This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PUeJePPyO5Cxx1M0zFCO7suZ0KE.roa File: PUeJePPyO5Cxx1M0zFCO7suZ0KE.roa (raw, json) Hash identifier: PNwQALm2FZzQQF/kgfvI8O3smxQqf8Lyth072zxJqA4= Subject key identifier: 3D:47:89:78:F3:F2:3B:90:B1:C7:53:34:CC:50:8E:EE:CB:99:D0:A1 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8560D0C7E77CC43AEBE5AA8D46B1E3 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PUeJePPyO5Cxx1M0zFCO7suZ0KE.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201409 IP address blocks: 194.87.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:60:d0:c7:e7:7c:c4:3a:eb:e5:aa:8d:46:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d478978f3f23b90b1c75334cc508eeecb99d0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:83:95:2c:a0:04:cf:c0:0d:ce:cb:af:bc: 7b:88:e4:65:19:7b:37:49:6b:38:1d:11:af:57:c0: 25:af:bd:f1:8a:98:12:79:5c:0e:3d:c2:15:e6:79: f6:4e:36:1d:de:47:51:17:40:8f:61:2f:41:26:75: 6f:be:a3:12:66:df:8e:0d:da:26:24:fa:58:56:e8: bb:20:52:e3:15:80:37:9f:61:4d:d2:b5:e5:f9:41: 91:c0:69:67:4c:68:6c:ee:ef:7f:cc:2b:c1:a2:08: 25:91:e2:d3:38:97:29:92:9a:ba:5f:6b:bc:7e:68: e3:99:51:34:4b:df:3c:bb:68:74:fa:f9:6c:63:c6: 1d:00:a5:3c:22:f6:ce:a3:1f:85:58:23:1c:78:bd: 45:7c:41:6b:dd:ad:5c:a1:3d:6d:bc:6f:a2:d9:a1: 11:c2:c4:04:23:f3:be:2e:c2:f4:51:6c:bb:1c:f8: 96:e8:c8:1c:9f:89:10:09:b2:01:64:c5:63:17:d9: 84:79:1b:1b:27:e0:ae:e8:7a:00:70:74:b2:c0:65: 7d:6e:26:b9:6f:0c:63:ec:5a:20:72:41:fe:7c:4f: 3a:e5:25:f3:b3:ed:c4:1f:9f:93:44:7d:f5:e6:df: 34:9a:e5:61:08:49:1b:6c:0f:7f:c4:36:b9:ed:04: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:47:89:78:F3:F2:3B:90:B1:C7:53:34:CC:50:8E:EE:CB:99:D0:A1 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PUeJePPyO5Cxx1M0zFCO7suZ0KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.14.0/24 Signature Algorithm: sha256WithRSAEncryption 94:89:fe:17:cd:40:97:f5:a8:f7:0d:44:eb:62:b9:87:2e:d6: 4b:2d:1e:90:52:ad:70:59:83:1c:98:d1:22:ff:b5:dd:6b:ca: 71:84:27:fd:04:55:42:98:34:1d:26:df:d4:6a:8b:45:e1:28: 5e:fc:17:97:2c:e7:af:88:62:7c:e4:f0:16:2e:dc:b6:ba:b6: 8e:1d:19:c6:e5:97:d2:18:c6:7f:19:84:27:67:f9:85:20:87: 93:59:5f:5d:5f:25:bd:e6:bc:db:8b:f6:98:b8:54:ee:47:66: 24:76:9a:3b:5c:29:66:f0:47:3e:9b:ba:a9:82:42:ac:ea:e4: 12:8c:a7:4a:4a:b6:c9:26:b4:e1:80:05:b8:c9:83:98:81:75: 6e:31:d3:41:55:a2:d2:48:64:52:ea:18:3b:0e:7b:e2:fb:ff: c5:eb:6f:b6:3b:0b:53:4c:2e:38:2c:d8:19:4f:e7:fd:30:23: 72:54:55:fd:f8:0e:fa:a0:cf:d4:63:91:0e:5f:f8:9c:ab:2f: ab:23:12:e3:03:69:75:af:5c:48:6d:77:f7:84:26:c0:b5:e7: e8:a0:ab:02:ce:eb:b7:d0:2e:61:07:92:dc:d1:f5:74:86:95: 51:ff:e8:36:41:46:95:e1:3d:2c:81:f8:80:14:fb:fd:9b:b4: 32:80:6a:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWDQx+d8xDrr5aqNRrHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQ3ODk3OGYzZjIzYjkwYjFjNzUzMzRjYzUwOGVlZWNiOTlkMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1qDlSygBM/ADc7Lr7x7iORlGXs3 SWs4HRGvV8Alr73xipgSeVwOPcIV5nn2TjYd3kdRF0CPYS9BJnVvvqMSZt+ODdom JPpYVui7IFLjFYA3n2FN0rXl+UGRwGlnTGhs7u9/zCvBogglkeLTOJcpkpq6X2u8 fmjjmVE0S988u2h0+vlsY8YdAKU8IvbOox+FWCMceL1FfEFr3a1coT1tvG+i2aER wsQEI/O+LsL0UWy7HPiW6Mgcn4kQCbIBZMVjF9mEeRsbJ+Cu6HoAcHSywGV9bia5 bwxj7FogckH+fE865SXzs+3EH5+TRH315t80muVhCEkbbA9/xDa57QSjTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1HiXjz8juQscdTNMxQju7LmdChMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvUFVlSmVQUHlPNUN4eDFNMHpGQ083c3VaMEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcOMA0G CSqGSIb3DQEBCwUAA4IBAQCUif4XzUCX9aj3DUTrYrmHLtZLLR6QUq1wWYMcmNEi /7Xda8pxhCf9BFVCmDQdJt/UaotF4She/BeXLOeviGJ85PAWLty2uraOHRnG5ZfS GMZ/GYQnZ/mFIIeTWV9dXyW95rzbi/aYuFTuR2Ykdpo7XClm8Ec+m7qpgkKs6uQS jKdKSrbJJrThgAW4yYOYgXVuMdNBVaLSSGRS6hg7Dnvi+//F62+2OwtTTC44LNgZ T+f9MCNyVFX9+A76oM/UY5EOX/icqy+rIxLjA2l1r1xIbXf3hCbAtefooKsCzuu3 0C5hB5Lc0fV0hpVR/+g2QUaV4T0sgfiAFPv9m7QygGqF -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:05 2026 by rpki-client