This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa File: PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa (raw, json) Hash identifier: FIh/JLPct1tPMk6cZXHr49IFJ+6jWnbcJViSmXmQnYI= Subject key identifier: 3E:3B:80:4E:BF:D4:0F:A7:4F:27:44:70:6C:11:BD:58:CE:83:40:15 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139F969B3258C81BFE0B4C6BCBB845 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa Signing time: Fri 02 Jan 2026 14:19:11 +0000 ROA not before: Fri 02 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 91.236.89.0/24 maxlen: 24 109.166.32.0/24 maxlen: 24 109.166.33.0/24 maxlen: 24 109.166.34.0/24 maxlen: 24 109.166.35.0/24 maxlen: 24 151.248.64.0/24 maxlen: 24 151.248.65.0/24 maxlen: 24 151.248.66.0/24 maxlen: 24 151.248.67.0/24 maxlen: 24 151.248.92.0/24 maxlen: 24 151.248.93.0/24 maxlen: 24 151.248.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9f:96:9b:32:58:c8:1b:fe:0b:4c:6b:cb:b8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e3b804ebfd40fa74f2744706c11bd58ce834015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ac:02:da:37:c9:5a:fa:70:c0:74:c6:b0:d9: 69:5c:58:8a:4b:37:7d:ce:86:4b:7c:e2:25:75:78: cf:9d:ae:35:28:c4:a0:4f:fa:1e:9c:c8:70:54:fe: ac:d2:fe:8a:4b:cb:3d:ab:88:34:be:d3:09:ee:e1: 4d:32:25:a2:6e:3b:c4:b4:41:92:58:13:48:5f:47: e0:8e:16:f1:40:4e:db:b2:fe:85:3c:fb:90:3e:66: 03:6b:50:54:8a:4f:e4:ed:ca:2b:dd:81:8f:78:89: 09:b1:c0:ac:47:fd:cc:ff:27:fb:99:df:38:d9:ea: 19:d5:4b:3e:16:54:da:84:ab:87:f2:3d:f0:a5:09: 2a:4c:31:f2:ac:18:55:de:7f:95:a6:13:6e:27:5c: d0:df:1b:c9:df:8f:cb:7b:ae:26:2f:8e:e5:48:44: ea:7d:84:0b:7e:c6:15:2b:22:f5:9a:0e:4b:16:55: ee:6b:b7:50:89:cc:2d:3a:a5:7f:82:e6:93:0e:a7: b4:b0:c6:34:17:5b:09:dc:f6:8c:76:b0:43:72:f3: 91:09:0f:cd:6d:1e:4c:2b:91:a8:ce:d5:f5:f8:97: 29:f5:1c:1a:d0:fb:40:70:bc:d4:c4:8f:91:84:8d: 2a:72:f5:b0:31:6b:32:69:4d:30:b4:21:1d:5d:47: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:80:4E:BF:D4:0F:A7:4F:27:44:70:6C:11:BD:58:CE:83:40:15 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/PjuATr_UD6dPJ0RwbBG9WM6DQBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.89.0/24 109.166.32.0/22 151.248.64.0/22 151.248.92.0-151.248.94.255 Signature Algorithm: sha256WithRSAEncryption 30:52:59:d8:ee:01:84:04:52:88:77:e6:37:ef:a4:94:b0:29: 37:3c:45:19:35:00:f5:17:fe:ce:80:ca:fc:ef:7a:40:23:7f: 46:c8:dc:ed:af:35:64:af:56:ea:ff:c2:d7:29:85:15:ae:76: ad:db:78:6c:80:37:9f:76:0b:c6:d5:7a:e1:a7:b4:74:79:1b: 0d:4a:31:07:98:a5:ce:b7:9c:41:83:19:37:fb:6a:c7:03:81: 61:df:ac:29:79:2c:ad:f3:d4:06:9c:16:bb:9a:0c:89:b0:1b: db:85:9b:95:18:6d:9d:c3:93:43:c4:b7:c5:61:de:21:47:d2: df:9f:e7:9a:e9:4a:f5:1f:9f:38:e5:c9:a1:70:3d:75:ac:2d: 74:5d:86:ec:16:0f:cd:6a:3d:92:71:87:f2:1c:f9:ec:25:be: 44:58:30:69:84:e1:9f:02:46:58:f3:db:bb:d3:6b:b1:5f:d5: 5a:94:9c:f1:92:e3:bb:56:45:36:23:dc:8a:7f:96:a7:f1:e1: 26:3e:38:36:ff:f2:59:03:10:23:a7:b3:80:50:7b:6f:fc:0e: 4d:14:20:60:a1:46:87:b3:1c:51:e5:4a:ed:b4:e7:49:c1:e3: 04:d5:c6:2c:50:07:8b:cc:2b:72:47:77:36:04:22:bd:52:70: 2c:df:79:17 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/E5+WmzJYyBv+C0xry7hFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTNiODA0ZWJmZDQwZmE3NGYyNzQ0NzA2YzExYmQ1OGNlODM0MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4awC2jfJWvpwwHTGsNlpXFiKSzd9 zoZLfOIldXjPna41KMSgT/oenMhwVP6s0v6KS8s9q4g0vtMJ7uFNMiWibjvEtEGS WBNIX0fgjhbxQE7bsv6FPPuQPmYDa1BUik/k7cor3YGPeIkJscCsR/3M/yf7md84 2eoZ1Us+FlTahKuH8j3wpQkqTDHyrBhV3n+VphNuJ1zQ3xvJ34/Le64mL47lSETq fYQLfsYVKyL1mg5LFlXua7dQicwtOqV/guaTDqe0sMY0F1sJ3PaMdrBDcvORCQ/N bR5MK5GoztX1+Jcp9Rwa0PtAcLzUxI+RhI0qcvWwMWsyaU0wtCEdXUdEhwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFD47gE6/1A+nTydEcGwRvVjOg0AVMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvUGp1QVRyX1VENmRQSjBSd2JCRzlXTTZEUUJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAW+xZAwQC baYgAwQCl/hAMAwDBAKX+FwDBACX+F4wDQYJKoZIhvcNAQELBQADggEBADBSWdju AYQEUoh35jfvpJSwKTc8RRk1APUX/s6AyvzvekAjf0bI3O2vNWSvVur/wtcphRWu dq3beGyAN592C8bVeuGntHR5Gw1KMQeYpc63nEGDGTf7ascDgWHfrCl5LK3z1Aac FruaDImwG9uFm5UYbZ3Dk0PEt8Vh3iFH0t+f55rpSvUfnzjlyaFwPXWsLXRdhuwW D81qPZJxh/Ic+ewlvkRYMGmE4Z8CRljz27vTa7Ff1VqUnPGS47tWRTYj3Ip/lqfx 4SY+ODb/8lkDECOns4BQe2/8Dk0UIGChRoezHFHlSu2050nB4wTVxixQB4vMK3JH dzYEIr1ScCzfeRc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:38 2026 by rpki-client