This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pjRCsI6R0gMD2tn_ZwH9B4ukIro.roa File: pjRCsI6R0gMD2tn_ZwH9B4ukIro.roa (raw, json) Hash identifier: 7dBom9Gx3HOh3bO1cmnZuJUwj+1K+osxOg7efOgsD/Y= Subject key identifier: A6:34:42:B0:8E:91:D2:03:03:DA:D9:FF:67:01:FD:07:8B:A4:22:BA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35AADF35BDF8F36DF2E84DB41C85E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pjRCsI6R0gMD2tn_ZwH9B4ukIro.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393398 IP address blocks: 81.161.237.0/24 maxlen: 24 193.58.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5a:ad:f3:5b:df:8f:36:df:2e:84:db:41:c8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a63442b08e91d20303dad9ff6701fd078ba422ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:a9:cc:ae:fc:ef:84:cc:95:0c:11:34:fd: 75:da:d2:76:52:df:ed:8b:8d:18:b1:a2:26:7a:d3: 4b:e4:36:c7:00:b6:d2:6f:a6:ce:df:2a:bb:2d:0f: 4d:06:0d:bd:d6:3d:98:84:41:13:3d:31:37:bc:67: 81:ca:cb:fb:7c:d8:52:d1:d7:8e:a0:6a:8d:b7:b7: 19:cf:31:f1:77:b3:3f:12:a7:46:b8:e2:89:73:aa: 82:33:41:0b:0e:a7:2d:74:37:d4:64:8f:54:07:c2: 02:27:c8:72:f6:bb:99:fc:48:00:bc:2a:aa:28:4e: 0b:ee:62:e1:df:7c:44:58:02:8a:a1:56:2e:ba:47: fb:af:6a:79:7b:8e:96:a8:20:45:9b:79:53:90:d6: cc:89:4f:c9:56:f0:35:1f:36:16:e0:10:ce:bb:06: cc:f0:ba:6a:71:e9:73:dc:c7:d5:b3:27:ca:0d:de: 0c:8c:81:9c:06:2d:dd:65:dd:fe:24:66:19:0b:82: 76:92:78:a1:b4:62:b8:41:20:b2:44:7b:cd:37:0d: a0:6c:e4:d8:d6:21:f4:a7:16:68:59:ef:e3:b4:21: 03:88:d4:40:4e:42:ae:81:af:73:70:8e:8d:5d:03: 5f:c2:87:1a:6d:08:a5:50:17:ee:94:00:c4:9f:a5: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:34:42:B0:8E:91:D2:03:03:DA:D9:FF:67:01:FD:07:8B:A4:22:BA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pjRCsI6R0gMD2tn_ZwH9B4ukIro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.237.0/24 193.58.123.0/24 Signature Algorithm: sha256WithRSAEncryption 68:a8:61:eb:5a:cc:4b:4f:13:7f:ba:3d:30:37:5a:51:1b:0b: 93:3e:38:2d:69:f3:d8:c7:28:88:bb:a2:0c:7f:af:5b:05:a3: 5d:eb:6c:6d:29:28:7d:ad:bd:e7:e6:7c:ed:f3:4a:09:5e:cb: 1c:32:4b:79:67:a2:97:c9:c3:7c:a2:13:ca:41:11:ef:e3:09: a6:31:2f:83:7c:77:22:c2:ac:48:ea:e6:0a:da:a4:59:a5:5c: 72:b1:b4:06:e9:a5:fa:b2:f6:e7:68:b3:07:18:77:68:a9:d2: 5f:d3:20:21:dc:59:67:fb:8f:4d:a3:77:1f:26:18:49:c9:35: fc:39:c3:4c:a2:d7:41:fd:68:df:fd:aa:bf:ea:f4:98:b8:85: f6:10:2b:22:14:be:4d:8d:13:9f:42:3d:af:c6:a7:cc:09:be: 3a:d9:b2:8a:5e:83:32:73:e2:27:03:ac:f9:3e:62:ce:db:e7: 0a:c3:9e:1a:c8:10:35:c0:b7:cd:27:c8:8e:11:47:5a:8b:22: 24:2f:1f:85:e8:d8:25:80:64:69:70:0a:8c:b7:ce:fe:df:ac: 6c:7d:bd:68:da:66:36:8b:ae:e3:e9:ed:1c:06:2e:bc:dd:a8: b0:96:5b:b3:d4:86:00:7a:eb:a0:2b:25:ed:52:c1:af:2f:7a: e3:3f:71:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o1qt81vfjzbfLoTbQcheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjM0NDJiMDhlOTFkMjAzMDNkYWQ5ZmY2NzAxZmQwNzhiYTQyMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZepzK7874TMlQwRNP112tJ2Ut/t i40YsaImetNL5DbHALbSb6bO3yq7LQ9NBg291j2YhEETPTE3vGeBysv7fNhS0deO oGqNt7cZzzHxd7M/EqdGuOKJc6qCM0ELDqctdDfUZI9UB8ICJ8hy9ruZ/EgAvCqq KE4L7mLh33xEWAKKoVYuukf7r2p5e46WqCBFm3lTkNbMiU/JVvA1HzYW4BDOuwbM 8Lpqcelz3MfVsyfKDd4MjIGcBi3dZd3+JGYZC4J2knihtGK4QSCyRHvNNw2gbOTY 1iH0pxZoWe/jtCEDiNRATkKuga9zcI6NXQNfwocabQilUBfulADEn6XrQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKY0QrCOkdIDA9rZ/2cB/QeLpCK6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcGpSQ3NJNlIwZ01EMnRuX1p3SDlCNHVrSXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUaHtAwQA wTp7MA0GCSqGSIb3DQEBCwUAA4IBAQBoqGHrWsxLTxN/uj0wN1pRGwuTPjgtafPY xyiIu6IMf69bBaNd62xtKSh9rb3n5nzt80oJXsscMkt5Z6KXycN8ohPKQRHv4wmm MS+DfHciwqxI6uYK2qRZpVxysbQG6aX6svbnaLMHGHdoqdJf0yAh3Fln+49No3cf JhhJyTX8OcNMotdB/Wjf/aq/6vSYuIX2ECsiFL5NjROfQj2vxqfMCb462bKKXoMy c+InA6z5PmLO2+cKw54ayBA1wLfNJ8iOEUdaiyIkLx+F6NglgGRpcAqMt87+36xs fb1o2mY2i67j6e0cBi683aiwlluz1IYAeuugKyXtUsGvL3rjP3E4 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:22 2026 by rpki-client