This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pewyh9mTWFMXEikjYH6QDkv1tH4.roa File: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (raw, json) Hash identifier: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs= Subject key identifier: A5:EC:32:87:D9:93:58:53:17:12:29:23:60:7E:90:0E:4B:F5:B4:7E Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC1656265CAC0AF241C9547EE7266 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pewyh9mTWFMXEikjYH6QDkv1tH4.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200253 IP address blocks: 94.240.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:65:62:65:ca:c0:af:24:1c:95:47:ee:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5ec3287d993585317122923607e900e4bf5b47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:2f:4f:95:c2:26:78:2e:63:80:40:d9:49: ef:90:22:ff:90:8b:9c:20:b1:a6:de:50:8c:1d:63: 84:35:55:d3:08:f4:ad:58:1d:24:90:73:f3:20:ac: a3:7d:47:3f:90:9e:07:5d:43:d0:17:ac:75:87:c5: 64:43:de:cb:b3:ef:9c:ac:7e:b7:67:30:7b:1c:63: cb:93:8c:e1:37:dc:6a:de:b3:33:ae:c4:30:20:53: c5:b8:02:34:db:e0:0f:c1:39:c6:a3:e3:f4:94:37: 1b:b7:43:49:08:26:53:30:17:ce:3f:1d:2e:dc:6d: 2c:bd:e2:d8:14:4f:83:a4:24:ee:a7:2f:43:d0:dc: 84:68:d0:98:c9:94:75:de:bd:3d:16:fd:26:cf:05: c0:74:61:36:8f:14:46:cc:cb:ef:cc:ac:77:13:df: 0c:b6:a7:16:67:3d:35:4d:c0:f2:8e:83:6f:34:83: 4c:d6:94:38:23:92:5f:87:df:8e:cb:31:79:ed:9a: c5:91:8e:85:b7:34:84:63:6f:7a:50:34:57:0a:ee: 25:67:03:f3:e7:fa:53:f3:a2:1a:fb:7a:b2:e4:5c: c1:34:62:76:90:cd:31:71:70:26:ef:aa:fe:d1:d4: a0:93:d6:b2:53:20:a4:ff:6d:9e:2b:36:12:0e:4c: b8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:32:87:D9:93:58:53:17:12:29:23:60:7E:90:0E:4B:F5:B4:7E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/pewyh9mTWFMXEikjYH6QDkv1tH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.26.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e1:b6:46:f6:dd:02:4b:9f:ca:8d:c4:1c:60:6c:dc:de:02: f3:34:82:e1:19:23:47:d2:17:f3:62:bc:b4:89:4b:04:01:0c: c8:69:00:a6:28:7b:d3:a9:e6:86:cd:21:31:e5:cb:58:0c:11: 72:03:f4:2e:f7:9c:18:e5:e7:94:0b:86:68:eb:bd:f7:a6:24: a6:8d:58:8c:ab:4e:10:5e:5f:d7:2b:a0:0a:9a:8c:85:48:a8: a5:e8:70:f8:94:75:7c:8b:8e:26:f6:73:a3:04:11:d5:53:84: ab:2b:1d:42:3e:58:92:68:35:d9:ff:c6:64:39:ef:a9:5c:ce: b8:f0:74:0b:f5:83:d4:df:53:74:1b:ad:ac:34:44:d5:5f:e8: 05:f4:ce:c4:a6:91:32:c7:03:59:5c:30:ac:53:7d:13:ee:8e: 56:21:dc:ae:20:16:50:97:fc:76:ad:e9:79:66:66:9a:3c:fd: d6:83:7e:d8:8b:9a:1c:ac:c7:40:d0:7e:6f:47:cd:2f:3f:b8: f2:c3:42:88:57:2a:4e:b7:b7:0c:50:be:fe:1a:a1:75:4f:cf: 25:1b:b0:f6:23:82:c3:37:51:5f:45:fc:03:5b:8c:16:95:da: fc:57:51:5d:82:ec:5a:10:20:23:d2:98:3b:3f:43:83:d2:76: 5b:df:d8:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MFlYmXKwK8kHJVH7nJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWVjMzI4N2Q5OTM1ODUzMTcxMjI5MjM2MDdlOTAwZTRiZjViNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn14vT5XCJnguY4BA2UnvkCL/kIuc ILGm3lCMHWOENVXTCPStWB0kkHPzIKyjfUc/kJ4HXUPQF6x1h8VkQ97Ls++crH63 ZzB7HGPLk4zhN9xq3rMzrsQwIFPFuAI02+APwTnGo+P0lDcbt0NJCCZTMBfOPx0u 3G0sveLYFE+DpCTupy9D0NyEaNCYyZR13r09Fv0mzwXAdGE2jxRGzMvvzKx3E98M tqcWZz01TcDyjoNvNINM1pQ4I5Jfh9+OyzF57ZrFkY6FtzSEY296UDRXCu4lZwPz 5/pT86Ia+3qy5FzBNGJ2kM0xcXAm76r+0dSgk9ayUyCk/22eKzYSDky48wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXsMofZk1hTFxIpI2B+kA5L9bR+MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvcGV3eWg5bVRXRk1YRWlrallINlFEa3YxdEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvAaMA0G CSqGSIb3DQEBCwUAA4IBAQAI4bZG9t0CS5/KjcQcYGzc3gLzNILhGSNH0hfzYry0 iUsEAQzIaQCmKHvTqeaGzSEx5ctYDBFyA/Qu95wY5eeUC4Zo6733piSmjViMq04Q Xl/XK6AKmoyFSKil6HD4lHV8i44m9nOjBBHVU4SrKx1CPliSaDXZ/8ZkOe+pXM64 8HQL9YPU31N0G62sNETVX+gF9M7EppEyxwNZXDCsU30T7o5WIdyuIBZQl/x2rel5 ZmaaPP3Wg37Yi5ocrMdA0H5vR80vP7jyw0KIVypOt7cMUL7+GqF1T88lG7D2I4LD N1FfRfwDW4wWldr8V1FdguxaECAj0pg7P0OD0nZb39it -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:20 2026 by rpki-client