This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/PjyNMGY84TJ2cr5QJLc6HnzswgM.roa File: PjyNMGY84TJ2cr5QJLc6HnzswgM.roa (raw, json) Hash identifier: ZAnEXpXJffc4T6GUbV/LDI34CqWwT/3G+mLU5uuO0xA= Subject key identifier: 3E:3C:8D:30:66:3C:E1:32:76:72:BE:50:24:B7:3A:1E:7C:EC:C2:03 Certificate issuer: /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede Certificate serial: 019B797E39299C2DE90B87C1590556DDB001 Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/PjyNMGY84TJ2cr5QJLc6HnzswgM.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 91.208.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:39:29:9c:2d:e9:0b:87:c1:59:05:56:dd:b0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e3c8d30663ce1327672be5024b73a1e7cecc203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:2b:63:9c:18:a2:53:07:8e:d6:2c:c6:68: bf:dd:13:35:f8:9c:11:90:ed:c3:86:fc:d2:09:67: ea:81:a2:99:3d:65:1b:20:69:35:0b:60:9e:69:cd: 11:12:ba:37:c3:87:e4:fa:be:ee:c1:93:6e:d9:88: a0:19:c3:e0:37:4e:5f:d6:d4:09:89:88:02:cf:9f: fd:93:6e:ad:41:72:34:bd:d2:f5:97:85:85:b9:44: 00:a1:d6:e5:38:31:5c:88:65:ef:ab:ca:27:8b:18: 2a:24:89:f2:1a:09:19:4a:62:41:54:3f:85:b8:e1: 8f:c6:ab:c3:0e:40:d9:d5:ec:ce:d2:65:80:a5:18: 0c:23:5d:bf:37:8d:49:a2:2e:61:30:6e:51:d3:fc: 69:76:fd:89:2b:46:5b:73:f2:21:aa:43:8b:ee:81: ac:20:5b:41:77:cd:cc:19:df:8e:0c:60:fa:4e:7e: f8:bc:e1:24:14:51:f4:49:10:d9:89:99:02:54:2f: 35:8c:22:6e:0a:ef:1b:e3:96:a0:c5:b5:73:86:3d: e5:30:5a:a8:0e:db:98:3d:51:99:7b:c8:37:13:7e: a2:96:f1:a1:60:7d:7a:76:32:1f:07:a0:97:4a:74: a9:8a:cf:2a:6f:92:08:6c:52:a0:7a:ed:8c:32:fa: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:8D:30:66:3C:E1:32:76:72:BE:50:24:B7:3A:1E:7C:EC:C2:03 X509v3 Authority Key Identifier: keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/PjyNMGY84TJ2cr5QJLc6HnzswgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.124.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ab:45:e3:25:32:40:59:bc:12:ee:20:18:c3:c0:6a:74:29: 5e:f3:66:ae:ab:1c:42:02:59:d4:c9:76:c4:f4:46:9a:4d:ea: 93:17:7b:bd:c7:03:8e:16:9d:26:6a:0b:57:ab:b4:91:d4:5c: 90:bb:6f:ca:81:f4:25:6a:3c:5c:c1:a6:2a:67:92:48:d0:98: 6b:e6:f3:0f:03:fb:81:34:eb:64:fc:51:b1:8c:96:f4:a9:e9: 02:56:56:2a:dc:5e:e2:49:32:69:49:ca:36:5a:49:ba:c2:e7: ed:61:12:e7:d8:1c:bf:d6:6f:b0:23:c6:4c:f7:3f:1e:23:07: 3b:1a:3a:0b:06:ad:15:ac:f6:70:88:c9:d0:90:16:39:e3:01: 6c:39:c2:2f:ae:d0:e9:0b:29:2e:87:01:5c:b2:8b:d4:ea:41: 04:2e:9e:b3:3d:98:4f:de:11:21:cc:46:fe:6e:bc:b1:f4:d4: 13:e7:23:d2:d1:4f:b1:c9:af:eb:9d:41:53:e8:ff:c1:cd:4e: 92:b7:54:50:d7:9e:ac:09:12:0b:d0:0c:54:c2:c2:9a:71:f4: ac:07:66:e1:cf:94:42:94:ad:95:66:2f:e8:83:f5:42:c1:99: 3a:8d:10:84:a1:69:83:7f:4a:16:00:fe:9e:77:51:5b:f5:26: ff:86:13:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjkpnC3pC4fBWQVW3bABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOGFhYmVhOGVlMjliZjdjOTE1YmMzZWYwYmJhY2MyN2Qw ZWNlZGUwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTNjOGQzMDY2M2NlMTMyNzY3MmJlNTAyNGI3M2ExZTdjZWNjMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKIrY5wYolMHjtYsxmi/3RM1+JwR kO3DhvzSCWfqgaKZPWUbIGk1C2Ceac0REro3w4fk+r7uwZNu2YigGcPgN05f1tQJ iYgCz5/9k26tQXI0vdL1l4WFuUQAodblODFciGXvq8onixgqJInyGgkZSmJBVD+F uOGPxqvDDkDZ1ezO0mWApRgMI12/N41Joi5hMG5R0/xpdv2JK0Zbc/IhqkOL7oGs IFtBd83MGd+ODGD6Tn74vOEkFFH0SRDZiZkCVC81jCJuCu8b45agxbVzhj3lMFqo DtuYPVGZe8g3E36ilvGhYH16djIfB6CXSnSpis8qb5IIbFKgeu2MMvrFtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD48jTBmPOEydnK+UCS3Oh587MIDMB8GA1UdIwQY MBaAFOOKq+qO4pv3yRW8PvC7rMJ9Ds7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt NmFlYWU2M2VkOGZlLzEvUGp5Tk1HWTg0VEoyY3I1UUpMYzZIbnpzd2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl LzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9B8MA0G CSqGSIb3DQEBCwUAA4IBAQCJq0XjJTJAWbwS7iAYw8BqdCle82auqxxCAlnUyXbE 9EaaTeqTF3u9xwOOFp0magtXq7SR1FyQu2/KgfQlajxcwaYqZ5JI0Jhr5vMPA/uB NOtk/FGxjJb0qekCVlYq3F7iSTJpSco2Wkm6wuftYRLn2By/1m+wI8ZM9z8eIwc7 GjoLBq0VrPZwiMnQkBY54wFsOcIvrtDpCykuhwFcsovU6kEELp6zPZhP3hEhzEb+ bryx9NQT5yPS0U+xya/rnUFT6P/BzU6St1RQ156sCRIL0AxUwsKacfSsB2bhz5RC lK2VZi/og/VCwZk6jRCEoWmDf0oWAP6ed1Fb9Sb/hhPr -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:56 2026 by rpki-client