This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/PeLr2BziwgZdAzAKlVzH-U_78ms.roa File: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (raw, json) Hash identifier: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o= Subject key identifier: 3D:E2:EB:D8:1C:E2:C2:06:5D:03:30:0A:95:5C:C7:F9:4F:FB:F2:6B Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Certificate serial: 019B7DCB604C09925B7E2F6759750B6756EE Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/PeLr2BziwgZdAzAKlVzH-U_78ms.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 91.244.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:60:4c:09:92:5b:7e:2f:67:59:75:0b:67:56:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de2ebd81ce2c2065d03300a955cc7f94ffbf26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:a3:0f:47:b8:7c:2a:2c:5c:91:38:2c:7d: 8f:26:13:d3:4b:0d:9b:45:0b:ce:46:90:f1:43:49: d0:fb:49:9e:96:7b:a3:ba:b8:65:41:ef:0e:5a:73: c2:c9:ba:19:29:25:d4:34:07:6e:3e:cd:f3:cc:f3: 47:a3:5e:ae:79:be:30:7a:e2:40:ea:ed:53:ea:04: 7c:cd:44:83:97:38:b6:00:d8:2b:82:ac:9d:2a:c1: 84:83:9d:fc:79:67:f5:ca:7a:29:0c:1a:b2:f0:5c: c9:e3:a8:b3:a3:30:88:7a:ae:a1:79:c5:6f:eb:31: 8d:a8:df:03:c6:a5:a7:a2:3b:c6:4f:08:44:4b:a1: 1e:65:07:97:18:1e:30:78:25:72:18:a6:d3:00:37: 43:c4:f1:de:ef:43:87:f0:40:e8:1f:c4:36:93:c3: 02:a5:0d:f2:bc:49:0f:b4:06:22:6c:4a:8b:73:64: 84:02:e8:ef:07:85:78:43:61:59:2a:c2:bb:ca:cc: df:18:0f:bc:22:5f:e3:04:01:17:6e:73:43:49:59: 12:04:a1:74:1d:04:2b:47:92:af:2d:22:56:de:d0: e3:d6:cf:37:21:88:6c:80:b2:b9:4a:22:bf:d1:27: c7:dd:66:af:01:8e:f4:ae:88:26:b1:61:70:a6:fd: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:EB:D8:1C:E2:C2:06:5D:03:30:0A:95:5C:C7:F9:4F:FB:F2:6B X509v3 Authority Key Identifier: keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/PeLr2BziwgZdAzAKlVzH-U_78ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.125.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ff:9d:79:cd:65:28:cd:ed:88:d4:45:5f:d5:12:13:c0:8f: 69:59:e6:39:41:65:e6:6b:f8:85:44:b5:9f:92:ce:a1:75:3d: b3:44:9b:1c:ca:aa:10:fc:15:11:ea:fb:22:df:05:f7:2d:9c: cb:b0:b3:11:4b:78:9f:fd:7d:fc:3b:81:8a:c0:94:bc:ee:c5: 88:3f:c1:38:40:a9:2a:e4:6f:14:b5:21:5b:fa:e5:ba:24:f0: de:15:c1:ff:16:2a:75:b4:a0:b7:31:da:a6:16:fd:32:42:90: 18:7f:00:ef:8b:6b:11:88:18:ed:7c:27:97:d8:cb:49:b5:b9: 0b:43:61:0d:d3:0c:fe:2f:32:1a:89:4f:b6:59:b6:52:44:8e: db:5e:94:c2:f3:b1:54:55:52:d6:9d:52:d6:fb:bf:3e:c8:b7: 89:40:dd:e9:36:60:52:3e:9e:c8:af:03:5d:f5:1d:4c:98:21: 0c:82:64:39:8e:19:a8:e1:e6:21:70:b3:9b:92:fe:dd:f0:fa: 3f:78:e5:47:84:c0:b2:3f:11:c8:b6:48:80:3b:60:06:3b:d9: 8e:73:7b:0c:29:d4:57:2f:ac:9b:d1:87:31:6f:da:93:7b:0b: 6c:c0:a6:09:ca:81:ff:ee:01:71:33:21:85:ff:41:2e:3a:b1: 96:3c:82:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2BMCZJbfi9nWXULZ1buMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw YzI0MTcwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGUyZWJkODFjZTJjMjA2NWQwMzMwMGE5NTVjYzdmOTRmZmJmMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LCjD0e4fCosXJE4LH2PJhPTSw2b RQvORpDxQ0nQ+0melnujurhlQe8OWnPCyboZKSXUNAduPs3zzPNHo16ueb4weuJA 6u1T6gR8zUSDlzi2ANgrgqydKsGEg538eWf1ynopDBqy8FzJ46izozCIeq6hecVv 6zGNqN8DxqWnojvGTwhES6EeZQeXGB4weCVyGKbTADdDxPHe70OH8EDoH8Q2k8MC pQ3yvEkPtAYibEqLc2SEAujvB4V4Q2FZKsK7yszfGA+8Il/jBAEXbnNDSVkSBKF0 HQQrR5KvLSJW3tDj1s83IYhsgLK5SiK/0SfH3WavAY70rogmsWFwpv0/yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3i69gc4sIGXQMwCpVcx/lP+/JrMB8GA1UdIwQY MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt NzRhZmMzMDQzYjc4LzEvUGVMcjJCeml3Z1pkQXpBS2xWekgtVV83OG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4 LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/R9MA0G CSqGSIb3DQEBCwUAA4IBAQCQ/515zWUoze2I1EVf1RITwI9pWeY5QWXma/iFRLWf ks6hdT2zRJscyqoQ/BUR6vsi3wX3LZzLsLMRS3if/X38O4GKwJS87sWIP8E4QKkq 5G8UtSFb+uW6JPDeFcH/Fip1tKC3MdqmFv0yQpAYfwDvi2sRiBjtfCeX2MtJtbkL Q2EN0wz+LzIaiU+2WbZSRI7bXpTC87FUVVLWnVLW+78+yLeJQN3pNmBSPp7IrwNd 9R1MmCEMgmQ5jhmo4eYhcLObkv7d8Po/eOVHhMCyPxHItkiAO2AGO9mOc3sMKdRX L6yb0Ycxb9qTewtswKYJyoH/7gFxMyGF/0EuOrGWPIKb -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:57 2026 by rpki-client