This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa File: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (raw, json) Hash identifier: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA= Subject key identifier: 3D:7A:C2:D0:E5:93:BC:2D:E8:0E:F4:8C:63:30:B3:2F:B5:65:FA:E4 Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Certificate serial: 019B7EA4555602DDCFED3827002615D4B0A5 Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa Signing time: Fri 02 Jan 2026 12:17:37 +0000 ROA not before: Fri 02 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209216 IP address blocks: 185.223.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:55:56:02:dd:cf:ed:38:27:00:26:15:d4:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31 Validity Not Before: Jan 2 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d7ac2d0e593bc2de80ef48c6330b32fb565fae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:81:88:6e:74:c2:7d:c5:b4:14:75:75:d1: 63:0c:7d:2d:4a:4d:ad:51:2f:c5:ac:ca:a8:00:e5: 38:52:e3:27:ad:d7:51:79:cd:41:18:61:7f:09:b3: 8f:ac:75:d0:c9:7e:83:62:15:e4:1e:e9:82:c2:32: 07:a2:d1:ae:b6:40:cf:7e:58:12:17:63:dd:3b:58: 72:49:4e:9e:39:2c:da:10:58:6b:ec:6b:25:1d:6c: f4:e5:f4:9a:cd:16:c7:ff:77:ab:fa:f2:75:4e:2c: fb:b1:70:4b:d4:23:8a:f2:de:df:a7:cc:9c:03:e1: 05:bb:eb:a9:3d:da:78:be:4a:1e:09:1f:00:5e:2d: c5:c3:c3:7c:b1:67:77:c8:aa:e1:a7:f7:9a:0d:29: 86:cc:88:d0:d8:c0:2c:42:16:b4:ab:4a:81:83:cb: 9a:87:18:aa:4a:45:8a:64:c7:49:30:0e:a6:45:c2: ce:73:48:be:d3:89:f0:39:02:dc:70:99:62:d0:86: 5d:08:f4:6f:59:fb:ce:57:dd:1e:05:d6:32:f0:98: 38:2b:e7:85:0a:bb:e9:fe:b8:e3:b4:e5:86:82:3e: 88:f5:8d:58:1c:d8:51:57:ef:47:ba:ed:8c:99:3b: 9a:ca:02:da:41:7d:33:a2:f0:af:77:3f:70:5e:ee: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7A:C2:D0:E5:93:BC:2D:E8:0E:F4:8C:63:30:B3:2F:B5:65:FA:E4 X509v3 Authority Key Identifier: keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.108.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:58:e1:51:af:bd:c6:40:79:11:a8:52:e2:e7:80:ab:17:1f: 68:7e:20:6b:9b:b2:22:91:53:24:c4:78:79:14:c4:6a:29:09: aa:cf:0c:9d:00:ac:ab:18:15:75:8e:46:09:72:bc:18:39:b7: 90:2d:31:35:bc:35:62:3e:c6:e2:17:95:27:5a:da:24:3c:06: 03:cb:ee:a4:01:7c:ed:9f:cf:9b:55:7b:5c:fa:1d:a6:6b:07: d6:3a:f3:2b:4e:25:77:3a:cf:1b:00:b8:74:16:b7:1d:02:cc: 51:55:b5:8b:d5:9c:65:96:cc:77:33:1c:8a:3f:5b:ba:ca:8c: 27:47:93:8f:2e:fa:54:32:a6:bd:71:57:91:12:d0:77:13:e1: bd:0f:91:99:d1:06:a2:6a:96:4c:37:f9:59:97:ad:b5:73:a8: 8c:6a:c9:72:9c:f6:3c:88:59:f6:db:34:d1:47:33:06:e2:1c: 2e:d6:1f:7f:65:81:79:38:f8:32:50:66:98:9d:63:27:23:33: 9f:44:19:f5:04:b0:04:ea:c1:88:c5:cf:60:e0:82:b6:1f:39: 67:62:35:39:96:96:d8:25:a8:38:cb:e8:0f:14:79:72:62:4c: b4:af:38:b5:8f:0b:04:81:85:6f:0f:82:13:d3:fb:ee:2b:5f: f5:97:35:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pFVWAt3P7TgnACYV1LClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWY0YjA2MGE4Yjc5YjI4OTNkMzMwOWFkNTBkMWNjY2Iy YjllMzEwHhcNMjYwMTAyMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDdhYzJkMGU1OTNiYzJkZTgwZWY0OGM2MzMwYjMyZmI1NjVmYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGSBiG50wn3FtBR1ddFjDH0tSk2t US/FrMqoAOU4UuMnrddRec1BGGF/CbOPrHXQyX6DYhXkHumCwjIHotGutkDPflgS F2PdO1hySU6eOSzaEFhr7GslHWz05fSazRbH/3er+vJ1Tiz7sXBL1COK8t7fp8yc A+EFu+upPdp4vkoeCR8AXi3Fw8N8sWd3yKrhp/eaDSmGzIjQ2MAsQha0q0qBg8ua hxiqSkWKZMdJMA6mRcLOc0i+04nwOQLccJli0IZdCPRvWfvOV90eBdYy8Jg4K+eF Crvp/rjjtOWGgj6I9Y1YHNhRV+9Huu2MmTuaygLaQX0zovCvdz9wXu7eEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD16wtDlk7wt6A70jGMwsy+1ZfrkMB8GA1UdIwQY MBaAFEHvSwYKi3myiT0zCa1Q0czLK54xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEt YmY4ZTVkODI2NWEyLzEvUFhyQzBPV1R2QzNvRHZTTVl6Q3pMN1ZsLXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEtYmY4ZTVkODI2NWEy LzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9sMA0G CSqGSIb3DQEBCwUAA4IBAQA9WOFRr73GQHkRqFLi54CrFx9ofiBrm7IikVMkxHh5 FMRqKQmqzwydAKyrGBV1jkYJcrwYObeQLTE1vDViPsbiF5UnWtokPAYDy+6kAXzt n8+bVXtc+h2mawfWOvMrTiV3Os8bALh0FrcdAsxRVbWL1Zxllsx3MxyKP1u6yown R5OPLvpUMqa9cVeREtB3E+G9D5GZ0QaiapZMN/lZl621c6iMaslynPY8iFn22zTR RzMG4hwu1h9/ZYF5OPgyUGaYnWMnIzOfRBn1BLAE6sGIxc9g4IK2HzlnYjU5lpbY Jag4y+gPFHlyYky0rzi1jwsEgYVvD4IT0/vuK1/1lzXo -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:05 2026 by rpki-client