This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa File: Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa (raw, json) Hash identifier: TrLYpO7jB7Oy0CQoGdlJxP66iYA8T+o+o2EcugMjmRs= Subject key identifier: 3F:0F:E7:6E:35:89:38:FF:6D:16:32:E5:2F:A4:EE:50:F1:61:AC:88 Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019BDB858ED6B04A9BBE17C8E5E6DB98343B Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa Signing time: Tue 20 Jan 2026 13:08:41 +0000 ROA not before: Tue 20 Jan 2026 13:08:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 45.78.90.0/23 maxlen: 24 45.78.92.0/22 maxlen: 24 62.3.6.0/24 maxlen: 24 81.85.176.0/20 maxlen: 24 85.136.104.0/21 maxlen: 24 85.136.184.0/21 maxlen: 24 85.136.200.0/21 maxlen: 24 85.136.248.0/21 maxlen: 24 91.216.138.0/24 maxlen: 24 91.229.228.0/24 maxlen: 24 93.180.208.0/22 maxlen: 24 94.139.40.0/21 maxlen: 32 119.13.224.0/20 maxlen: 20 134.199.64.0/19 maxlen: 32 136.227.160.0/19 maxlen: 32 146.19.100.0/24 maxlen: 24 193.37.136.0/24 maxlen: 24 193.105.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:85:8e:d6:b0:4a:9b:be:17:c8:e5:e6:db:98:34:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jan 20 13:08:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0fe76e358938ff6d1632e52fa4ee50f161ac88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:42:76:02:7e:3a:99:cb:ff:83:72:68:9f: 15:76:ba:64:c6:0d:3f:64:48:fc:80:2b:d4:f0:4a: 9d:25:1a:c8:7b:05:df:a4:50:05:f1:9f:18:36:17: 5c:2f:b2:a3:3b:de:25:6f:dd:e9:c7:de:e6:db:62: 0f:92:f4:a9:bf:c9:b0:24:ba:8f:5a:f4:6a:ea:61: 4d:a2:17:71:14:aa:3d:66:63:76:da:57:3a:74:0f: 35:21:0c:5f:47:37:0a:11:55:69:c7:b6:c9:f5:51: 38:db:c9:91:fd:e6:28:d6:92:28:86:8f:63:48:55: 5a:ad:42:ae:6b:04:60:bb:67:15:5e:62:e8:fc:59: f4:75:55:dc:b3:cc:7e:b1:2a:18:97:7e:ae:e4:a2: ad:7d:a3:e1:05:f8:26:bd:b4:e6:27:ea:13:d2:14: dc:9a:71:05:1f:dc:7b:f3:15:dd:72:e9:a2:4c:89: 66:4c:8c:ca:6a:0b:69:e8:e8:37:f6:c6:b3:0c:fa: 97:76:92:78:e0:17:de:88:7d:07:95:93:78:51:3a: 5a:db:7c:3f:55:5d:fb:4a:18:d6:f0:65:3c:eb:8a: d9:f6:15:8e:d8:16:ff:33:cb:4e:99:ed:70:97:b4: 81:d3:9e:39:2a:74:bf:14:11:29:65:c7:43:ec:3a: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0F:E7:6E:35:89:38:FF:6D:16:32:E5:2F:A4:EE:50:F1:61:AC:88 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/Pw_nbjWJOP9tFjLlL6TuUPFhrIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.78.90.0-45.78.95.255 62.3.6.0/24 81.85.176.0/20 85.136.104.0/21 85.136.184.0/21 85.136.200.0/21 85.136.248.0/21 91.216.138.0/24 91.229.228.0/24 93.180.208.0/22 94.139.40.0/21 119.13.224.0/20 134.199.64.0/19 136.227.160.0/19 146.19.100.0/24 193.37.136.0/24 193.105.176.