This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/PJ01KwZveYqSS_zaKxdrOHuL4vc.roa File: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (raw, json) Hash identifier: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo= Subject key identifier: 3C:9D:35:2B:06:6F:79:8A:92:4B:FC:DA:2B:17:6B:38:7B:8B:E2:F7 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6F82C202C9C9E708F7BA3E9FF6FF5 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/PJ01KwZveYqSS_zaKxdrOHuL4vc.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.220.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f8:2c:20:2c:9c:9e:70:8f:7b:a3:e9:ff:6f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c9d352b066f798a924bfcda2b176b387b8be2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:31:1c:d6:d8:4d:7f:36:93:4b:a7:25:73: c1:d5:be:97:bd:de:e7:2d:97:ab:45:0c:18:c1:32: 64:5f:38:0c:47:07:fd:a3:0d:e0:07:b7:16:73:e3: 55:59:80:69:37:ed:4e:b1:82:e8:5d:1a:dc:e8:b7: 84:c1:26:07:6b:81:b2:88:b1:a1:9c:d7:10:7e:bf: 3e:f4:6d:28:54:ca:b4:71:f2:f7:76:84:5c:ed:91: da:d7:05:a7:73:e3:bf:2d:cc:73:a5:a7:e2:b2:1f: 54:19:a4:40:9f:4f:54:5b:08:37:f8:11:6c:56:39: 5f:39:a6:fc:f0:2a:5d:81:16:22:2d:58:ce:d4:60: bb:a4:ea:89:81:b6:04:d3:7e:97:c0:7e:86:29:2c: 99:da:cf:a4:5e:cb:3f:92:67:fc:77:fb:ef:00:7f: c1:60:d3:9c:15:e2:e2:9a:24:6b:b8:e8:1c:bb:57: b4:39:19:7e:78:09:c5:8c:67:b6:21:64:e2:fe:fb: 30:0c:c7:16:d2:19:07:88:2b:44:91:83:2c:ca:dc: 6e:be:25:61:f7:e1:a4:39:3c:3a:da:82:94:1a:16: f9:24:1a:e1:c2:24:67:af:ab:3f:77:dc:40:eb:e2: e7:71:8f:78:4f:c8:0b:91:fd:06:50:0e:57:3b:d6: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:35:2B:06:6F:79:8A:92:4B:FC:DA:2B:17:6B:38:7B:8B:E2:F7 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/PJ01KwZveYqSS_zaKxdrOHuL4vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.249.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:31:af:6d:3d:89:bb:0f:a2:5a:47:6c:6d:78:6e:d6:e7:2f: 6d:ee:22:2d:33:b0:70:9c:3b:69:2d:60:ae:28:0e:ee:50:86: f1:0f:76:95:be:8e:70:67:b7:96:95:2e:41:d1:42:ab:a0:33: cf:2e:72:0f:ba:b6:6f:14:cc:9c:63:3a:d8:80:7b:8a:04:0a: 62:a8:5a:39:6f:b0:0b:eb:4b:5a:86:9d:5b:be:89:45:d4:8c: 10:47:2e:0f:33:9f:76:3e:a7:31:77:eb:1e:e7:eb:ed:20:b4: ce:38:2f:13:bb:af:78:98:84:0e:1e:23:9a:00:1a:63:9a:ab: ba:de:c4:25:08:67:c8:2c:88:46:8c:bd:92:b8:36:5d:79:20: 7b:22:b0:7f:92:d5:0f:27:3e:26:ef:a4:c0:16:87:6c:ca:aa: 7a:cf:43:a5:0c:93:61:eb:5e:3e:72:fc:82:e5:23:cd:3c:2b: de:c0:47:91:a7:9c:9f:5c:62:b2:47:88:ed:78:b7:3e:ae:80: ac:ce:e1:fa:8b:4b:d8:41:60:7c:cc:3f:36:b9:1a:c6:cb:ff: d2:11:a1:a5:df:ad:ab:2e:9a:48:61:c6:4e:03:95:76:fc:f7: f1:af:0b:53:a3:23:8e:bd:0b:2f:2d:60:3f:03:be:c5:29:b6: c6:be:6a:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvgsICycnnCPe6Pp/2/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzlkMzUyYjA2NmY3OThhOTI0YmZjZGEyYjE3NmIzODdiOGJlMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr30xHNbYTX82k0unJXPB1b6Xvd7n LZerRQwYwTJkXzgMRwf9ow3gB7cWc+NVWYBpN+1OsYLoXRrc6LeEwSYHa4GyiLGh nNcQfr8+9G0oVMq0cfL3doRc7ZHa1wWnc+O/Lcxzpafish9UGaRAn09UWwg3+BFs VjlfOab88CpdgRYiLVjO1GC7pOqJgbYE036XwH6GKSyZ2s+kXss/kmf8d/vvAH/B YNOcFeLimiRruOgcu1e0ORl+eAnFjGe2IWTi/vswDMcW0hkHiCtEkYMsytxuviVh 9+GkOTw62oKUGhb5JBrhwiRnr6s/d9xA6+LncY94T8gLkf0GUA5XO9bjdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDydNSsGb3mKkkv82isXazh7i+L3MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvUEowMUt3WnZlWXFTU196YUt4ZHJPSHVMNHZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9z5MA0G CSqGSIb3DQEBCwUAA4IBAQALMa9tPYm7D6JaR2xteG7W5y9t7iItM7BwnDtpLWCu KA7uUIbxD3aVvo5wZ7eWlS5B0UKroDPPLnIPurZvFMycYzrYgHuKBApiqFo5b7AL 60tahp1bvolF1IwQRy4PM592Pqcxd+se5+vtILTOOC8Tu694mIQOHiOaABpjmqu6 3sQlCGfILIhGjL2SuDZdeSB7IrB/ktUPJz4m76TAFodsyqp6z0OlDJNh614+cvyC 5SPNPCvewEeRp5yfXGKyR4jteLc+roCszuH6i0vYQWB8zD82uRrGy//SEaGl362r LppIYcZOA5V2/PfxrwtToyOOvQsvLWA/A77FKbbGvmqG -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client