This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PjoGH2-81fPT9RkjdJ5CSjHx1aE.roa File: PjoGH2-81fPT9RkjdJ5CSjHx1aE.roa (raw, json) Hash identifier: 74gMKBIkdYNU/pNaAvlkKIuHAwzg8NYeJCzaVup3fmU= Subject key identifier: 3E:3A:06:1F:6F:BC:D5:F3:D3:F5:19:23:74:9E:42:4A:31:F1:D5:A1 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834776DFA7F340912F47DBFB81B3A18 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PjoGH2-81fPT9RkjdJ5CSjHx1aE.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199150 IP address blocks: 193.180.242.0/24 maxlen: 24 194.71.236.0/22 maxlen: 22 2a01:280:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:77:6d:fa:7f:34:09:12:f4:7d:bf:b8:1b:3a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e3a061f6fbcd5f3d3f51923749e424a31f1d5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:94:11:3d:3e:81:62:fd:9a:1d:9c:73:01: 37:55:49:0a:d1:88:06:ff:14:1e:40:42:df:d4:65: ab:55:96:c3:8c:d1:8d:fd:15:1b:53:f3:90:58:38: 47:2a:44:8e:98:8b:58:27:9f:b0:b0:e5:97:6e:23: 45:2e:3d:83:b8:e4:a1:ee:74:98:eb:d7:7a:35:ac: 3b:af:e5:4b:9c:ec:16:ea:9e:1d:78:89:d8:ba:1d: ea:3a:a2:6c:01:e7:52:1b:b7:29:2f:cf:b5:b7:33: 42:c6:d4:ab:d5:fa:b8:5d:5f:b9:2c:c0:dc:33:9c: 8c:f8:b9:f1:3e:79:c3:05:e0:78:2e:c3:36:c9:4a: 2a:63:66:2a:64:8f:cd:97:92:26:77:11:1c:08:88: 05:2f:91:a4:03:0d:12:81:2c:2a:af:7c:1b:a4:88: 52:85:91:e7:e3:90:4a:27:0f:a7:b5:bd:63:9a:83: 0b:08:37:2f:d1:56:54:f9:bb:fb:20:97:bd:c9:1e: 8c:1d:fe:32:98:c5:05:4f:27:43:dc:93:28:ea:fb: 63:74:d2:f8:45:e4:84:75:35:24:69:dd:65:93:a6: 2a:cc:d3:ab:5f:c7:5a:d7:55:57:ef:31:4d:47:1b: 3a:d4:b0:b0:aa:e1:b3:e9:98:4c:f8:47:f7:e0:8c: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:06:1F:6F:BC:D5:F3:D3:F5:19:23:74:9E:42:4A:31:F1:D5:A1 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PjoGH2-81fPT9RkjdJ5CSjHx1aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.242.0/24 194.71.236.0/22 IPv6: 2a01:280:108::/48 Signature Algorithm: sha256WithRSAEncryption 82:0a:3d:7a:98:19:aa:1d:c5:ad:5e:61:27:b5:ff:13:fe:ab: a2:c8:59:d5:1a:b5:d2:eb:9c:e4:52:d8:9f:00:08:d8:70:0a: c9:30:75:0b:07:4d:6b:90:ec:ca:bb:51:6b:fd:6b:a0:4d:06: 3d:c3:3f:a7:66:25:b5:82:ed:fe:db:36:7a:3d:03:2e:20:ab: 05:13:f1:89:10:46:f1:e4:40:e7:40:e9:fa:a9:e9:a6:3c:95: 17:e0:12:33:e1:23:51:1d:dc:5c:1d:64:54:5d:cd:56:58:e2: 68:ee:75:b8:69:66:e7:3b:28:a4:67:b8:ac:1c:13:d1:48:4e: 8c:ef:d6:3d:a3:c7:de:7f:94:09:2d:34:94:68:81:6e:e5:e6: 00:3b:5b:18:30:a0:12:a3:cd:27:d2:75:25:c6:02:3e:8a:06: 02:84:71:86:59:54:7f:b1:87:0c:29:37:2e:fe:57:29:b8:a7: 11:da:70:7c:9f:83:8a:53:03:d9:e1:4c:da:92:a1:53:62:ee: e8:96:9a:35:c7:67:5c:33:66:13:8d:3e:30:d1:27:6d:48:12: a2:3c:34:ec:6b:10:2a:f7:8e:c2:22:78:d6:4e:cf:36:5f:7a: 59:11:9d:eb:3b:04:28:b0:61:36:5b:8d:0e:0e:5f:2c:e6:3b: d1:22:7f:bd -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NHdt+n80CRL0fb+4GzoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTNhMDYxZjZmYmNkNWYzZDNmNTE5MjM3NDllNDI0YTMxZjFkNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0qUET0+gWL9mh2ccwE3VUkK0YgG /xQeQELf1GWrVZbDjNGN/RUbU/OQWDhHKkSOmItYJ5+wsOWXbiNFLj2DuOSh7nSY 69d6Naw7r+VLnOwW6p4deInYuh3qOqJsAedSG7cpL8+1tzNCxtSr1fq4XV+5LMDc M5yM+LnxPnnDBeB4LsM2yUoqY2YqZI/Nl5ImdxEcCIgFL5GkAw0SgSwqr3wbpIhS hZHn45BKJw+ntb1jmoMLCDcv0VZU+bv7IJe9yR6MHf4ymMUFTydD3JMo6vtjdNL4 ReSEdTUkad1lk6YqzNOrX8da11VX7zFNRxs61LCwquGz6ZhM+Ef34IxL5QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFD46Bh9vvNXz0/UZI3SeQkox8dWhMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUGpvR0gyLTgxZlBUOVJramRKNUNTakh4MWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwbTyAwQC wkfsMA8EAgACMAkDBwAqAQKAAQgwDQYJKoZIhvcNAQELBQADggEBAIIKPXqYGaod xa1eYSe1/xP+q6LIWdUatdLrnORS2J8ACNhwCskwdQsHTWuQ7Mq7UWv9a6BNBj3D P6dmJbWC7f7bNno9Ay4gqwUT8YkQRvHkQOdA6fqp6aY8lRfgEjPhI1Ed3FwdZFRd zVZY4mjudbhpZuc7KKRnuKwcE9FITozv1j2jx95/lAktNJRogW7l5gA7WxgwoBKj zSfSdSXGAj6KBgKEcYZZVH+xhwwpNy7+Vym4pxHacHyfg4pTA9nhTNqSoVNi7uiW mjXHZ1wzZhONPjDRJ21IEqI8NOxrECr3jsIieNZOzzZfelkRnes7BCiwYTZbjQ4O XyzmO9Eif70= -----END CERTIFICATE-----Generated at Sun Jan 25 16:33:15 2026 by rpki-client