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:2a:03:f1:2d:fa:5a:04:a2:98:b2:ed:7b:72:7f:bd:4e:1c: 7c:b2:51:11:1d:25:fc:46:80:8b:14:13:f9:95:c0:1e:64:75: 22:0a:bf:a0:eb:78:b1:fe:10:8a:f7:07:d9:ae:3d:ac:b9:6e: c8:95:f2:64:3f:9f:1b:2f:25:30:e3:e1:03:a6:58:2a:4a:c0: cf:55:3b:85:6c:4f:2e:a4:2d:a9:d0:2e:3b:cb:95:79:52:ef: 59:b8:f3:ac:f1:62:a8:de:34:e7:50:04:5e:b4:a4:c3:7e:fc: 5b:15:ff:91:10:43:1f:46:50:9c:01:11:6f:4f:7b:93:08:ce: f2:e4:0e:a8:b6:87:74:6c:7d:80:7b:09:8d:68:ae:84:55:00: cf:ef:b5:b7:7d:23:eb:29:e1:df:4f:4c:5a:67:89:90:1f:b5: f1:47:1d:69:31:8e:21:f7:09:0c:8c:1d:bf:48:3d:f6:23:c6: 5c:b7:fd:9b:26:de:e7:5e:c7:46:17:30:2f:15:67:e3:c3:24: 33:e4:cd:a5:bc:c2:97:7e:de:c2:d8:3c:1f:3f:48:1e:1d:1d: 1c:1b:75:40:56:c0:88:c2:e4:ec:b6:37:e3:dc:d1:8b:8f:10: 76:42:98:98:78:9c:51:1b:33:6e:f6:90:75:6d:3a:de:33:7a: 8b:de:2a:3a -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZvbhY7WsEqbvhfI5ebbmDQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMTIwMTMwODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjBmZTc2ZTM1ODkzOGZmNmQxNjMyZTUyZmE0ZWU1MGYxNjFhYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCVCdgJ+OpnL/4NyaJ8Vdrpkxg0/ ZEj8gCvU8EqdJRrIewXfpFAF8Z8YNhdcL7KjO94lb93px97m22IPkvSpv8mwJLqP WvRq6mFNohdxFKo9ZmN22lc6dA81IQxfRzcKEVVpx7bJ9VE428mR/eYo1pIoho9j SFVarUKuawRgu2cVXmLo/Fn0dVXcs8x+sSoYl36u5KKtfaPhBfgmvbTmJ+oT0hTc mnEFH9x78xXdcumiTIlmTIzKagtp6Og39sazDPqXdpJ44BfeiH0HlZN4UTpa23w/ VV37ShjW8GU864rZ9hWO2Bb/M8tOme1wl7SB0545KnS/FBEpZcdD7DreZwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFD8P5241iTj/bRYy5S+k7lDxYayIMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvUHdfbmJqV0pPUDl0RmpMbEw2VHVVUEZocklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbjAMAwQBLU5a AwQFLU5AAwQAPgMGAwQEUVWwAwQDVYhoAwQDVYi4AwQDVYjIAwQDVYj4AwQAW9iK AwQAW+XkAwQCXbTQAwQDXosoAwQEdw3gAwQFhsdAAwQFiOOgAwQAkhNkAwQAwSWI AwQAwWmwMA0GCSqGSIb3DQEBCwUAA4IBAQBeKgPxLfpaBKKYsu17cn+9Thx8slER HSX8RoCLFBP5lcAeZHUiCr+g63ix/hCK9wfZrj2suW7IlfJkP58bLyUw4+EDplgq SsDPVTuFbE8upC2p0C47y5V5Uu9ZuPOs8WKo3jTnUARetKTDfvxbFf+REEMfRlCc ARFvT3uTCM7y5A6otod0bH2AewmNaK6EVQDP77W3fSPrKeHfT0xaZ4mQH7XxRx1p MY4h9wkMjB2/SD32I8Zct/2bJt7nXsdGFzAvFWfjwyQz5M2lvMKXft7C2DwfP0ge HR0cG3VAVsCIwuTstjfj3NGLjxB2QpiYeJxRGzNu9pB1bTreM3qL3io6 -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:36 2026 by rpki-client