This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/Pelb9sx4UaCo06lIQtdADw9o9Vw.roa File: Pelb9sx4UaCo06lIQtdADw9o9Vw.roa (raw, json) Hash identifier: O2VqkK6qa58vFJcGmVZ5qivbdGixDgXC4n2ji/pNHjk= Subject key identifier: 3D:E9:5B:F6:CC:78:51:A0:A8:D3:A9:48:42:D7:40:0F:0F:68:F5:5C Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c Certificate serial: 019B7D5C150100E486E247999224857E4D9C Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/Pelb9sx4UaCo06lIQtdADw9o9Vw.roa Signing time: Fri 02 Jan 2026 06:19:05 +0000 ROA not before: Fri 02 Jan 2026 06:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42598 IP address blocks: 194.55.4.0/24 maxlen: 24 194.55.5.0/24 maxlen: 24 194.55.6.0/24 maxlen: 24 2a0c:ca40::/29 maxlen: 29 2a0c:ca40:5::/48 maxlen: 48 2a0c:ca40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:15:01:00:e4:86:e2:47:99:92:24:85:7e:4d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de95bf6cc7851a0a8d3a94842d7400f0f68f55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:bf:58:d4:22:3f:f2:cc:f9:32:9d:0b:8b: 72:fd:ff:2c:1e:7f:e0:a1:b2:26:67:4a:2a:ee:7b: de:00:5d:e6:c0:ee:79:b7:52:8e:d9:48:2b:03:25: 77:ba:d6:cd:a9:e5:53:c8:67:2c:fe:c1:f9:a5:36: c7:eb:61:8e:41:d8:c8:cd:52:62:1d:4b:3e:a0:e8: d5:63:b6:7f:e0:4e:71:c4:f0:10:34:93:aa:e7:c4: 51:7d:26:49:85:ad:83:46:36:55:b2:0c:d5:ab:48: f4:60:38:d3:05:04:e2:bf:ff:66:f7:f3:69:53:7f: 3a:6e:cf:df:bd:e5:04:9c:1e:f4:40:7c:ec:b9:b8: 83:2f:0a:68:53:0b:62:bc:fa:e1:78:97:45:5f:d1: 0e:6b:f9:96:b0:52:9c:e9:a5:90:55:dc:1c:96:84: d0:66:92:80:af:40:0e:e8:4a:e0:d7:0f:33:7d:05: 3b:da:6c:56:ef:8a:4e:e6:fc:02:09:7a:e2:5e:ed: 27:3c:de:5d:96:8d:9b:b1:01:54:2c:2f:d2:16:a4: b1:e9:9d:1b:d7:8e:6b:b4:a3:e1:7b:0a:5d:31:e5: b5:ae:ea:69:6f:c9:2b:64:5e:8b:0b:5f:32:8a:91: 06:f8:d7:53:8c:b9:ce:10:7e:73:e1:d1:c0:fa:30: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E9:5B:F6:CC:78:51:A0:A8:D3:A9:48:42:D7:40:0F:0F:68:F5:5C X509v3 Authority Key Identifier: keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/Pelb9sx4UaCo06lIQtdADw9o9Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.4.0-194.55.6.255 IPv6: 2a0c:ca40::/29 Signature Algorithm: sha256WithRSAEncryption 75:67:8f:c1:04:30:2a:16:4b:b7:3f:20:2f:cf:d4:d6:43:af: b0:d7:1b:54:a5:90:6f:93:30:42:57:c0:39:d9:52:d1:58:cf: 8a:5a:14:f9:d0:37:e9:f2:53:51:66:27:99:3f:ff:5f:70:f3: 6a:69:5e:eb:b9:9a:78:24:81:74:c9:9d:4f:5a:6a:2a:f5:af: 8e:01:c1:96:dc:2e:6d:15:70:75:cb:3c:d9:db:31:7c:9b:7d: e1:9f:6a:bb:d1:b7:f6:c7:ca:4a:0b:9b:e3:ed:0c:08:65:ec: d3:a7:9d:be:17:e6:17:3f:61:84:7c:5d:d4:48:91:5c:b9:1b: a8:ee:89:39:e1:a2:67:75:01:df:f6:8d:ea:55:fd:1f:ba:2a: 5e:49:85:ec:98:dd:da:ea:57:63:52:23:79:27:37:df:8f:50: d9:ef:30:82:c2:5f:0a:e3:c7:c2:ac:bb:5c:c1:34:46:ec:b1: ef:a4:55:5f:e7:b1:67:d7:a5:75:6a:89:62:c9:e3:d2:6d:3d: 70:7f:49:9f:ab:e8:f4:13:5e:f6:bf:f8:61:9a:8f:33:de:55: d3:d2:49:e2:f8:73:e2:82:bb:df:94:2b:87:58:46:99:3c:45: 6a:2c:af:13:0e:ff:ac:0e:09:2e:b5:d5:7a:f5:40:f3:7a:f8: e5:a9:b8:41 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XBUBAOSG4keZkiSFfk2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4MjJkMWU5NDUxN2M4ODUxNWNjOWIzZmMyYmRlMTI5 YjQ1NGMwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGU5NWJmNmNjNzg1MWEwYThkM2E5NDg0MmQ3NDAwZjBmNjhmNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5a/WNQiP/LM+TKdC4ty/f8sHn/g obImZ0oq7nveAF3mwO55t1KO2UgrAyV3utbNqeVTyGcs/sH5pTbH62GOQdjIzVJi HUs+oOjVY7Z/4E5xxPAQNJOq58RRfSZJha2DRjZVsgzVq0j0YDjTBQTiv/9m9/Np U386bs/fveUEnB70QHzsubiDLwpoUwtivPrheJdFX9EOa/mWsFKc6aWQVdwcloTQ ZpKAr0AO6Erg1w8zfQU72mxW74pO5vwCCXriXu0nPN5dlo2bsQFULC/SFqSx6Z0b 145rtKPhewpdMeW1ruppb8krZF6LC18yipEG+NdTjLnOEH5z4dHA+jD5ywIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFD3pW/bMeFGgqNOpSELXQA8PaPVcMB8GA1UdIwQY MBaAFOt8gi0elFF8iFFcybP8K94Sm0VMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQt MTA2NDUwNGUyYjk3LzEvUGVsYjlzeDRVYUNvMDZsSVF0ZEFEdzlvOVZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xMTkzM2ItZmMwYi00MTBmLTljMzQtMTA2NDUwNGUyYjk3 LzEvNjN5Q0xSNlVVWHlJVVZ6SnNfd3IzaEtiUlV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBALCNwQD BADCNwYwDQQCAAIwBwMFAyoMykAwDQYJKoZIhvcNAQELBQADggEBAHVnj8EEMCoW S7c/IC/P1NZDr7DXG1SlkG+TMEJXwDnZUtFYz4paFPnQN+nyU1FmJ5k//19w82pp Xuu5mngkgXTJnU9aair1r44BwZbcLm0VcHXLPNnbMXybfeGfarvRt/bHykoLm+Pt DAhl7NOnnb4X5hc/YYR8XdRIkVy5G6juiTnhomd1Ad/2jepV/R+6Kl5JheyY3drq V2NSI3knN9+PUNnvMILCXwrjx8Ksu1zBNEbsse+kVV/nsWfXpXVqiWLJ49JtPXB/ SZ+r6PQTXva/+GGajzPeVdPSSeL4c+KCu9+UK4dYRpk8RWosrxMO/6wOCS611Xr1 QPN6+OWpuEE= -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:16 2026 by rpki-client