This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/PMWWklW51anXq7aRQXkdao86Jek.roa
File: PMWWklW51anXq7aRQXkdao86Jek.roa (raw, json)
Hash identifier: +f085vkz6griqp0/YZpf7yExFFEfbfc0Y85L8JbYisc=
Subject key identifier: 3C:C5:96:92:55:B9:D5:A9:D7:AB:B6:91:41:79:1D:6A:8F:3A:25:E9
Certificate issuer: /CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Certificate serial: 019B7D5B1605D16A5CDBEEBA0318206762C7
Authority key identifier: 02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/PMWWklW51anXq7aRQXkdao86Jek.roa
Signing time: Fri 02 Jan 2026 06:17:59 +0000
ROA not before: Fri 02 Jan 2026 06:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202204
IP address blocks: 185.124.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:16:05:d1:6a:5c:db:ee:ba:03:18:20:67:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0253b919d75dc204d9ca38db7b28a174834b3b3d
Validity
Not Before: Jan 2 06:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cc5969255b9d5a9d7abb69141791d6a8f3a25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:37:95:7d:46:4f:45:f4:67:19:5d:f6:3b:
85:af:5a:14:cb:07:c3:b0:02:b6:ed:4f:31:37:ce:
21:13:f5:31:fb:15:54:3b:04:62:83:83:7a:73:ea:
83:2a:b7:2e:3c:a3:16:e9:a3:ac:2b:e6:f0:09:e7:
e3:02:6d:ee:31:a7:36:29:82:32:75:51:81:a4:57:
87:f8:12:07:2e:c6:8e:2b:3f:89:63:3d:30:59:e7:
1c:df:1c:74:8a:50:25:4d:e0:79:cf:42:d0:01:63:
31:85:ff:07:9e:82:0d:50:f9:bf:66:ef:39:fb:68:
d3:94:34:7f:fb:96:1c:cd:25:2a:02:ad:49:a5:b1:
55:8d:0d:3b:55:3e:51:be:6c:d9:d0:b1:72:50:43:
85:d6:9e:25:4e:fc:f5:c7:f1:97:8a:e3:3e:80:af:
fd:7f:0d:2f:11:e7:f1:71:f1:a2:c2:92:19:6a:3f:
cd:fc:a6:75:f5:77:60:e4:51:76:ba:ae:11:b9:fc:
a3:8d:73:b3:9f:35:c7:10:c9:e6:48:2b:5e:a2:04:
2d:59:e6:b7:2a:e6:6d:f9:a7:e9:09:6f:2d:71:b5:
7b:1a:0d:46:e0:d0:97:5f:d2:f5:31:cf:96:91:1a:
ee:57:71:b6:66:23:77:7a:90:1e:74:ef:75:2b:f5:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:96:92:55:B9:D5:A9:D7:AB:B6:91:41:79:1D:6A:8F:3A:25:E9
X509v3 Authority Key Identifier:
keyid:02:53:B9:19:D7:5D:C2:04:D9:CA:38:DB:7B:28:A1:74:83:4B:3B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlO5GdddwgTZyjjbeyihdINLOz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/PMWWklW51anXq7aRQXkdao86Jek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/3bafd8-c34e-4890-b4cf-73db0f2841c9/1/AlO5GdddwgTZyjjbeyihdINLOz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:df:02:cb:d7:cd:00:ae:ff:6b:eb:15:cf:18:a5:f3:13:91:
49:2f:c6:4d:84:5e:1b:44:ae:5e:06:e6:a9:f4:81:63:c5:c2:
20:ba:b4:2c:f8:fd:91:40:80:0a:e1:99:dc:ef:c8:58:36:3c:
3e:a5:88:ee:91:e6:f2:25:d8:cc:13:2f:94:3e:9a:16:73:7a:
79:fd:0d:d5:16:8c:d4:5d:04:21:39:88:0c:91:98:e5:a7:2b:
54:3c:f6:8d:aa:08:50:17:00:d6:0a:96:b5:53:ea:f9:7d:d5:
b9:bd:35:71:c4:a2:58:e7:d5:99:09:ea:0d:61:ca:01:46:8e:
fe:1d:7a:79:42:d3:8b:32:9a:83:a7:71:f6:2e:09:35:12:f1:
50:28:05:af:6f:0f:25:e9:d6:e7:ff:51:80:3d:be:61:f2:ae:
20:3d:e4:1b:9d:16:9a:8a:42:80:75:45:8c:b9:dc:fe:ed:2f:
58:ed:74:10:26:a3:47:d6:7d:fb:88:83:bf:f2:e2:f2:08:fc:
b6:8e:d5:66:8f:5f:34:05:bf:09:75:d1:08:46:df:1b:c1:8a:
77:20:aa:0a:c2:82:66:05:1e:4a:e2:49:59:93:73:75:e4:71:
cc:30:85:b9:48:2c:28:a9:46:2d:28:f1:fd:d7:a7:a0:c2:f8:
3b:ea:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:06:50 2026 by rpki-client