This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCNC8i1PqsgQFwgxgTzJGefSIg.roa File: PmCNC8i1PqsgQFwgxgTzJGefSIg.roa (raw, json) Hash identifier: XJsF3k1iuyRKgKIU0DgHmUv+0AwtN+XKVCuIgyXKGeA= Subject key identifier: 3E:60:8D:0B:C8:B5:3E:AB:20:40:5C:20:C6:04:F3:24:67:9F:48:88 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BF38AFEAEE7B1684D29851F333DF58749 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCNC8i1PqsgQFwgxgTzJGefSIg.roa Signing time: Sun 25 Jan 2026 05:05:31 +0000 ROA not before: Sun 25 Jan 2026 05:05:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211066 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.192.0/24 maxlen: 24 5.175.221.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 87.239.135.0/24 maxlen: 24 89.106.73.0/24 maxlen: 24 89.106.75.0/24 maxlen: 24 89.106.82.0/24 maxlen: 24 89.106.88.0/24 maxlen: 24 89.106.91.0/24 maxlen: 24 89.144.60.0/24 maxlen: 24 89.144.61.0/24 maxlen: 24 94.249.148.0/24 maxlen: 24 94.249.241.0/24 maxlen: 24 94.249.243.0/24 maxlen: 24 94.249.244.0/24 maxlen: 24 94.249.249.0/24 maxlen: 24 94.249.250.0/24 maxlen: 24 94.249.251.0/24 maxlen: 24 94.249.252.0/24 maxlen: 24 94.249.254.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:8a:fe:ae:e7:b1:68:4d:29:85:1f:33:3d:f5:87:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 25 05:05:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e608d0bc8b53eab20405c20c604f324679f4888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c2:7e:3e:9d:a1:7a:27:a0:ac:c2:d8:d7:13: a5:cd:18:62:3b:1b:6d:cc:3b:2a:29:01:e1:2a:7b: 85:c5:eb:21:13:b5:92:41:e4:44:ea:25:cf:05:da: f8:72:66:89:41:81:3d:cc:b7:f1:2e:4e:69:2f:30: ba:f1:51:a4:1c:ed:8c:c2:c7:b6:19:97:a0:c3:1f: 98:c9:f9:ee:db:b7:9d:54:b1:ee:00:7f:e4:05:02: cb:d5:99:76:9c:29:37:bc:e7:4f:76:a7:d0:eb:b9: f3:bb:20:93:9e:80:d7:06:c2:1d:d0:72:ee:c2:92: 1f:ae:6d:1c:c3:9b:51:8a:1d:92:98:e6:d7:64:7a: 6d:89:65:54:84:54:37:46:71:6b:ba:88:97:8d:68: a5:3f:d3:04:44:96:d7:36:3a:56:91:94:c4:b0:46: 49:ae:29:1b:89:4e:5a:68:44:6b:ef:d4:7b:39:ea: b8:d1:df:95:ea:93:d9:ae:fa:87:7c:5f:72:a4:be: 69:07:43:8c:9f:97:fb:06:c6:f0:df:35:37:c7:29: 89:f3:61:91:7d:35:04:ee:e2:40:d4:2d:01:2f:3a: 85:c2:d7:03:48:7f:d0:14:de:f4:74:3b:7c:cf:a3: f6:fe:f6:6c:d5:de:08:7b:79:23:97:d0:cc:93:db: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:60:8D:0B:C8:B5:3E:AB:20:40:5C:20:C6:04:F3:24:67:9F:48:88 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCNC8i1PqsgQFwgxgTzJGefSIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.192.0/24 5.175.221.0/24 87.239.131.0/24 