This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa File: PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa (raw, json) Hash identifier: IqN6OL+5nEUWmHYyOF1lygpuFBpPS3oI5vZnXBqF7kc= Subject key identifier: 3E:A4:04:B5:C5:3E:F4:38:FD:82:F8:C3:76:A6:5B:80:D4:E2:A1:95 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019B7F1549B3AF7ADFF3D602DD575EEB7BD0 Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199484 IP address blocks: 130.255.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:49:b3:af:7a:df:f3:d6:02:dd:57:5e:eb:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ea404b5c53ef438fd82f8c376a65b80d4e2a195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:1e:0f:db:68:70:10:fb:c2:3d:ac:59:12: dd:54:41:34:21:1f:43:f7:36:ff:22:8a:6d:08:2f: 5b:83:95:16:b9:2a:1a:cd:56:29:45:6a:3a:1f:81: b4:bc:b1:9b:6b:17:b6:53:cb:e8:9b:88:9a:74:e3: c4:eb:bd:7d:78:a9:55:85:0d:de:d3:f3:7d:bb:a0: f0:0c:e6:9f:25:eb:a9:ec:22:d3:74:7d:bd:e1:e6: 0a:08:0b:b5:46:da:1c:d9:f6:2e:53:15:a6:3f:79: be:3f:bd:30:c3:22:0f:d9:13:93:7c:4c:82:21:3b: 73:38:34:eb:f6:d1:c2:4d:fe:12:b7:d1:43:a5:3f: 70:02:23:f7:a4:c8:39:9d:33:39:26:35:3b:83:de: d6:49:25:bf:9c:df:12:b4:59:38:0f:e4:8d:7d:79: 67:1e:c9:06:0b:25:93:c4:35:61:a5:5b:ae:71:a7: 64:81:6d:d3:8f:4b:88:71:69:31:45:82:5f:43:0c: 64:4d:c4:a5:9f:41:e0:0b:3b:a6:3a:07:d5:27:0d: bf:0f:da:a9:c0:c3:e2:f5:7d:6a:39:83:29:7a:97: f4:d0:6a:3e:1c:ef:5d:a7:aa:d2:a7:fa:f0:92:99: 05:76:25:08:d8:1b:da:9d:46:a0:4f:11:e3:5e:89: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:04:B5:C5:3E:F4:38:FD:82:F8:C3:76:A6:5B:80:D4:E2:A1:95 X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.173.0/24 Signature Algorithm: sha256WithRSAEncryption 70:7a:bd:7c:b8:1d:4a:84:ed:8c:70:2d:37:99:38:68:db:0c: 98:ea:9c:a4:d5:0b:76:d2:4a:7b:d2:21:52:23:83:eb:c3:f3: fb:61:82:0d:79:94:dd:8f:bf:e7:e6:56:0f:46:02:8d:9b:43: 1f:ad:df:e1:23:b6:90:0f:cc:66:b6:2d:5d:0d:a6:7f:49:9a: dd:2f:82:cf:61:f7:27:98:9c:dc:68:46:e5:cf:b5:29:23:96: 20:86:59:28:25:54:b7:b7:69:48:50:79:36:00:19:3d:9d:93: fb:4f:76:21:0e:93:d3:fd:ec:5c:77:76:d7:4b:ac:2c:3a:bb: c9:44:bb:7a:f1:2b:f1:95:28:d9:0a:1b:b4:68:c3:43:9b:a6: 0a:49:94:57:1c:4f:7d:c1:f6:8e:5e:5d:0a:a2:0d:e3:1a:58: f0:e6:db:42:88:4b:04:7d:cc:4f:12:de:d2:4f:fc:fe:7b:cc: 39:e6:e1:47:ac:56:67:4a:47:d4:94:7b:7a:7d:56:f6:85:26: 0a:f9:f9:c3:c2:e3:a0:2d:be:bb:e1:7f:a8:a7:22:68:ff:a8: 45:99:f3:1b:e3:e7:43:2f:4d:c7:25:31:d3:e4:ed:2b:25:17: 5d:e7:7f:29:bc:1e:14:b4:f4:46:2b:b8:e9:e9:d4:d8:62:19: f3:ef:da:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUmzr3rf89YC3Vde63vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWE0MDRiNWM1M2VmNDM4ZmQ4MmY4YzM3NmE2NWI4MGQ0ZTJhMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2QeD9tocBD7wj2sWRLdVEE0IR9D 9zb/IoptCC9bg5UWuSoazVYpRWo6H4G0vLGbaxe2U8vom4iadOPE6719eKlVhQ3e 0/N9u6DwDOafJeup7CLTdH294eYKCAu1Rtoc2fYuUxWmP3m+P70wwyIP2ROTfEyC ITtzODTr9tHCTf4St9FDpT9wAiP3pMg5nTM5JjU7g97WSSW/nN8StFk4D+SNfXln HskGCyWTxDVhpVuucadkgW3Tj0uIcWkxRYJfQwxkTcSln0HgCzumOgfVJw2/D9qp wMPi9X1qOYMpepf00Go+HO9dp6rSp/rwkpkFdiUI2BvanUagTxHjXolN5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD6kBLXFPvQ4/YL4w3amW4DU4qGVMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvUHFRRXRjVS05RGo5Z3ZqRGRxWmJnTlRpb1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv+tMA0G CSqGSIb3DQEBCwUAA4IBAQBwer18uB1KhO2McC03mTho2wyY6pyk1Qt20kp70iFS I4Prw/P7YYINeZTdj7/n5lYPRgKNm0Mfrd/hI7aQD8xmti1dDaZ/SZrdL4LPYfcn mJzcaEblz7UpI5YghlkoJVS3t2lIUHk2ABk9nZP7T3YhDpPT/excd3bXS6wsOrvJ RLt68SvxlSjZChu0aMNDm6YKSZRXHE99wfaOXl0Kog3jGljw5ttCiEsEfcxPEt7S T/z+e8w55uFHrFZnSkfUlHt6fVb2hSYK+fnDwuOgLb674X+opyJo/6hFmfMb4+dD L03HJTHT5O0rJRdd538pvB4UtPRGK7jp6dTYYhnz79og -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:04 2026 by rpki-client