This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/PjKNrzs98ZdtJ-2groduxlQr3TI.roa File: PjKNrzs98ZdtJ-2groduxlQr3TI.roa (raw, json) Hash identifier: AGUANunYg5ZMjpAMIYuWSYyo7zh4erXZq7j8d3Oabq8= Subject key identifier: 3E:32:8D:AF:3B:3D:F1:97:6D:27:ED:A0:AE:87:6E:C6:54:2B:DD:32 Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019B7A5A921FB1352B7DD16DEB25C3A2603B Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/PjKNrzs98ZdtJ-2groduxlQr3TI.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212752 IP address blocks: 45.90.82.0/24 maxlen: 24 45.90.83.0/24 maxlen: 24 2a10:b480::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:92:1f:b1:35:2b:7d:d1:6d:eb:25:c3:a2:60:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e328daf3b3df1976d27eda0ae876ec6542bdd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:3e:2f:bd:f4:bc:84:33:d2:ca:08:ed:b6: d8:3c:0d:22:98:2b:d2:0b:60:3f:a3:f5:88:75:2c: 0e:a7:f0:cc:5d:d0:48:1c:d7:24:c3:05:54:45:22: f3:b7:f4:45:76:85:47:34:c9:1a:c7:34:cf:f7:ce: 4e:1a:8a:1a:e9:bf:c0:53:80:e3:bb:ea:e3:66:84: 33:e3:36:24:4a:4b:fb:3a:a1:30:e3:d2:1a:c6:c3: fe:60:ee:38:f5:ff:94:be:9b:ab:6d:42:a0:a3:e5: 9e:4a:2c:77:c8:6f:80:32:e4:4e:0c:1e:90:ea:55: 4d:5d:82:2b:8f:ec:39:8d:69:78:18:f4:c3:8b:d2: 34:5e:b6:fa:ad:ec:9c:7a:b6:0d:45:cf:0e:cd:56: fe:98:f1:01:f7:d7:13:14:82:fb:25:2b:0a:1b:8e: de:b5:39:27:39:7d:38:d8:96:e6:ff:97:49:f9:48: f2:7b:3d:b4:10:d7:8d:c0:61:67:cd:e6:39:19:4d: ae:b8:2b:21:4d:a7:6c:84:ff:d2:4f:56:7b:9b:aa: 8d:78:16:c9:c7:43:ae:a6:b5:23:3d:6e:b3:7b:2f: ca:38:e0:d6:44:15:2d:57:4e:aa:c5:cb:01:f8:d4: ff:59:c2:86:47:7d:78:4e:bf:22:fc:15:52:b3:a1: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:8D:AF:3B:3D:F1:97:6D:27:ED:A0:AE:87:6E:C6:54:2B:DD:32 X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/PjKNrzs98ZdtJ-2groduxlQr3TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.82.0/23 IPv6: 2a10:b480::/29 Signature Algorithm: sha256WithRSAEncryption 16:c5:47:2c:5c:f9:4a:e1:77:37:b4:33:b6:d5:ee:9e:ff:4c: 09:6e:ac:76:71:d2:82:7c:c2:9e:14:f1:10:4e:60:7a:37:03: de:fc:ba:2e:cc:d4:a2:6a:31:fd:8a:b2:74:9c:5b:6e:29:44: 19:8d:f0:f3:1c:e4:3c:25:ca:63:f3:93:31:87:c7:67:d7:c8: 88:80:7e:d4:68:71:02:06:fa:11:9d:6f:15:65:4e:81:cd:9f: 58:36:50:10:7b:3e:bb:70:34:3f:a7:da:87:89:e4:e2:16:24: c8:95:7e:fd:1b:5c:79:5a:9d:d3:bb:97:99:0e:a8:8b:75:68: c5:0b:aa:15:75:ef:5d:11:42:c0:d8:82:1e:f7:de:7b:21:de: 3b:1c:b0:f6:b7:d2:0c:e3:81:12:c9:69:9b:88:cd:b6:59:ea: a7:2b:ed:2e:bf:a4:1c:87:a7:fc:bb:73:81:c3:43:ae:f4:fe: 21:e4:60:7d:bf:a7:0a:8d:d1:74:60:29:c6:d7:96:47:1a:ca: b9:12:19:50:2a:15:52:e5:2c:da:9e:a9:1f:02:c2:e9:68:20: 81:ba:3d:e5:27:73:df:8d:8c:5b:bb:e4:c8:77:f4:08:d1:a7: c9:cd:3a:29:9e:20:1b:5d:29:1c:07:fe:15:fe:36:db:b0:02: 32:32:26:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WpIfsTUrfdFt6yXDomA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTMyOGRhZjNiM2RmMTk3NmQyN2VkYTBhZTg3NmVjNjU0MmJkZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qQ+L730vIQz0soI7bbYPA0imCvS C2A/o/WIdSwOp/DMXdBIHNckwwVURSLzt/RFdoVHNMkaxzTP985OGooa6b/AU4Dj u+rjZoQz4zYkSkv7OqEw49IaxsP+YO449f+UvpurbUKgo+WeSix3yG+AMuRODB6Q 6lVNXYIrj+w5jWl4GPTDi9I0Xrb6reycerYNRc8OzVb+mPEB99cTFIL7JSsKG47e tTknOX042Jbm/5dJ+Ujyez20ENeNwGFnzeY5GU2uuCshTadshP/ST1Z7m6qNeBbJ x0OuprUjPW6zey/KOODWRBUtV06qxcsB+NT/WcKGR314Tr8i/BVSs6EjFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD4yja87PfGXbSftoK6HbsZUK90yMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvUGpLTnJ6czk4WmR0Si0yZ3JvZHV4bFFyM1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLVpSMA0E AgACMAcDBQMqELSAMA0GCSqGSIb3DQEBCwUAA4IBAQAWxUcsXPlK4Xc3tDO21e6e /0wJbqx2cdKCfMKeFPEQTmB6NwPe/LouzNSiajH9irJ0nFtuKUQZjfDzHOQ8Jcpj 85Mxh8dn18iIgH7UaHECBvoRnW8VZU6BzZ9YNlAQez67cDQ/p9qHieTiFiTIlX79 G1x5Wp3Tu5eZDqiLdWjFC6oVde9dEULA2IIe9957Id47HLD2t9IM44ESyWmbiM22 WeqnK+0uv6Qch6f8u3OBw0Ou9P4h5GB9v6cKjdF0YCnG15ZHGsq5EhlQKhVS5Sza nqkfAsLpaCCBuj3lJ3PfjYxbu+TId/QI0afJzTopniAbXSkcB/4V/jbbsAIyMiYY -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:08 2026 by rpki-client