This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PSPp18LtCFEWtRg88Mhng0erhMc.roa File: PSPp18LtCFEWtRg88Mhng0erhMc.roa (raw, json) Hash identifier: MMgMHZsVLko9ZeKaawtdaCpPRn2rjtz7/7swHEIwgtA= Subject key identifier: 3D:23:E9:D7:C2:ED:08:51:16:B5:18:3C:F0:C8:67:83:47:AB:84:C7 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806F92715EB0DF7C5C5668D42E3378 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PSPp18LtCFEWtRg88Mhng0erhMc.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213816 IP address blocks: 109.196.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:92:71:5e:b0:df:7c:5c:56:68:d4:2e:33:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d23e9d7c2ed085116b5183cf0c8678347ab84c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:ba:87:86:72:c8:4f:6d:a5:78:27:10:66: f5:dd:9c:5a:1b:1a:b4:df:28:83:f7:03:b6:55:d5: cd:47:b1:ba:4e:fb:59:db:a8:35:11:be:61:07:19: de:cb:e1:a8:9b:df:96:d3:f6:5a:d6:0c:99:05:62: 1e:27:21:bb:96:71:c7:96:8e:8d:a6:86:53:c7:6a: c5:8e:52:a4:56:ff:86:f4:9f:f8:75:b7:d7:25:34: aa:e6:5d:07:bf:ed:58:96:0f:5b:db:9a:7d:f6:74: 98:39:50:79:e0:28:ae:e1:1e:b0:bc:73:70:d4:35: 4c:aa:c5:30:39:59:3a:65:91:48:e7:9f:35:20:2f: 58:21:1d:61:7b:b2:2d:5d:db:68:5d:e0:f3:ec:e9: 2b:f5:87:df:cf:cf:d6:51:46:62:31:18:e5:74:d6: a5:1c:ac:33:a0:da:5b:0f:8d:5d:b7:fa:8e:29:5d: 94:e4:fb:e0:f1:bd:4d:40:b3:93:d3:47:64:a2:b2: 68:a1:3b:b0:e1:54:7f:4c:d8:78:ba:90:92:75:e3: 8d:97:49:5f:3c:ab:9f:fe:ed:8b:cd:4c:be:3e:ed: 2e:a5:f2:6f:a7:e8:3a:47:c9:bb:10:28:57:a0:30: 87:73:d7:c9:9a:dc:0b:4e:b1:7f:bf:d1:18:a5:f9: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:23:E9:D7:C2:ED:08:51:16:B5:18:3C:F0:C8:67:83:47:AB:84:C7 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/PSPp18LtCFEWtRg88Mhng0erhMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.97.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d2:19:f2:b0:c2:aa:0b:08:8d:bd:3b:47:ac:de:01:f2:d4: e7:39:06:4f:ec:f5:50:01:5e:b6:db:21:70:f3:c2:31:11:3d: d8:a7:f5:1f:2e:28:08:b6:39:a3:94:70:93:79:2f:84:33:d9: 1a:0e:b7:dc:97:c8:fd:ec:bf:2d:9d:c2:1b:7e:98:09:08:59: 98:fc:38:82:e9:a7:cc:42:82:0c:e5:67:93:74:9e:81:65:2c: 07:9e:74:ef:26:d7:f0:53:f9:9e:84:67:0b:ff:72:a9:99:f8: 19:17:af:41:ce:a8:37:f2:5d:ec:29:78:c4:f6:fc:aa:ff:65: 09:51:80:1e:e3:53:db:68:39:41:b0:85:a1:59:2c:9a:51:ac: a9:ef:73:be:ef:28:93:70:00:01:49:de:d6:d4:d1:dd:55:28: 12:02:23:41:91:7d:90:b4:7d:8b:58:06:9c:98:bb:73:59:d0: 4f:7b:3b:49:14:62:fa:d0:76:f4:23:21:a4:a5:01:49:ee:e2: 25:5e:31:e4:c6:df:c5:af:38:94:42:f1:28:86:01:7d:e6:13: bc:1d:21:f8:ea:51:57:1b:4f:a1:8d:d9:f9:9e:05:68:85:66: ca:cd:85:e7:d2:e6:9e:0f:1d:00:97:5e:2f:9d:74:51:a1:2b: 7c:08:04:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gG+ScV6w33xcVmjULjN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDIzZTlkN2MyZWQwODUxMTZiNTE4M2NmMGM4Njc4MzQ3YWI4NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0e6h4ZyyE9tpXgnEGb13ZxaGxq0 3yiD9wO2VdXNR7G6TvtZ26g1Eb5hBxney+Gom9+W0/Za1gyZBWIeJyG7lnHHlo6N poZTx2rFjlKkVv+G9J/4dbfXJTSq5l0Hv+1Ylg9b25p99nSYOVB54Ciu4R6wvHNw 1DVMqsUwOVk6ZZFI5581IC9YIR1he7ItXdtoXeDz7Okr9Yffz8/WUUZiMRjldNal HKwzoNpbD41dt/qOKV2U5Pvg8b1NQLOT00dkorJooTuw4VR/TNh4upCSdeONl0lf PKuf/u2LzUy+Pu0upfJvp+g6R8m7EChXoDCHc9fJmtwLTrF/v9EYpfnC8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0j6dfC7QhRFrUYPPDIZ4NHq4THMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvUFNQcDE4THRDRkVXdFJnODhNaG5nMGVyaE1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbcRhMA0G CSqGSIb3DQEBCwUAA4IBAQBH0hnysMKqCwiNvTtHrN4B8tTnOQZP7PVQAV622yFw 88IxET3Yp/UfLigItjmjlHCTeS+EM9kaDrfcl8j97L8tncIbfpgJCFmY/DiC6afM QoIM5WeTdJ6BZSwHnnTvJtfwU/mehGcL/3KpmfgZF69Bzqg38l3sKXjE9vyq/2UJ UYAe41PbaDlBsIWhWSyaUayp73O+7yiTcAABSd7W1NHdVSgSAiNBkX2QtH2LWAac mLtzWdBPeztJFGL60Hb0IyGkpQFJ7uIlXjHkxt/FrziUQvEohgF95hO8HSH46lFX G0+hjdn5ngVohWbKzYXn0uaeDx0Al14vnXRRoSt8CAQh -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:12 2026 by rpki-client