This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa File: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (raw, json) Hash identifier: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI= Subject key identifier: A6:32:77:87:E0:2D:33:B6:EB:DC:0B:82:76:82:EF:51:8A:99:E9:4B Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Certificate serial: 019B7CED6BFC25ACB5618ABFD48CAB25A24D Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa Signing time: Fri 02 Jan 2026 04:18:13 +0000 ROA not before: Fri 02 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60951 IP address blocks: 152.89.224.0/22 maxlen: 22 152.89.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6b:fc:25:ac:b5:61:8a:bf:d4:8c:ab:25:a2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6327787e02d33b6ebdc0b827682ef518a99e94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:7e:87:2a:de:c3:29:4c:64:87:bf:06:d1: 64:93:2e:53:f9:79:d7:92:d9:ef:0b:fb:29:03:6b: de:d1:93:ab:93:57:79:0a:63:64:fc:f4:82:88:69: 70:bf:cf:c1:92:1f:e2:01:c5:16:18:a9:6a:e4:bc: a1:b7:90:50:da:df:55:05:3a:4b:60:d5:fd:92:e7: 47:ae:79:85:7f:77:c6:46:ec:4c:38:c8:99:4d:74: 00:b1:46:ac:38:74:ff:38:5e:18:7f:d2:92:1c:1c: 34:04:8f:bd:ef:a0:fb:8e:06:2d:47:61:22:35:db: cf:8a:50:f9:9e:1c:d7:3b:ec:8f:11:ed:35:18:5b: a1:1d:4d:b1:49:7a:25:86:02:1b:65:21:8a:68:80: 19:f6:a8:d6:1c:70:3e:da:f5:5e:18:5b:ad:4a:9b: e7:2f:53:9a:77:72:54:cb:31:c4:cb:5d:a4:8f:c1: 46:65:13:54:d1:c7:09:5c:28:db:e7:96:fe:62:17: 26:29:e1:e0:32:00:fb:72:c6:11:07:c4:df:f4:e9: c2:96:f2:5c:31:c6:ca:ce:c7:7c:3f:58:b8:c0:69: 03:51:15:42:a5:b2:78:fe:20:69:1a:4e:60:91:3c: a0:85:ef:29:3e:4d:e7:c3:27:55:07:47:90:3a:eb: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:32:77:87:E0:2D:33:B6:EB:DC:0B:82:76:82:EF:51:8A:99:E9:4B X509v3 Authority Key Identifier: keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.224.0/22 Signature Algorithm: sha256WithRSAEncryption b0:ca:90:c6:e8:a2:2b:4b:22:40:33:3f:6d:7b:c8:6a:41:13: 06:1c:07:ef:8e:65:16:74:21:29:0c:d6:b9:4d:a8:9b:1f:05: 46:fb:0c:a8:3a:50:9c:54:b6:33:39:bc:10:55:04:70:fe:8c: 45:1f:64:1d:e3:1d:16:23:99:49:bb:67:9d:6c:f1:f6:bf:a8: 60:91:01:ce:99:04:f5:d0:e5:bf:fb:3b:24:57:4a:f3:1e:31: f1:5c:58:e0:94:0f:d7:a1:0d:e7:5d:2b:6f:45:86:d3:a1:79: f1:68:86:4e:25:47:6c:94:b4:44:ac:ee:26:64:8d:ff:23:a3: a5:f6:06:86:9b:7b:d0:c9:9c:a3:d5:12:84:4e:e0:66:00:de: 2e:4f:66:af:c7:b3:53:81:e8:8c:55:5a:b8:c6:56:bb:23:e7: 57:28:60:8b:50:37:cb:b3:e6:c2:72:8a:07:64:7e:37:1d:67: 38:7f:22:3b:49:6d:97:a3:2c:f4:b7:87:17:a0:c3:99:6b:1c: 2c:48:4c:14:d1:f4:7f:ea:42:f1:59:80:6e:e4:22:20:a1:01: 9b:c1:71:d0:2e:95:6f:71:81:e9:a0:26:b5:49:8d:2f:f3:41: 46:aa:08:bd:6d:8e:2e:71:a2:d1:62:c9:8b:95:f5:07:78:ea: 16:75:25:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Wv8Jay1YYq/1IyrJaJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMGIxNWUwNzgzZmUwMGYxYjhhNTdiZDE0ZmRiZDA2OTI0 Yjg4MzIwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjMyNzc4N2UwMmQzM2I2ZWJkYzBiODI3NjgyZWY1MThhOTllOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkh+hyrewylMZIe/BtFkky5T+XnX ktnvC/spA2ve0ZOrk1d5CmNk/PSCiGlwv8/Bkh/iAcUWGKlq5Lyht5BQ2t9VBTpL YNX9kudHrnmFf3fGRuxMOMiZTXQAsUasOHT/OF4Yf9KSHBw0BI+976D7jgYtR2Ei NdvPilD5nhzXO+yPEe01GFuhHU2xSXolhgIbZSGKaIAZ9qjWHHA+2vVeGFutSpvn L1Oad3JUyzHEy12kj8FGZRNU0ccJXCjb55b+YhcmKeHgMgD7csYRB8Tf9OnClvJc McbKzsd8P1i4wGkDURVCpbJ4/iBpGk5gkTyghe8pPk3nwydVB0eQOusfbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYyd4fgLTO269wLgnaC71GKmelLMB8GA1UdIwQY MBaAFCALFeB4P+APG4pXvRT9vQaSS4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEt M2ZlN2FlYTllMmUwLzEvcGpKM2gtQXRNN2JyM0F1Q2RvTHZVWXFaNlVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9mMGE2N2MtYmQ0Zi00ZGRjLThjNjEtM2ZlN2FlYTllMmUw LzEvSUFzVjRIZ180QThiaWxlOUZQMjlCcEpMaURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFngMA0G CSqGSIb3DQEBCwUAA4IBAQCwypDG6KIrSyJAMz9te8hqQRMGHAfvjmUWdCEpDNa5 TaibHwVG+wyoOlCcVLYzObwQVQRw/oxFH2Qd4x0WI5lJu2edbPH2v6hgkQHOmQT1 0OW/+zskV0rzHjHxXFjglA/XoQ3nXStvRYbToXnxaIZOJUdslLRErO4mZI3/I6Ol 9gaGm3vQyZyj1RKETuBmAN4uT2avx7NTgeiMVVq4xla7I+dXKGCLUDfLs+bCcooH ZH43HWc4fyI7SW2Xoyz0t4cXoMOZaxwsSEwU0fR/6kLxWYBu5CIgoQGbwXHQLpVv cYHpoCa1SY0v80FGqgi9bY4ucaLRYsmLlfUHeOoWdSVb -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:26 2026 by rpki-client