This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa File: pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa (raw, json) Hash identifier: uOd0xGswmdF48/9jkoke/SyXvT+SzaX6MAmlYWoqoHE= Subject key identifier: A4:9C:BF:27:87:47:FA:73:CA:09:7C:80:74:27:49:B4:3B:0C:C6:B5 Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7 Certificate serial: 019B7CED299A483391D54F41FB311C615678 Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa Signing time: Fri 02 Jan 2026 04:17:56 +0000 ROA not before: Fri 02 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48786 IP address blocks: 91.212.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:29:9a:48:33:91:d5:4f:41:fb:31:1c:61:56:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49cbf278747fa73ca097c80742749b43b0cc6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:ef:ad:ae:3e:bb:1d:28:52:73:0e:f4:1a: 1f:57:31:55:f7:ef:33:d1:54:40:97:2c:89:aa:b8: 5b:46:8e:b6:52:45:70:70:f2:0d:05:0e:88:74:b1: 34:e0:0a:7a:93:37:b2:2c:a1:6a:97:ed:5f:74:df: f2:55:45:68:75:1c:60:19:02:15:02:72:c0:02:d3: 80:f0:05:76:56:bd:b6:ea:8b:cd:5e:ab:d3:4c:60: 55:f7:3c:ca:41:9c:6d:22:70:82:dd:9d:e8:1b:1e: 8e:be:94:7b:3c:22:0f:73:42:2c:40:07:41:d7:43: 12:7b:90:c4:47:62:73:7d:d8:23:e0:26:4d:1a:1c: 5a:2f:85:4d:2d:ec:50:5f:0f:d4:73:57:66:9e:f4: a3:66:ff:21:c2:53:e5:cc:96:00:88:f5:e9:64:38: 2e:a0:8f:89:61:03:6b:4c:83:dc:6f:32:46:82:f1: 23:ca:84:99:cc:be:55:b1:09:95:df:7e:64:91:45: f1:9a:a7:d0:a3:58:c0:e3:27:96:87:c0:06:d9:a9: e6:73:40:44:33:b5:db:f3:75:69:3c:2f:50:40:30: 21:63:02:aa:40:74:59:91:b0:0f:5e:ec:83:a7:8e: 3b:cd:79:c8:ee:83:91:0a:f9:b8:8f:8e:55:0f:e1: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:BF:27:87:47:FA:73:CA:09:7C:80:74:27:49:B4:3B:0C:C6:B5 X509v3 Authority Key Identifier: keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.35.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2c:83:5e:cc:c6:d7:22:34:8c:0d:60:b5:0d:40:8d:ba:dc: 52:2c:b8:2c:80:15:a4:9f:f5:8c:1b:22:a9:f9:29:d4:39:3c: 2c:27:a5:1d:80:3c:2d:53:3e:fe:39:73:91:c2:c3:cb:95:5a: ca:c4:8c:f4:97:57:7e:05:95:5b:f8:85:ca:91:ad:aa:95:7e: ec:ec:c6:57:26:ff:0d:2a:4f:f6:07:8a:6e:3f:9c:40:13:5b: fe:e8:7d:a1:88:e0:a6:fe:e5:92:bb:21:50:af:4e:92:7b:27: 62:bc:45:38:97:e0:ca:96:81:e4:6e:4b:cd:b1:6e:1d:d1:b6: bc:b5:a8:be:ea:b0:0f:36:19:25:2a:37:e1:c7:de:b9:9d:39: ce:a9:03:d7:49:00:4b:25:07:ed:a6:aa:5a:3f:0b:3d:1f:fd: 7c:da:c7:77:c0:17:34:f2:c2:45:35:c5:ba:14:78:40:f0:d5: 34:18:72:ed:7a:57:2f:40:58:54:97:a9:56:de:e7:6c:23:ef: b4:d0:64:53:f9:4c:c5:a1:67:97:73:62:7c:ea:11:f9:51:4c: 39:5a:4e:79:1a:80:e9:75:30:a2:4f:c3:c2:50:e0:57:e1:cb: ad:75:d9:50:f1:79:ff:fd:b3:41:3c:16:02:5f:33:e8:4c:14: 8f:a3:43:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SmaSDOR1U9B+zEcYVZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjFlMDViZDdiM2Y4Y2E5YjRhYmQwZjg5OTkxMjE3OWI1 NjZkZjcwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDljYmYyNzg3NDdmYTczY2EwOTdjODA3NDI3NDliNDNiMGNjNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/vra4+ux0oUnMO9BofVzFV9+8z 0VRAlyyJqrhbRo62UkVwcPINBQ6IdLE04Ap6kzeyLKFql+1fdN/yVUVodRxgGQIV AnLAAtOA8AV2Vr226ovNXqvTTGBV9zzKQZxtInCC3Z3oGx6OvpR7PCIPc0IsQAdB 10MSe5DER2Jzfdgj4CZNGhxaL4VNLexQXw/Uc1dmnvSjZv8hwlPlzJYAiPXpZDgu oI+JYQNrTIPcbzJGgvEjyoSZzL5VsQmV335kkUXxmqfQo1jA4yeWh8AG2anmc0BE M7Xb83VpPC9QQDAhYwKqQHRZkbAPXuyDp447zXnI7oORCvm4j45VD+HPKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKScvyeHR/pzygl8gHQnSbQ7DMa1MB8GA1UdIwQY MBaAFKjx4FvXs/jKm0q9D4mZEhebVm33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzIt YmU5ZGQxNWQ4MjkxLzEvcEp5X0o0ZEgtblBLQ1h5QWRDZEp0RHNNeHJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzItYmU5ZGQxNWQ4Mjkx LzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QjMA0G CSqGSIb3DQEBCwUAA4IBAQAKLINezMbXIjSMDWC1DUCNutxSLLgsgBWkn/WMGyKp +SnUOTwsJ6UdgDwtUz7+OXORwsPLlVrKxIz0l1d+BZVb+IXKka2qlX7s7MZXJv8N Kk/2B4puP5xAE1v+6H2hiOCm/uWSuyFQr06SeydivEU4l+DKloHkbkvNsW4d0ba8 tai+6rAPNhklKjfhx965nTnOqQPXSQBLJQftpqpaPws9H/182sd3wBc08sJFNcW6 FHhA8NU0GHLtelcvQFhUl6lW3udsI++00GRT+UzFoWeXc2J86hH5UUw5Wk55GoDp dTCiT8PCUOBX4cutddlQ8Xn//bNBPBYCXzPoTBSPo0Mg -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:13 2026 by rpki-client