This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa File: pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa (raw, json) Hash identifier: TGTRkz6GAsY4o7A1nVyZO49OKe6IHq8N/DzCAZl1Ss0= Subject key identifier: A7:1C:26:C3:76:D6:01:41:B4:1B:6C:DE:58:FE:B0:02:55:9D:66:9A Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7ECB1D2CFF04525CFA9B38A59DC5 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213005 IP address blocks: 46.253.138.0/24 maxlen: 24 185.119.112.0/22 maxlen: 24 188.93.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:cb:1d:2c:ff:04:52:5c:fa:9b:38:a5:9d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a71c26c376d60141b41b6cde58feb002559d669a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:12:0a:73:35:7c:aa:ea:45:85:8c:a2:23: 52:bb:c3:b1:47:b1:7b:7f:df:63:80:80:4b:7a:9c: 11:d6:e9:f6:f2:bd:65:59:00:c1:bf:8f:be:26:58: 9f:ec:ed:47:ad:02:59:7d:b5:d9:ab:15:f1:e5:10: 37:2c:33:90:52:89:f7:d6:8a:6d:16:f8:61:c6:d8: ea:fd:6a:6f:4a:97:db:0e:13:72:83:94:61:57:a2: d7:f6:62:ea:f1:e1:c8:2a:ad:15:f3:04:6b:5b:3e: e5:75:d5:b8:7a:79:1d:9b:d9:c9:38:44:73:40:21: df:64:17:a6:48:8e:4a:e4:4e:cf:55:d8:0a:a0:33: 76:b7:55:35:ba:4f:79:c2:5d:79:22:59:b8:b5:54: 4c:d8:24:db:34:7c:59:8c:55:e6:9a:b2:f6:9d:7e: 9b:f3:b2:98:1d:64:ef:c8:e5:0e:41:ff:9f:c8:42: dd:96:03:ca:bc:99:fa:7d:a4:3e:1f:97:89:5e:30: a6:7f:78:ad:4e:09:bd:75:f2:9c:e8:79:dd:98:dc: db:8e:c0:ff:ec:e4:f3:78:ed:1c:e0:d5:07:37:48: fd:c8:19:2b:68:d6:fc:bc:60:f2:a4:1a:ff:df:78: 94:6e:ef:28:40:16:4b:ce:81:05:db:50:7e:76:07: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1C:26:C3:76:D6:01:41:B4:1B:6C:DE:58:FE:B0:02:55:9D:66:9A X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/pxwmw3bWAUG0G2zeWP6wAlWdZpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.138.0/24 185.119.112.0/22 188.93.117.0/24 Signature Algorithm: sha256WithRSAEncryption 55:3d:46:c6:59:71:1a:32:2b:2f:36:5e:f2:85:cc:00:15:df: 6d:dc:2a:41:77:6d:91:f3:dd:74:a4:0f:23:e5:b6:9a:c6:ce: d6:86:0c:fe:ce:72:ac:d0:e1:eb:17:c3:a9:80:b0:c3:db:7b: f2:00:f6:de:81:73:61:4a:70:52:46:88:90:c2:83:8c:26:5b: d7:ff:fa:af:c5:3e:64:b0:c0:d4:a8:27:5b:e1:22:47:c5:a6: f5:17:02:d6:4d:77:d5:0e:4a:f8:92:64:26:98:40:a1:f1:87: 65:a8:e5:04:45:e6:35:1b:22:b3:61:ea:63:9e:ca:3d:1c:a7: 3e:1c:e1:6e:79:59:02:42:fc:29:64:e3:db:cb:06:85:25:14: 3a:e0:dd:6b:1a:1d:3c:ee:0b:62:50:bd:c1:28:28:a1:ad:ff: b2:25:03:e6:f1:4b:56:66:84:8a:1b:92:6f:8b:e0:f2:3a:b0: 60:bf:93:90:18:0e:45:ac:d6:10:a5:8b:6d:e7:23:f8:c1:08: 67:84:14:50:66:1d:ef:41:0d:74:22:9e:ca:66:bc:49:39:92: 69:88:24:b5:49:8d:18:0b:3f:bd:3f:c7:01:a7:00:c7:3d:f0: c3:ca:fe:a8:de:07:43:ea:80:8e:15:0f:82:79:1a:b1:05:19: 86:ce:02:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W37LHSz/BFJc+ps4pZ3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzFjMjZjMzc2ZDYwMTQxYjQxYjZjZGU1OGZlYjAwMjU1OWQ2NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw88SCnM1fKrqRYWMoiNSu8OxR7F7 f99jgIBLepwR1un28r1lWQDBv4++Jlif7O1HrQJZfbXZqxXx5RA3LDOQUon31opt Fvhhxtjq/WpvSpfbDhNyg5RhV6LX9mLq8eHIKq0V8wRrWz7lddW4enkdm9nJOERz QCHfZBemSI5K5E7PVdgKoDN2t1U1uk95wl15Ilm4tVRM2CTbNHxZjFXmmrL2nX6b 87KYHWTvyOUOQf+fyELdlgPKvJn6faQ+H5eJXjCmf3itTgm9dfKc6HndmNzbjsD/ 7OTzeO0c4NUHN0j9yBkraNb8vGDypBr/33iUbu8oQBZLzoEF21B+dgeN4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKccJsN21gFBtBts3lj+sAJVnWaaMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvcHh3bXczYldBVUcwRzJ6ZVdQNndBbFdkWnBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALv2KAwQC uXdwAwQAvF11MA0GCSqGSIb3DQEBCwUAA4IBAQBVPUbGWXEaMisvNl7yhcwAFd9t 3CpBd22R8910pA8j5baaxs7Whgz+znKs0OHrF8OpgLDD23vyAPbegXNhSnBSRoiQ woOMJlvX//qvxT5ksMDUqCdb4SJHxab1FwLWTXfVDkr4kmQmmECh8YdlqOUEReY1 GyKzYepjnso9HKc+HOFueVkCQvwpZOPbywaFJRQ64N1rGh087gtiUL3BKCihrf+y JQPm8UtWZoSKG5Jvi+DyOrBgv5OQGA5FrNYQpYtt5yP4wQhnhBRQZh3vQQ10Ip7K ZrxJOZJpiCS1SY0YCz+9P8cBpwDHPfDDyv6o3gdD6oCOFQ+CeRqxBRmGzgK/ -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:43 2026 by rpki-client