This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa File: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (raw, json) Hash identifier: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ= Subject key identifier: A7:13:CF:26:7F:D4:E1:5C:F8:99:9A:EB:45:C3:03:A5:E0:24:14:E5 Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019B78A33F471DF3D842482A40AFCBD1CDB6 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.12.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:47:1d:f3:d8:42:48:2a:40:af:cb:d1:cd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a713cf267fd4e15cf8999aeb45c303a5e02414e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:87:7c:4f:81:b1:f7:c9:92:e7:92:35:b7: cb:16:96:3c:3d:08:b9:25:ee:74:05:a4:ae:a8:b4: ca:df:4d:5e:ea:3c:21:08:e2:1d:09:99:a7:e8:fe: 93:97:b5:e0:84:99:70:6b:4e:bf:98:b4:e3:3c:f0: dd:3e:9f:63:bb:b6:2b:d9:db:c1:ff:1c:cf:5a:33: b0:7c:d6:84:47:51:93:4a:21:4a:69:a2:94:71:ec: df:2b:bc:37:b4:47:e4:15:6c:1d:0d:dc:80:f3:06: 24:58:d3:17:bf:11:09:db:c6:60:3e:f8:b9:0f:5b: a1:97:61:c9:cf:93:35:a5:3d:b0:62:41:dd:cb:0f: ca:d0:9b:df:44:d0:2e:5d:7f:bb:f1:f7:c1:a7:1c: 2f:63:04:a5:75:30:7e:7f:5e:9f:69:29:e4:03:89: 80:60:a5:17:82:ac:1f:6d:24:de:a3:ef:b9:e2:c6: 75:e4:ef:10:0a:15:d3:01:f9:bc:bb:99:cc:19:15: 9f:e0:42:fc:60:cd:00:f0:8a:5d:04:1b:8c:61:53: 8f:e1:a8:5f:63:91:cc:3b:a7:65:49:0c:22:1d:90: 58:75:4a:1c:fd:c9:b7:d6:cd:7c:32:e2:27:db:d4: 2a:3d:cd:aa:05:16:ed:dc:7b:3d:e7:f8:41:f6:9f: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:CF:26:7F:D4:E1:5C:F8:99:9A:EB:45:C3:03:A5:E0:24:14:E5 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.10.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:5d:20:e8:e7:27:34:80:c3:7c:62:54:90:0a:16:9c:e9:01: 35:a1:6f:58:ae:8b:ac:c4:04:bb:eb:67:0d:9a:8e:97:01:a2: f6:b9:e2:a3:4c:f6:4f:38:d7:47:d2:da:96:bd:6d:af:8c:a7: fe:0f:95:b7:e9:99:5f:ca:8d:b0:70:e0:4f:da:1f:da:9d:fa: 3b:39:93:9a:db:1c:94:5f:80:74:22:b3:ec:33:c0:9e:61:fc: c7:d6:b5:6f:bf:37:9b:c9:3e:2c:05:cc:7e:de:4d:1e:e6:9b: 1d:b6:e7:62:27:64:48:1b:b8:e4:fc:6d:98:26:ec:c1:dd:83: a3:e6:f2:b8:9b:64:ec:29:0f:aa:ae:e6:18:26:c0:ed:32:f6: 70:63:5f:00:25:6d:ae:93:18:24:e5:a9:59:6f:c5:6f:1f:b1: 49:17:c8:e8:c8:35:b7:8d:44:b6:43:c5:0d:88:17:52:f2:8e: 58:4a:87:3b:b1:9b:9a:42:1e:5d:74:08:64:63:eb:cd:dd:56: 0f:15:58:82:4b:fd:b7:19:94:12:5c:19:e2:77:66:e8:d4:47: d5:d8:be:b2:1a:1c:66:01:39:10:c9:61:43:c6:a5:3f:2f:92: 7c:4e:a2:4e:ff:5b:25:90:e6:94:e1:82:a1:58:0a:df:4a:d3: 74:51:1a:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz9HHfPYQkgqQK/L0c22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzEzY2YyNjdmZDRlMTVjZjg5OTlhZWI0NWMzMDNhNWUwMjQxNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkViHfE+BsffJkueSNbfLFpY8PQi5 Je50BaSuqLTK301e6jwhCOIdCZmn6P6Tl7XghJlwa06/mLTjPPDdPp9ju7Yr2dvB /xzPWjOwfNaER1GTSiFKaaKUcezfK7w3tEfkFWwdDdyA8wYkWNMXvxEJ28ZgPvi5 D1uhl2HJz5M1pT2wYkHdyw/K0JvfRNAuXX+78ffBpxwvYwSldTB+f16faSnkA4mA YKUXgqwfbSTeo++54sZ15O8QChXTAfm8u5nMGRWf4EL8YM0A8IpdBBuMYVOP4ahf Y5HMO6dlSQwiHZBYdUoc/cm31s18MuIn29QqPc2qBRbt3Hs95/hB9p/PqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcTzyZ/1OFc+Jma60XDA6XgJBTlMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvcHhQUEpuX1U0Vno0bVpyclJjTURwZUFrRk9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQwKMA0G CSqGSIb3DQEBCwUAA4IBAQAfXSDo5yc0gMN8YlSQChac6QE1oW9YrousxAS762cN mo6XAaL2ueKjTPZPONdH0tqWvW2vjKf+D5W36Zlfyo2wcOBP2h/anfo7OZOa2xyU X4B0IrPsM8CeYfzH1rVvvzebyT4sBcx+3k0e5psdtudiJ2RIG7jk/G2YJuzB3YOj 5vK4m2TsKQ+qruYYJsDtMvZwY18AJW2ukxgk5alZb8VvH7FJF8joyDW3jUS2Q8UN iBdS8o5YSoc7sZuaQh5ddAhkY+vN3VYPFViCS/23GZQSXBnid2bo1EfV2L6yGhxm ATkQyWFDxqU/L5J8TqJO/1slkOaU4YKhWArfStN0URrq -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:01 2026 by rpki-client