This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/PeJEMtupept21vf-rfjqUX1mldY.roa File: PeJEMtupept21vf-rfjqUX1mldY.roa (raw, json) Hash identifier: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU= Subject key identifier: 3D:E2:44:32:DB:A9:7A:9B:76:D6:F7:FE:AD:F8:EA:51:7D:66:95:D6 Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Certificate serial: 019B7B368B83F74AD30FA9AA3D2A19791486 Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/PeJEMtupept21vf-rfjqUX1mldY.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.6.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8b:83:f7:4a:d3:0f:a9:aa:3d:2a:19:79:14:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de24432dba97a9b76d6f7feadf8ea517d6695d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:40:4d:b1:c8:d1:7a:b2:a8:2c:59:16:2c: 29:a9:f4:21:fe:14:94:31:fe:87:73:18:81:a7:8b: 2c:f3:88:a5:66:fc:85:e5:9b:bc:c7:be:76:bf:61: 62:21:a6:bb:22:65:0e:12:1e:37:9c:d7:42:bc:dc: f1:96:e8:a8:33:c7:25:19:e8:30:b8:04:33:84:16: 28:4d:60:a3:6c:c8:e0:f0:11:a4:b6:59:41:34:60: cb:c7:c0:1b:55:f6:b4:ad:1c:dd:7a:fa:4d:5a:bd: d1:a1:1e:d2:85:fc:bc:c2:4b:ad:1b:3a:56:a6:06: c6:ff:0c:c5:58:ba:86:54:6c:aa:a5:e6:49:b0:03: b8:11:2f:29:50:65:f6:96:25:e8:aa:22:f7:a6:15: 45:d7:08:53:04:f9:54:af:4f:da:a3:4c:cb:66:c9: db:c2:6b:a6:54:92:6b:31:54:56:67:11:14:78:b9: c7:44:92:81:6b:fa:21:cf:e9:34:a5:d5:41:c0:cd: e3:01:16:a7:84:c6:9e:8e:10:a0:04:03:a9:49:f8: 17:45:a6:30:08:a8:2c:f6:de:43:93:10:a3:52:8f: 7e:52:60:a1:6a:6c:ef:63:d4:09:78:45:30:60:7d: 5a:1b:09:d2:6d:82:9d:80:5e:5b:39:d2:b6:6e:b4: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:44:32:DB:A9:7A:9B:76:D6:F7:FE:AD:F8:EA:51:7D:66:95:D6 X509v3 Authority Key Identifier: keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/PeJEMtupept21vf-rfjqUX1mldY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.255.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:87:40:04:0c:98:80:c4:11:71:05:bf:2f:b0:f6:fe:5f:3c: 52:ac:74:cd:5a:8e:81:09:30:0a:9a:56:4c:c1:d3:5b:c8:fd: 57:3d:41:8b:69:d9:cc:5a:68:1f:4c:b0:67:a7:eb:01:b8:3d: d7:08:5f:7b:82:d2:34:56:19:96:66:14:da:8a:c2:5c:b1:88: ca:dc:fd:db:ea:5e:e7:4c:28:f0:73:42:9d:3b:4b:b4:ce:67: e6:b5:3c:64:d0:03:4b:43:2c:22:52:6c:96:20:06:bd:99:e1: a5:2f:7d:71:b9:3b:da:cc:8a:c1:4b:1d:e6:40:05:40:05:17: 49:67:5c:b4:dc:71:2f:31:83:11:18:f8:3d:80:5b:70:54:70: 74:20:09:75:88:f6:85:0b:97:5b:3d:b8:ff:5e:35:6f:bf:fb: dc:21:ce:c5:13:3f:07:de:ec:1f:b9:93:af:85:2a:1e:71:c1: f4:14:dd:93:a0:a4:b1:b9:1b:26:2b:a4:2c:01:db:b4:1f:d1: 15:b6:fe:de:85:b0:e4:8a:f8:06:a1:67:5a:f9:6b:cf:76:6c: c9:a2:4c:12:b7:86:6c:16:77:d5:5b:c6:3d:ce:94:7e:5c:b5: 7c:3e:c6:82:8c:7c:50:cf:58:e3:49:e7:63:0f:16:4e:80:e1: 00:88:ac:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NouD90rTD6mqPSoZeRSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi NzA1ZjcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGUyNDQzMmRiYTk3YTliNzZkNmY3ZmVhZGY4ZWE1MTdkNjY5NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FNATbHI0XqyqCxZFiwpqfQh/hSU Mf6HcxiBp4ss84ilZvyF5Zu8x752v2FiIaa7ImUOEh43nNdCvNzxluioM8clGegw uAQzhBYoTWCjbMjg8BGktllBNGDLx8AbVfa0rRzdevpNWr3RoR7Shfy8wkutGzpW pgbG/wzFWLqGVGyqpeZJsAO4ES8pUGX2liXoqiL3phVF1whTBPlUr0/ao0zLZsnb wmumVJJrMVRWZxEUeLnHRJKBa/ohz+k0pdVBwM3jARanhMaejhCgBAOpSfgXRaYw CKgs9t5DkxCjUo9+UmChamzvY9QJeEUwYH1aGwnSbYKdgF5bOdK2brRnCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3iRDLbqXqbdtb3/q346lF9ZpXWMB8GA1UdIwQY MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt MWRhZjgwYzUxOWQwLzEvUGVKRU10dXBlcHQyMXZmLXJmanFVWDFtbGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgb/MA0G CSqGSIb3DQEBCwUAA4IBAQB6h0AEDJiAxBFxBb8vsPb+XzxSrHTNWo6BCTAKmlZM wdNbyP1XPUGLadnMWmgfTLBnp+sBuD3XCF97gtI0VhmWZhTaisJcsYjK3P3b6l7n TCjwc0KdO0u0zmfmtTxk0ANLQywiUmyWIAa9meGlL31xuTvazIrBSx3mQAVABRdJ Z1y03HEvMYMRGPg9gFtwVHB0IAl1iPaFC5dbPbj/XjVvv/vcIc7FEz8H3uwfuZOv hSoeccH0FN2ToKSxuRsmK6QsAdu0H9EVtv7ehbDkivgGoWda+WvPdmzJokwSt4Zs FnfVW8Y9zpR+XLV8PsaCjHxQz1jjSedjDxZOgOEAiKzO -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:55 2026 by rpki-client