This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pjy8PyfSvNUQlPszOO5cOkwdArs.roa File: pjy8PyfSvNUQlPszOO5cOkwdArs.roa (raw, json) Hash identifier: TNGMqiKHKD6FG8zce/9C12pTugM7KKwm8HQFMxYXHWs= Subject key identifier: A6:3C:BC:3F:27:D2:BC:D5:10:94:FB:33:38:EE:5C:3A:4C:1D:02:BB Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019AC60ACE8CCDD186A573DD18829A11A974 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pjy8PyfSvNUQlPszOO5cOkwdArs.roa Signing time: Thu 27 Nov 2025 15:59:48 +0000 ROA not before: Thu 27 Nov 2025 15:59:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17818 IP address blocks: 193.41.244.0/24 maxlen: 24 193.41.246.0/24 maxlen: 24 2a06:e800::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:0a:ce:8c:cd:d1:86:a5:73:dd:18:82:9a:11:a9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Nov 27 15:59:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a63cbc3f27d2bcd51094fb3338ee5c3a4c1d02bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:4f:62:67:8b:1d:4c:21:64:85:b1:b5:f8: 6b:a1:96:5e:1c:5a:48:9a:8e:02:70:0e:71:b5:cf: 61:df:ee:c2:e0:28:ef:36:29:d8:2c:8d:9e:a8:14: 3c:6b:b7:92:72:6e:c8:19:f3:a0:20:6b:c9:6e:72: c1:d4:9f:85:6d:9c:46:49:e7:12:1f:78:eb:19:11: b4:bc:32:ff:12:3e:c7:c5:41:30:59:ff:c8:06:4f: 54:83:a3:3e:d4:a3:19:32:7d:c4:0b:66:a9:3a:ed: d8:ca:81:8b:a3:cc:54:17:ca:e8:9e:c8:b6:cc:c6: 71:a9:cc:c3:43:cb:23:0a:73:f8:15:a5:aa:45:83: 46:aa:90:9e:09:5d:9f:f0:a3:6a:c9:c5:ce:07:a7: 00:f5:ee:8b:e1:34:4f:c0:ba:50:fc:74:0d:7e:e9: 89:7b:2a:1c:c2:25:ec:06:06:73:6a:79:a1:0d:11: 4d:db:e8:0c:e2:79:c7:ef:10:18:a1:78:f0:12:34: f3:36:df:a1:0e:67:ae:1a:ed:31:a9:2e:cf:06:a2: e7:1a:59:82:24:29:3e:9c:d5:73:62:f0:8e:39:98: c3:05:b2:68:2a:8d:19:16:e7:1c:d9:3c:8d:4f:d1: ae:f1:4a:a6:8d:9e:cc:17:94:74:c2:04:6f:53:ca: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:BC:3F:27:D2:BC:D5:10:94:FB:33:38:EE:5C:3A:4C:1D:02:BB X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/pjy8PyfSvNUQlPszOO5cOkwdArs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.244.0/24 193.41.246.0/24 IPv6: 2a06:e800::/29 Signature Algorithm: sha256WithRSAEncryption a3:57:8a:c5:32:e0:08:51:41:77:79:a7:ca:1d:a5:91:26:20: e9:f5:36:44:9b:7d:e9:62:d6:b8:f2:b7:1e:90:70:a9:83:45: b5:0a:a2:6c:28:af:11:71:a4:b2:ae:5f:b4:49:62:fc:0b:a8: 7b:f0:a5:ec:07:7c:83:c0:3a:99:42:aa:9c:12:0c:c5:8f:9c: 95:af:a7:0d:f9:59:d6:c1:2c:78:67:52:c2:ba:08:ad:f2:22: 26:be:0b:a0:a3:62:72:24:30:43:86:14:49:83:74:1e:0d:68: d3:14:4f:d2:d9:02:12:51:f4:61:c0:75:e2:7d:9b:23:e4:b9: 65:4c:6c:ce:b8:0e:8e:77:3d:07:2f:de:d8:40:d9:89:3b:5a: e5:86:04:65:05:89:18:27:d2:7c:97:cf:52:36:2a:1b:f7:04: db:c7:b4:2f:9f:b5:1a:79:1c:63:3c:18:b5:f7:14:e2:e9:d0: 87:ae:f2:51:13:b8:be:f8:5e:83:52:ab:d5:8a:1f:6e:1e:5d: f7:36:24:67:f9:3e:9c:10:79:e3:73:c3:aa:6c:3f:62:be:0f: 96:f0:c1:25:0a:07:28:cd:c3:cd:72:9f:7a:61:19:47:1d:b6: fa:8e:07:54:ab:fc:e4:58:e6:19:61:66:28:db:c6:8b:b4:e6: 62:04:f0:f0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrGCs6MzdGGpXPdGIKaEal0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUxMTI3MTU1OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjNjYmMzZjI3ZDJiY2Q1MTA5NGZiMzMzOGVlNWMzYTRjMWQwMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrpPYmeLHUwhZIWxtfhroZZeHFpI mo4CcA5xtc9h3+7C4CjvNinYLI2eqBQ8a7eScm7IGfOgIGvJbnLB1J+FbZxGSecS H3jrGRG0vDL/Ej7HxUEwWf/IBk9Ug6M+1KMZMn3EC2apOu3YyoGLo8xUF8ronsi2 zMZxqczDQ8sjCnP4FaWqRYNGqpCeCV2f8KNqycXOB6cA9e6L4TRPwLpQ/HQNfumJ eyocwiXsBgZzanmhDRFN2+gM4nnH7xAYoXjwEjTzNt+hDmeuGu0xqS7PBqLnGlmC JCk+nNVzYvCOOZjDBbJoKo0ZFucc2TyNT9Gu8UqmjZ7MF5R0wgRvU8pSgwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKY8vD8n0rzVEJT7MzjuXDpMHQK7MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvcGp5OFB5ZlN2TlVRbFBzek9PNWNPa3dkQXJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwSn0AwQA wSn2MA0EAgACMAcDBQMqBugAMA0GCSqGSIb3DQEBCwUAA4IBAQCjV4rFMuAIUUF3 eafKHaWRJiDp9TZEm33pYta48rcekHCpg0W1CqJsKK8RcaSyrl+0SWL8C6h78KXs B3yDwDqZQqqcEgzFj5yVr6cN+VnWwSx4Z1LCugit8iImvgugo2JyJDBDhhRJg3Qe DWjTFE/S2QISUfRhwHXifZsj5LllTGzOuA6Odz0HL97YQNmJO1rlhgRlBYkYJ9J8 l89SNiob9wTbx7Qvn7UaeRxjPBi19xTi6dCHrvJRE7i++F6DUqvVih9uHl33NiRn +T6cEHnjc8OqbD9ivg+W8MElCgcozcPNcp96YRlHHbb6jgdUq/zkWOYZYWYo28aL tOZiBPDw -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:08 2025 by rpki-client