This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/PNj9cF3Hsh3vfuNuwDWinad61dQ.roa File: PNj9cF3Hsh3vfuNuwDWinad61dQ.roa (raw, json) Hash identifier: V97LaZrx2hP3Un7Jqbk9Fjlhl5xWfP0hR0ApEyVRBVc= Subject key identifier: 3C:D8:FD:70:5D:C7:B2:1D:EF:7E:E3:6E:C0:35:A2:9D:A7:7A:D5:D4 Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Certificate serial: 019B78A2D61A03024121B760F2980AD19CE5 Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/PNj9cF3Hsh3vfuNuwDWinad61dQ.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 212.84.192.0/20 maxlen: 32 212.99.128.0/18 maxlen: 32 2a02:e240::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d6:1a:03:02:41:21:b7:60:f2:98:0a:d1:9c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cd8fd705dc7b21def7ee36ec035a29da77ad5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:5a:a4:ab:5e:8a:34:f0:ed:92:65:c0:61: af:18:1b:2d:04:ed:c6:1e:05:a3:1f:8b:95:4f:19: b0:f9:d1:df:26:78:e9:dd:43:c9:22:af:ab:5e:cd: f7:89:70:c1:c3:d9:96:69:3c:db:b7:3a:99:45:56: af:bf:54:12:79:5a:98:81:f9:db:d4:c2:82:82:fe: 25:25:98:78:9f:08:cc:e3:6e:e8:31:e2:8d:f6:62: 01:f5:13:46:5e:10:9f:7b:49:09:47:f6:72:19:6f: 36:5d:de:ab:5e:f4:4b:06:99:00:27:b2:6f:1a:94: f3:fc:a4:f3:ea:13:c0:6b:28:83:7e:de:3e:d5:1b: 6e:50:0a:d4:ec:94:fc:1c:e2:24:c6:a2:c8:d6:24: 51:59:99:41:16:ca:30:85:7e:2d:ad:36:e5:37:d2: a4:97:9f:bf:9a:19:8b:65:7f:0b:40:e7:a8:0b:56: da:5c:31:37:f4:0f:53:5b:83:7d:48:bb:d0:9d:03: 00:73:4d:05:a6:d9:fa:32:80:c6:ba:5b:45:6a:71: f6:da:25:8e:f7:63:41:c6:49:15:c6:da:64:39:be: 3e:92:2c:00:a4:d7:44:32:a1:60:fc:90:6d:52:68: 6b:00:87:38:31:65:9f:84:b5:10:dd:ac:72:9f:9a: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:FD:70:5D:C7:B2:1D:EF:7E:E3:6E:C0:35:A2:9D:A7:7A:D5:D4 X509v3 Authority Key Identifier: keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/PNj9cF3Hsh3vfuNuwDWinad61dQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.84.192.0/20 212.99.128.0/18 IPv6: 2a02:e240::/29 Signature Algorithm: sha256WithRSAEncryption 53:ad:da:aa:0a:93:5c:ea:df:9a:39:79:52:d5:71:c7:86:0a: c8:ce:c7:1c:b1:6c:c1:3e:80:ba:8d:19:d8:ef:29:ef:68:55: 8c:b3:1f:eb:5a:97:14:e7:95:33:60:02:79:f8:47:16:0f:d1: 42:91:66:6b:1c:cc:48:ef:32:d6:73:69:75:96:5a:e5:8b:39: 45:8a:29:50:86:29:65:19:99:2f:92:20:14:7d:31:7c:6b:01: bc:e8:02:86:13:31:a9:ec:04:b2:4b:e3:34:ec:ad:c7:db:2a: 6d:02:f4:21:18:b4:3d:16:97:09:1a:f7:c8:d9:3b:d5:c8:67: d2:c5:f8:9d:3d:ce:6d:c0:6c:f9:0f:6c:8d:0f:e3:23:34:45: 52:02:fb:f1:1f:61:ec:63:45:d3:59:54:52:4d:bb:d8:63:27: 09:96:39:b6:7d:3f:dd:ef:c0:72:d4:ad:ab:a3:20:6e:7c:4c: 97:00:06:60:1e:e8:e9:e9:87:fa:bd:06:7d:a6:54:a5:a0:40: ff:7c:80:58:d0:16:50:83:ec:38:6f:b2:41:90:43:d8:3a:d8: 48:df:76:f0:b4:6a:c6:26:16:1b:cb:a0:d6:94:1f:20:dc:1b: a4:59:fc:be:a9:ec:c8:09:ff:30:ee:da:c4:64:91:7b:56:c2: 17:27:78:45 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4otYaAwJBIbdg8pgK0ZzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz ODM4YzEwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Q4ZmQ3MDVkYzdiMjFkZWY3ZWUzNmVjMDM1YTI5ZGE3N2FkNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux5apKteijTw7ZJlwGGvGBstBO3G HgWjH4uVTxmw+dHfJnjp3UPJIq+rXs33iXDBw9mWaTzbtzqZRVavv1QSeVqYgfnb 1MKCgv4lJZh4nwjM427oMeKN9mIB9RNGXhCfe0kJR/ZyGW82Xd6rXvRLBpkAJ7Jv GpTz/KTz6hPAayiDft4+1RtuUArU7JT8HOIkxqLI1iRRWZlBFsowhX4trTblN9Kk l5+/mhmLZX8LQOeoC1baXDE39A9TW4N9SLvQnQMAc00Fptn6MoDGultFanH22iWO 92NBxkkVxtpkOb4+kiwApNdEMqFg/JBtUmhrAIc4MWWfhLUQ3axyn5oxNwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDzY/XBdx7Id737jbsA1op2netXUMB8GA1UdIwQY MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt ZmM5MTQzM2QzNjdkLzEvUE5qOWNGM0hzaDN2ZnVOdXdEV2luYWQ2MWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE1FTAAwQG 1GOAMA0EAgACMAcDBQMqAuJAMA0GCSqGSIb3DQEBCwUAA4IBAQBTrdqqCpNc6t+a OXlS1XHHhgrIzsccsWzBPoC6jRnY7ynvaFWMsx/rWpcU55UzYAJ5+EcWD9FCkWZr HMxI7zLWc2l1llrlizlFiilQhillGZkvkiAUfTF8awG86AKGEzGp7ASyS+M07K3H 2yptAvQhGLQ9FpcJGvfI2TvVyGfSxfidPc5twGz5D2yND+MjNEVSAvvxH2HsY0XT WVRSTbvYYycJljm2fT/d78By1K2royBufEyXAAZgHujp6Yf6vQZ9plSloED/fIBY 0BZQg+w4b7JBkEPYOthI33bwtGrGJhYby6DWlB8g3BukWfy+qezICf8w7trEZJF7 VsIXJ3hF -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:20 2026 by rpki-client