This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ppxL-JyBnLIGugzsw08md5QRsxg.roa
File: ppxL-JyBnLIGugzsw08md5QRsxg.roa (raw, json)
Hash identifier: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=
Subject key identifier: A6:9C:4B:F8:9C:81:9C:B2:06:BA:0C:EC:C3:4F:26:77:94:11:B3:18
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019B7C7EF954F0E661F21785B54FAD15A825
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ppxL-JyBnLIGugzsw08md5QRsxg.roa
Signing time: Fri 02 Jan 2026 02:17:34 +0000
ROA not before: Fri 02 Jan 2026 02:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 78.142.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Jan 2026 16:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7e:f9:54:f0:e6:61:f2:17:85:b5:4f:ad:15:a8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 02:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a69c4bf89c819cb206ba0cecc34f26779411b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:25:9c:28:60:ce:9f:b1:fa:3b:04:79:5b:
09:7a:0c:ef:7f:af:3a:2f:fe:da:59:ab:cc:57:57:
bc:48:cc:25:fd:6a:26:59:24:bb:42:44:32:84:e3:
1a:21:01:0f:ed:e7:99:d0:26:f6:87:a7:cd:79:85:
6a:49:62:9c:5f:26:8b:0d:5a:44:1d:31:f6:bf:7e:
cf:7c:0f:ba:14:be:7d:bf:ac:f2:3a:87:da:eb:6a:
27:da:11:01:92:a9:6b:67:9a:6d:3b:76:0f:bf:c7:
08:a0:14:df:7e:c5:a4:46:f6:81:22:fd:d6:aa:f0:
18:b6:1d:6b:f8:96:89:10:cd:99:5c:69:21:38:af:
51:17:f8:be:92:1a:f5:ca:ab:c2:74:4a:ea:0b:05:
4f:21:ce:08:06:6d:fa:ef:d5:cf:55:d9:72:03:e6:
bd:ab:ff:55:17:ae:75:06:82:46:39:3e:68:41:fd:
08:77:c2:00:d7:1d:67:94:52:c0:01:64:c9:02:35:
3f:5a:b9:fb:41:f5:03:87:a5:1f:f9:bb:7e:d9:88:
a8:4a:21:30:e6:22:32:2e:be:6b:f8:9a:09:76:0d:
b5:ac:4f:1f:8b:7b:53:c7:ad:f9:fb:15:6f:84:02:
0f:c9:68:4a:94:8d:14:f5:83:90:3d:79:48:6d:39:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:4B:F8:9C:81:9C:B2:06:BA:0C:EC:C3:4F:26:77:94:11:B3:18
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ppxL-JyBnLIGugzsw08md5QRsxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4f:7e:75:1b:20:0c:e3:3a:cc:e5:81:87:2a:58:40:64:54:
61:4f:20:0d:38:31:3c:57:9c:e3:9c:d8:34:f5:47:43:91:f4:
14:a2:da:a6:7c:cc:64:77:6a:43:b6:fe:00:3f:35:d2:8c:b7:
7a:fc:cf:6f:00:d9:fc:ec:93:ee:3c:01:c4:c7:4e:37:2c:5f:
62:9c:93:cc:27:5d:3d:f7:3b:3d:fb:ba:05:14:f1:8e:21:59:
b2:8f:5a:eb:84:bc:35:71:d3:81:af:88:19:bd:60:5b:ce:39:
af:1c:44:cf:76:7b:2f:73:a3:53:47:12:0a:a8:d0:9b:46:23:
dc:c1:21:35:66:87:62:19:0f:48:e0:23:5d:c4:e1:ca:02:28:
f4:e5:e1:3d:23:e3:8f:8d:a5:19:2d:0f:c0:d2:a1:41:78:0e:
a4:06:f4:fd:90:f5:16:bb:f8:37:cc:10:56:89:fe:8a:c8:37:
e2:44:72:9f:cc:34:c9:47:6d:d5:a5:a9:31:8b:8e:93:c3:b9:
2f:39:53:64:c7:76:0c:da:3c:b1:d4:62:e4:b2:93:8d:a3:c6:
87:1e:3d:73:44:be:2f:c3:49:84:5f:31:ab:fd:ba:27:db:db:
84:ca:fb:cd:da:c4:ee:24:6d:47:11:42:69:a9:1a:89:3c:9a:
65:56:31:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8fvlU8OZh8heFtU+tFaglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjljNGJmODljODE5Y2IyMDZiYTBjZWNjMzRmMjY3Nzk0MTFiMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4lnChgzp+x+jsEeVsJegzvf686
L/7aWavMV1e8SMwl/WomWSS7QkQyhOMaIQEP7eeZ0Cb2h6fNeYVqSWKcXyaLDVpE
HTH2v37PfA+6FL59v6zyOofa62on2hEBkqlrZ5ptO3YPv8cIoBTffsWkRvaBIv3W
qvAYth1r+JaJEM2ZXGkhOK9RF/i+khr1yqvCdErqCwVPIc4IBm3679XPVdlyA+a9
q/9VF651BoJGOT5oQf0Id8IA1x1nlFLAAWTJAjU/Wrn7QfUDh6Uf+bt+2YioSiEw
5iIyLr5r+JoJdg21rE8fi3tTx635+xVvhAIPyWhKlI0U9YOQPXlIbTk/iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKacS/icgZyyBroM7MNPJneUEbMYMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvcHB4TC1KeUJuTElHdWd6c3cwOG1kNVFSc3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7YMA0G
CSqGSIb3DQEBCwUAA4IBAQCxT351GyAM4zrM5YGHKlhAZFRhTyANODE8V5zjnNg0
9UdDkfQUotqmfMxkd2pDtv4APzXSjLd6/M9vANn87JPuPAHEx043LF9inJPMJ109
9zs9+7oFFPGOIVmyj1rrhLw1cdOBr4gZvWBbzjmvHETPdnsvc6NTRxIKqNCbRiPc
wSE1ZodiGQ9I4CNdxOHKAij05eE9I+OPjaUZLQ/A0qFBeA6kBvT9kPUWu/g3zBBW
if6KyDfiRHKfzDTJR23Vpakxi46Tw7kvOVNkx3YM2jyx1GLkspONo8aHHj1zRL4v
w0mEXzGr/bon29uEyvvN2sTuJG1HEUJpqRqJPJplVjF3
-----END CERTIFICATE-----
Generated at Thu Jan 22 21:36:58 2026 by rpki-client