This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/PnYOxGEVe7zm1obPpCAFNOhui0A.roa File: PnYOxGEVe7zm1obPpCAFNOhui0A.roa (raw, json) Hash identifier: SDEhLEuXC+sTYt/1MK8fpYehwrMOToILNfqAmk4ujH0= Subject key identifier: 3E:76:0E:C4:61:15:7B:BC:E6:D6:86:CF:A4:20:05:34:E8:6E:8B:40 Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa Certificate serial: 019B775952C92F2B6F3459FAD1F5F307B6B5 Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/PnYOxGEVe7zm1obPpCAFNOhui0A.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57152 IP address blocks: 31.7.32.0/24 maxlen: 24 31.7.33.0/24 maxlen: 24 31.7.34.0/24 maxlen: 24 31.7.35.0/24 maxlen: 24 31.7.36.0/24 maxlen: 24 31.7.37.0/24 maxlen: 24 31.7.38.0/24 maxlen: 24 31.7.39.0/24 maxlen: 24 185.140.124.0/24 maxlen: 24 185.140.125.0/24 maxlen: 24 185.140.126.0/24 maxlen: 24 185.140.127.0/24 maxlen: 24 2a0a:9f40::/29 maxlen: 48 2a0a:9f40:babe::/48 maxlen: 48 2a0a:9f40:beef::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:c9:2f:2b:6f:34:59:fa:d1:f5:f3:07:b6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e760ec461157bbce6d686cfa4200534e86e8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:2f:b6:26:5d:5b:96:17:59:81:f1:d6:f5: a1:78:74:74:94:76:9a:95:2b:25:c2:df:87:3b:76: ea:7f:3b:9f:b6:8d:e4:08:55:7a:1b:50:c4:94:59: 28:2c:5e:69:60:e4:5e:6d:c0:20:a3:3f:7c:80:f5: e7:3c:04:f4:fb:9a:16:a8:b0:be:bb:74:f2:0d:ae: cf:42:5f:42:9b:b9:34:db:c2:d2:da:56:4a:7b:5b: 0c:b2:36:31:cd:d8:92:f4:43:bc:ec:a1:35:b3:c0: c2:29:cf:de:3e:a1:05:4c:25:7d:f6:e3:0f:4d:ad: 00:08:f9:62:ee:2f:54:52:99:ee:19:0c:45:55:a1: f5:11:fb:50:09:61:18:34:15:d2:64:76:58:93:a3: 06:4c:6b:5a:4b:ea:6c:fc:39:e6:28:2e:53:ae:d1: cc:ef:12:08:82:da:da:aa:a4:80:d0:19:52:ac:7e: 8a:94:f9:35:9a:38:4d:8d:72:d8:be:31:7f:0c:76: 55:3b:98:9a:32:0d:a2:0a:71:cf:68:9e:99:e8:5f: f6:b0:84:91:07:1f:64:f4:74:5c:02:4f:0f:d6:7a: 6b:c8:2a:cb:96:f0:18:8e:2b:ce:ad:85:ae:88:70: 77:b1:b4:65:81:3a:11:f5:bd:c7:55:9c:9e:42:84: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:76:0E:C4:61:15:7B:BC:E6:D6:86:CF:A4:20:05:34:E8:6E:8B:40 X509v3 Authority Key Identifier: keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/PnYOxGEVe7zm1obPpCAFNOhui0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.32.0/21 185.140.124.0/22 IPv6: 2a0a:9f40::/29 Signature Algorithm: sha256WithRSAEncryption 0c:5b:2e:c6:fe:55:86:72:ca:b6:20:0c:5e:c4:45:a4:5e:9e: