This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pmjWXndiYs4KEBmLyUOfoVEBC-k.roa File: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (raw, json) Hash identifier: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM= Subject key identifier: A6:68:D6:5E:77:62:62:CE:0A:10:19:8B:C9:43:9F:A1:51:01:0B:E9 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E4550C84196B93C523B430B5B38E Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pmjWXndiYs4KEBmLyUOfoVEBC-k.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197927 IP address blocks: 130.255.174.0/24 maxlen: 24 146.19.85.0/24 maxlen: 24 193.42.214.0/24 maxlen: 24 2a09:a740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:55:0c:84:19:6b:93:c5:23:b4:30:b5:b3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a668d65e776262ce0a10198bc9439fa151010be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:56:f5:e4:b5:9d:1e:06:14:e4:29:e9:2d: 2b:94:0e:14:12:e7:2c:27:34:db:37:ff:93:a6:19: a5:e5:d6:09:b8:18:cc:0d:e6:cb:df:7d:24:81:01: ad:ab:b0:5b:95:9c:5a:bc:00:62:f4:58:b9:d6:ca: 06:5b:09:7b:ce:61:c8:74:41:d6:67:d8:a6:02:32: ab:d7:58:29:92:f9:6b:76:08:60:72:b5:1a:ab:71: c7:1d:92:d6:bb:61:da:14:7f:ca:51:75:2b:b2:00: 97:e0:d7:b3:ac:18:b7:34:77:cb:f9:d1:a5:1b:ed: 65:db:f5:82:72:30:52:e6:a2:db:fd:d1:81:cb:95: 53:59:28:15:ae:6b:db:64:5f:08:82:2a:db:33:1d: d0:63:c1:fd:04:89:c0:38:ec:7a:6e:ca:cd:e2:55: 3d:e8:7d:2d:73:d6:0d:a3:dc:b3:c0:da:f5:a0:0f: 10:cd:78:d1:b8:0b:8b:d0:ca:fc:7d:a8:ac:e0:ea: 44:b7:96:c4:09:99:59:8a:9c:0e:88:41:67:0d:c7: ad:ce:29:1f:d6:83:fe:00:62:05:4b:23:bf:c8:c9: c1:02:ae:f0:7e:2f:fb:d2:be:9a:f4:42:d5:59:c4: 8f:4b:21:2d:9c:2c:52:8d:53:07:b4:1c:62:7d:60: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:D6:5E:77:62:62:CE:0A:10:19:8B:C9:43:9F:A1:51:01:0B:E9 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pmjWXndiYs4KEBmLyUOfoVEBC-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.174.0/24 146.19.85.0/24 193.42.214.0/24 IPv6: 2a09:a740::/32 Signature Algorithm: sha256WithRSAEncryption 33:27:40:ec:95:f6:9e:fc:54:da:d2:61:9f:0f:9b:7c:4c:79: 17:e2:dc:24:ad:58:fc:f2:af:c3:d0:77:b5:66:8c:44:0c:d9: aa:69:3b:83:ef:d4:90:67:c3:1c:39:53:78:ac:2e:aa:a7:81: 58:a1:ec:3d:d5:21:e4:82:8c:9a:b0:4d:66:d4:77:5d:b9:41: 7c:18:8a:53:9b:3a:24:7e:d9:ff:af:c0:b8:62:1f:43:fc:8f: 94:9b:55:0f:2e:02:13:a3:0e:83:f5:6f:29:f8:f8:01:1d:3f: c1:87:b4:8a:43:64:79:98:fa:77:c6:c6:69:8c:c0:d7:f0:3f: ca:cf:8e:0d:58:8c:33:29:bc:f8:ba:37:fb:fe:82:73:ec:37: c4:d7:23:75:9e:85:86:cd:0b:e4:e8:4c:a4:4c:f3:2e:94:7c: 1c:ea:c8:b6:f3:39:3b:43:f7:21:09:26:d2:8c:27:6c:bb:c1: 26:a5:52:a8:ed:6a:13:b4:8f:67:dd:0a:e7:dd:fc:e3:ed:23: e2:6b:89:4a:c1:cd:58:9f:4c:43:a8:fc:1a:2b:2b:b7:ba:5b: 15:08:1a:87:ce:a6:b8:8d:a0:0a:12:9f:6a:1b:b2:7b:88:6a: 51:4d:3f:38:74:e9:03:21:bc:46:e6:3b:07:c2:14:6c:6a:8a: a8:b0:f4:b1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x+RVDIQZa5PFI7QwtbOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjY4ZDY1ZTc3NjI2MmNlMGExMDE5OGJjOTQzOWZhMTUxMDEwYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZJW9eS1nR4GFOQp6S0rlA4UEucs JzTbN/+Tphml5dYJuBjMDebL330kgQGtq7BblZxavABi9Fi51soGWwl7zmHIdEHW Z9imAjKr11gpkvlrdghgcrUaq3HHHZLWu2HaFH/KUXUrsgCX4NezrBi3NHfL+dGl G+1l2/WCcjBS5qLb/dGBy5VTWSgVrmvbZF8IgirbMx3QY8H9BInAOOx6bsrN4lU9 6H0tc9YNo9yzwNr1oA8QzXjRuAuL0Mr8fais4OpEt5bECZlZipwOiEFnDcetzikf 1oP+AGIFSyO/yMnBAq7wfi/70r6a9ELVWcSPSyEtnCxSjVMHtBxifWBjOQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKZo1l53YmLOChAZi8lDn6FRAQvpMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcG1qV1huZGlZczRLRUJtTHlVT2ZvVkVCQy1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAgv+uAwQA khNVAwQAwSrWMA0EAgACMAcDBQAqCadAMA0GCSqGSIb3DQEBCwUAA4IBAQAzJ0Ds lfae/FTa0mGfD5t8THkX4twkrVj88q/D0He1ZoxEDNmqaTuD79SQZ8McOVN4rC6q p4FYoew91SHkgoyasE1m1HdduUF8GIpTmzokftn/r8C4Yh9D/I+Um1UPLgITow6D 9W8p+PgBHT/Bh7SKQ2R5mPp3xsZpjMDX8D/Kz44NWIwzKbz4ujf7/oJz7DfE1yN1 noWGzQvk6EykTPMulHwc6si28zk7Q/chCSbSjCdsu8EmpVKo7WoTtI9n3Qrn3fzj 7SPia4lKwc1Yn0xDqPwaKyu3ulsVCBqHzqa4jaAKEp9qG7J7iGpRTT84dOkDIbxG 5jsHwhRsaoqosPSx -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:41 2026 by rpki-client