This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/pnSX4g2lmq0K8FTBTKkZmOyOugg.roa File: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (raw, json) Hash identifier: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo= Subject key identifier: A6:74:97:E2:0D:A5:9A:AD:0A:F0:54:C1:4C:A9:19:98:EC:8E:BA:08 Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Certificate serial: 019B7AC8D21E25E556BACD4470B6263123EE Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/pnSX4g2lmq0K8FTBTKkZmOyOugg.roa Signing time: Thu 01 Jan 2026 18:18:59 +0000 ROA not before: Thu 01 Jan 2026 18:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196906 IP address blocks: 193.105.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d2:1e:25:e5:56:ba:cd:44:70:b6:26:31:23:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a67497e20da59aad0af054c14ca91998ec8eba08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:1c:d5:61:ba:f9:e0:68:44:5c:c8:2d:d3: a4:df:6d:d8:6b:9c:77:bf:19:83:36:de:d7:64:23: e6:54:ed:5b:a2:b1:60:73:e4:17:6c:79:41:33:8e: 67:ab:b7:33:7d:58:74:75:b2:c1:34:fb:d4:ec:8b: a7:aa:46:a5:8c:7a:ee:b7:3e:e2:f9:e6:c4:93:5d: 17:bd:00:cc:b7:40:8c:c2:98:55:bc:df:bb:7f:b3: ba:8a:bc:25:88:ae:31:8e:83:c3:c4:1f:68:1a:99: c3:1b:26:ef:b1:95:7b:6e:1e:f4:4a:7d:65:46:e3: 4f:b1:7f:34:ca:c5:46:8a:d5:24:6f:f4:b5:98:84: d7:98:1b:de:58:ea:21:b9:27:4f:02:2a:e3:fe:53: 30:8d:90:09:68:75:54:ec:18:ef:4c:43:af:1e:d0: 67:30:ac:0b:8f:e0:a3:32:19:66:6d:84:e1:e6:77: 60:89:63:ed:3e:4f:a4:cc:d5:c6:23:cf:67:63:11: a9:28:af:a0:48:dc:ab:29:93:34:19:c0:4d:27:0d: f6:5d:d6:d5:74:74:1b:78:58:4d:01:39:e7:26:f1: d5:9d:59:ff:08:1e:a3:9d:22:61:6f:bd:f7:6e:7d: e0:e0:f9:4b:ab:d0:46:43:dd:8e:67:f0:d9:94:37: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:97:E2:0D:A5:9A:AD:0A:F0:54:C1:4C:A9:19:98:EC:8E:BA:08 X509v3 Authority Key Identifier: keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/pnSX4g2lmq0K8FTBTKkZmOyOugg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.62.0/24 Signature Algorithm: sha256WithRSAEncryption 36:42:2d:64:71:6f:5f:9b:6e:3c:67:78:03:5e:83:23:b7:40: e9:73:96:44:28:ba:bc:70:2c:0a:0c:5a:00:f3:50:11:db:41: a2:85:90:df:10:ee:0a:9c:a0:ae:ea:65:44:60:2c:ec:d7:78: 06:59:8e:61:e2:c0:95:33:f7:08:9a:c8:bf:8b:2e:7d:c7:fc: 79:7d:05:ce:fa:f9:4c:bb:c5:71:7c:f0:5a:a1:16:3a:e4:5b: ec:54:b8:ca:31:95:7e:52:d2:5b:59:c1:f7:b2:80:a8:c1:37: fe:f1:71:b3:55:9f:ba:60:31:dd:0a:17:2f:2d:9b:45:e9:a8: 8e:97:37:59:d2:82:55:c6:0f:f7:c0:fa:ab:e6:59:d5:82:67: 23:b9:a7:50:99:e8:8a:41:49:e5:71:3e:f7:7c:f2:91:5d:64: 92:a4:39:c6:20:cd:c5:8c:3f:3b:ea:32:be:c3:e3:52:58:a1: 32:65:5c:d2:99:b9:55:1a:c2:0a:0f:e2:a0:a7:7e:1c:50:57: 8f:bd:1e:5c:44:7f:7d:52:1b:b5:0c:1a:2e:2e:82:75:13:d0: 31:9d:b5:79:65:77:ee:22:83:52:ab:d5:07:a1:5e:d1:ca:16: 8b:b5:8a:5b:86:45:00:02:80:79:8f:7c:61:ec:96:f2:d7:f4: 02:00:67:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yNIeJeVWus1EcLYmMSPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi ZWQ2NTAwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc0OTdlMjBkYTU5YWFkMGFmMDU0YzE0Y2E5MTk5OGVjOGViYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NEc1WG6+eBoRFzILdOk323Ya5x3 vxmDNt7XZCPmVO1borFgc+QXbHlBM45nq7czfVh0dbLBNPvU7IunqkaljHrutz7i +ebEk10XvQDMt0CMwphVvN+7f7O6irwliK4xjoPDxB9oGpnDGybvsZV7bh70Sn1l RuNPsX80ysVGitUkb/S1mITXmBveWOohuSdPAirj/lMwjZAJaHVU7BjvTEOvHtBn MKwLj+CjMhlmbYTh5ndgiWPtPk+kzNXGI89nYxGpKK+gSNyrKZM0GcBNJw32XdbV dHQbeFhNATnnJvHVnVn/CB6jnSJhb733bn3g4PlLq9BGQ92OZ/DZlDdfyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKZ0l+INpZqtCvBUwUypGZjsjroIMB8GA1UdIwQY MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt ZmY0YTk5NzgzYWI0LzEvcG5TWDRnMmxtcTBLOEZUQlRLa1ptT3lPdWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0 LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWk+MA0G CSqGSIb3DQEBCwUAA4IBAQA2Qi1kcW9fm248Z3gDXoMjt0Dpc5ZEKLq8cCwKDFoA 81AR20GihZDfEO4KnKCu6mVEYCzs13gGWY5h4sCVM/cImsi/iy59x/x5fQXO+vlM u8VxfPBaoRY65FvsVLjKMZV+UtJbWcH3soCowTf+8XGzVZ+6YDHdChcvLZtF6aiO lzdZ0oJVxg/3wPqr5lnVgmcjuadQmeiKQUnlcT73fPKRXWSSpDnGIM3FjD876jK+ w+NSWKEyZVzSmblVGsIKD+Kgp34cUFePvR5cRH99Uhu1DBouLoJ1E9AxnbV5ZXfu IoNSq9UHoV7RyhaLtYpbhkUAAoB5j3xh7Jby1/QCAGcN -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:39 2026 by rpki-client