This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/pJsxJtSo5imNU7v93La15fLkJAA.roa File: pJsxJtSo5imNU7v93La15fLkJAA.roa (raw, json) Hash identifier: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q= Subject key identifier: A4:9B:31:26:D4:A8:E6:29:8D:53:BB:FD:DC:B6:B5:E5:F2:E4:24:00 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D1D7B3F3630C464871FDAF9D9E39 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/pJsxJtSo5imNU7v93La15fLkJAA.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6854 IP address blocks: 77.245.96.0/20 maxlen: 20 93.185.64.0/20 maxlen: 20 95.141.128.0/20 maxlen: 20 217.196.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d1:d7:b3:f3:63:0c:46:48:71:fd:af:9d:9e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49b3126d4a8e6298d53bbfddcb6b5e5f2e42400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:e7:66:b8:ba:ae:47:0b:a6:be:8f:95:c2: 64:37:fc:2d:07:3d:ba:fd:8a:77:c4:88:fa:ae:7f: ff:21:d7:bc:b2:8b:90:c6:0e:d9:28:a6:7e:ac:b5: 2f:90:87:f9:53:c3:d3:c9:f8:10:6c:a5:10:05:83: 11:02:d6:97:e0:c2:2d:79:8f:6d:fa:f8:12:c8:ad: 98:2b:ca:75:e9:30:8c:8b:89:08:cf:c1:36:61:45: 6b:66:6e:83:76:0c:a1:77:6a:f0:e4:85:c2:c5:83: 29:f2:4e:8e:4d:3c:47:1c:aa:fc:a1:bd:7a:4e:79: b6:3a:7e:c7:68:82:eb:a6:21:91:b4:b5:da:d3:c8: b7:c2:54:35:75:be:f5:92:52:88:54:b6:0d:98:ef: 5e:aa:4b:ab:ea:0d:91:d9:0a:44:a4:9d:e1:15:32: 84:a2:18:d9:50:cb:1a:c7:c2:dc:1e:c2:9b:82:08: 29:b5:bc:2d:c6:60:04:05:39:88:38:5d:81:05:54: 39:91:82:a1:95:aa:41:0f:95:60:ad:0f:0f:dc:21: c6:53:c0:95:85:f7:df:d2:07:46:bb:61:7a:09:b0: a8:e7:8a:c6:b5:ab:0f:92:a1:f7:3d:d3:08:98:2a: d2:5a:e4:fe:92:c7:e8:27:69:c0:7e:27:5b:31:49: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9B:31:26:D4:A8:E6:29:8D:53:BB:FD:DC:B6:B5:E5:F2:E4:24:00 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/pJsxJtSo5imNU7v93La15fLkJAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.96.0/20 93.185.64.0/20 95.141.128.0/20 217.196.16.0/20 Signature Algorithm: sha256WithRSAEncryption 4f:54:ac:77:9f:c6:1a:08:71:7f:34:f3:20:3a:17:ba:b5:05: e6:9c:a0:d5:67:1e:96:51:46:1b:78:72:c1:37:3b:9b:33:56: d3:95:30:ff:d7:e0:ab:93:76:3a:11:47:5a:25:68:a3:30:f6: c3:a2:72:1a:da:51:2d:84:ae:7a:ae:60:05:80:74:bc:f6:aa: d2:01:0e:b0:56:ae:5f:9c:d0:bd:7c:17:c3:f4:3b:bc:1c:de: 8b:14:cf:5c:95:de:b7:41:2a:4b:5a:01:5c:1b:d0:b8:8b:ac: b5:45:9e:ec:a6:95:58:67:5b:63:1c:ce:21:3f:e0:52:d5:62: 5e:d2:da:da:22:b2:97:94:39:91:8a:09:23:3a:a2:e2:cb:b8: f5:1c:67:70:52:35:e8:df:a3:98:d1:5f:cb:25:b3:ca:ea:1c: 5c:25:d2:e8:04:8c:81:1d:fe:b8:06:7c:93:35:d9:7b:3c:0a: e4:70:54:e8:56:e9:d8:e2:e5:8c:a8:3d:29:21:21:fb:3a:6d: ed:ea:74:54:c2:d8:ca:fb:e8:14:19:17:dd:3b:5a:a7:96:03: 0a:67:f0:79:32:8f:f3:0c:c4:0f:5c:63:17:19:6d:ae:a1:fc: 48:d6:99:4c:99:a8:68:5b:50:54:13:eb:5d:d3:d4:14:3f:57: 3b:2f:b0:34 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WNHXs/NjDEZIcf2vnZ45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDliMzEyNmQ0YThlNjI5OGQ1M2JiZmRkY2I2YjVlNWYyZTQyNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu83nZri6rkcLpr6PlcJkN/wtBz26 /Yp3xIj6rn//Ide8souQxg7ZKKZ+rLUvkIf5U8PTyfgQbKUQBYMRAtaX4MIteY9t +vgSyK2YK8p16TCMi4kIz8E2YUVrZm6Ddgyhd2rw5IXCxYMp8k6OTTxHHKr8ob16 Tnm2On7HaILrpiGRtLXa08i3wlQ1db71klKIVLYNmO9eqkur6g2R2QpEpJ3hFTKE ohjZUMsax8LcHsKbgggptbwtxmAEBTmIOF2BBVQ5kYKhlapBD5VgrQ8P3CHGU8CV hfff0gdGu2F6CbCo54rGtasPkqH3PdMImCrSWuT+ksfoJ2nAfidbMUlsjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKSbMSbUqOYpjVO7/dy2teXy5CQAMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvcEpzeEp0U281aW1OVTd2OTNMYTE1ZkxrSkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETfVgAwQE XblAAwQEX42AAwQE2cQQMA0GCSqGSIb3DQEBCwUAA4IBAQBPVKx3n8YaCHF/NPMg Ohe6tQXmnKDVZx6WUUYbeHLBNzubM1bTlTD/1+Crk3Y6EUdaJWijMPbDonIa2lEt hK56rmAFgHS89qrSAQ6wVq5fnNC9fBfD9Du8HN6LFM9cld63QSpLWgFcG9C4i6y1 RZ7sppVYZ1tjHM4hP+BS1WJe0traIrKXlDmRigkjOqLiy7j1HGdwUjXo36OY0V/L JbPK6hxcJdLoBIyBHf64BnyTNdl7PArkcFToVunY4uWMqD0pISH7Om3t6nRUwtjK ++gUGRfdO1qnlgMKZ/B5Mo/zDMQPXGMXGW2uofxI1plMmahoW1BUE+td09QUP1c7 L7A0 -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:44 2026 by rpki-client