This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa File: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (raw, json) Hash identifier: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A= Subject key identifier: A6:33:37:2D:7D:C8:58:1C:21:55:90:8B:5A:F8:A0:2C:9B:D2:40:94 Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Certificate serial: 019B797EEAAD20E77ED83FC6E7B3EC5B23D6 Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204082 IP address blocks: 185.109.242.0/24 maxlen: 24 185.109.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ea:ad:20:e7:7e:d8:3f:c6:e7:b3:ec:5b:23:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a633372d7dc8581c2155908b5af8a02c9bd24094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:70:05:15:0e:88:ac:2c:ba:6c:67:a2:aa: 28:22:4a:cb:21:0f:5a:4a:b5:c1:70:87:35:a6:a0: 9c:e5:62:0c:9d:cf:f5:5c:34:26:8d:41:e7:5b:47: b4:f4:bb:7e:fc:e9:e4:4a:7a:3b:58:56:ab:8c:3d: 7b:25:73:c2:fe:1a:cc:b1:77:1e:80:46:12:77:2c: cb:3f:66:46:5f:8f:ed:b7:3b:0f:1b:fb:ee:10:80: 86:ce:c4:4e:1d:f2:29:81:99:ae:19:e2:cb:dc:be: 55:98:7a:71:ab:14:d4:98:0e:62:5e:52:ec:60:6d: ec:85:19:aa:7f:ea:0c:68:c9:85:62:79:6f:d1:c3: 04:34:6a:d8:02:94:68:49:a8:41:09:40:e9:7c:07: 09:ba:fc:14:f2:e2:e0:2f:96:39:b9:5c:a5:46:cb: 73:c1:32:7d:95:e5:1c:35:82:01:58:b7:88:86:9e: 73:3e:0b:0a:8c:c7:e7:6b:ab:3f:28:a9:15:05:6e: a2:b7:b6:46:79:33:8e:7f:b9:11:df:d6:18:3f:b9: 12:85:aa:ab:e6:4a:c8:5d:8e:53:53:7e:6b:14:b3: c3:b1:9c:c3:ee:3f:d2:9b:4e:f7:14:ba:3b:01:96: ff:0e:28:6b:e7:90:69:f8:21:be:f5:f2:a5:ed:3e: 6b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:33:37:2D:7D:C8:58:1C:21:55:90:8B:5A:F8:A0:2C:9B:D2:40:94 X509v3 Authority Key Identifier: keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.242.0/23 Signature Algorithm: sha256WithRSAEncryption 43:1f:ef:9e:a6:68:34:42:af:2b:e9:88:eb:b1:2e:8f:51:b3: 7b:bd:eb:dd:ae:21:27:45:ca:61:ba:6c:4c:c0:16:02:12:72: a0:40:1e:60:d0:15:f5:5b:0f:14:02:98:3a:e2:a7:76:83:6c: 0b:ae:12:5d:f1:c7:a8:3c:ef:dd:53:1b:c2:60:05:55:03:a7: 0c:8e:d4:18:87:02:d1:75:be:09:09:cf:c9:6e:1e:af:59:9a: 69:7a:19:5e:df:0e:a7:26:f4:a8:8c:c9:7d:47:31:8b:26:ac: f8:96:79:93:f6:dd:c2:22:dd:13:aa:eb:c4:f7:61:a7:43:31: 71:05:10:06:bf:ac:06:c5:70:30:bd:f7:f9:a5:2e:59:40:3b: ba:24:af:65:66:43:a7:93:db:a5:4d:93:a5:1f:22:82:c9:84: 9b:0a:de:a1:0c:52:70:b2:5a:d5:50:57:5e:36:54:c4:f4:15: b7:cb:69:f9:8e:a7:e0:6c:bc:f6:a1:5e:f1:8c:5d:78:44:b2: 23:42:17:12:a6:35:a0:c3:9a:95:0d:05:03:a9:99:f5:53:51: eb:29:39:00:93:78:dd:fe:c2:0a:69:fc:f5:bc:56:b3:e1:d9: 6f:b7:f3:36:4e:23:59:6b:85:c3:4f:e9:65:3e:52:4c:f7:66: bd:e7:aa:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuqtIOd+2D/G57PsWyPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj MTVkMDIwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjMzMzcyZDdkYzg1ODFjMjE1NTkwOGI1YWY4YTAyYzliZDI0MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVxwBRUOiKwsumxnoqooIkrLIQ9a SrXBcIc1pqCc5WIMnc/1XDQmjUHnW0e09Lt+/OnkSno7WFarjD17JXPC/hrMsXce gEYSdyzLP2ZGX4/ttzsPG/vuEICGzsROHfIpgZmuGeLL3L5VmHpxqxTUmA5iXlLs YG3shRmqf+oMaMmFYnlv0cMENGrYApRoSahBCUDpfAcJuvwU8uLgL5Y5uVylRstz wTJ9leUcNYIBWLeIhp5zPgsKjMfna6s/KKkVBW6it7ZGeTOOf7kR39YYP7kShaqr 5krIXY5TU35rFLPDsZzD7j/Sm073FLo7AZb/Dihr55Bp+CG+9fKl7T5rFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYzNy19yFgcIVWQi1r4oCyb0kCUMB8GA1UdIwQY MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt MjdlZmMxM2FmZjFlLzEvcGpNM0xYM0lXQndoVlpDTFd2aWdMSnZTUUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuW3yMA0G CSqGSIb3DQEBCwUAA4IBAQBDH++epmg0Qq8r6YjrsS6PUbN7vevdriEnRcphumxM wBYCEnKgQB5g0BX1Ww8UApg64qd2g2wLrhJd8ceoPO/dUxvCYAVVA6cMjtQYhwLR db4JCc/Jbh6vWZppehle3w6nJvSojMl9RzGLJqz4lnmT9t3CIt0TquvE92GnQzFx BRAGv6wGxXAwvff5pS5ZQDu6JK9lZkOnk9ulTZOlHyKCyYSbCt6hDFJwslrVUFde NlTE9BW3y2n5jqfgbLz2oV7xjF14RLIjQhcSpjWgw5qVDQUDqZn1U1HrKTkAk3jd /sIKafz1vFaz4dlvt/M2TiNZa4XDT+llPlJM92a956rR -----END CERTIFICATE-----Generated at Tue Feb 10 03:58:48 2026 by rpki-client