87.239.135.0/24 89.106.73.0/24 89.106.75.0/24 89.106.82.0/24 89.106.88.0/24 89.106.91.0/24 89.144.60.0/23 94.249.148.0/24 94.249.241.0/24 94.249.243.0-94.249.244.255 94.249.249.0-94.249.252.255 94.249.254.0/24 95.215.32.0/24 Signature Algorithm: sha256WithRSAEncryption 56:30:ce:85:81:2a:ae:c5:65:f8:d4:ce:96:88:cc:49:b9:9b: 48:87:bf:62:75:18:b4:7b:c2:c0:b6:0c:2f:ab:f8:96:81:a8: d2:d2:ce:f3:16:84:74:f7:da:ab:b3:17:55:40:fa:bc:53:18: b3:21:e5:ed:3c:e3:ee:26:a4:f0:ad:be:13:18:79:98:2e:a7: 2e:4f:33:47:b4:8a:63:0e:33:7e:3c:7a:22:d1:db:f8:cb:76: aa:06:f5:7d:a6:79:b4:6d:f1:f6:0b:6e:9e:17:1a:68:23:eb: 76:bc:51:4d:b0:32:85:d9:d9:24:0b:b4:b5:55:77:1d:78:87: 4a:7d:f9:c0:10:fb:61:84:e2:8a:41:e7:db:5d:de:d7:a3:1d: 48:d8:ca:66:4e:0b:c4:44:b9:7a:15:07:34:31:69:63:70:27: e3:47:47:cf:7c:f7:61:44:f3:19:a2:d7:6f:b8:6f:d8:f8:1d: db:8b:a2:4c:0f:db:a8:a9:1f:c7:dd:6e:56:2c:3a:13:94:a4: 78:52:72:8a:43:c0:87:94:eb:3f:99:a6:72:a3:75:fa:f5:67: 54:57:8e:8e:ad:43:bf:42:63:b7:f1:82:72:42:84:39:ee:65: 11:55:c4:80:57:c0:70:c6:17:12:82:92:f0:22:37:30:d2:0a: ba:85:bb:88 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZvziv6u57FoTSmFHzM99YdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTI1MDUwNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTYwOGQwYmM4YjUzZWFiMjA0MDVjMjBjNjA0ZjMyNDY3OWY0ODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88J+Pp2heiegrMLY1xOlzRhiOxtt zDsqKQHhKnuFxeshE7WSQeRE6iXPBdr4cmaJQYE9zLfxLk5pLzC68VGkHO2Mwse2 GZegwx+Yyfnu27edVLHuAH/kBQLL1Zl2nCk3vOdPdqfQ67nzuyCTnoDXBsId0HLu wpIfrm0cw5tRih2SmObXZHptiWVUhFQ3RnFruoiXjWilP9MERJbXNjpWkZTEsEZJ rikbiU5aaERr79R7Oeq40d+V6pPZrvqHfF9ypL5pB0OMn5f7Bsbw3zU3xymJ82GR fTUE7uJA1C0BLzqFwtcDSH/QFN70dDt8z6P2/vZs1d4Ie3kjl9DMk9s5NwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFD5gjQvItT6rIEBcIMYE8yRnn0iIMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUG1DTkM4aTFQcXNnUUZ3Z3hnVHpKR2VmU0lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAAVT hgMEAAWvjAMEAAWvwAMEAAWv3QMEAFfvgwMEAFfvhwMEAFlqSQMEAFlqSwMEAFlq UgMEAFlqWAMEAFlqWwMEAVmQPAMEAF75lAMEAF758TAMAwQAXvnzAwQAXvn0MAwD BABe+fkDBABe+fwDBABe+f4DBABf1yAwDQYJKoZIhvcNAQELBQADggEBAFYwzoWB Kq7FZfjUzpaIzEm5m0iHv2J1GLR7wsC2DC+r+JaBqNLSzvMWhHT32quzF1VA+rxT GLMh5e084+4mpPCtvhMYeZgupy5PM0e0imMOM348eiLR2/jLdqoG9X2mebRt8fYL bp4XGmgj63a8UU2wMoXZ2SQLtLVVdx14h0p9+cAQ+2GE4opB59td3tejHUjYymZO C8REuXoVBzQxaWNwJ+NHR89892FE8xmi12+4b9j4HduLokwP26ipH8fdblYsOhOU pHhScopDwIeU6z+ZpnKjdfr1Z1RXjo6tQ79CY7fxgnJChDnuZRFVxIBXwHDGFxKC kvAiNzDSCrqFu4g= -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:37 2026 by rpki-client