This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/pJjdeZuekZ9QTR10eFG7UylmsAs.roa File: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (raw, json) Hash identifier: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg= Subject key identifier: A4:98:DD:79:9B:9E:91:9F:50:4D:1D:74:78:51:BB:53:29:66:B0:0B Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Certificate serial: 019B77C662DCE788868989AC878800E34AF8 Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/pJjdeZuekZ9QTR10eFG7UylmsAs.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.96.0.0/16 maxlen: 16 192.76.145.0/24 maxlen: 24 192.109.115.0/24 maxlen: 24 192.109.116.0/24 maxlen: 24 193.17.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:62:dc:e7:88:86:89:89:ac:87:88:00:e3:4a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a498dd799b9e919f504d1d747851bb532966b00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:53:19:35:86:53:b5:ed:de:91:6b:b4:9c: eb:f6:76:48:7d:ef:83:e3:a1:5b:86:47:c8:1f:e6: 93:2e:10:ab:a3:5d:d8:cc:f2:b8:72:fc:22:89:fc: f0:b2:e9:f3:06:38:60:02:d9:5d:a0:77:84:ce:17: 36:e5:73:cc:8f:92:b6:b7:bd:53:b7:b6:cf:71:b3: 44:16:2e:96:77:b3:91:cc:66:04:65:2d:e0:aa:dd: c8:7f:87:2e:9f:6c:42:b6:60:e0:33:32:f7:a2:34: 3d:11:31:23:ac:cc:cd:b2:68:d0:4e:c8:7f:da:fc: 06:c2:ef:6a:84:ba:52:be:d4:5a:6e:bf:cb:2a:83: 66:c3:a4:fa:6f:33:0f:81:fc:e9:f8:32:31:2a:62: 09:c0:82:14:d3:1d:52:b4:05:66:3e:4b:6d:38:1e: 57:a2:a3:66:de:10:4a:7d:88:55:2e:e9:16:b1:00: 62:78:fd:e1:b0:f6:8f:3f:b5:58:fe:9e:38:40:c9: 49:e8:83:49:d5:aa:ef:31:9b:da:49:cf:de:f1:b6: 6a:a5:20:52:19:94:ab:a3:74:c0:24:8a:b4:03:98: d9:40:46:36:a0:f1:30:6d:ad:30:13:1e:58:8b:fa: 42:7b:ec:87:07:45:ac:90:20:f7:9e:6d:44:c2:4a: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:98:DD:79:9B:9E:91:9F:50:4D:1D:74:78:51:BB:53:29:66:B0:0B X509v3 Authority Key Identifier: keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/pJjdeZuekZ9QTR10eFG7UylmsAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.96.0.0/16 192.76.145.0/24 192.109.115.0-192.109.116.255 193.17.22.0/24 Signature Algorithm: sha256WithRSAEncryption 66:fa:38:f2:d8:9a:ac:dc:58:39:2e:c7:b7:20:d4:7e:23:cd: 32:99:ae:ce:aa:12:9b:b0:6c:c0:34:04:a5:eb:89:11:74:65: f5:b8:9e:71:e5:c4:b0:f5:9f:8c:fb:2c:85:d2:a0:ea:cd:5d: a5:8d:e7:b3:3e:6f:52:14:ad:3c:39:0a:86:01:2b:4c:d7:b7: f8:bd:f9:ef:22:bc:6c:7b:eb:d4:13:32:9b:c0:2b:1e:01:6a: 9e:ed:cc:a1:b7:4a:c2:f8:ce:a7:97:1d:6a:89:36:b1:c3:02: d2:d0:5d:bf:df:be:6d:cc:e8:22:fe:6f:0d:4e:6d:66:de:60: 8c:83:d7:65:e2:11:0b:15:ba:c1:5d:53:51:88:01:b0:dc:d7: a1:08:b6:e3:5e:6b:e6:9e:67:fb:21:b1:21:20:05:56:c8:f2: 7d:c3:8e:71:32:77:93:65:75:8d:00:33:f7:a6:cf:b6:58:bd: 7d:51:d1:f0:a7:04:66:ef:68:bc:34:14:ae:bf:9d:94:50:63: d9:d9:0e:c3:22:ec:35:97:42:33:f7:2a:b2:53:ea:a5:78:ef: e1:da:98:83:7b:83:9a:d5:6e:ac:b3:7a:df:02:39:4b:ca:53: 55:dc:7a:12:6e:11:c9:7d:31:20:60:bb:ae:38:0c:74:c6:51: 99:06:10:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3xmLc54iGiYmsh4gA40r4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0 NTE1ZTkwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDk4ZGQ3OTliOWU5MTlmNTA0ZDFkNzQ3ODUxYmI1MzI5NjZiMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0lTGTWGU7Xt3pFrtJzr9nZIfe+D 46FbhkfIH+aTLhCro13YzPK4cvwiifzwsunzBjhgAtldoHeEzhc25XPMj5K2t71T t7bPcbNEFi6Wd7ORzGYEZS3gqt3If4cun2xCtmDgMzL3ojQ9ETEjrMzNsmjQTsh/ 2vwGwu9qhLpSvtRabr/LKoNmw6T6bzMPgfzp+DIxKmIJwIIU0x1StAVmPkttOB5X oqNm3hBKfYhVLukWsQBieP3hsPaPP7VY/p44QMlJ6INJ1arvMZvaSc/e8bZqpSBS GZSro3TAJIq0A5jZQEY2oPEwba0wEx5Yi/pCe+yHB0WskCD3nm1EwkqqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSY3XmbnpGfUE0ddHhRu1MpZrALMB8GA1UdIwQY MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt YjM3NTRhZmU5NTI5LzEvcEpqZGVadWVrWjlRVFIxMGVGRzdVeWxtc0FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5 LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwMAhmADBADA TJEwDAMEAMBtcwMEAMBtdAMEAMERFjANBgkqhkiG9w0BAQsFAAOCAQEAZvo48tia rNxYOS7HtyDUfiPNMpmuzqoSm7BswDQEpeuJEXRl9bieceXEsPWfjPsshdKg6s1d pY3nsz5vUhStPDkKhgErTNe3+L357yK8bHvr1BMym8ArHgFqnu3MobdKwvjOp5cd aok2scMC0tBdv9++bczoIv5vDU5tZt5gjIPXZeIRCxW6wV1TUYgBsNzXoQi2415r 5p5n+yGxISAFVsjyfcOOcTJ3k2V1jQAz96bPtli9fVHR8KcEZu9ovDQUrr+dlFBj 2dkOwyLsNZdCM/cqslPqpXjv4dqYg3uDmtVurLN63wI5S8pTVdx6Em4RyX0xIGC7 rjgMdMZRmQYQcw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:14 2026 by rpki-client