b3:5b:5f:9a:c4:df:7d:9d:0d:7e:e2:eb:1d:70:32:08:91:54: 4c:cd:c5:3c:28:ef:4e:9b:6a:6e:09:6f:84:a2:b0:b6:84:bb: 7e:26:ad:0b:26:f3:0e:d6:c0:9c:f4:1d:91:a6:b6:56:78:17: fe:b4:b0:fb:f2:7f:b5:9a:cb:a7:5a:83:90:91:72:76:e8:e2: 66:68:57:02:ce:fb:39:47:26:ab:8b:a0:ce:41:c1:b7:5b:92: 11:c4:23:7b:71:f6:71:31:78:e4:3a:44:73:86:6d:89:3f:8a: 8b:92:3d:07:55:35:7e:70:f6:51:11:ba:96:31:e5:03:51:64: 0f:f5:f4:93:57:6f:a9:f1:2e:cd:68:34:7d:44:da:79:f4:65: ca:a3:a9:b7:04:c1:e3:54:6d:6a:71:0b:53:c8:cc:b0:2b:5a: 5b:09:44:38:84:60:b0:56:a1:2d:70:19:b2:ab:d0:37:81:cb: bc:51:f6:ae:52:55:02:bf:d7:47:2e:7f:b9:bd:a4:83:22:d3: 26:6d:29:1b:50:50:0f:fa:f4:e7:38:e8:44:8f:32:f8:a7:4a: 0e:04:85:b2:99:55:5d:99:3f:d9:e6:b1:d0:a7:cb:c2:92:30: 71:a5:d9:8b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WVLJLytvNFn60fXzB7a1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzcwOTg1ZjgzZjQxMzMwMTExYzM1MGNkNmIxZTFlZWFk NTI2YWEwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc2MGVjNDYxMTU3YmJjZTZkNjg2Y2ZhNDIwMDUzNGU4NmU4YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveovtiZdW5YXWYHx1vWheHR0lHaa lSslwt+HO3bqfzufto3kCFV6G1DElFkoLF5pYORebcAgoz98gPXnPAT0+5oWqLC+ u3TyDa7PQl9Cm7k028LS2lZKe1sMsjYxzdiS9EO87KE1s8DCKc/ePqEFTCV99uMP Ta0ACPli7i9UUpnuGQxFVaH1EftQCWEYNBXSZHZYk6MGTGtaS+ps/DnmKC5TrtHM 7xIIgtraqqSA0BlSrH6KlPk1mjhNjXLYvjF/DHZVO5iaMg2iCnHPaJ6Z6F/2sISR Bx9k9HRcAk8P1npryCrLlvAYjivOrYWuiHB3sbRlgToR9b3HVZyeQoSSNQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD52DsRhFXu85taGz6QgBTTobotAMB8GA1UdIwQY MBaAFO43CYX4P0EzARHDUM1rHh7q1SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAt MzI0NDU0NmY4Y2JmLzEvUG5ZT3hHRVZlN3ptMW9iUHBDQUZOT2h1aTBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yNzQ0ZDAtNDFhMC00NDM0LWI2OTAtMzI0NDU0NmY4Y2Jm LzEvN2pjSmhmZ19RVE1CRWNOUXpXc2VIdXJWSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHwcgAwQC uYx8MA0EAgACMAcDBQMqCp9AMA0GCSqGSIb3DQEBCwUAA4IBAQAMWy7G/lWGcsq2 IAxexEWkXp6zW1+axN99nQ1+4usdcDIIkVRMzcU8KO9Om2puCW+EorC2hLt+Jq0L JvMO1sCc9B2RprZWeBf+tLD78n+1msunWoOQkXJ26OJmaFcCzvs5Ryari6DOQcG3 W5IRxCN7cfZxMXjkOkRzhm2JP4qLkj0HVTV+cPZREbqWMeUDUWQP9fSTV2+p8S7N aDR9RNp59GXKo6m3BMHjVG1qcQtTyMywK1pbCUQ4hGCwVqEtcBmyq9A3gcu8Ufau UlUCv9dHLn+5vaSDItMmbSkbUFAP+vTnOOhEjzL4p0oOBIWymVVdmT/Z5rHQp8vC kjBxpdmL -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:17 2026 by rpki-client