This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/PMhUU73xUVC7raWhgd5q_EKF038.roa File: PMhUU73xUVC7raWhgd5q_EKF038.roa (raw, json) Hash identifier: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ= Subject key identifier: 3C:C8:54:53:BD:F1:51:50:BB:AD:A5:A1:81:DE:6A:FC:42:85:D3:7F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F31E620863B9A70DB2B2DB78B610E Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/PMhUU73xUVC7raWhgd5q_EKF038.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45012 IP address blocks: 5.44.100.0/23 maxlen: 24 5.44.102.0/23 maxlen: 24 5.44.104.0/22 maxlen: 24 5.44.108.0/22 maxlen: 24 31.47.240.0/20 maxlen: 24 37.218.248.0/22 maxlen: 22 37.218.252.0/24 maxlen: 24 37.218.254.0/24 maxlen: 24 37.228.152.0/21 maxlen: 24 46.243.88.0/21 maxlen: 24 77.75.248.0/21 maxlen: 24 81.88.16.0/24 maxlen: 24 81.88.28.0/22 maxlen: 24 81.88.32.0/20 maxlen: 24 85.158.176.0/21 maxlen: 24 89.22.100.0/22 maxlen: 24 89.22.106.0/24 maxlen: 24 89.22.108.0/24 maxlen: 24 89.22.110.0/23 maxlen: 24 89.22.112.0/22 maxlen: 24 89.22.116.0/22 maxlen: 24 89.22.122.0/23 maxlen: 24 89.22.124.0/22 maxlen: 24 91.151.16.0/21 maxlen: 24 91.203.108.0/22 maxlen: 24 91.203.212.0/22 maxlen: 24 91.220.49.0/24 maxlen: 24 93.90.178.0/24 maxlen: 24 93.90.180.0/23 maxlen: 24 109.237.128.0/20 maxlen: 24 128.127.65.0/24 maxlen: 24 128.127.66.0/24 maxlen: 24 178.20.96.0/21 maxlen: 24 178.250.8.0/21 maxlen: 24 178.250.170.0/24 maxlen: 24 178.250.174.0/24 maxlen: 24 185.3.232.0/22 maxlen: 24 185.39.220.0/22 maxlen: 24 185.61.40.0/22 maxlen: 24 185.80.92.0/22 maxlen: 24 185.137.168.0/22 maxlen: 24 185.207.228.0/22 maxlen: 24 188.64.46.0/23 maxlen: 24 192.162.87.0/24 maxlen: 24 193.22.255.0/24 maxlen: 24 194.145.226.0/24 maxlen: 24 195.5.120.0/23 maxlen: 24 195.82.152.0/23 maxlen: 24 2a00:fa40:2000::/36 maxlen: 64 2a00:fa40:3000::/36 maxlen: 36 2a00:fa40:4000::/36 maxlen: 36 2a01:64c0::/32 maxlen: 32 2a02:2b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:e6:20:86:3b:9a:70:db:2b:2d:b7:8b:61:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cc85453bdf15150bbada5a181de6afc4285d37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:84:74:4e:cf:63:eb:73:ed:9d:9d:3f:8d: 18:f8:f6:08:77:6b:2a:51:23:b6:26:be:08:99:f8: ce:e2:b2:b1:98:1a:f9:8b:83:e1:d9:6d:5b:55:85: b0:7a:53:50:f6:00:66:d7:c6:77:bf:5f:66:2e:75: ad:a0:88:e0:92:41:39:43:78:e6:2b:09:be:87:c3: 02:85:95:5d:b8:c5:30:2d:58:fc:08:9a:42:9b:72: 6a:54:93:2a:b5:8f:4a:07:30:9b:97:bf:df:19:b8: f1:c4:c3:06:47:ef:eb:98:2a:a6:8b:97:ef:26:56: 1f:b1:9f:55:fb:b4:9d:98:fb:09:4c:99:bf:d0:18: ac:70:fa:13:73:9d:9b:24:ee:cc:46:81:0a:09:a2: 73:42:a7:a6:38:27:85:61:a1:5d:cd:0e:36:3e:de: 8b:53:7e:e1:e9:64:46:71:88:55:19:dd:bd:b5:05: 13:9b:f2:33:f2:a9:a2:c4:e1:13:07:65:38:9c:a6: c6:a0:a7:f2:55:1c:05:34:90:46:4e:c2:46:72:68: bc:5e:13:c3:8f:ad:0e:6d:e7:54:66:cf:3e:fc:4d: 6b:13:cf:59:9e:88:f7:e9:b5:59:08:a1:75:eb:50: 49:2a:ca:63:08:cb:82:c9:a2:b9:87:0c:4f:a2:0d: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:54:53:BD:F1:51:50:BB:AD:A5:A1:81:DE:6A:FC:42:85:D3:7F X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/PMhUU73xUVC7raWhgd5q_EKF038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.100.0-5.44.111.255 31.47.240.0/20 