This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/PeoNHXokHMDq2XG5umTEZp1JMkI.roa File: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (raw, json) Hash identifier: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA= Subject key identifier: 3D:EA:0D:1D:7A:24:1C:C0:EA:D9:71:B9:BA:64:C4:66:9D:49:32:42 Certificate issuer: /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d Certificate serial: 019B78A2B5794BC0E3B59C5D61EA9509441D Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/PeoNHXokHMDq2XG5umTEZp1JMkI.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206957 IP address blocks: 91.222.140.0/22 maxlen: 22 91.222.140.0/24 maxlen: 24 91.222.141.0/24 maxlen: 24 91.222.142.0/24 maxlen: 24 91.222.143.0/24 maxlen: 24 176.112.72.0/21 maxlen: 21 176.112.72.0/24 maxlen: 24 176.112.73.0/24 maxlen: 24 176.112.74.0/24 maxlen: 24 176.112.75.0/24 maxlen: 24 176.112.76.0/24 maxlen: 24 176.112.77.0/24 maxlen: 24 176.112.78.0/24 maxlen: 24 176.112.79.0/24 maxlen: 24 185.79.240.0/22 maxlen: 22 185.79.240.0/24 maxlen: 24 185.79.241.0/24 maxlen: 24 185.79.242.0/24 maxlen: 24 185.79.243.0/24 maxlen: 24 195.128.135.0/24 maxlen: 24 195.246.224.0/23 maxlen: 23 195.246.224.0/24 maxlen: 24 195.246.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b5:79:4b:c0:e3:b5:9c:5d:61:ea:95:09:44:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dea0d1d7a241cc0ead971b9ba64c4669d493242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:dd:25:7d:97:71:c4:bb:cb:7f:e0:0d:c2: 96:2b:e9:15:f9:f1:f6:95:4e:6b:8e:c7:89:bb:9a: 27:68:bb:75:6d:00:06:d9:f7:13:5a:af:4a:f2:b9: b4:91:1f:a9:7c:c5:94:c5:80:b5:f3:a3:0e:93:a8: ab:47:51:e4:6a:0a:02:ef:c1:f1:e5:3d:37:06:e7: 88:ac:ae:0d:5f:df:09:8b:6b:c1:32:c2:f9:20:01: 11:3d:8d:04:bf:47:27:63:38:a2:a3:b3:fb:b9:24: 47:8e:66:05:02:f4:89:60:1d:09:65:97:58:da:07: d9:b5:ee:c1:d1:48:af:49:69:25:87:57:2f:cc:8f: aa:81:9f:70:af:df:ca:1d:dd:af:48:ad:cd:a5:3b: b6:3f:34:dd:ff:8c:04:76:f3:9f:f4:42:3f:b3:1b: be:c8:1c:fa:1a:f4:da:8a:a3:18:4a:4f:a1:29:c4: 4b:c1:3c:65:e8:d0:18:36:01:fe:57:bb:ad:2a:57: ee:b6:6d:c0:4c:63:fa:1c:0b:a9:12:0c:6e:7a:41: f3:05:be:94:61:90:97:3b:e7:77:0f:65:72:4a:2c: f7:e6:99:e2:f0:8d:b6:a2:2e:39:e0:30:ba:88:2d: f8:22:0f:79:76:b0:2a:39:fb:f2:45:4d:56:73:df: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EA:0D:1D:7A:24:1C:C0:EA:D9:71:B9:BA:64:C4:66:9D:49:32:42 X509v3 Authority Key Identifier: keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/PeoNHXokHMDq2XG5umTEZp1JMkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.140.0/22 176.112.72.0/21 185.79.240.0/22 195.128.135.0/24 195.246.224.0/23 Signature Algorithm: sha256WithRSAEncryption 30:1f:0c:7e:f2:07:4d:89:c7:ba:3f:76:8d:ae:b5:cd:3e:9c: 94:64:14:d5:23:50:8a:ce:ee:9a:bf:3d:46:d7:46:ca:cc:3e: b7:45:e2:01:49:a6:77:82:23:92:ba:09:80:7d:47:1d:60:61: 3e:50:63:aa:46:0d:a2:e5:97:37:dc:06:07:63:a5:cb:3b:e6: 77:7c:d2:ac:a9:d9:28:53:ba:d1:80:91:dc:72:94:35:90:d8: db:db:50:1c:b2:d0:e5:48:b8:5f:c2:55:68:2b:7f:4f:ab:dc: b4:e8:06:bb:bf:7b:b6:01:5c:68:ca:4e:b1:4f:a4:01:08:a1: 8e:55:4f:bc:64:67:66:f6:00:f1:0e:fa:73:a2:2a:aa:82:eb: 22:fe:a4:bf:52:7b:70:b5:69:73:f0:d4:3c:9c:37:39:78:06: 64:72:8b:f4:f6:c3:e1:68:c9:55:77:47:bb:9c:7e:e4:4c:bd: 36:c3:aa:85:42:7a:91:c4:7b:ca:71:40:d2:e3:ac:a3:b2:77: cd:d7:ec:70:22:20:39:ee:38:58:8e:7c:96:9b:a0:3c:2d:c1: 31:09:13:90:c7:51:66:19:03:44:88:42:63:10:80:29:1e:2e: cf:79:e3:ab:0c:7d:27:38:e9:37:6c:a2:5c:de:2e:9f:63:49: 99:1a:40:fa -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4orV5S8DjtZxdYeqVCUQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl Yjg3OGQwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGVhMGQxZDdhMjQxY2MwZWFkOTcxYjliYTY0YzQ2NjlkNDkzMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMLdJX2XccS7y3/gDcKWK+kV+fH2 lU5rjseJu5onaLt1bQAG2fcTWq9K8rm0kR+pfMWUxYC186MOk6irR1HkagoC78Hx 5T03BueIrK4NX98Ji2vBMsL5IAERPY0Ev0cnYziio7P7uSRHjmYFAvSJYB0JZZdY 2gfZte7B0UivSWklh1cvzI+qgZ9wr9/KHd2vSK3NpTu2PzTd/4wEdvOf9EI/sxu+ yBz6GvTaiqMYSk+hKcRLwTxl6NAYNgH+V7utKlfutm3ATGP6HAupEgxuekHzBb6U YZCXO+d3D2VySiz35pni8I22oi454DC6iC34Ig95drAqOfvyRU1Wc99g0wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFD3qDR16JBzA6tlxubpkxGadSTJCMB8GA1UdIwQY MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt YjJkMjY4ZTJjYjc4LzEvUGVvTkhYb2tITURxMlhHNXVtVEVacDFKTWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4 LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCW96MAwQD sHBIAwQCuU/wAwQAw4CHAwQBw/bgMA0GCSqGSIb3DQEBCwUAA4IBAQAwHwx+8gdN ice6P3aNrrXNPpyUZBTVI1CKzu6avz1G10bKzD63ReIBSaZ3giOSugmAfUcdYGE+ UGOqRg2i5Zc33AYHY6XLO+Z3fNKsqdkoU7rRgJHccpQ1kNjb21AcstDlSLhfwlVo K39Pq9y06Aa7v3u2AVxoyk6xT6QBCKGOVU+8ZGdm9gDxDvpzoiqqgusi/qS/Untw tWlz8NQ8nDc5eAZkcov09sPhaMlVd0e7nH7kTL02w6qFQnqRxHvKcUDS46yjsnfN 1+xwIiA57jhYjnyWm6A8LcExCROQx1FmGQNEiEJjEIApHi7PeeOrDH0nOOk3bKJc 3i6fY0mZGkD6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:33 2026 by rpki-client