This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/P1PmM2uLEOvejeMWTOPNfCrKCWw.roa File: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (raw, json) Hash identifier: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng= Subject key identifier: 3F:53:E6:33:6B:8B:10:EB:DE:8D:E3:16:4C:E3:CD:7C:2A:CA:09:6C Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019B7AC947C74B44E63262CC9BA6FB064FE8 Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/P1PmM2uLEOvejeMWTOPNfCrKCWw.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 94.142.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:47:c7:4b:44:e6:32:62:cc:9b:a6:fb:06:4f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f53e6336b8b10ebde8de3164ce3cd7c2aca096c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:11:79:83:14:9a:9d:b1:7d:b0:ce:53:a2: 00:69:ef:b7:ce:47:c4:e1:be:8c:57:75:27:0c:3d: 54:9d:22:c0:b4:78:45:40:66:ee:6e:a2:42:62:fd: 1d:6e:a3:7a:12:b5:46:e4:f4:b1:c6:e6:fb:9b:47: ab:da:98:39:cc:a2:82:57:2b:74:c6:7d:67:86:2f: 44:1f:22:ca:b1:b6:e4:92:ec:07:c6:c4:e3:76:00: 9f:b6:66:75:de:1e:e8:a7:2f:a0:16:9b:8e:49:7d: a2:3f:7c:98:54:b1:8b:38:c4:28:ca:8e:9d:75:4f: 9e:d7:d6:87:e6:de:47:0c:c4:42:99:76:4f:e9:89: 80:d0:bf:e3:c1:e6:94:76:f7:9e:03:3c:35:3e:79: 7e:fc:28:b6:9f:c0:96:60:24:b5:8f:ba:89:fe:90: 9d:4d:32:17:28:35:97:7e:4c:aa:e6:c8:67:54:22: 2b:f4:68:e3:e9:ba:7e:5e:53:a0:2d:25:2a:e5:39: 95:46:f7:a4:7e:e8:1e:ee:34:00:66:af:b3:0d:44: c1:f2:34:4c:04:aa:fe:f4:e6:81:6e:fc:61:b2:6d: d3:c3:b7:76:dc:b2:bc:ce:ee:ea:36:5b:85:9f:2b: ba:1e:a4:61:3e:36:bd:41:c4:ef:a4:fb:b3:5c:d7: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:53:E6:33:6B:8B:10:EB:DE:8D:E3:16:4C:E3:CD:7C:2A:CA:09:6C X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/P1PmM2uLEOvejeMWTOPNfCrKCWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.252.0/24 Signature Algorithm: sha256WithRSAEncryption 33:2f:68:64:7a:9e:04:07:81:b6:19:92:e3:1f:6b:6d:dc:d3: d0:f4:1f:ca:10:91:fd:c0:13:32:94:11:bf:c3:fa:b5:d3:bd: 1e:bc:8e:44:5f:32:3b:35:28:c8:4a:6b:db:76:78:37:1b:c8: 11:6c:83:1a:57:22:e6:8c:e5:58:9f:6c:14:d9:21:5a:73:20: f5:07:4f:6b:42:61:24:64:e2:5a:57:b3:6c:c2:5a:4c:02:10: 36:78:46:a1:88:15:4d:99:6e:ef:dd:9f:f5:39:e2:c7:58:6d: d5:c4:fc:f8:06:29:e2:2a:cf:0f:c1:05:3b:6e:a3:cf:66:5d: ae:ee:7d:26:4a:8c:66:e3:ea:cb:99:ba:a8:8d:13:78:12:62: 3f:fb:3c:af:c0:58:c6:19:f3:2a:d1:42:5b:eb:95:04:a9:39: 62:7c:88:9a:1d:9b:04:b4:82:8c:40:cc:36:ee:bd:78:07:0f: 76:a8:6c:bb:74:df:df:51:18:d2:d5:d6:4c:f0:67:63:f7:1c: 1b:59:72:e3:4e:2a:17:e7:c9:69:80:b6:83:47:76:a4:87:7e: 73:ed:47:dc:71:07:50:47:2c:4a:dc:9b:81:88:19:0d:27:53: c9:f2:a6:37:cb:1f:9e:1b:2b:52:3f:9f:f5:09:6c:f8:13:4c: 75:9d:fe:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUfHS0TmMmLMm6b7Bk/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjUzZTYzMzZiOGIxMGViZGU4ZGUzMTY0Y2UzY2Q3YzJhY2EwOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wIReYMUmp2xfbDOU6IAae+3zkfE 4b6MV3UnDD1UnSLAtHhFQGbubqJCYv0dbqN6ErVG5PSxxub7m0er2pg5zKKCVyt0 xn1nhi9EHyLKsbbkkuwHxsTjdgCftmZ13h7opy+gFpuOSX2iP3yYVLGLOMQoyo6d dU+e19aH5t5HDMRCmXZP6YmA0L/jweaUdveeAzw1Pnl+/Ci2n8CWYCS1j7qJ/pCd TTIXKDWXfkyq5shnVCIr9Gjj6bp+XlOgLSUq5TmVRvekfuge7jQAZq+zDUTB8jRM BKr+9OaBbvxhsm3Tw7d23LK8zu7qNluFnyu6HqRhPja9QcTvpPuzXNcxXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9T5jNrixDr3o3jFkzjzXwqyglsMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvUDFQbU0ydUxFT3ZlamVNV1RPUE5mQ3JLQ1d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo78MA0G CSqGSIb3DQEBCwUAA4IBAQAzL2hkep4EB4G2GZLjH2tt3NPQ9B/KEJH9wBMylBG/ w/q1070evI5EXzI7NSjISmvbdng3G8gRbIMaVyLmjOVYn2wU2SFacyD1B09rQmEk ZOJaV7NswlpMAhA2eEahiBVNmW7v3Z/1OeLHWG3VxPz4BiniKs8PwQU7bqPPZl2u 7n0mSoxm4+rLmbqojRN4EmI/+zyvwFjGGfMq0UJb65UEqTlifIiaHZsEtIKMQMw2 7r14Bw92qGy7dN/fURjS1dZM8Gdj9xwbWXLjTioX58lpgLaDR3akh35z7UfccQdQ RyxK3JuBiBkNJ1PJ8qY3yx+eGytSP5/1CWz4E0x1nf5z -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:49 2026 by rpki-client