This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pcjjqcWDg2s5_hK7PC5wOduqeo8.roa File: pcjjqcWDg2s5_hK7PC5wOduqeo8.roa (raw, json) Hash identifier: nO2hr7F9kelzvn6bms1Z3Ep/KpLYxPGY8ihl+tURv7I= Subject key identifier: A5:C8:E3:A9:C5:83:83:6B:39:FE:12:BB:3C:2E:70:39:DB:AA:7A:8F Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758C3F35914DA17495C42D3CAB2D362 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pcjjqcWDg2s5_hK7PC5wOduqeo8.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215391 IP address blocks: 109.236.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:f3:59:14:da:17:49:5c:42:d3:ca:b2:d3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c8e3a9c583836b39fe12bb3c2e7039dbaa7a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:64:09:5c:6c:e3:1b:e6:b4:e5:17:f3:af:5f: 3f:51:6d:a5:4c:0b:de:07:c9:a9:18:bc:7b:80:5b: 0d:88:10:68:4c:c4:d2:7a:fd:66:74:93:06:5f:2a: 78:d2:38:5f:75:3a:7d:0f:03:90:70:9e:f1:36:72: d1:94:d9:4d:e4:5c:86:f0:87:30:76:d8:74:ae:b4: 1c:94:ba:ae:2d:cb:cb:00:e0:56:a6:ae:c1:7e:7a: 98:2e:16:f1:9c:dc:ce:65:f3:c9:c2:c4:b7:df:c3: 51:4d:a4:3a:33:cc:82:ad:f0:0e:27:ed:20:d3:38: 00:90:13:dd:c6:b4:b2:cc:ea:29:36:f8:f7:e9:98: b2:15:71:25:b3:c7:34:96:04:a8:19:23:ca:89:32: 15:a7:69:2d:94:e9:32:9d:0b:52:8f:ee:88:be:5c: d5:ec:39:f0:86:22:27:5d:28:cb:1d:34:31:04:f8: a1:25:88:a3:3b:fa:e2:9f:e1:38:f4:3f:22:f0:07: a8:2a:98:a0:7e:b7:dc:10:02:31:2c:25:51:2f:ba: 19:76:cc:4d:ac:b4:1e:59:84:9d:e2:bd:16:6f:d6: f7:36:83:50:31:fb:8e:a5:88:fb:4a:29:b1:bf:70: 19:85:49:37:ce:e3:a8:cd:13:f9:fb:a6:1d:8e:d0: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:E3:A9:C5:83:83:6B:39:FE:12:BB:3C:2E:70:39:DB:AA:7A:8F X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pcjjqcWDg2s5_hK7PC5wOduqeo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.48.0/24 Signature Algorithm: sha256WithRSAEncryption 30:32:77:5d:7d:5a:50:83:41:40:31:de:aa:cb:70:43:d0:3c: b0:d0:cc:bc:55:fe:9c:81:a6:bc:79:ef:00:8d:89:f5:71:90: cc:0c:a7:9b:df:f0:e1:45:e3:c6:a8:fd:e0:50:fa:6b:14:ea: e2:62:ef:6f:68:50:cd:68:c2:e3:78:27:41:09:d7:37:cf:07: 73:7e:7f:0c:5c:7d:e2:24:dc:10:8d:01:a8:03:d8:92:88:18: a6:77:54:47:01:45:49:4b:6c:15:43:f5:4c:73:28:d2:2e:eb: 3b:d0:c8:27:b4:ed:cd:be:71:37:ff:a0:8b:11:ba:93:b8:2e: 57:eb:11:3b:71:44:24:a3:26:0b:3b:ac:a9:22:f6:e9:d6:ff: 72:b2:04:cd:8b:cf:5f:1f:27:4c:fb:54:74:50:d0:73:5f:81: a8:33:c9:06:d3:89:67:8c:34:e8:b6:87:95:fe:84:bb:ea:f1: cb:d0:8f:e9:df:02:f3:55:a1:e2:2d:81:29:9f:ba:59:fc:77: a0:3a:5b:ae:0d:71:a1:e3:9d:1a:f6:a1:4c:67:5a:07:46:b0: bc:0c:6c:32:a8:47:bc:29:84:66:b8:e9:6f:2c:71:cf:30:b2: 2c:c3:31:df:b7:f0:9d:20:c2:5c:ca:f3:23:ba:83:c8:6c:08: 0e:8c:bb:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMPzWRTaF0lcQtPKstNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWM4ZTNhOWM1ODM4MzZiMzlmZTEyYmIzYzJlNzAzOWRiYWE3YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42QJXGzjG+a05Rfzr18/UW2lTAve B8mpGLx7gFsNiBBoTMTSev1mdJMGXyp40jhfdTp9DwOQcJ7xNnLRlNlN5FyG8Icw dth0rrQclLquLcvLAOBWpq7BfnqYLhbxnNzOZfPJwsS338NRTaQ6M8yCrfAOJ+0g 0zgAkBPdxrSyzOopNvj36ZiyFXEls8c0lgSoGSPKiTIVp2ktlOkynQtSj+6IvlzV 7DnwhiInXSjLHTQxBPihJYijO/rin+E49D8i8AeoKpigfrfcEAIxLCVRL7oZdsxN rLQeWYSd4r0Wb9b3NoNQMfuOpYj7Simxv3AZhUk3zuOozRP5+6YdjtAoPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXI46nFg4NrOf4SuzwucDnbqnqPMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvcGNqanFjV0RnMnM1X2hLN1BDNXdPZHVxZW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbewwMA0G CSqGSIb3DQEBCwUAA4IBAQAwMnddfVpQg0FAMd6qy3BD0Dyw0My8Vf6cgaa8ee8A jYn1cZDMDKeb3/DhRePGqP3gUPprFOriYu9vaFDNaMLjeCdBCdc3zwdzfn8MXH3i JNwQjQGoA9iSiBimd1RHAUVJS2wVQ/VMcyjSLus70MgntO3NvnE3/6CLEbqTuC5X 6xE7cUQkoyYLO6ypIvbp1v9ysgTNi89fHydM+1R0UNBzX4GoM8kG04lnjDTotoeV /oS76vHL0I/p3wLzVaHiLYEpn7pZ/HegOluuDXGh450a9qFMZ1oHRrC8DGwyqEe8 KYRmuOlvLHHPMLIswzHft/CdIMJcyvMjuoPIbAgOjLu3 -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:47 2026 by rpki-client