This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Pja4mNctEO1syGRjo8GcPhgekVI.roa File: Pja4mNctEO1syGRjo8GcPhgekVI.roa (raw, json) Hash identifier: Ihp8XzTztX/T4ldZhzh4fgPvsQaA7Zl4szEC5xqNuDQ= Subject key identifier: 3E:36:B8:98:D7:2D:10:ED:6C:C8:64:63:A3:C1:9C:3E:18:1E:91:52 Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Certificate serial: 019B797E5B07E70B973F81826875849A5B2D Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Pja4mNctEO1syGRjo8GcPhgekVI.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214895 IP address blocks: 193.242.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5b:07:e7:0b:97:3f:81:82:68:75:84:9a:5b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e36b898d72d10ed6cc86463a3c19c3e181e9152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:ca:ef:be:7f:2c:d2:1f:fa:00:59:84:5f: 50:e3:3c:00:13:62:88:8c:73:02:4c:a2:d5:7d:8d: 4b:1c:df:eb:e3:0f:b7:63:e7:3b:71:88:07:ab:60: 93:c2:7d:f1:37:b3:61:78:39:ce:1a:ee:61:91:ed: eb:7d:c0:69:b3:72:8d:2b:55:7b:14:2e:b8:02:cc: e9:d9:2d:ce:7a:00:b2:86:72:e3:e1:01:08:6d:e4: 8a:52:a9:2e:82:e7:b7:ab:cc:8f:f1:6a:e3:29:a1: 1c:56:ff:51:4e:6f:44:8e:2f:a9:22:d7:12:49:25: 79:13:67:d6:9c:69:f7:36:67:a1:6b:22:69:ae:c4: c4:51:c5:5b:95:4b:b4:89:6a:6c:ee:e3:61:7c:b9: 59:6b:63:c9:f5:fc:b6:7c:63:63:83:bb:47:f1:e7: c1:2d:8a:af:1f:df:82:2c:2b:5a:95:4a:fa:2c:7c: 0d:4f:fb:db:a1:67:6a:98:5f:0e:27:9d:42:b5:ff: 57:4f:81:b1:64:ba:70:79:63:b5:7f:53:83:9a:fd: 1b:67:aa:fd:55:bc:8d:7a:38:50:c5:8d:5c:59:23: 23:c9:d0:d1:72:4b:30:df:c3:6e:d8:e3:a4:db:ce: 01:31:6d:c3:f2:ab:52:39:41:6c:ed:b5:d2:7c:ce: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:B8:98:D7:2D:10:ED:6C:C8:64:63:A3:C1:9C:3E:18:1E:91:52 X509v3 Authority Key Identifier: keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Pja4mNctEO1syGRjo8GcPhgekVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.223.0/24 Signature Algorithm: sha256WithRSAEncryption 03:57:36:9c:62:9d:e4:1d:09:04:15:79:0a:53:9b:1c:10:99: 6c:df:d7:b5:c7:4c:1a:12:8f:ac:d8:47:7e:80:b6:a5:71:a7: 04:48:f7:f9:ee:0a:cc:d3:63:de:00:61:a6:9a:e5:55:21:2c: 93:ee:1f:95:db:c3:4f:4c:12:1e:29:d3:47:78:59:ed:9f:d9: c0:3a:48:38:3a:76:c9:6d:96:3c:fe:09:95:50:ae:4f:99:23: 71:cd:bc:fa:b8:5d:71:eb:b5:61:ec:b1:e5:fa:58:b4:62:84: aa:74:16:c6:0b:66:76:e0:1f:b1:7f:fb:bd:e7:bf:1e:70:d4: 11:94:8d:04:5c:a8:70:0b:94:9d:f3:6e:0a:a1:db:54:bb:c2: 71:7c:1e:c6:6d:37:a9:fd:2d:d2:d4:69:03:5a:94:29:e9:74: 2d:90:23:d6:c2:8b:7b:03:96:4e:78:d4:12:66:41:17:ef:b3: c6:7b:34:c8:55:e5:6c:a5:73:a4:22:aa:5b:69:ec:8d:16:de: b8:e3:e8:44:29:44:fa:53:28:d5:f0:bb:82:d4:0d:45:ab:4d: 86:35:aa:26:b7:a8:3d:7b:38:bf:c2:2b:63:eb:2b:39:2e:8d: 18:1e:79:c0:d5:63:d1:15:8d:77:6b:03:b1:04:74:e1:be:13: 9d:7c:84:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flsH5wuXP4GCaHWEmlstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl MGU4YTUwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTM2Yjg5OGQ3MmQxMGVkNmNjODY0NjNhM2MxOWMzZTE4MWU5MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufLK775/LNIf+gBZhF9Q4zwAE2KI jHMCTKLVfY1LHN/r4w+3Y+c7cYgHq2CTwn3xN7NheDnOGu5hke3rfcBps3KNK1V7 FC64Aszp2S3OegCyhnLj4QEIbeSKUqkugue3q8yP8WrjKaEcVv9RTm9Eji+pItcS SSV5E2fWnGn3NmehayJprsTEUcVblUu0iWps7uNhfLlZa2PJ9fy2fGNjg7tH8efB LYqvH9+CLCtalUr6LHwNT/vboWdqmF8OJ51Ctf9XT4GxZLpweWO1f1ODmv0bZ6r9 VbyNejhQxY1cWSMjydDRcksw38Nu2OOk284BMW3D8qtSOUFs7bXSfM45zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD42uJjXLRDtbMhkY6PBnD4YHpFSMB8GA1UdIwQY MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt YmYzNTFjMGYwZWJjLzEvUGphNG1OY3RFTzFzeUdSam84R2NQaGdla1ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfLfMA0G CSqGSIb3DQEBCwUAA4IBAQADVzacYp3kHQkEFXkKU5scEJls39e1x0waEo+s2Ed+ gLalcacESPf57grM02PeAGGmmuVVISyT7h+V28NPTBIeKdNHeFntn9nAOkg4OnbJ bZY8/gmVUK5PmSNxzbz6uF1x67Vh7LHl+li0YoSqdBbGC2Z24B+xf/u9578ecNQR lI0EXKhwC5Sd824KodtUu8JxfB7GbTep/S3S1GkDWpQp6XQtkCPWwot7A5ZOeNQS ZkEX77PGezTIVeVspXOkIqpbaeyNFt644+hEKUT6UyjV8LuC1A1Fq02GNaomt6g9 ezi/witj6ys5Lo0YHnnA1WPRFY13awOxBHThvhOdfIR7 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:31 2026 by rpki-client