This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/pEACykvZyRBjnuYUwUstZ7_jCVk.roa File: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (raw, json) Hash identifier: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE= Subject key identifier: A4:40:02:CA:4B:D9:C9:10:63:9E:E6:14:C1:4B:2D:67:BF:E3:09:59 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E3F98876E8766CE1B35C418B044DB Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/pEACykvZyRBjnuYUwUstZ7_jCVk.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47232 IP address blocks: 5.39.200.0/22 maxlen: 24 5.39.200.0/23 maxlen: 23 46.29.224.0/21 maxlen: 32 46.29.228.0/23 maxlen: 32 78.111.112.0/20 maxlen: 32 78.111.114.0/23 maxlen: 32 78.111.116.0/23 maxlen: 32 91.192.32.0/22 maxlen: 24 93.91.144.0/20 maxlen: 32 93.91.149.0/24 maxlen: 32 93.91.150.0/23 maxlen: 32 93.91.152.0/24 maxlen: 32 93.91.153.0/24 maxlen: 32 93.91.154.0/24 maxlen: 32 109.235.0.0/21 maxlen: 24 185.15.108.0/22 maxlen: 32 185.52.172.0/24 maxlen: 32 185.64.220.0/22 maxlen: 32 185.125.128.0/22 maxlen: 32 213.108.162.0/23 maxlen: 32 213.109.172.0/22 maxlen: 32 217.75.208.0/20 maxlen: 32 2a02:17a0::/29 maxlen: 48 2a02:17a0:d000::/36 maxlen: 36 2a03:2a80::/29 maxlen: 48 2a03:2a82::/31 maxlen: 48 2a04:7bc0::/29 maxlen: 48 2a04:7bc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3f:98:87:6e:87:66:ce:1b:35:c4:18:b0:44:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44002ca4bd9c910639ee614c14b2d67bfe30959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:70:1f:b1:90:a2:b1:c4:98:d8:8b:10:3b:b7: 60:f6:8e:29:9a:d8:67:c7:84:44:aa:ca:9a:a1:69: 4f:3a:00:14:fe:5f:68:36:87:ef:f3:84:41:3f:de: 9c:c8:59:24:d0:11:f5:f6:6d:8e:81:03:60:ba:c4: ff:f0:c5:5c:3a:4d:8d:70:0b:84:f9:f5:af:d2:32: 4f:11:f3:b2:11:43:5b:2a:38:ba:50:c8:c6:2b:64: 74:ec:47:fa:5c:fa:65:cd:a3:0d:f8:07:52:b1:a4: a7:c7:2d:f4:10:85:4f:30:c8:e9:da:13:79:f7:61: b8:5e:28:92:87:dd:43:f2:44:26:c8:70:15:f6:a1: fa:51:18:c2:e4:9f:4d:a9:de:40:59:58:82:f6:d5: 96:18:a7:6b:b4:e5:00:6f:7b:0a:41:4c:3d:4d:73: 41:e2:cc:cc:30:05:22:21:09:87:f7:16:12:03:21: f6:4f:6c:a2:8e:56:60:7b:ac:72:ed:ba:00:08:41: 3a:fa:0d:47:54:c9:58:92:c1:34:d1:2e:d7:d9:2e: c8:00:c4:7e:21:4b:f4:37:6a:62:59:7c:63:f2:1e: 8f:46:d5:67:f8:50:d3:20:ba:88:ff:46:62:0e:3a: 03:d9:a9:e4:0b:e4:3c:97:00:2b:f8:eb:fd:88:2c: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:40:02:CA:4B:D9:C9:10:63:9E:E6:14:C1:4B:2D:67:BF:E3:09:59 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/pEACykvZyRBjnuYUwUstZ7_jCVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.200.0/22 