This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PnpU_FbyhPZaBqlnRkKhHNDzXr0.roa File: PnpU_FbyhPZaBqlnRkKhHNDzXr0.roa (raw, json) Hash identifier: VIb/U5Tmj7p4f3Fkn4/8J7AXn1UTNckx6Ly5713M9Yo= Subject key identifier: 3E:7A:54:FC:56:F2:84:F6:5A:06:A9:67:46:42:A1:1C:D0:F3:5E:BD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BDF9FAF21DDCAC3EA12001EC62BA8CF2A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PnpU_FbyhPZaBqlnRkKhHNDzXr0.roa Signing time: Wed 21 Jan 2026 08:15:42 +0000 ROA not before: Wed 21 Jan 2026 08:15:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 77.107.95.0/24 maxlen: 24 80.240.89.0/24 maxlen: 24 81.5.189.0/24 maxlen: 24 81.168.105.0/24 maxlen: 24 81.168.125.0/24 maxlen: 24 82.163.25.0/24 maxlen: 24 89.28.234.0/24 maxlen: 24 213.130.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:9f:af:21:dd:ca:c3:ea:12:00:1e:c6:2b:a8:cf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 21 08:15:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e7a54fc56f284f65a06a9674642a11cd0f35ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:7a:66:cc:4a:2d:9b:a2:4f:57:02:3e:79: 39:50:f1:be:58:cf:77:89:30:c0:c6:62:7e:f3:90: f6:89:32:c7:2a:7b:06:a6:d4:77:84:a0:77:ee:c6: 4d:8c:1c:90:3d:28:fe:d7:e3:9d:87:b4:21:fc:4b: a8:4e:1f:78:76:5a:c3:0f:fe:53:0c:45:1b:c5:71: a1:b6:42:78:a6:75:76:4e:7b:c6:73:f6:a3:35:58: 06:2f:2d:8b:ee:c4:b6:79:6e:08:1b:d5:fa:8f:8c: 7b:fa:e9:be:5b:03:50:8b:95:54:ca:b6:42:6c:87: 16:68:69:7a:ce:56:bf:1a:02:80:fc:04:5e:c5:82: 37:13:c5:67:11:50:1c:e0:57:4e:5d:6e:44:61:38: b5:2e:9d:72:41:a4:ef:30:81:69:87:b7:2c:24:4f: 37:38:2c:fc:99:91:f0:12:62:8f:04:58:03:32:b4: 61:2a:8f:80:ce:f1:62:b2:97:c4:b6:28:49:ff:45: b9:25:fc:0a:f1:d6:27:f4:cf:8e:1f:c1:36:80:e7: 4e:04:28:cf:68:c7:5c:00:26:eb:e7:f5:79:44:f9: 43:b8:0a:42:27:50:db:9f:bf:64:3b:87:eb:4e:ff: a2:a2:49:9f:0a:cf:0a:5e:3f:63:cf:2d:f9:0d:60: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:54:FC:56:F2:84:F6:5A:06:A9:67:46:42:A1:1C:D0:F3:5E:BD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PnpU_FbyhPZaBqlnRkKhHNDzXr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.95.0/24 80.240.89.0/24 81.5.189.0/24 81.168.105.0/24 81.168.125.0/24 82.163.25.0/24 89.28.234.0/24 213.130.154.0/24 Signature Algorithm: sha256WithRSAEncryption 97:3c:34:88:86:8f:8a:8a:0e:cb:df:a5:9d:8e:97:a7:c8:51: 9e:e1:52:64:a2:fd:10:ad:4c:86:9b:7f:5a:3a:4d:0e:c6:93: 30:a1:ce:bc:86:15:37:60:d2:27:04:2e:eb:1c:2a:f4:19:84: b7:cc:c6:21:db:4d:9c:1e:b3:d1:7b:bf:23:77:bd:c7:82:e6: 0c:3d:b3:85:f1:f2:46:ac:5a:30:b8:50:2d:6b:7e:52:55:1a: 8e:e8:96:5a:ba:8e:b2:9a:c9:db:ff:7a:71:8d:66:e4:8e:3a: 16:8d:fd:90:55:90:31:d9:f4:2a:31:cb:a9:9d:2f:1c:4c:5f: b1:34:68:7d:57:f7:75:d5:b3:84:a8:d8:26:55:21:43:46:85: 81:33:e1:85:be:20:7a:13:5c:c3:c8:c6:d9:34:14:5a:95:00: d4:bf:d7:fa:68:ef:29:87:10:89:74:01:24:8e:b3:04:6e:6b: 63:cf:04:b2:27:98:50:16:45:61:25:5c:f3:41:70:30:94:b4: dc:eb:d2:c9:86:2b:28:0c:9f:51:20:f7:95:f5:5e:6f:5d:6f: 2d:68:d5:4f:78:e9:10:d1:09:79:e4:56:d5:81:28:94:4a:c0: 47:f1:fc:67:55:8d:17:06:39:bf:94:66:19:b4:6e:92:54:b3: 24:6a:21:25 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZvfn68h3crD6hIAHsYrqM8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTIxMDgxNTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTdhNTRmYzU2ZjI4NGY2NWEwNmE5Njc0NjQyYTExY2QwZjM1ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupZ6ZsxKLZuiT1cCPnk5UPG+WM93 iTDAxmJ+85D2iTLHKnsGptR3hKB37sZNjByQPSj+1+Odh7Qh/EuoTh94dlrDD/5T DEUbxXGhtkJ4pnV2TnvGc/ajNVgGLy2L7sS2eW4IG9X6j4x7+um+WwNQi5VUyrZC bIcWaGl6zla/GgKA/ARexYI3E8VnEVAc4FdOXW5EYTi1Lp1yQaTvMIFph7csJE83 OCz8mZHwEmKPBFgDMrRhKo+AzvFispfEtihJ/0W5JfwK8dYn9M+OH8E2gOdOBCjP aMdcACbr5/V5RPlDuApCJ1Dbn79kO4frTv+iokmfCs8KXj9jzy35DWD+4wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFD56VPxW8oT2WgapZ0ZCoRzQ8169MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUG5wVV9GYnloUFphQnFsblJrS2hITkR6WHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATWtfAwQA UPBZAwQAUQW9AwQAUahpAwQAUah9AwQAUqMZAwQAWRzqAwQA1YKaMA0GCSqGSIb3 DQEBCwUAA4IBAQCXPDSIho+Kig7L36WdjpenyFGe4VJkov0QrUyGm39aOk0OxpMw oc68hhU3YNInBC7rHCr0GYS3zMYh202cHrPRe78jd73HguYMPbOF8fJGrFowuFAt a35SVRqO6JZauo6ymsnb/3pxjWbkjjoWjf2QVZAx2fQqMcupnS8cTF+xNGh9V/d1 1bOEqNgmVSFDRoWBM+GFviB6E1zDyMbZNBRalQDUv9f6aO8phxCJdAEkjrMEbmtj zwSyJ5hQFkVhJVzzQXAwlLTc69LJhisoDJ9RIPeV9V5vXW8taNVPeOkQ0Ql55FbV gSiUSsBH8fxnVY0XBjm/lGYZtG6SVLMkaiEl -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:57 2026 by rpki-client