6c:23:d9:f1:92:07: bb:50:80:36:d9:23:e2:62:32:03:31:3c:44:e3:2d:9a:23:3c: bf:13:2a:06:f8:0a:4e:7d:28:8d:ac:14:b9:b1:3a:66:c6:b0: 80:a5:21:0d:4d:ce:3d:b2:ff:f5:9c:3b:5f:b7:a7:9e:cb:b9: 51:a4:3a:62:fe:a5:73:3a:94:c0:fd:19:8d:cd:04:94:ff:42: 59:51:de:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESQJxAHDbn9yIpYSdAmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Y4Mjc1MTJkNGU0ZGU0ZmNjNmQzOGEzYTAxNDI5YTNjZTI4ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJKg/j9PT2DPHp6Q+ShbK5E9o36B KJsLXRZCXQ0KHQghBnNSCZKhFMq4oQWvlCyjAOft/4qr7U+CHNckGZTOw8XytVXO /qOSoXDckC0+J9YEyPMuPHX52poqM/wiFWU5+Gnt11JbyGBgQFgXXPPAmXy23CR8 d3NHXsdK1IYM/IelgYmQSKk4r3OtTAiP+mDiqriLtY1lZ2cHNMtyhLAoYz7EVbrs x/WkEQYb0dsuMEPx69kttg2I8GSNydqAV1SheKFKbQ93prdmONE4QHbHlJMnFQET 3D2yAL3f6QcQPsbYFRHCoJBm0bqEmELDpkGEu9NJkIj4qGAXMcMCtfjQbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDz4J1EtTk3k/MbTijoBQpo84o1tMB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvUFBnblVTMU9UZVQ4eHRPS09nRkNtanppalcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHOIMA0G CSqGSIb3DQEBCwUAA4IBAQCo4yk5gYfQfQRUiZgzR50OEHtZ12xE5rNcDSSkWeSo pT+qBo6OaRIgUe6VJnRmZj+5XZzzZjC6H1UlQQbxJY28giNuQCqaAbch2GStfXAb ikPT60SgyRcpds41shLLlxzsj4toPocobAD8iWo+m7ZUbsUTfvPJLaahEcLH9X+c K6wXmAohQoIgShbN+yd0cqG3jvWnUSRyKCdF1dlQz7ViJWtMed4MdcMmLa0qhUls I9nxkge7UIA22SPiYjIDMTxE4y2aIzy/EyoG+ApOfSiNrBS5sTpmxrCApSENTc49 sv/1nDtft6eey7lRpDpi/qVzOpTA/RmNzQSU/0JZUd6E -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:29 2026 by rpki-client