This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PjKTADsH6fFFBJbMdq7B0EIIBtk.roa File: PjKTADsH6fFFBJbMdq7B0EIIBtk.roa (raw, json) Hash identifier: vlpOTO28dJAq/PUGJWNRWgFQHqwW676JiqhBN9dZCZQ= Subject key identifier: 3E:32:93:00:3B:07:E9:F1:45:04:96:CC:76:AE:C1:D0:42:08:06:D9 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8526578AF9DCAA08C87DC43ACE1AE Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PjKTADsH6fFFBJbMdq7B0EIIBtk.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 14.102.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:52:65:78:af:9d:ca:a0:8c:87:dc:43:ac:e1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e3293003b07e9f1450496cc76aec1d0420806d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:61:07:86:21:db:77:85:51:1f:4a:9d:0d: ad:f7:41:6b:d7:f8:f9:0c:2b:52:28:33:cf:9f:62: 11:be:d5:e0:a5:be:68:c0:28:ba:d9:6a:d3:7a:f6: fe:69:aa:10:e6:61:51:85:4a:73:31:d1:fd:c6:05: bd:42:ff:6c:d2:ee:e7:53:14:2c:99:6c:8a:a8:ee: 20:0b:be:bf:b6:ca:36:30:9d:ca:b3:d4:69:41:cd: 41:e3:d5:fc:33:ec:6a:74:b8:4c:fd:24:26:9a:56: fe:ce:f6:05:d3:84:6c:ae:97:7d:c6:cc:95:4f:7e: dc:e4:61:d3:c2:29:af:5f:96:d0:05:4f:06:69:ef: d8:0d:28:9d:fb:b6:08:f1:50:9c:29:05:33:88:ec: 87:4a:a3:c5:6d:3f:87:5e:14:c3:c2:e5:9d:65:5a: 40:27:84:a5:5f:c3:bd:94:10:e3:55:7e:5f:a9:8d: d8:7c:66:e6:da:b4:32:ec:4b:27:b1:7d:81:4f:8f: de:f6:b6:0f:ff:87:c4:8d:80:ae:07:ff:b4:0a:ff: 12:46:23:02:01:af:7b:96:c6:dd:41:db:74:42:77: 77:64:44:a7:67:e6:c2:3a:68:12:33:72:84:65:86: 46:f2:36:bf:d1:3a:c0:e2:d5:e2:9a:b3:fd:81:2b: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:93:00:3B:07:E9:F1:45:04:96:CC:76:AE:C1:D0:42:08:06:D9 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PjKTADsH6fFFBJbMdq7B0EIIBtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.230.0/24 Signature Algorithm: sha256WithRSAEncryption bc:e4:e5:bc:54:19:5f:12:c7:88:58:c7:4c:ec:39:2c:f1:3f: 8e:0a:cf:97:e2:20:0d:ab:2b:48:a6:2e:a7:bb:12:12:26:0e: 27:68:33:5c:be:08:63:d9:3b:e7:02:22:8e:ac:2d:9b:5d:70: 09:05:8c:8d:27:57:a9:5e:ab:be:29:2e:de:ee:34:2b:74:41: 89:27:70:5d:57:8c:bd:5b:49:5f:ff:76:e8:c6:b7:99:0f:81: 4d:1c:1c:fa:72:3e:2d:67:58:e2:36:f3:9f:80:61:f0:bd:df: 64:2f:d8:96:d6:9d:9a:c5:8a:ba:5f:b5:e0:20:72:7b:49:af: 25:48:b7:a4:73:bd:4d:4e:c2:a4:8c:8a:0d:4e:04:1f:ab:5f: c8:dc:d9:1c:62:9b:26:d6:0e:d5:aa:1d:73:c1:ea:12:4f:9e: c3:ea:83:3c:14:55:65:0c:85:32:6b:76:44:ba:81:62:05:58: fb:81:b0:f3:2d:8f:c4:b4:b0:de:85:9d:73:e6:78:4d:31:15: 7f:4c:73:05:d1:da:81:32:97:e5:6d:ed:a6:85:a5:d7:c8:d6: 76:42:d5:b5:64:cc:d8:96:6a:2b:26:d7:d3:b5:be:97:a4:30: 73:7f:21:63:b8:b6:44:79:a9:a3:3a:bd:76:13:7e:9d:15:32: f7:00:72:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFJleK+dyqCMh9xDrOGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTMyOTMwMDNiMDdlOWYxNDUwNDk2Y2M3NmFlYzFkMDQyMDgwNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZlhB4Yh23eFUR9KnQ2t90Fr1/j5 DCtSKDPPn2IRvtXgpb5owCi62WrTevb+aaoQ5mFRhUpzMdH9xgW9Qv9s0u7nUxQs mWyKqO4gC76/tso2MJ3Ks9RpQc1B49X8M+xqdLhM/SQmmlb+zvYF04Rsrpd9xsyV T37c5GHTwimvX5bQBU8Gae/YDSid+7YI8VCcKQUziOyHSqPFbT+HXhTDwuWdZVpA J4SlX8O9lBDjVX5fqY3YfGbm2rQy7EsnsX2BT4/e9rYP/4fEjYCuB/+0Cv8SRiMC Aa97lsbdQdt0Qnd3ZESnZ+bCOmgSM3KEZYZG8ja/0TrA4tXimrP9gSvlFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4ykwA7B+nxRQSWzHauwdBCCAbZMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvUGpLVEFEc0g2ZkZGQkpiTWRxN0IwRUlJQnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbmMA0G CSqGSIb3DQEBCwUAA4IBAQC85OW8VBlfEseIWMdM7Dks8T+OCs+X4iANqytIpi6n uxISJg4naDNcvghj2TvnAiKOrC2bXXAJBYyNJ1epXqu+KS7e7jQrdEGJJ3BdV4y9 W0lf/3boxreZD4FNHBz6cj4tZ1jiNvOfgGHwvd9kL9iW1p2axYq6X7XgIHJ7Sa8l SLekc71NTsKkjIoNTgQfq1/I3NkcYpsm1g7Vqh1zweoST57D6oM8FFVlDIUya3ZE uoFiBVj7gbDzLY/EtLDehZ1z5nhNMRV/THMF0dqBMpflbe2mhaXXyNZ2QtW1ZMzY lmorJtfTtb6XpDBzfyFjuLZEeamjOr12E36dFTL3AHIf -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client