This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/PJmcxay0WtSRJnIDudY6DzRck9Q.roa File: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (raw, json) Hash identifier: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0= Subject key identifier: 3C:99:9C:C5:AC:B4:5A:D4:91:26:72:03:B9:D6:3A:0F:34:5C:93:D4 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34B85E744F6285106054460099A8E Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/PJmcxay0WtSRJnIDudY6DzRck9Q.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 94.241.172.0/24 maxlen: 24 94.241.173.0/24 maxlen: 24 94.241.174.0/24 maxlen: 24 94.241.175.0/24 maxlen: 24 178.253.22.0/24 maxlen: 24 178.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:85:e7:44:f6:28:51:06:05:44:60:09:9a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c999cc5acb45ad491267203b9d63a0f345c93d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:16:e9:7b:78:fc:85:a9:34:d3:88:34:fb: 12:e2:40:ca:ac:14:fb:bc:67:c8:42:70:ab:70:08: 72:fb:d4:19:57:5c:9f:88:04:32:a2:d0:bf:9c:a1: 9c:a6:b4:a6:97:3f:01:48:3e:c8:03:9d:d7:9b:9a: 87:d5:4b:41:1d:38:c3:43:48:5a:d5:02:99:85:73: 49:62:9d:2c:8f:8b:ee:80:7a:43:e9:42:f8:13:97: 2a:4a:ee:a4:23:76:27:ff:8a:8d:6f:0e:cd:05:03: 6a:2d:3e:68:13:45:ab:c0:98:ad:00:29:8d:40:f8: d0:43:0a:1e:1b:ca:e7:e0:7f:f4:09:c0:53:ef:e3: f9:14:55:d2:64:df:96:40:48:8f:81:5a:d0:d6:83: 70:4e:5d:4d:62:5b:ef:d1:23:29:b5:ae:f4:3c:b0: 67:3a:a4:e1:59:a0:49:4d:b9:45:70:29:29:a8:b7: f6:70:ec:51:6b:63:c6:92:54:70:bd:7d:b7:e7:df: 85:0e:92:ee:a2:56:07:ae:3f:48:4e:9c:e8:c8:9e: 2a:6c:b2:b0:5f:90:c1:7e:3e:3d:36:69:80:5d:77: 65:94:09:2a:c2:a3:15:07:36:56:a5:fe:d4:fc:b3: 2a:ab:28:dd:6c:31:ad:5f:77:a5:5c:d1:17:81:23: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:99:9C:C5:AC:B4:5A:D4:91:26:72:03:B9:D6:3A:0F:34:5C:93:D4 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/PJmcxay0WtSRJnIDudY6DzRck9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.172.0/22 178.253.22.0/23 Signature Algorithm: sha256WithRSAEncryption 75:ae:7b:2f:d0:1f:3e:eb:fa:fa:a4:49:12:1f:cf:8c:8e:05: 70:a7:c6:f6:a2:71:65:6a:03:8a:19:de:70:41:64:07:25:81: d9:18:45:a9:f0:cc:f5:b5:f5:c0:e8:ce:55:a2:4e:29:e8:96: 59:53:4a:21:36:43:d4:d3:26:79:a0:4c:a4:09:2a:84:8c:40: 15:b1:e4:15:85:41:36:37:e2:56:dc:a3:a2:73:48:16:fb:c3: 5b:70:15:38:a3:e9:7b:62:bd:68:dc:59:0a:ac:d9:54:9a:94: 5d:93:17:dd:3e:3f:33:b2:f6:c7:7a:bf:32:7c:55:ab:26:a8: e3:d9:e7:54:68:3a:56:46:5b:55:4e:cb:14:0c:37:ec:2e:87: 5f:c9:b6:ff:f0:48:3d:28:ac:6f:55:ae:cc:6f:f6:fe:98:36: 32:03:14:0d:9b:eb:06:eb:1b:1b:86:be:56:ad:06:88:a6:27: 4e:b4:8b:21:c7:58:4a:ee:a6:41:08:c0:09:e4:97:d5:83:fe: 9f:14:04:f3:3e:cf:91:1e:44:53:86:26:16:17:44:5a:1c:ae: 9b:02:0d:26:b8:93:a7:6a:f8:7a:6d:e7:14:ba:0c:f4:9e:44: e3:dd:65:5b:87:53:a2:37:2b:e8:c6:43:90:53:dc:43:bf:c4: cd:4c:89:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0uF50T2KFEGBURgCZqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzk5OWNjNWFjYjQ1YWQ0OTEyNjcyMDNiOWQ2M2EwZjM0NWM5M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5IW6Xt4/IWpNNOINPsS4kDKrBT7 vGfIQnCrcAhy+9QZV1yfiAQyotC/nKGcprSmlz8BSD7IA53Xm5qH1UtBHTjDQ0ha 1QKZhXNJYp0sj4vugHpD6UL4E5cqSu6kI3Yn/4qNbw7NBQNqLT5oE0WrwJitACmN QPjQQwoeG8rn4H/0CcBT7+P5FFXSZN+WQEiPgVrQ1oNwTl1NYlvv0SMpta70PLBn OqThWaBJTblFcCkpqLf2cOxRa2PGklRwvX2359+FDpLuolYHrj9ITpzoyJ4qbLKw X5DBfj49NmmAXXdllAkqwqMVBzZWpf7U/LMqqyjdbDGtX3elXNEXgSNI3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDyZnMWstFrUkSZyA7nWOg80XJPUMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvUEptY3hheTBXdFNSSm5JRHVkWTZEelJjazlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXvGsAwQB sv0WMA0GCSqGSIb3DQEBCwUAA4IBAQB1rnsv0B8+6/r6pEkSH8+MjgVwp8b2onFl agOKGd5wQWQHJYHZGEWp8Mz1tfXA6M5Vok4p6JZZU0ohNkPU0yZ5oEykCSqEjEAV seQVhUE2N+JW3KOic0gW+8NbcBU4o+l7Yr1o3FkKrNlUmpRdkxfdPj8zsvbHer8y fFWrJqjj2edUaDpWRltVTssUDDfsLodfybb/8Eg9KKxvVa7Mb/b+mDYyAxQNm+sG 6xsbhr5WrQaIpidOtIshx1hK7qZBCMAJ5JfVg/6fFATzPs+RHkRThiYWF0RaHK6b Ag0muJOnavh6becUugz0nkTj3WVbh1OiNyvoxkOQU9xDv8TNTIkY -----END CERTIFICATE-----Generated at Tue Jan 20 02:57:05 2026 by rpki-client