37.218.248.0-37.218.252.255 37.218.254.0/24 37.228.152.0/21 46.243.88.0/21 77.75.248.0/21 81.88.16.0/24 81.88.28.0-81.88.47.255 85.158.176.0/21 89.22.100.0/22 89.22.106.0/24 89.22.108.0/24 89.22.110.0-89.22.119.255 89.22.122.0-89.22.127.255 91.151.16.0/21 91.203.108.0/22 91.203.212.0/22 91.220.49.0/24 93.90.178.0/24 93.90.180.0/23 109.237.128.0/20 128.127.65.0-128.127.66.255 178.20.96.0/21 178.250.8.0/21 178.250.170.0/24 178.250.174.0/24 185.3.232.0/22 185.39.220.0/22 185.61.40.0/22 185.80.92.0/22 185.137.168.0/22 185.207.228.0/22 188.64.46.0/23 192.162.87.0/24 193.22.255.0/24 194.145.226.0/24 195.5.120.0/23 195.82.152.0/23 IPv6: 2a00:fa40:2000::-2a00:fa40:4fff:ffff:ffff:ffff:ffff:ffff 2a01:64c0::/32 2a02:2b80::/32 Signature Algorithm: sha256WithRSAEncryption 4a:a6:37:ed:8b:64:29:08:35:73:b0:3d:9b:e5:ac:d2:4a:aa: ed:71:54:de:14:d1:21:23:de:4b:e7:37:7d:ca:78:56:06:27: 89:b3:b9:eb:b6:c3:0e:4a:e4:4c:a9:fa:12:d1:99:ff:c3:d7: 7f:4e:2e:9e:11:63:b5:cf:f3:74:18:79:b4:be:bc:49:e5:22: ce:2d:a3:25:26:bc:57:94:66:f7:a4:13:4c:77:52:39:1f:7e: 3a:9b:fb:28:af:66:2f:2b:dd:25:b6:14:10:2c:98:14:4e:43: f2:a9:41:5d:df:f6:fb:25:16:17:d7:62:17:6f:2a:6d:01:e5: 0c:5a:bb:f1:e9:f0:8b:42:88:15:4f:d7:c7:ae:59:b6:53:9a: f8:4c:ae:7e:e5:a9:c6:fb:99:ab:02:b4:5c:07:b0:23:f2:ac: 11:2e:31:2d:cb:2a:77:fb:ae:1b:96:38:b9:64:b2:51:ee:68: 12:21:50:ed:89:3b:ea:a7:20:9a:5f:fe:e0:6f:04:fc:04:c5: 6b:31:dd:3e:d5:9c:61:da:34:d1:12:33:45:c6:81:ad:7c:db: 58:42:96:26:b3:cb:db:c1:42:d9:90:70:c6:e9:02:1a:c7:66: 02:4d:e5:8c:09:e3:97:47:76:71:82:f8:d0:16:77:07:15:91: b6:a4:cd:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISAZt5fzHmIIY7mnDbKy23i2EOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2M4NTQ1M2JkZjE1MTUwYmJhZGE1YTE4MWRlNmFmYzQyODVkMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5aEdE7PY+tz7Z2dP40Y+PYId2sq USO2Jr4ImfjO4rKxmBr5i4Ph2W1bVYWwelNQ9gBm18Z3v19mLnWtoIjgkkE5Q3jm Kwm+h8MChZVduMUwLVj8CJpCm3JqVJMqtY9KBzCbl7/fGbjxxMMGR+/rmCqmi5fv JlYfsZ9V+7SdmPsJTJm/0BiscPoTc52bJO7MRoEKCaJzQqemOCeFYaFdzQ42Pt6L U37h6WRGcYhVGd29tQUTm/Iz8qmixOETB2U4nKbGoKfyVRwFNJBGTsJGcmi8XhPD j60ObedUZs8+/E1rE89Znoj36bVZCKF161BJKspjCMuCyaK5hwxPog0IIQIDAQAB o4IDTzCCA0swHQYDVR0OBBYEFDzIVFO98VFQu62loYHeavxChdN/MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvUE1oVVU3M3hVVkM3cmFXaGdkNXFfRUtGMDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjCCASIEAgABMIIB GjAMAwQCBSxkAwQEBSxgAwQEHy/wMAwDBAMl2vgDBAAl2vwDBAAl2v4DBAMl5JgD BAMu81gDBANNS/gDBABRWBAwDAMEAlFYHAMEBFFYIAMEA1WesAMEAlkWZAMEAFkW agMEAFkWbDAMAwQBWRZuAwQDWRZwMAwDBAFZFnoDBAdZFgADBANblxADBAJby2wD BAJby9QDBABb3DEDBABdWrIDBAFdWrQDBARt7YAwDAMEAIB/QQMEAIB/QgMEA7IU YAMEA7L6CAMEALL6qgMEALL6rgMEArkD6AMEArkn3AMEArk9KAMEArlQXAMEArmJ qAMEArnP5AMEAbxALgMEAMCiVwMEAMEW/wMEAMKR4gMEAcMFeAMEAcNSmDAmBAIA AjAgMBADBgUqAPpAIAMGBCoA+kBAAwUAKgFkwAMFACoCK4AwDQYJKoZIhvcNAQEL BQADggEBAEqmN+2LZCkINXOwPZvlrNJKqu1xVN4U0SEj3kvnN33KeFYGJ4mzueu2 ww5K5Eyp+hLRmf/D139OLp4RY7XP83QYebS+vEnlIs4toyUmvFeUZvekE0x3Ujkf fjqb+yivZi8r3SW2FBAsmBROQ/KpQV3f9vslFhfXYhdvKm0B5Qxau/Hp8ItCiBVP 18euWbZTmvhMrn7lqcb7masCtFwHsCPyrBEuMS3LKnf7rhuWOLlkslHuaBIhUO2J O+qnIJpf/uBvBPwExWsx3T7VnGHaNNESM0XGga1821hCliazy9vBQtmQcMbpAhrH ZgJN5YwJ45dHdnGC+NAWdwcVkbakzQQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:40 2026 by rpki-client