This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa File: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (raw, json) Hash identifier: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo= Subject key identifier: A6:35:8E:5E:5A:44:D1:BE:52:FF:42:46:BC:C5:45:73:07:52:48:9F Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6 Certificate serial: 019B7B36525E84DB85426FB4C7D3C63F6136 Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 46.31.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:52:5e:84:db:85:42:6f:b4:c7:d3:c6:3f:61:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6 Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6358e5e5a44d1be52ff4246bcc545730752489f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:bd:1e:07:f5:a0:b1:18:83:cc:0e:ec:f0: 22:ab:31:4d:f6:6d:3d:1a:18:d9:0b:62:8a:08:11: e0:04:09:f3:2c:ab:11:68:e7:56:58:06:a7:d9:f0: fe:2d:8b:1a:6b:90:e4:4e:f9:c9:93:ec:0c:af:30: 6d:c3:2c:14:58:b2:8f:9a:f9:c0:cf:ec:4e:91:74: 87:91:92:1c:bf:a4:9d:b8:c9:f5:31:d2:8a:58:e3: 2b:67:54:97:26:9e:15:c7:32:9d:ba:cc:8c:52:e1: 75:6a:bb:a2:af:22:a7:cd:fa:ee:1f:73:a8:de:f3: f5:98:08:76:dd:87:33:ce:7c:77:85:b8:d5:49:b4: 03:83:eb:68:fe:45:3d:5c:0a:00:17:2c:32:93:c5: e6:7d:a7:5e:c5:45:c6:68:34:2a:b3:3b:d3:aa:33: 32:4e:89:76:60:f8:ef:28:39:af:66:f5:c1:4d:32: 18:90:4c:31:b5:9f:13:cf:e2:54:28:92:22:21:94: 7a:c6:ee:4c:0e:a8:f2:d2:1e:67:78:ba:a0:d0:d3: e6:ee:8a:69:66:9f:05:63:f3:bf:15:d5:e2:8d:70: 11:be:61:c7:23:54:46:5e:ae:db:e2:c6:a7:e5:ba: 4f:f2:10:83:fe:c8:11:5d:62:7d:34:36:e3:51:bc: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:35:8E:5E:5A:44:D1:BE:52:FF:42:46:BC:C5:45:73:07:52:48:9F X509v3 Authority Key Identifier: keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.71.0/24 Signature Algorithm: sha256WithRSAEncryption c0:51:aa:28:e8:82:31:98:45:8a:c1:c1:83:3f:7b:f9:8c:04: a5:84:38:81:86:66:6a:98:ee:fa:1f:81:03:c5:68:8e:95:1c: dd:06:b5:1b:b7:7e:79:1a:67:7b:d9:90:6f:69:10:1c:46:94: 09:98:89:ca:e5:44:ae:76:b2:41:2e:0b:2c:20:d8:30:83:f9: 66:75:b8:19:3e:86:c7:b4:c0:f3:18:0f:b9:58:74:bf:a0:3a: 58:09:3f:0c:46:2b:e8:46:03:ae:27:66:c8:06:70:e3:27:44: 9c:c8:4c:19:e0:55:c5:c5:79:06:fe:e0:09:f3:ff:48:c9:dc: 0c:f3:96:a6:d3:2b:5e:89:68:9a:c4:60:be:0f:04:6e:81:53: 1c:77:1e:79:b8:0a:11:23:5e:62:e3:7e:cf:15:80:84:dd:a1: c2:df:37:3a:f9:36:a0:03:6a:f1:65:96:03:48:c1:46:a7:06: 75:6a:55:c3:1e:a6:e8:0a:27:6f:22:db:8d:b9:b7:6a:12:c7: 3c:8a:88:2d:a7:3c:99:b1:03:e9:74:09:1c:f1:a5:21:9c:41: da:3f:26:8a:5b:63:36:05:4e:94:11:22:f5:8f:52:38:d0:44: 37:02:f3:60:40:ae:3c:a0:1e:d4:9e:83:b2:0c:88:02:42:64: 01:8a:a1:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlJehNuFQm+0x9PGP2E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2 MjUwZTYwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjM1OGU1ZTVhNDRkMWJlNTJmZjQyNDZiY2M1NDU3MzA3NTI0ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0K9Hgf1oLEYg8wO7PAiqzFN9m09 GhjZC2KKCBHgBAnzLKsRaOdWWAan2fD+LYsaa5DkTvnJk+wMrzBtwywUWLKPmvnA z+xOkXSHkZIcv6SduMn1MdKKWOMrZ1SXJp4VxzKdusyMUuF1aruiryKnzfruH3Oo 3vP1mAh23Yczznx3hbjVSbQDg+to/kU9XAoAFywyk8XmfadexUXGaDQqszvTqjMy Tol2YPjvKDmvZvXBTTIYkEwxtZ8Tz+JUKJIiIZR6xu5MDqjy0h5neLqg0NPm7opp Zp8FY/O/FdXijXARvmHHI1RGXq7b4san5bpP8hCD/sgRXWJ9NDbjUbzjcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKY1jl5aRNG+Uv9CRrzFRXMHUkifMB8GA1UdIwQY MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt OWU4MmRhNzMxNWNmLzEvcGpXT1hscEUwYjVTXzBKR3ZNVkZjd2RTU0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9HMA0G CSqGSIb3DQEBCwUAA4IBAQDAUaoo6IIxmEWKwcGDP3v5jASlhDiBhmZqmO76H4ED xWiOlRzdBrUbt355Gmd72ZBvaRAcRpQJmInK5USudrJBLgssINgwg/lmdbgZPobH tMDzGA+5WHS/oDpYCT8MRivoRgOuJ2bIBnDjJ0ScyEwZ4FXFxXkG/uAJ8/9IydwM 85am0yteiWiaxGC+DwRugVMcdx55uAoRI15i437PFYCE3aHC3zc6+TagA2rxZZYD SMFGpwZ1alXDHqboCidvItuNubdqEsc8iogtpzyZsQPpdAkc8aUhnEHaPyaKW2M2 BU6UESL1j1I40EQ3AvNgQK48oB7UnoOyDIgCQmQBiqHB -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:40 2026 by rpki-client