This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pjxV_xpQkoVeIvrUVOan3p5KBkE.roa File: pjxV_xpQkoVeIvrUVOan3p5KBkE.roa (raw, json) Hash identifier: L/bBfzwTRMUnXG1QVhOups4QDRESV0a8uvv8UrM6eyQ= Subject key identifier: A6:3C:55:FF:1A:50:92:85:5E:22:FA:D4:54:E6:A7:DE:9E:4A:06:41 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C804FA0C550A42F042F85D08ED2CE97 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pjxV_xpQkoVeIvrUVOan3p5KBkE.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 45.91.161.0/24 maxlen: 24 194.156.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4f:a0:c5:50:a4:2f:04:2f:85:d0:8e:d2:ce:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a63c55ff1a5092855e22fad454e6a7de9e4a0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:71:ea:85:9c:a7:27:84:81:a5:a5:99:24: e4:a5:9a:09:4e:88:02:fe:63:26:c2:47:5c:68:9b: 9e:13:3e:a4:43:0b:71:93:15:e2:fb:85:ba:ac:db: 27:5c:9c:5d:f0:28:73:5a:cc:34:11:d8:56:34:30: 1b:76:72:a2:c8:9a:7b:af:14:12:14:f5:ec:fe:09: 8b:d8:39:22:a9:9c:c7:ad:dd:ba:ae:b6:69:cd:91: a4:b5:31:c8:fe:06:d7:73:50:ff:a1:c6:cf:c1:87: e4:f4:9b:15:70:d6:60:58:b1:9b:6c:e1:6f:a0:c6: 8a:2d:7b:93:91:df:c8:25:6e:2f:b0:68:02:3f:92: 06:41:65:9f:49:a1:3b:b6:f7:2e:10:7f:64:4e:26: b2:3b:75:79:00:35:19:b5:20:65:b7:f5:98:f8:bc: 39:8b:04:00:db:44:b7:d3:a3:5b:a3:70:44:c5:06: 63:e6:36:6e:f0:26:14:57:4a:03:06:75:07:23:e2: 07:c9:a6:7b:9b:52:6d:d3:0e:d5:bf:e4:46:2a:61: 5d:f3:bd:cd:ad:f0:64:a4:38:b2:2a:b8:6f:93:c1: 22:3f:ae:37:24:87:91:48:c0:e3:eb:6d:8a:45:94: cb:1f:d9:5a:6c:83:79:5a:1e:5c:9d:b2:a7:91:33: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:55:FF:1A:50:92:85:5E:22:FA:D4:54:E6:A7:DE:9E:4A:06:41 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pjxV_xpQkoVeIvrUVOan3p5KBkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.161.0/24 194.156.1.0/24 Signature Algorithm: sha256WithRSAEncryption b3:ba:99:f0:33:e1:03:1c:fc:b1:aa:f4:1e:27:2e:3d:0f:5f: e8:cb:80:72:dd:bc:93:2c:11:61:d0:4a:2f:c6:8c:14:af:d3: 1a:6b:fe:0d:3e:51:4e:a3:bd:b9:65:d0:84:e0:b5:75:cb:44: 07:cb:3d:00:94:fc:3c:58:9b:50:b6:cb:6b:97:52:01:91:20: c3:4f:1e:50:18:67:bc:98:4e:42:22:d7:49:d6:65:5f:d6:13: 4e:40:b3:67:ca:8b:87:48:3c:b9:ff:04:15:34:f7:bf:40:c3: 0e:75:9e:c1:3e:19:49:f4:d7:65:b8:31:9f:53:4d:42:25:aa: d7:1c:89:77:7c:92:77:75:17:8c:cc:27:77:78:99:3e:93:66: 68:ba:dc:fb:5a:15:99:ae:f7:5b:8b:d8:98:5e:21:ad:4d:30: 45:df:ec:78:94:7c:f6:97:b5:88:89:76:4b:73:06:c3:f8:d4: 6a:83:73:4e:1d:d3:d0:f0:b4:4c:77:83:bb:25:1f:f1:a5:a7: 6a:42:14:37:70:66:f1:1c:ef:b2:45:c8:02:39:b5:0c:d3:15: 56:b8:0c:b4:78:9b:f5:17:3b:65:56:cb:79:04:5e:d6:67:14: b2:ce:38:5e:72:3d:02:20:0a:a4:f7:a1:a0:fc:d0:f8:b9:e0: 44:8d:6e:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gE+gxVCkLwQvhdCO0s6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjNjNTVmZjFhNTA5Mjg1NWUyMmZhZDQ1NGU2YTdkZTllNGEwNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqdx6oWcpyeEgaWlmSTkpZoJTogC /mMmwkdcaJueEz6kQwtxkxXi+4W6rNsnXJxd8ChzWsw0EdhWNDAbdnKiyJp7rxQS FPXs/gmL2DkiqZzHrd26rrZpzZGktTHI/gbXc1D/ocbPwYfk9JsVcNZgWLGbbOFv oMaKLXuTkd/IJW4vsGgCP5IGQWWfSaE7tvcuEH9kTiayO3V5ADUZtSBlt/WY+Lw5 iwQA20S306Nbo3BExQZj5jZu8CYUV0oDBnUHI+IHyaZ7m1Jt0w7Vv+RGKmFd873N rfBkpDiyKrhvk8EiP643JIeRSMDj622KRZTLH9labIN5Wh5cnbKnkTPBmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKY8Vf8aUJKFXiL61FTmp96eSgZBMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvcGp4Vl94cFFrb1ZlSXZyVVZPYW4zcDVLQmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVuhAwQA wpwBMA0GCSqGSIb3DQEBCwUAA4IBAQCzupnwM+EDHPyxqvQeJy49D1/oy4By3byT LBFh0EovxowUr9Maa/4NPlFOo725ZdCE4LV1y0QHyz0AlPw8WJtQtstrl1IBkSDD Tx5QGGe8mE5CItdJ1mVf1hNOQLNnyouHSDy5/wQVNPe/QMMOdZ7BPhlJ9NdluDGf U01CJarXHIl3fJJ3dReMzCd3eJk+k2Zoutz7WhWZrvdbi9iYXiGtTTBF3+x4lHz2 l7WIiXZLcwbD+NRqg3NOHdPQ8LRMd4O7JR/xpadqQhQ3cGbxHO+yRcgCObUM0xVW uAy0eJv1FztlVst5BF7WZxSyzjhecj0CIAqk96Gg/ND4ueBEjW43 -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:39 2026 by rpki-client