This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa File: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (raw, json) Hash identifier: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU= Subject key identifier: A5:7A:34:65:46:95:FB:2E:84:0C:27:14:A1:20:94:86:AA:4F:51:15 Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646 Certificate serial: 019B78A2D7A47EE61F1456C2EE7FCCE13A66 Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39479 IP address blocks: 185.142.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d7:a4:7e:e6:1f:14:56:c2:ee:7f:cc:e1:3a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57a34654695fb2e840c2714a1209486aa4f5115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:a6:37:b0:c1:89:fb:49:f3:3e:7a:67:1c: 4a:d7:e5:16:97:9a:9c:fd:2a:dc:f1:50:74:3d:36: 73:b4:2d:31:57:f1:5a:55:57:cc:e1:72:33:32:74: f5:e0:df:62:3e:e6:5b:79:94:c2:15:74:b8:99:79: e4:79:d0:8a:5f:96:88:65:bd:27:9b:ba:ac:bc:2d: 3f:50:52:fa:a2:65:dd:d3:33:8d:73:b5:9a:cf:93: 78:7d:08:d4:c4:e1:75:bb:25:d8:fb:d1:f5:7f:40: 97:a6:0e:26:be:91:4d:93:0c:26:9d:4d:96:6d:7e: 0f:0e:0b:9d:dd:c5:c5:fc:68:bf:e4:62:0a:a0:df: 33:e3:d8:20:8c:42:6b:c2:72:13:87:f2:fc:3d:9a: e4:5a:a1:fa:0a:2d:08:87:3d:43:62:00:42:be:d4: e9:fe:87:41:20:8a:ba:c1:ae:44:9f:38:0f:42:aa: 8b:d4:12:de:bb:d0:31:52:23:45:1d:ed:23:16:27: 0c:8e:f6:4c:93:2d:dd:f7:95:d3:51:9a:25:4a:df: 2a:8b:db:eb:09:74:29:02:18:04:a8:64:80:a6:6c: 45:37:42:b1:1a:5b:72:9c:9d:9c:f1:af:3b:f7:b2: 9f:95:6b:24:65:b6:a8:21:f8:41:c1:4d:24:01:35: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:34:65:46:95:FB:2E:84:0C:27:14:A1:20:94:86:AA:4F:51:15 X509v3 Authority Key Identifier: keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.121.0/24 Signature Algorithm: sha256WithRSAEncryption 51:9e:10:43:56:ee:4f:3f:8c:b9:af:89:91:01:7e:42:b1:cc: 86:51:fb:37:4a:fc:2a:43:d8:2e:f4:23:14:36:23:c2:9c:0b: d9:15:67:00:f8:dd:05:a8:a1:0b:8b:7d:6f:f6:f1:54:1b:82: d8:6f:af:f1:92:ed:1e:0d:42:40:43:92:2c:f4:dd:17:64:24: 7c:c9:e1:51:07:d0:b1:61:91:7d:90:44:62:d0:2a:70:be:e6: 7f:1c:83:8d:e5:f7:4f:5e:39:72:29:c4:7f:f7:04:73:38:44: a2:38:2e:42:7a:cd:8b:e3:d9:22:a2:82:d0:de:b9:eb:30:bd: e6:e1:de:6c:3a:bd:6b:30:51:3e:e6:e3:8b:b9:a8:a4:64:c2: c2:d7:da:8e:18:b2:bf:22:67:42:2c:46:a0:fe:9d:6b:98:10: 19:7a:f6:bf:c6:f8:d8:93:4d:8c:91:f7:56:5a:69:92:3e:6c: 11:d0:6d:66:67:54:23:43:6f:6a:3a:fd:21:49:a5:fd:06:eb: 5b:31:a4:05:ac:ce:7a:2e:a7:26:99:db:f6:a5:ce:dd:c4:fe: 34:2c:a3:0d:f5:2c:47:b2:b8:77:94:b6:08:52:ed:22:4d:d0: 9e:b2:fa:14:17:93:5a:9f:a5:af:eb:11:19:d6:9a:bf:c4:90: 32:a0:3b:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otekfuYfFFbC7n/M4TpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl NDc2NDYwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdhMzQ2NTQ2OTVmYjJlODQwYzI3MTRhMTIwOTQ4NmFhNGY1MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWmN7DBiftJ8z56ZxxK1+UWl5qc /Src8VB0PTZztC0xV/FaVVfM4XIzMnT14N9iPuZbeZTCFXS4mXnkedCKX5aIZb0n m7qsvC0/UFL6omXd0zONc7Waz5N4fQjUxOF1uyXY+9H1f0CXpg4mvpFNkwwmnU2W bX4PDgud3cXF/Gi/5GIKoN8z49ggjEJrwnITh/L8PZrkWqH6Ci0Ihz1DYgBCvtTp /odBIIq6wa5EnzgPQqqL1BLeu9AxUiNFHe0jFicMjvZMky3d95XTUZolSt8qi9vr CXQpAhgEqGSApmxFN0KxGltynJ2c8a8797KflWskZbaoIfhBwU0kATUMpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKV6NGVGlfsuhAwnFKEglIaqT1EVMB8GA1UdIwQY MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt MjAwMjQ5MThlZTY2LzEvcFhvMFpVYVYteTZFRENjVW9TQ1VocXBQVVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2 LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY55MA0G CSqGSIb3DQEBCwUAA4IBAQBRnhBDVu5PP4y5r4mRAX5CscyGUfs3SvwqQ9gu9CMU NiPCnAvZFWcA+N0FqKELi31v9vFUG4LYb6/xku0eDUJAQ5Is9N0XZCR8yeFRB9Cx YZF9kERi0CpwvuZ/HION5fdPXjlyKcR/9wRzOESiOC5Ces2L49kiooLQ3rnrML3m 4d5sOr1rMFE+5uOLuaikZMLC19qOGLK/ImdCLEag/p1rmBAZeva/xvjYk02MkfdW WmmSPmwR0G1mZ1QjQ29qOv0hSaX9ButbMaQFrM56Lqcmmdv2pc7dxP40LKMN9SxH srh3lLYIUu0iTdCesvoUF5Nan6Wv6xEZ1pq/xJAyoDuU -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client