This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/peBfw_-wjEYw0EzCqdd8nKHM_AY.roa File: peBfw_-wjEYw0EzCqdd8nKHM_AY.roa (raw, json) Hash identifier: 4Gl/4cIqo71MzBBZkrPGIXTGutQZV83VS9wPedfYnpU= Subject key identifier: A5:E0:5F:C3:FF:B0:8C:46:30:D0:4C:C2:A9:D7:7C:9C:A1:CC:FC:06 Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Certificate serial: 019B78A32740B5841EAD5C3C688467310AA8 Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/peBfw_-wjEYw0EzCqdd8nKHM_AY.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 43.226.0.0/23 maxlen: 23 46.17.217.0/24 maxlen: 24 63.251.117.0/24 maxlen: 24 64.95.150.0/23 maxlen: 23 64.225.244.0/23 maxlen: 23 91.198.19.0/24 maxlen: 24 91.246.38.0/24 maxlen: 24 103.94.60.0/22 maxlen: 22 103.199.80.0/24 maxlen: 24 103.206.156.0/23 maxlen: 23 104.225.253.0/24 maxlen: 24 117.18.104.0/24 maxlen: 24 123.100.227.0/24 maxlen: 24 148.222.40.0/22 maxlen: 22 167.234.38.0/24 maxlen: 24 198.49.103.0/24 maxlen: 24 202.2.60.0/22 maxlen: 22 202.92.214.0/23 maxlen: 23 203.27.201.0/24 maxlen: 24 216.183.120.0/24 maxlen: 24 216.203.15.0/24 maxlen: 24 217.11.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:27:40:b5:84:1e:ad:5c:3c:68:84:67:31:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5e05fc3ffb08c4630d04cc2a9d77c9ca1ccfc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:aa:2b:42:5c:f1:49:0b:f2:3c:a2:3f:89: 7e:49:f1:61:28:d1:75:27:f8:41:2f:0b:f6:79:7a: e2:26:22:6f:9a:9a:36:4c:e6:20:7d:c7:36:f1:df: 3d:88:3a:93:34:62:b5:7d:24:88:1b:dd:3f:c8:5e: fb:cf:66:0c:3e:0b:75:fd:d6:f5:a6:53:09:17:c9: 19:d6:c4:64:28:1e:56:17:f0:fa:fc:da:a4:59:2f: 5e:2d:ed:41:b4:40:c1:7a:ad:b9:83:78:32:ff:8d: 48:23:e2:b2:49:23:2f:d7:d7:04:fe:11:f8:5b:7a: 41:40:01:31:bf:e8:35:01:9a:c5:d4:2e:75:b7:7e: 60:7b:15:b5:b5:39:3d:35:c4:f8:de:f5:5e:2f:8f: 18:44:17:0e:98:f2:07:4d:66:ed:74:84:2d:a3:7b: d0:d0:0a:1d:c5:d3:9f:11:05:13:b2:a1:4d:e6:71: ff:c1:cb:46:16:d3:e4:a7:33:d0:18:75:28:5a:99: 17:8d:fe:69:cf:b8:af:38:95:d9:0e:9b:78:d3:bd: 3d:fd:20:1e:56:fa:33:df:75:29:68:ad:e8:09:1a: df:b1:dd:f5:e6:96:ea:3a:ac:10:3d:c8:89:79:b7: 55:05:ba:8f:25:aa:f1:60:36:70:28:b0:ca:1b:64: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:5F:C3:FF:B0:8C:46:30:D0:4C:C2:A9:D7:7C:9C:A1:CC:FC:06 X509v3 Authority Key Identifier: keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/peBfw_-wjEYw0EzCqdd8nKHM_AY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.0.0/23 46.17.217.0/24 63.251.117.0/24 64.95.150.0/23 64.225.244.0/23 91.198.19.0/24 91.246.38.0/24 103.94.60.0/22 103.199.80.0/24 103.206.156.0/23 104.225.253.0/24 117.18.104.0/24 123.100.227.0/24 148.222.40.0/22 167.234.38.0/24 198.49.103.0/24 202.2.60.0/22 202.92.214.0/23 203.27.201.0/24 216.183.120.0/24 216.203.15.0/24 217.11.174.