This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa File: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (raw, json) Hash identifier: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM= Subject key identifier: A7:13:A7:AA:5A:BC:52:3C:A0:4B:6C:91:9A:2D:D4:AF:79:DD:F8:0E Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52 Certificate serial: 019B7A59C947C1E95A39C715F79C221BFE1E Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa Signing time: Thu 01 Jan 2026 16:17:43 +0000 ROA not before: Thu 01 Jan 2026 16:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44196 IP address blocks: 195.2.202.0/23 maxlen: 23 195.2.202.0/24 maxlen: 24 195.2.203.0/24 maxlen: 24 195.93.132.0/23 maxlen: 23 195.93.132.0/24 maxlen: 24 195.93.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c9:47:c1:e9:5a:39:c7:15:f7:9c:22:1b:fe:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52 Validity Not Before: Jan 1 16:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a713a7aa5abc523ca04b6c919a2dd4af79ddf80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:ac:fa:00:96:ca:02:83:9e:ae:96:41:36: 9d:b8:91:7c:1a:11:7f:21:54:39:b1:07:89:84:7b: a0:46:be:48:f4:a2:97:bb:47:21:16:fd:72:e2:e6: 7e:22:af:91:07:95:9a:34:01:c7:67:0a:db:91:2a: 99:e3:1a:4b:58:89:19:ca:86:21:08:68:a7:31:c5: dc:68:97:a6:25:91:b4:19:ed:17:17:95:24:ef:eb: fe:a1:e0:c9:e5:37:55:92:b3:cb:8b:b7:3f:0a:f7: 4b:b1:ce:1c:dc:68:0f:c1:0f:cf:27:07:8a:80:8a: 9c:1c:da:80:77:63:b1:dc:36:74:94:dd:09:2b:1a: d9:1a:0a:ce:f6:3c:6b:5e:3f:1b:e7:cb:a7:28:dc: 31:e6:5b:86:de:bc:8e:3b:c5:90:9e:7a:e2:9a:4a: 73:11:5e:52:00:f6:a7:09:c2:79:06:78:ea:09:fc: 0b:12:b3:56:41:46:1a:ff:56:a3:3a:80:c3:3c:fd: 48:80:0d:4c:4f:2f:7e:9b:0f:b4:da:ac:70:9e:37: 35:d7:72:c0:23:12:77:75:2c:04:11:96:4b:68:a0: 18:99:9f:8c:4b:df:88:78:68:57:d6:0c:37:ca:bd: b1:f8:e5:95:5d:23:04:d8:a0:b6:f0:35:32:e9:ef: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:A7:AA:5A:BC:52:3C:A0:4B:6C:91:9A:2D:D4:AF:79:DD:F8:0E X509v3 Authority Key Identifier: keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.2.202.0/23 195.93.132.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:66:c8:af:82:d4:1c:99:fb:70:17:5c:c8:b4:4a:57:f0:ab: de:a8:5e:fa:aa:77:c3:d6:cb:6a:a5:8a:5a:c3:02:15:e5:a0: 1d:14:97:1c:05:73:1d:f2:40:53:97:70:8d:0d:b1:70:b1:bc: 2f:8f:ac:fc:18:4e:28:f4:05:b7:fa:a3:51:f8:b7:15:f2:b1: dd:db:4f:bf:86:ae:2e:2f:3c:4a:f8:6e:29:d8:9b:11:16:7f: 3d:aa:aa:25:7e:46:4a:37:b8:7f:7a:f7:f7:29:9a:ec:4d:ad: dc:49:29:b3:46:74:ae:8e:7b:38:0a:71:09:0c:14:37:1b:98: da:f7:c3:a1:42:67:d5:27:81:e3:46:d0:ee:16:98:8a:62:91: 1c:6d:09:b3:4a:a8:05:22:d2:6d:70:93:69:60:79:2f:63:de: 9e:86:86:e7:33:79:06:0c:45:63:5c:5f:6c:ad:7a:ee:c3:c2: fa:6f:8c:6a:17:99:f9:2e:a3:f6:e5:1c:e9:d5:11:03:f2:43: b0:d1:2d:b7:d0:f6:78:bb:d1:13:7d:af:f2:76:d6:46:e6:cb: 25:4d:d4:60:7b:41:8c:59:21:17:c1:86:a7:45:8a:c2:bb:b6: 28:c8:52:26:eb:8f:0d:8e:9e:c2:fd:53:b3:37:a7:80:0c:53: 51:42:2e:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WclHwelaOccV95wiG/4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2M2Y5MTcwNzdmOGYzZDBlMzM4Yzc0MmVhMjFkNjQzNThk MTlkNTIwHhcNMjYwMTAxMTYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzEzYTdhYTVhYmM1MjNjYTA0YjZjOTE5YTJkZDRhZjc5ZGRmODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6s+gCWygKDnq6WQTaduJF8GhF/ IVQ5sQeJhHugRr5I9KKXu0chFv1y4uZ+Iq+RB5WaNAHHZwrbkSqZ4xpLWIkZyoYh CGinMcXcaJemJZG0Ge0XF5Uk7+v+oeDJ5TdVkrPLi7c/CvdLsc4c3GgPwQ/PJweK gIqcHNqAd2Ox3DZ0lN0JKxrZGgrO9jxrXj8b58unKNwx5luG3ryOO8WQnnrimkpz EV5SAPanCcJ5BnjqCfwLErNWQUYa/1ajOoDDPP1IgA1MTy9+mw+02qxwnjc113LA IxJ3dSwEEZZLaKAYmZ+MS9+IeGhX1gw3yr2x+OWVXSME2KC28DUy6e94pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKcTp6pavFI8oEtskZot1K953fgOMB8GA1UdIwQY MBaAFEY/kXB3+PPQ4zjHQuoh1kNY0Z1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmIt MjVhNDBjMDc1ZjEyLzEvcHhPbnFscThVanlnUzJ5Um1pM1VyM25kLUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmItMjVhNDBjMDc1ZjEy LzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwwLKAwQB w12EMA0GCSqGSIb3DQEBCwUAA4IBAQA+ZsivgtQcmftwF1zItEpX8KveqF76qnfD 1stqpYpawwIV5aAdFJccBXMd8kBTl3CNDbFwsbwvj6z8GE4o9AW3+qNR+LcV8rHd 20+/hq4uLzxK+G4p2JsRFn89qqolfkZKN7h/evf3KZrsTa3cSSmzRnSujns4CnEJ DBQ3G5ja98OhQmfVJ4HjRtDuFpiKYpEcbQmzSqgFItJtcJNpYHkvY96ehobnM3kG DEVjXF9srXruw8L6b4xqF5n5LqP25Rzp1RED8kOw0S230PZ4u9ETfa/ydtZG5ssl TdRge0GMWSEXwYanRYrCu7YoyFIm648Njp7C/VOzN6eADFNRQi5q -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:24 2026 by rpki-client