This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/paJ_DE2H42zvRaO-PkfsPRsWcgo.roa File: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (raw, json) Hash identifier: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA= Subject key identifier: A5:A2:7F:0C:4D:87:E3:6C:EF:45:A3:BE:3E:47:EC:3D:1B:16:72:0A Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019B78A29C679FCCA5F4B7ACCDE47BB8B34C Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/paJ_DE2H42zvRaO-PkfsPRsWcgo.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15526 IP address blocks: 212.68.145.0/24 maxlen: 24 213.8.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9c:67:9f:cc:a5:f4:b7:ac:cd:e4:7b:b8:b3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5a27f0c4d87e36cef45a3be3e47ec3d1b16720a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:93:c1:f0:2e:14:44:62:e1:99:9d:16:df: 5c:ee:fa:3f:4f:2a:43:02:b4:26:4a:e2:60:5a:b7: fe:2f:62:19:51:5b:2e:d6:28:45:19:3d:41:5a:a5: e3:64:b9:98:ba:bf:2d:85:bc:89:d5:0f:54:47:70: fb:4f:21:85:0e:ce:fe:61:63:76:12:63:ca:fe:3c: 65:d7:9e:78:3c:8f:60:2c:1b:32:94:9f:9d:e8:2b: 0a:bf:ee:66:2a:e5:40:b9:5e:2e:32:cd:21:55:05: 5b:81:2e:61:0a:a4:a4:51:b5:74:e9:1a:75:39:6c: 4f:b3:ce:9f:89:7a:45:9a:ef:a6:ca:18:50:ae:6f: 91:05:a2:95:ac:75:a9:9e:e3:ea:27:ca:26:63:a5: d5:9d:27:1e:93:a7:39:75:a5:f1:5d:1d:da:cd:c1: 26:ee:ab:9b:42:24:20:f5:bc:b4:b6:bf:30:7d:44: 16:89:04:da:08:61:d2:b2:11:51:2b:97:65:e8:6d: 21:e0:d5:46:62:79:0e:92:91:b1:9d:3e:e1:f1:19: 09:26:a1:ff:d0:5c:c8:47:1a:00:4f:76:93:d3:7f: a0:6e:30:dc:0d:76:ea:2d:32:1d:70:6a:7f:22:9b: ef:56:f6:93:b0:71:59:9f:fe:7f:b7:66:d6:61:7e: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A2:7F:0C:4D:87:E3:6C:EF:45:A3:BE:3E:47:EC:3D:1B:16:72:0A X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/paJ_DE2H42zvRaO-PkfsPRsWcgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.145.0/24 213.8.23.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:93:49:52:ed:bc:d7:f5:8e:73:d7:27:cd:e8:5f:22:e4:2a: cf:07:49:01:1f:51:11:04:95:c0:26:02:52:fb:da:53:d8:89: 0c:d0:f6:ab:0a:da:da:23:85:42:2b:52:9d:5a:67:d8:37:ad: 9e:2b:af:52:4d:22:f2:04:87:e0:28:fe:b3:a2:ad:23:b7:c2: bc:9f:98:36:e2:39:f5:1e:e2:a3:e0:9c:9c:38:c1:20:e0:78: 95:bf:2e:79:91:32:0c:f2:92:ef:3b:21:0d:00:3f:bd:c6:3b: ae:d5:80:df:d3:e3:e6:a9:34:b5:41:5d:bf:56:85:8a:98:0d: 6f:9a:bb:e7:6c:17:1c:c0:3d:de:87:8b:6e:d4:1c:0d:7e:7d: 86:ca:09:6e:07:93:22:1f:5f:04:78:2c:a9:3f:db:65:39:9c: 94:74:93:d0:2e:b6:93:54:cc:e5:98:36:66:08:af:2c:c3:f3: 87:c2:67:e6:1a:ed:f5:a0:cf:c8:0c:54:6d:ee:31:4f:87:b1: bb:3e:3d:9c:72:03:2a:3d:5c:28:bd:cf:1e:64:a8:6d:bd:cc: ca:71:d7:8c:3d:5f:2c:e9:47:0a:e4:3d:15:1a:09:5f:47:68: 4e:bf:79:a3:5c:aa:48:a7:c3:3c:c7:a4:a4:44:d5:76:25:05: 30:34:53:eb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4opxnn8yl9LeszeR7uLNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWEyN2YwYzRkODdlMzZjZWY0NWEzYmUzZTQ3ZWMzZDFiMTY3MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5KTwfAuFERi4ZmdFt9c7vo/TypD ArQmSuJgWrf+L2IZUVsu1ihFGT1BWqXjZLmYur8thbyJ1Q9UR3D7TyGFDs7+YWN2 EmPK/jxl1554PI9gLBsylJ+d6CsKv+5mKuVAuV4uMs0hVQVbgS5hCqSkUbV06Rp1 OWxPs86fiXpFmu+myhhQrm+RBaKVrHWpnuPqJ8omY6XVnScek6c5daXxXR3azcEm 7qubQiQg9by0tr8wfUQWiQTaCGHSshFRK5dl6G0h4NVGYnkOkpGxnT7h8RkJJqH/ 0FzIRxoAT3aT03+gbjDcDXbqLTIdcGp/IpvvVvaTsHFZn/5/t2bWYX5XmQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKWifwxNh+Ns70Wjvj5H7D0bFnIKMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xL3BhSl9ERTJINDJ6dlJhTy1Qa2ZzUFJzV2Nnby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRmLWVmZDE0ZGI5NTdm Yi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADURJED BADVCBcwDQYJKoZIhvcNAQELBQADggEBAEqTSVLtvNf1jnPXJ83oXyLkKs8HSQEf UREElcAmAlL72lPYiQzQ9qsK2tojhUIrUp1aZ9g3rZ4rr1JNIvIEh+Ao/rOirSO3 wryfmDbiOfUe4qPgnJw4wSDgeJW/LnmRMgzyku87IQ0AP73GO67VgN/T4+apNLVB Xb9WhYqYDW+au+dsFxzAPd6Hi27UHA1+fYbKCW4HkyIfXwR4LKk/22U5nJR0k9Au tpNUzOWYNmYIryzD84fCZ+Ya7fWgz8gMVG3uMU+Hsbs+PZxyAyo9XCi9zx5kqG29 zMpx14w9XyzpRwrkPRUaCV9HaE6/eaNcqkinwzzHpKRE1XYlBTA0U+s= -----END CERTIFICATE-----Generated at Thu Jan 1 12:26:52 2026 by rpki-client