This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pLdekSUaP9qFXtLb6p8E8WZalVI.roa File: pLdekSUaP9qFXtLb6p8E8WZalVI.roa (raw, json) Hash identifier: T48BRSJXGbhmNwVCvSfUPt5qFe21vZiy84Nvh8Y1AjQ= Subject key identifier: A4:B7:5E:91:25:1A:3F:DA:85:5E:D2:DB:EA:9F:04:F1:66:5A:95:52 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78344B8C233636B6480CCEFC5183928D Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pLdekSUaP9qFXtLb6p8E8WZalVI.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35537 IP address blocks: 94.124.116.0/24 maxlen: 24 2a09:7:2004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4b:8c:23:36:36:b6:48:0c:ce:fc:51:83:92:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b75e91251a3fda855ed2dbea9f04f1665a9552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:e9:36:02:20:e5:d7:dd:90:22:9f:0c:c3: e7:0c:e3:67:76:d8:1d:de:96:d8:c1:53:9c:a9:a6: df:66:da:f8:f7:a7:b3:f6:85:c3:d5:ba:5c:81:4f: 72:4d:db:57:c2:11:ce:31:ee:5a:7b:74:cf:61:91: 13:2c:f0:bd:41:b1:ee:4c:d2:ba:c8:7f:78:61:c2: 95:9a:e9:f5:34:99:b5:e6:0c:70:6c:93:59:26:9e: a1:9e:df:4b:96:df:43:bc:9c:e6:60:1d:5e:30:f8: 8e:fc:70:e7:fb:62:94:a3:a8:08:65:05:86:2f:01: 19:71:5f:e1:9a:2d:36:85:e2:42:8a:65:ab:6c:7e: da:90:76:21:58:ca:b5:c0:97:2e:63:d2:82:9c:fa: 15:55:03:9d:8e:e1:e1:31:69:3c:34:78:8a:4a:a8: 6f:97:2f:ee:9b:ba:f1:aa:11:90:ff:a2:97:e7:fe: 82:e6:49:67:6f:9e:55:2a:e9:0c:dd:96:a9:c3:57: 34:8e:d8:bc:fc:4a:44:b9:e7:e0:4d:51:44:16:80: 6e:09:0f:c8:4d:56:33:70:7a:02:2b:4d:17:f3:a3: e2:ad:81:94:28:55:19:a2:d4:f5:f8:1c:c1:26:23: ec:63:bf:42:23:0c:09:4c:62:e2:cb:b7:88:eb:53: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B7:5E:91:25:1A:3F:DA:85:5E:D2:DB:EA:9F:04:F1:66:5A:95:52 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pLdekSUaP9qFXtLb6p8E8WZalVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.116.0/24 IPv6: 2a09:7:2004::/48 Signature Algorithm: sha256WithRSAEncryption 24:fe:9e:50:fd:6a:1c:d3:6d:c0:5b:39:4a:99:36:d9:e5:ba: 76:69:28:52:76:45:cd:c6:d8:e9:ec:04:53:f3:50:eb:fa:51: 3d:6e:35:3e:27:0d:11:3f:5b:e3:41:9b:6b:d5:a0:aa:1c:59: b8:8b:f7:63:41:9d:3f:82:67:78:c2:10:c4:4f:56:c7:95:56: 18:27:d0:54:0c:ba:3a:91:f0:e3:b6:54:6a:2d:45:79:40:b5: 45:54:09:6b:0b:e9:9b:f8:05:48:77:4d:91:3d:88:0b:bf:2e: d6:20:44:85:88:10:b1:5a:a9:9f:aa:62:bb:72:01:9e:db:2b: d9:74:16:fa:f0:61:c0:4b:d1:5c:3b:f3:7a:eb:f8:d3:dd:96: d6:57:d5:3d:38:2e:13:3b:ef:14:df:cd:f9:ab:88:66:7b:6c: c6:52:af:49:da:29:ef:a2:d1:05:6e:89:f8:80:6d:4b:f6:d6: 35:8a:16:11:b5:a4:1c:ed:74:e0:08:55:c0:11:2c:7e:c2:9c: 8a:2f:c3:9b:93:78:c7:82:70:14:f2:d1:df:58:6f:a4:5b:66: 20:e4:d8:ff:0b:9a:28:70:73:d9:85:ec:22:f6:e3:2d:dd:71: c5:6b:fd:a4:ca:d8:05:00:1b:63:a8:e7:2e:fc:9e:d7:99:66: 01:b5:b3:3e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NEuMIzY2tkgMzvxRg5KNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGI3NWU5MTI1MWEzZmRhODU1ZWQyZGJlYTlmMDRmMTY2NWE5NTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9npNgIg5dfdkCKfDMPnDONndtgd 3pbYwVOcqabfZtr496ez9oXD1bpcgU9yTdtXwhHOMe5ae3TPYZETLPC9QbHuTNK6 yH94YcKVmun1NJm15gxwbJNZJp6hnt9Llt9DvJzmYB1eMPiO/HDn+2KUo6gIZQWG LwEZcV/hmi02heJCimWrbH7akHYhWMq1wJcuY9KCnPoVVQOdjuHhMWk8NHiKSqhv ly/um7rxqhGQ/6KX5/6C5klnb55VKukM3Zapw1c0jti8/EpEuefgTVFEFoBuCQ/I TVYzcHoCK00X86PirYGUKFUZotT1+BzBJiPsY79CIwwJTGLiy7eI61MEZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKS3XpElGj/ahV7S2+qfBPFmWpVSMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvcExkZWtTVWFQOXFGWHRMYjZwOEU4V1phbFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXnx0MA8E AgACMAkDBwAqCQAHIAQwDQYJKoZIhvcNAQELBQADggEBACT+nlD9ahzTbcBbOUqZ NtnlunZpKFJ2Rc3G2OnsBFPzUOv6UT1uNT4nDRE/W+NBm2vVoKocWbiL92NBnT+C Z3jCEMRPVseVVhgn0FQMujqR8OO2VGotRXlAtUVUCWsL6Zv4BUh3TZE9iAu/LtYg RIWIELFaqZ+qYrtyAZ7bK9l0FvrwYcBL0Vw783rr+NPdltZX1T04LhM77xTfzfmr iGZ7bMZSr0naKe+i0QVuifiAbUv21jWKFhG1pBztdOAIVcARLH7CnIovw5uTeMeC cBTy0d9Yb6RbZiDk2P8Lmihwc9mF7CL24y3dccVr/aTK2AUAG2Oo5y78nteZZgG1 sz4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:11 2026 by rpki-client