This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pJUNLwWtEptjt5DB91VfVf1ogI0.roa File: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (raw, json) Hash identifier: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA= Subject key identifier: A4:95:0D:2F:05:AD:12:9B:63:B7:90:C1:F7:55:5F:55:FD:68:80:8D Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019B76EB8F88B82DAC4EEA0E73BBB2952DAC Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pJUNLwWtEptjt5DB91VfVf1ogI0.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202940 IP address blocks: 84.108.142.0/23 maxlen: 24 84.108.142.0/24 maxlen: 24 84.108.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:88:b8:2d:ac:4e:ea:0e:73:bb:b2:95:2d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4950d2f05ad129b63b790c1f7555f55fd68808d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:38:88:ed:8c:56:aa:0d:89:28:b5:12:e0: 86:d6:a1:7e:1c:58:ee:89:f9:03:f8:a9:8f:82:7f: 36:cb:b5:d0:66:9f:7c:af:a4:94:b7:5a:88:1f:7f: 93:ad:7a:41:e5:4f:6f:72:88:29:fe:ea:1c:90:ea: ff:c2:0c:21:54:26:f3:e7:ca:8e:02:ba:65:60:08: 19:ca:67:ae:c8:6c:db:e8:6c:8a:2f:8e:a1:ce:b8: d7:04:22:ea:0e:dc:d4:1b:cb:ee:54:f5:ef:b5:da: 98:c5:57:db:4b:95:38:15:15:63:9b:7b:a0:c6:bc: af:fc:a8:02:ad:55:c2:dc:f4:e1:cb:7c:c1:4f:1c: 79:a9:72:90:a3:e6:05:12:f3:39:bc:a2:65:a4:59: 6c:ee:b6:bb:bf:63:ec:54:b0:18:f7:b8:00:26:0a: 0f:b7:db:62:0e:ca:9e:a2:e3:96:f9:a3:94:2c:5a: 43:8d:7d:2a:c9:92:ab:a3:46:64:5c:e1:0e:c4:13: 6a:25:c4:9b:47:44:d1:ec:53:f0:a9:d0:64:4c:eb: d6:4d:67:ed:21:a8:04:ba:3d:3b:f0:ac:7b:d2:b2: a7:63:86:6f:64:8e:45:1c:0d:78:6c:fe:d6:24:29: e9:1c:76:6f:e6:e2:c3:0a:27:2b:56:90:d2:94:58: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:0D:2F:05:AD:12:9B:63:B7:90:C1:F7:55:5F:55:FD:68:80:8D X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/pJUNLwWtEptjt5DB91VfVf1ogI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.108.142.0/23 Signature Algorithm: sha256WithRSAEncryption 85:30:a9:1b:f2:d0:c5:4e:ff:87:60:ca:d6:ea:bc:3f:cd:b2: 82:78:e0:fc:6c:76:43:73:df:ad:f6:ab:a8:78:de:59:2c:20: 7e:bb:2c:5e:93:d2:17:06:b0:ab:37:bd:fa:2a:a7:a6:4c:b4: f8:be:ed:79:da:87:86:3f:39:55:34:a1:72:d0:5c:d1:c0:63: d3:8f:a5:5a:be:cc:94:39:2f:a1:f2:9f:c2:2d:f2:1e:4a:c3: 4c:8f:7f:50:5a:23:ee:4a:a4:5a:05:0e:ef:d6:b1:76:5d:7a: df:26:b9:3d:93:ef:00:10:30:db:87:2a:e5:30:26:6c:ee:90: 58:6d:d2:a7:ab:40:05:56:20:b1:eb:af:eb:1b:cf:34:0a:9b: 10:31:c1:06:91:ae:0c:f8:17:87:19:8b:1f:c5:51:9d:41:42: 3f:15:64:3b:5d:5e:6a:77:8d:9b:eb:a3:43:b0:89:01:50:4f: 3a:fc:24:72:8d:68:a7:5c:ad:5f:ca:f2:26:0e:61:d0:e9:be: b0:9a:0b:a6:13:1c:d6:82:2a:fc:48:ba:7c:84:99:17:94:85: fd:d4:e0:4d:67:6c:11:64:f1:70:f0:d7:fb:07:d3:1d:67:8b: 28:67:3c:b5:92:1c:32:27:05:73:b6:ff:ad:7c:23:f0:72:07: c4:5a:21:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264+IuC2sTuoOc7uylS2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDk1MGQyZjA1YWQxMjliNjNiNzkwYzFmNzU1NWY1NWZkNjg4MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8604iO2MVqoNiSi1EuCG1qF+HFju ifkD+KmPgn82y7XQZp98r6SUt1qIH3+TrXpB5U9vcogp/uockOr/wgwhVCbz58qO ArplYAgZymeuyGzb6GyKL46hzrjXBCLqDtzUG8vuVPXvtdqYxVfbS5U4FRVjm3ug xryv/KgCrVXC3PThy3zBTxx5qXKQo+YFEvM5vKJlpFls7ra7v2PsVLAY97gAJgoP t9tiDsqeouOW+aOULFpDjX0qyZKro0ZkXOEOxBNqJcSbR0TR7FPwqdBkTOvWTWft IagEuj078Kx70rKnY4ZvZI5FHA14bP7WJCnpHHZv5uLDCicrVpDSlFgl6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSVDS8FrRKbY7eQwfdVX1X9aICNMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvcEpVTkx3V3RFcHRqdDVEQjkxVmZWZjFvZ0kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVGyOMA0G CSqGSIb3DQEBCwUAA4IBAQCFMKkb8tDFTv+HYMrW6rw/zbKCeOD8bHZDc9+t9quo eN5ZLCB+uyxek9IXBrCrN736KqemTLT4vu152oeGPzlVNKFy0FzRwGPTj6VavsyU OS+h8p/CLfIeSsNMj39QWiPuSqRaBQ7v1rF2XXrfJrk9k+8AEDDbhyrlMCZs7pBY bdKnq0AFViCx66/rG880CpsQMcEGka4M+BeHGYsfxVGdQUI/FWQ7XV5qd42b66ND sIkBUE86/CRyjWinXK1fyvImDmHQ6b6wmgumExzWgir8SLp8hJkXlIX91OBNZ2wR ZPFw8Nf7B9MdZ4soZzy1khwyJwVztv+tfCPwcgfEWiFE -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:20 2026 by rpki-client