This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pJrxV_eFHSDGkS6Ppi7gWxUYvmw.roa File: pJrxV_eFHSDGkS6Ppi7gWxUYvmw.roa (raw, json) Hash identifier: Ar/ztE0YyHtkSHInOlfYSv2vhhhuzq/Sro9LWTpf1Ho= Subject key identifier: A4:9A:F1:57:F7:85:1D:20:C6:91:2E:8F:A6:2E:E0:5B:15:18:BE:6C Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78345602F7C3165FE6E80FD99E09F707 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pJrxV_eFHSDGkS6Ppi7gWxUYvmw.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35073 IP address blocks: 194.71.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:56:02:f7:c3:16:5f:e6:e8:0f:d9:9e:09:f7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49af157f7851d20c6912e8fa62ee05b1518be6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:a8:be:e1:62:e6:43:bb:ca:6f:ed:dc:92: f2:31:04:05:c8:d1:d0:8f:b7:a6:6d:93:5a:05:3f: 5c:b8:52:35:38:0c:66:98:b8:f6:78:99:36:be:0a: e5:b5:dc:02:b8:bd:fb:37:a3:9b:89:c1:ab:a8:2a: cc:9d:b5:09:9f:b1:ab:7b:20:7e:bc:a5:27:02:ff: b1:eb:a5:33:4b:d7:b2:ef:4e:95:e0:98:e2:0f:c0: 36:72:27:58:07:ba:2f:9a:07:d2:52:e4:cd:13:94: 74:86:d1:ed:31:bb:c2:fe:82:d8:9a:33:7a:ee:e4: 2d:e5:0f:14:32:50:b7:ff:fd:b0:f8:fa:b6:b9:79: eb:a0:fd:be:58:33:97:ce:de:9b:cc:5e:a2:b2:46: 40:01:9b:b0:8f:21:87:75:f9:95:36:71:cd:e6:3b: d6:f8:0f:77:e7:7b:5d:c9:69:fc:98:03:4d:73:f1: 33:27:67:f8:94:93:39:92:59:63:46:ce:9d:60:49: 68:39:1f:df:8c:68:5f:a9:b9:f8:10:c8:3a:a5:fb: 74:1f:82:5c:c6:e8:e5:07:1a:06:8f:72:b6:48:33: 2e:1d:f7:c2:93:d4:bc:ee:22:31:36:1e:75:6c:20: f8:ee:31:09:7e:b9:1a:3c:25:04:f1:0f:d1:37:fa: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9A:F1:57:F7:85:1D:20:C6:91:2E:8F:A6:2E:E0:5B:15:18:BE:6C X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pJrxV_eFHSDGkS6Ppi7gWxUYvmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.71.97.0/24 Signature Algorithm: sha256WithRSAEncryption 12:13:15:94:2e:18:15:44:25:6a:ed:7e:92:93:af:12:9d:4a: 60:c8:b1:a3:70:76:b9:9b:41:a8:50:88:57:16:0f:34:57:73: 39:52:68:6b:fb:df:0f:45:dd:6d:15:96:21:22:d9:55:2f:df: 60:81:f0:d3:ce:1c:a8:bb:7b:17:2e:6c:58:09:ab:67:d8:21: b9:2c:3c:fc:c3:cd:64:89:05:8a:d5:1e:18:b6:ce:4f:cb:bf: 93:ed:f1:71:5d:b7:62:67:f5:73:03:c7:54:51:52:70:ab:38: 0b:77:34:24:0f:09:c4:8d:b0:2a:5f:a9:c5:ab:1b:f9:e2:cf: 32:c2:91:58:2c:47:ce:cd:e5:cc:1f:d6:1d:39:ea:f6:90:aa: 33:b4:36:48:c0:8c:02:ba:3f:ed:71:2c:91:18:29:d9:ec:d4: 93:e1:a4:c6:c8:f4:45:19:43:31:14:aa:30:1c:4c:5e:17:7a: ef:36:fd:30:bc:22:7e:7b:6a:20:1a:14:20:9e:c3:0a:7d:9f: 75:15:a6:1a:8e:6b:5f:1d:ea:25:d2:1d:51:e5:ef:3a:6b:5b: 4d:29:a5:7e:42:9b:7d:0e:06:9f:97:22:f6:80:8b:a0:b6:07: af:79:aa:33:1e:dc:74:58:e3:58:77:01:9b:87:11:06:1f:16: 6a:af:f0:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFYC98MWX+boD9meCfcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDlhZjE1N2Y3ODUxZDIwYzY5MTJlOGZhNjJlZTA1YjE1MThiZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+SovuFi5kO7ym/t3JLyMQQFyNHQ j7embZNaBT9cuFI1OAxmmLj2eJk2vgrltdwCuL37N6ObicGrqCrMnbUJn7GreyB+ vKUnAv+x66UzS9ey706V4JjiD8A2cidYB7ovmgfSUuTNE5R0htHtMbvC/oLYmjN6 7uQt5Q8UMlC3//2w+Pq2uXnroP2+WDOXzt6bzF6iskZAAZuwjyGHdfmVNnHN5jvW +A9353tdyWn8mANNc/EzJ2f4lJM5klljRs6dYEloOR/fjGhfqbn4EMg6pft0H4Jc xujlBxoGj3K2SDMuHffCk9S87iIxNh51bCD47jEJfrkaPCUE8Q/RN/rZ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSa8Vf3hR0gxpEuj6Yu4FsVGL5sMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvcEpyeFZfZUZIU0RHa1M2UHBpN2dXeFVZdm13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkdhMA0G CSqGSIb3DQEBCwUAA4IBAQASExWULhgVRCVq7X6Sk68SnUpgyLGjcHa5m0GoUIhX Fg80V3M5Umhr+98PRd1tFZYhItlVL99ggfDTzhyou3sXLmxYCatn2CG5LDz8w81k iQWK1R4Yts5Py7+T7fFxXbdiZ/VzA8dUUVJwqzgLdzQkDwnEjbAqX6nFqxv54s8y wpFYLEfOzeXMH9YdOer2kKoztDZIwIwCuj/tcSyRGCnZ7NST4aTGyPRFGUMxFKow HExeF3rvNv0wvCJ+e2ogGhQgnsMKfZ91FaYajmtfHeol0h1R5e86a1tNKaV+Qpt9 DgaflyL2gIugtgeveaozHtx0WONYdwGbhxEGHxZqr/C7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:38 2026 by rpki-client