46.29.224.0/21 78.111.112.0/20 91.192.32.0/22 93.91.144.0/20 109.235.0.0/21 185.15.108.0/22 185.52.172.0/24 185.64.220.0/22 185.125.128.0/22 213.108.162.0/23 213.109.172.0/22 217.75.208.0/20 IPv6: 2a02:17a0::/29 2a03:2a80::/29 2a04:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption 34:89:85:bd:4f:64:aa:5f:5a:6a:00:65:58:f3:54:51:3e:57: 82:fa:cd:2b:c1:96:2e:dd:89:f3:8b:78:d6:a2:3a:58:73:bc: 9f:68:9a:80:4a:f6:b7:96:02:bd:d0:d6:44:73:b5:7a:0d:8a: be:4c:75:17:45:77:ac:61:3d:79:fa:37:bb:89:9f:cb:97:de: 08:00:92:38:c3:92:0d:1e:30:e9:12:5c:ed:8d:6f:fa:c8:f8: ac:02:0a:81:24:82:8a:e9:0d:96:74:cf:53:a6:6d:94:ca:81: 35:27:23:09:5f:cb:46:80:33:ec:4f:b2:cc:4e:aa:e7:2b:67: 13:cb:2e:76:fa:a0:e0:07:c1:ca:e6:2d:63:c4:a7:86:6f:ce: 0a:1a:b8:4e:35:64:b6:f4:fc:9a:4c:1b:bb:87:f9:d9:ab:29: 6d:ee:ba:9f:0e:e0:1d:22:d2:df:f7:bd:e3:b0:cf:32:11:c0: 1d:f7:b5:5f:e5:74:14:1f:c2:77:cb:1f:8d:23:6f:65:13:df: cf:11:5e:21:54:d6:c6:ee:a1:fb:b4:26:3f:0c:97:82:dc:ba: bf:42:ab:69:7a:c1:dc:e7:ae:6a:0d:eb:c4:ba:ec:a4:a7:cc: 05:3a:09:da:27:d6:fa:d2:94:f8:ee:fb:e3:f2:56:45:a5:e0: a8:a0:92:0d -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt5fj+Yh26HZs4bNcQYsETbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQwMDJjYTRiZDljOTEwNjM5ZWU2MTRjMTRiMmQ2N2JmZTMwOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XAfsZCiscSY2IsQO7dg9o4pmthn x4REqsqaoWlPOgAU/l9oNofv84RBP96cyFkk0BH19m2OgQNgusT/8MVcOk2NcAuE +fWv0jJPEfOyEUNbKji6UMjGK2R07Ef6XPplzaMN+AdSsaSnxy30EIVPMMjp2hN5 92G4XiiSh91D8kQmyHAV9qH6URjC5J9Nqd5AWViC9tWWGKdrtOUAb3sKQUw9TXNB 4szMMAUiIQmH9xYSAyH2T2yijlZge6xy7boACEE6+g1HVMlYksE00S7X2S7IAMR+ IUv0N2piWXxj8h6PRtVn+FDTILqI/0ZiDjoD2ankC+Q8lwAr+Ov9iCwSPwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFKRAAspL2ckQY57mFMFLLWe/4wlZMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvcEVBQ3lrdlp5UkJqbnVZVXdVc3RaN19qQ1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEAgUnyAME Ay4d4AMEBE5vcAMEAlvAIAMEBF1bkAMEA23rAAMEArkPbAMEALk0rAMEArlA3AME Arl9gAMEAdVsogMEAtVtrAMEBNlL0DAbBAIAAjAVAwUDKgIXoAMFAyoDKoADBQMq BHvAMA0GCSqGSIb3DQEBCwUAA4IBAQA0iYW9T2SqX1pqAGVY81RRPleC+s0rwZYu 3Ynzi3jWojpYc7yfaJqASva3lgK90NZEc7V6DYq+THUXRXesYT15+je7iZ/Ll94I AJI4w5INHjDpElztjW/6yPisAgqBJIKK6Q2WdM9Tpm2UyoE1JyMJX8tGgDPsT7LM TqrnK2cTyy52+qDgB8HK5i1jxKeGb84KGrhONWS29PyaTBu7h/nZqylt7rqfDuAd ItLf973jsM8yEcAd97Vf5XQUH8J3yx+NI29lE9/PEV4hVNbG7qH7tCY/DJeC3Lq/ QqtpesHc565qDevEuuykp8wFOgnaJ9b60pT47vvj8lZFpeCooJIN -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:55 2026 by rpki-client