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:fa:93:38:83:9a:72:63:4e:d8:60:ae:39:8b:fb:35:01:c9: 57:24:3b:37:18:45:e3:59:b7:16:38:ce:77:f2:1f:38:6e:29: a7:0d:2c:37:5e:be:9e:60:ac:95:04:37:1b:7c:96:1f:fe:b2: ad:91:7b:14:20:40:c4:ed:f5:eb:04:e1:f6:0b:81:d6:2e:41: d9:73:0a:2f:ce:ee:0b:e5:74:ec:a8:ec:d5:e4:54:ab:95:9a: 5c:0e:ef:ca:8d:ad:a8:45:1a:a3:7d:3a:a1:15:d6:29:db:cc: 54:44:b5:70:5d:1c:8b:1d:a3:30:08:bf:bc:9f:5c:9d:5a:e0: 3d:67:72:5c:2a:71:dc:5e:dd:e6:aa:f8:8a:f2:63:7c:7d:54: fb:f6:63:c9:84:8c:20:e9:57:48:7a:26:e7:6d:af:37:28:0b: fc:33:94:61:fe:3a:47:a7:c4:fe:54:e5:33:0b:b6:2c:a3:73: 39:74:8f:d4:ab:54:f3:a4:73:90:9d:4d:b6:71:74:44:9c:44: d3:c3:24:40:83:60:2e:98:15:b1:b9:1e:63:d9:fc:82:b2:65: 1d:0e:3d:ac:9e:40:0b:be:e1:70:20:6a:b0:3b:f3:06:9b:7a: f2:e5:8c:9a:42:6f:97:82:44:de:c1:c5:73:f8:01:2f:b7:d9: ab:ea:b4:92 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt4oydAtYQerVw8aIRnMQqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTEzMTc3NWIzMjYwYjExYTE2MjQwZDFkOGU3Njg5MWQ3 ZjM3MzIwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWUwNWZjM2ZmYjA4YzQ2MzBkMDRjYzJhOWQ3N2M5Y2ExY2NmYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mqK0Jc8UkL8jyiP4l+SfFhKNF1 J/hBLwv2eXriJiJvmpo2TOYgfcc28d89iDqTNGK1fSSIG90/yF77z2YMPgt1/db1 plMJF8kZ1sRkKB5WF/D6/NqkWS9eLe1BtEDBeq25g3gy/41II+KySSMv19cE/hH4 W3pBQAExv+g1AZrF1C51t35gexW1tTk9NcT43vVeL48YRBcOmPIHTWbtdIQto3vQ 0AodxdOfEQUTsqFN5nH/wctGFtPkpzPQGHUoWpkXjf5pz7ivOJXZDpt40709/SAe Vvoz33UpaK3oCRrfsd315pbqOqwQPciJebdVBbqPJarxYDZwKLDKG2QdQQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFKXgX8P/sIxGMNBMwqnXfJyhzPwGMB8GA1UdIwQY MBaAFE+RMXdbMmCxGhYkDR2OdokdfzcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMt YWI2M2Q0NWY0YjZhLzEvcGVCZndfLXdqRVl3MEV6Q3FkZDhuS0hNX0FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTk2MmUtYjExYy00ZTY5LWI0MTMtYWI2M2Q0NWY0YjZh LzEvVDVFeGQxc3lZTEVhRmlRTkhZNTJpUjFfTnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAEr 4gADBAAuEdkDBAA/+3UDBAFAX5YDBAFA4fQDBABbxhMDBABb9iYDBAJnXjwDBABn x1ADBAFnzpwDBABo4f0DBAB1EmgDBAB7ZOMDBAKU3igDBACn6iYDBADGMWcDBALK AjwDBAHKXNYDBADLG8kDBADYt3gDBADYyw8DBADZC64wDQYJKoZIhvcNAQELBQAD ggEBAD/6kziDmnJjTthgrjmL+zUByVckOzcYReNZtxY4znfyHzhuKacNLDdevp5g rJUENxt8lh/+sq2RexQgQMTt9esE4fYLgdYuQdlzCi/O7gvldOyo7NXkVKuVmlwO 78qNrahFGqN9OqEV1inbzFREtXBdHIsdozAIv7yfXJ1a4D1nclwqcdxe3eaq+Iry Y3x9VPv2Y8mEjCDpV0h6JudtrzcoC/wzlGH+OkenxP5U5TMLtiyjczl0j9SrVPOk c5CdTbZxdEScRNPDJECDYC6YFbG5HmPZ/IKyZR0OPayeQAu+4XAgarA78wabevLl jJpCb5eCRN7BxXP4AS+32avqtJI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:31 2026 by rpki-client