This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/PUJfscloQMHgI371vUqE3n8p0O0.roa File: PUJfscloQMHgI371vUqE3n8p0O0.roa (raw, json) Hash identifier: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc= Subject key identifier: 3D:42:5F:B1:C9:68:40:C1:E0:23:7E:F5:BD:4A:84:DE:7F:29:D0:ED Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019B79ECE5F94F94A2BEFB28DFB365B1ADDD Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/PUJfscloQMHgI371vUqE3n8p0O0.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49305 IP address blocks: 62.204.50.0/24 maxlen: 24 94.247.136.0/24 maxlen: 24 178.255.217.0/24 maxlen: 24 185.228.251.0/24 maxlen: 24 2a0e:3ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e5:f9:4f:94:a2:be:fb:28:df:b3:65:b1:ad:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d425fb1c96840c1e0237ef5bd4a84de7f29d0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:34:31:6e:2c:b3:8c:0b:1b:2b:0e:a1:68: cd:68:e8:6c:4b:d5:87:67:65:06:1b:82:4c:db:27: 9f:45:e8:4b:2c:d0:44:66:54:d9:eb:5d:e4:9f:06: 68:3a:14:48:a6:57:f5:67:17:30:ce:08:b9:c9:75: 97:f9:af:e3:99:cb:37:3f:44:7e:a3:3a:df:92:d6: dd:f9:bf:ee:eb:f4:0d:f8:29:4c:3b:64:ff:0b:a3: 5d:c9:45:76:84:41:e1:29:d3:a2:14:99:3c:fe:5c: d3:86:d8:8f:d8:9a:f5:08:d5:64:c2:fe:0a:0d:d3: 06:03:0d:81:a7:88:49:2b:24:7c:53:d9:04:88:a0: be:11:a8:10:98:8c:09:ff:7c:97:02:e1:5c:5f:86: fa:b5:7a:c5:7e:bf:78:ce:10:90:dd:c4:18:fc:53: 10:94:b0:23:4c:a1:6b:ef:3d:f1:8d:5b:98:f1:35: 90:0f:2a:ec:54:cb:78:0c:d0:9e:b3:57:f9:64:82: ed:59:cb:8b:94:3d:2e:1d:25:7e:4e:fc:40:d3:43: 57:28:c1:50:d8:57:17:01:11:25:90:5f:ce:22:c8: d3:37:7c:15:02:1c:8e:3c:b3:41:ae:46:92:d3:7b: 69:67:c8:9a:28:b4:29:58:1b:42:2b:6a:e9:76:18: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:42:5F:B1:C9:68:40:C1:E0:23:7E:F5:BD:4A:84:DE:7F:29:D0:ED X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/PUJfscloQMHgI371vUqE3n8p0O0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.50.0/24 94.247.136.0/24 178.255.217.0/24 185.228.251.0/24 IPv6: 2a0e:3ec0::/29 Signature Algorithm: sha256WithRSAEncryption 87:67:cc:48:f8:bc:86:1c:d7:c0:15:a6:8d:f7:fd:9a:a4:ac: 39:e2:a6:8e:5d:f3:98:db:bc:6d:39:39:c7:eb:02:c8:1f:48: cf:1a:e7:04:78:d2:34:7d:3d:75:23:cf:7e:b0:ae:09:25:01: 4f:fb:02:da:c6:03:09:0f:6f:57:44:d2:19:ea:a4:33:1d:8c: fa:d9:f5:72:fc:2b:f5:6e:19:ad:2e:34:0b:88:f4:51:2e:a8: a9:ae:db:a0:13:63:14:e3:6f:aa:48:02:c7:58:22:f3:6e:92: 70:6e:0a:e0:11:f9:d2:78:4c:69:d8:18:4d:d9:73:07:54:be: aa:09:44:13:3f:7f:e5:0f:14:1a:2a:b7:de:50:27:d4:5b:a2: b9:c7:1d:ce:1b:97:fc:8e:65:8b:c9:3e:63:90:e8:7f:a4:d9: 7a:bc:f2:a7:94:d2:66:30:63:b4:c6:a5:b9:56:76:a3:79:89: ee:d5:3a:a9:3b:a8:a3:df:b9:bd:4d:0f:e2:b7:9c:8d:55:80: ff:42:20:0f:03:c7:61:24:02:e9:11:d6:14:9a:fb:63:42:d5: aa:ac:fa:3f:8d:5b:37:a0:bb:7e:75:10:67:54:e2:6c:e4:d9: 97:85:fc:82:55:75:7d:6a:12:78:53:b4:3b:ad:68:b7:66:d6: 16:8f:e5:14 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57OX5T5Sivvso37Nlsa3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQyNWZiMWM5Njg0MGMxZTAyMzdlZjViZDRhODRkZTdmMjlkMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn640MW4ss4wLGysOoWjNaOhsS9WH Z2UGG4JM2yefRehLLNBEZlTZ613knwZoOhRIplf1Zxcwzgi5yXWX+a/jmcs3P0R+ ozrfktbd+b/u6/QN+ClMO2T/C6NdyUV2hEHhKdOiFJk8/lzThtiP2Jr1CNVkwv4K DdMGAw2Bp4hJKyR8U9kEiKC+EagQmIwJ/3yXAuFcX4b6tXrFfr94zhCQ3cQY/FMQ lLAjTKFr7z3xjVuY8TWQDyrsVMt4DNCes1f5ZILtWcuLlD0uHSV+TvxA00NXKMFQ 2FcXARElkF/OIsjTN3wVAhyOPLNBrkaS03tpZ8iaKLQpWBtCK2rpdhhuSwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFD1CX7HJaEDB4CN+9b1KhN5/KdDtMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvUFVKZnNjbG9RTUhnSTM3MXZVcUUzbjhwME8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAPswyAwQA XveIAwQAsv/ZAwQAueT7MA0EAgACMAcDBQMqDj7AMA0GCSqGSIb3DQEBCwUAA4IB AQCHZ8xI+LyGHNfAFaaN9/2apKw54qaOXfOY27xtOTnH6wLIH0jPGucEeNI0fT11 I89+sK4JJQFP+wLaxgMJD29XRNIZ6qQzHYz62fVy/Cv1bhmtLjQLiPRRLqiprtug E2MU42+qSALHWCLzbpJwbgrgEfnSeExp2BhN2XMHVL6qCUQTP3/lDxQaKrfeUCfU W6K5xx3OG5f8jmWLyT5jkOh/pNl6vPKnlNJmMGO0xqW5VnajeYnu1TqpO6ij37m9 TQ/it5yNVYD/QiAPA8dhJALpEdYUmvtjQtWqrPo/jVs3oLt+dRBnVOJs5NmXhfyC VXV9ahJ4U7Q7rWi3ZtYWj+UU -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:44 2026 by rpki-client