This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa File: PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa (raw, json) Hash identifier: mMckO0VWsJIoTMSpV0U2xVZQdIMSSosg9qAEuX4Cl34= Subject key identifier: 3D:72:61:9D:7F:87:86:98:3D:29:62:BA:2E:FB:95:2A:6A:71:93:B1 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9BDD72C1CBEE4D2E52E537353B29 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa Signing time: Fri 02 Jan 2026 06:17:28 +0000 ROA not before: Fri 02 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64458 IP address blocks: 62.60.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9b:dd:72:c1:cb:ee:4d:2e:52:e5:37:35:3b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d72619d7f8786983d2962ba2efb952a6a7193b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:1a:56:01:a2:f1:53:c6:70:1f:3d:6c:f6: dd:f2:f0:a0:b3:d3:f4:9f:27:2d:97:a7:37:fd:62: a3:28:9b:cc:31:40:0d:a9:1a:fb:89:7d:be:83:07: 3f:c9:bc:14:9d:d0:4d:02:6d:db:d8:f8:aa:3c:1e: b1:ab:7b:2a:eb:95:08:2f:0e:aa:b4:49:b2:f6:f2: 59:64:d9:c0:c1:fd:7c:41:c9:04:9a:2e:dd:88:80: a7:05:7f:4c:8a:b3:fe:64:03:47:88:9d:bc:9e:9f: d8:35:53:e9:0b:ee:98:da:52:b5:56:b2:d1:ef:79: 9a:aa:33:5f:c7:df:5d:ff:50:15:d8:59:07:09:b3: 4a:c0:e1:3a:71:e1:b5:9f:fe:e2:71:9b:7f:00:b7: ba:2d:4d:10:f8:e0:e5:d7:15:53:bd:c9:6d:ab:bb: 1a:84:c3:30:d8:34:c2:48:22:c6:90:c6:6c:5e:45: 97:c8:a0:29:6b:b6:d4:4d:a8:cc:6f:e3:82:e4:58: ba:25:ac:3e:33:37:0c:12:ab:e0:89:4d:4c:67:f0: 6c:a9:b5:04:84:3c:41:0e:74:dc:39:8b:6c:0c:f5: 7e:96:0c:c2:00:84:17:3d:9f:15:49:04:3a:35:a1: 93:e3:04:53:ac:df:94:ca:e8:2f:cc:a7:d1:65:6a: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:61:9D:7F:87:86:98:3D:29:62:BA:2E:FB:95:2A:6A:71:93:B1 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/PXJhnX-Hhpg9KWK6LvuVKmpxk7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.180.0/22 Signature Algorithm: sha256WithRSAEncryption 01:dc:b6:61:3b:56:4f:c8:8f:e2:45:49:41:03:26:7f:a3:a5: 2e:ec:68:cd:9e:48:6d:ac:62:ce:90:ad:1a:25:f0:71:58:fe: 2a:b6:bf:e1:1a:92:83:40:27:40:92:e7:43:ef:0e:fb:4b:72: d9:bd:f6:d0:c4:ce:40:eb:77:89:c7:da:01:e2:43:6e:b9:13: 57:06:ed:dd:23:65:89:4b:0e:d2:9c:cd:49:33:91:80:94:cb: 06:64:e0:36:98:72:9c:38:a7:4d:fd:6b:77:79:d3:89:8d:0a: 31:5d:f1:b8:9e:b3:0b:81:cb:06:6c:4e:2d:c1:d9:fb:9d:04: 11:28:db:e3:09:ae:fd:06:b1:2e:2d:f1:d2:65:74:ac:dd:0b: 0d:90:10:b8:19:8a:05:07:cf:5d:7a:f1:bb:7d:ee:81:ff:42: ca:97:23:5e:a8:25:10:65:f1:01:b1:47:f7:99:03:ff:b0:a8: ed:12:aa:f3:5a:ff:5d:2c:64:49:1a:ec:e7:a2:2c:5e:08:b7: 99:4c:c5:a1:cb:f5:73:fd:9b:42:c8:54:73:12:4b:22:8c:3f: 22:9d:6b:9b:c9:b5:0e:cd:0e:78:e4:53:6a:7b:dc:a9:44:a2: e6:a4:3c:c9:1a:6e:f8:96:71:db:c4:91:46:91:e3:8c:1b:a3: 09:42:3b:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WpvdcsHL7k0uUuU3NTspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDcyNjE5ZDdmODc4Njk4M2QyOTYyYmEyZWZiOTUyYTZhNzE5M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOkaVgGi8VPGcB89bPbd8vCgs9P0 nyctl6c3/WKjKJvMMUANqRr7iX2+gwc/ybwUndBNAm3b2PiqPB6xq3sq65UILw6q tEmy9vJZZNnAwf18QckEmi7diICnBX9MirP+ZANHiJ28np/YNVPpC+6Y2lK1VrLR 73maqjNfx99d/1AV2FkHCbNKwOE6ceG1n/7icZt/ALe6LU0Q+ODl1xVTvcltq7sa hMMw2DTCSCLGkMZsXkWXyKApa7bUTajMb+OC5Fi6Jaw+MzcMEqvgiU1MZ/BsqbUE hDxBDnTcOYtsDPV+lgzCAIQXPZ8VSQQ6NaGT4wRTrN+UyugvzKfRZWpfoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1yYZ1/h4aYPSliui77lSpqcZOxMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvUFhKaG5YLUhocGc5S1dLNkx2dVZLbXB4azdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjy0MA0G CSqGSIb3DQEBCwUAA4IBAQAB3LZhO1ZPyI/iRUlBAyZ/o6Uu7GjNnkhtrGLOkK0a JfBxWP4qtr/hGpKDQCdAkudD7w77S3LZvfbQxM5A63eJx9oB4kNuuRNXBu3dI2WJ Sw7SnM1JM5GAlMsGZOA2mHKcOKdN/Wt3edOJjQoxXfG4nrMLgcsGbE4twdn7nQQR KNvjCa79BrEuLfHSZXSs3QsNkBC4GYoFB89devG7fe6B/0LKlyNeqCUQZfEBsUf3 mQP/sKjtEqrzWv9dLGRJGuznoixeCLeZTMWhy/Vz/ZtCyFRzEksijD8inWubybUO zQ545FNqe9ypRKLmpDzJGm74lnHbxJFGkeOMG6MJQjtU -----END CERTIFICATE-----Generated at Wed Jan 21 10:50:01 2026 by rpki-client