This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/PjTeJzbTRv2RxHKdetjA5AhU64o.roa File: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (raw, json) Hash identifier: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw= Subject key identifier: 3E:34:DE:27:36:D3:46:FD:91:C4:72:9D:7A:D8:C0:E4:08:54:EB:8A Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019B76EB1C616B98E3A44B030F680B5CBA46 Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/PjTeJzbTRv2RxHKdetjA5AhU64o.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57795 IP address blocks: 185.157.144.0/22 maxlen: 22 2a07:a740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1c:61:6b:98:e3:a4:4b:03:0f:68:0b:5c:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e34de2736d346fd91c4729d7ad8c0e40854eb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:62:33:63:ab:1a:ac:14:61:6d:bf:24:c1: fb:11:45:e5:18:6b:d9:28:59:fb:df:56:19:ae:cf: e3:1a:81:f4:a9:58:64:13:56:2d:02:ef:e6:f1:73: db:5e:fe:cb:3a:79:81:10:fb:78:40:a2:97:d8:ff: 94:1c:71:8f:dd:e5:0e:a5:ca:a8:87:54:7a:56:90: 10:9f:d3:b7:98:fa:e9:cc:60:d7:a0:17:a2:c1:b2: b4:b7:ec:03:25:7b:90:30:c2:e4:26:7c:8c:51:fb: 4a:f1:0e:aa:28:37:c9:b1:5c:3c:6d:92:a2:80:2e: a5:a7:07:ae:87:e6:a4:1b:6f:f5:b7:c6:ef:aa:bd: 9a:20:f9:3f:1f:1a:b8:17:df:e7:8b:1e:a1:0d:7c: 86:4f:eb:f9:6c:76:30:2b:92:d4:85:b3:56:70:72: 81:c1:4e:30:39:04:5c:d7:8d:5e:bf:45:e5:28:72: b1:7f:05:3c:40:43:f3:15:b7:46:d0:3c:34:b2:c8: 32:00:82:41:5b:de:be:69:10:a5:84:6d:24:03:31: 62:bd:7f:9a:dc:ee:f3:c7:ac:14:e8:64:73:9a:62: 45:91:1a:25:40:7c:bb:e9:7a:81:e0:dd:92:f9:85: 95:60:81:f4:30:1a:7c:18:b4:d3:ca:4b:4c:31:37: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:34:DE:27:36:D3:46:FD:91:C4:72:9D:7A:D8:C0:E4:08:54:EB:8A X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/PjTeJzbTRv2RxHKdetjA5AhU64o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.144.0/22 IPv6: 2a07:a740::/29 Signature Algorithm: sha256WithRSAEncryption 99:ef:92:5d:d3:e9:50:1f:4c:1b:ae:9f:e6:91:f6:8f:a6:c2: c3:99:d5:3f:d4:aa:d0:4b:d6:6b:36:a3:6e:be:8a:25:7c:67: 72:f5:d0:98:94:e3:96:9b:99:6c:13:29:2a:44:f0:38:cf:f1: 33:b1:d6:37:65:0e:ac:77:a4:91:99:29:b5:33:ab:e1:0c:37: 71:99:aa:56:9d:1d:e1:5b:cb:72:5f:06:f4:ff:cc:b0:c4:8a: 94:c9:f6:be:c1:38:1f:ad:b2:63:c5:64:0d:d0:19:79:6b:57: d1:7b:d1:38:e8:89:94:f9:45:64:c2:3c:e2:2b:b3:0d:64:95: 66:84:0f:63:1c:85:d8:50:a7:02:58:f1:92:75:e3:92:b5:d7: 73:9d:96:c2:d3:38:ed:72:ed:f7:8f:53:9b:67:f2:b6:4e:f4: c3:3b:73:a2:0e:94:3c:e7:70:8e:5f:6c:0e:f6:5c:21:74:75: 2f:ef:c9:72:f7:14:92:c4:7f:cb:e1:f1:cc:d5:11:2c:2a:17: 91:23:fd:26:e9:d0:e4:f9:12:d1:d7:58:0e:bd:89:00:20:00: 83:af:58:f6:3c:9d:9d:34:a1:30:ab:9f:5b:4a:91:ff:c1:3b: e3:a9:18:d0:2f:d4:60:16:c2:fe:8c:6b:43:8c:4d:73:6b:19: 70:49:3b:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26xxha5jjpEsDD2gLXLpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTM0ZGUyNzM2ZDM0NmZkOTFjNDcyOWQ3YWQ4YzBlNDA4NTRlYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqRiM2OrGqwUYW2/JMH7EUXlGGvZ KFn731YZrs/jGoH0qVhkE1YtAu/m8XPbXv7LOnmBEPt4QKKX2P+UHHGP3eUOpcqo h1R6VpAQn9O3mPrpzGDXoBeiwbK0t+wDJXuQMMLkJnyMUftK8Q6qKDfJsVw8bZKi gC6lpweuh+akG2/1t8bvqr2aIPk/Hxq4F9/nix6hDXyGT+v5bHYwK5LUhbNWcHKB wU4wOQRc141ev0XlKHKxfwU8QEPzFbdG0Dw0ssgyAIJBW96+aRClhG0kAzFivX+a 3O7zx6wU6GRzmmJFkRolQHy76XqB4N2S+YWVYIH0MBp8GLTTyktMMTe66QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD403ic200b9kcRynXrYwOQIVOuKMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvUGpUZUp6YlRSdjJSeEhLZGV0akE1QWhVNjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ2QMA0E AgACMAcDBQMqB6dAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ75Jd0+lQH0wbrp/mkfaP psLDmdU/1KrQS9ZrNqNuvoolfGdy9dCYlOOWm5lsEykqRPA4z/EzsdY3ZQ6sd6SR mSm1M6vhDDdxmapWnR3hW8tyXwb0/8ywxIqUyfa+wTgfrbJjxWQN0Bl5a1fRe9E4 6ImU+UVkwjziK7MNZJVmhA9jHIXYUKcCWPGSdeOStddznZbC0zjtcu33j1ObZ/K2 TvTDO3OiDpQ853COX2wO9lwhdHUv78ly9xSSxH/L4fHM1REsKheRI/0m6dDk+RLR 11gOvYkAIACDr1j2PJ2dNKEwq59bSpH/wTvjqRjQL9RgFsL+jGtDjE1zaxlwSTsW -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:22 2026 by rpki-client