This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa File: PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa (raw, json) Hash identifier: wV3X/7HZHZKG/4FgH10MAPrQyf6yj0My6U1gF8qH54U= Subject key identifier: 3C:4E:D6:E6:E0:56:E7:1A:45:9B:CC:FF:5F:85:B2:4A:CD:A4:E9:8A Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019B783552146B76BA00410C434A82046BC3 Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 46.236.0.0/18 maxlen: 24 81.29.64.0/19 maxlen: 24 89.151.64.0/18 maxlen: 24 178.236.144.0/20 maxlen: 24 185.68.112.0/23 maxlen: 24 185.68.114.0/23 maxlen: 24 2a02:16f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:14:6b:76:ba:00:41:0c:43:4a:82:04:6b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4ed6e6e056e71a459bccff5f85b24acda4e98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:30:54:17:b9:b3:e1:8a:8f:73:e0:ad:1a: 46:58:09:b0:b3:e4:02:6c:b6:57:ac:56:74:e5:46: 96:55:bc:55:d7:42:76:8a:27:88:ae:71:e6:a0:b7: 68:e3:5b:5f:68:b7:f4:37:a2:c0:b6:20:4f:b3:bb: b7:3f:6c:e0:01:e8:c5:d1:ce:a6:6e:68:a7:46:73: af:d6:0c:93:6b:86:e3:f0:db:56:6d:3f:30:53:b7: fa:e0:29:2e:a0:e1:49:58:f0:d9:9f:4d:4c:b7:d9: 0c:5a:d0:50:9a:f3:6c:f9:f8:a6:84:58:f0:10:b7: 65:2e:2c:ae:92:33:a6:a2:5f:de:3d:fb:4b:8f:6b: ee:a2:54:d3:7c:5a:9d:a7:ae:2f:70:42:a9:f0:66: af:d3:c2:82:16:09:2f:ef:10:56:55:39:b0:26:10: 52:03:41:54:c6:db:6a:ea:c3:69:37:ce:b1:d9:eb: 68:d6:f4:7e:af:19:54:49:6c:65:11:58:2f:f9:0a: e7:08:e3:61:8a:5c:f4:c6:a5:07:8c:a3:61:05:31: be:c0:09:ed:a9:f3:36:b4:14:14:cd:77:1d:ef:98: e2:21:3c:9a:26:59:7e:fa:af:6f:36:8e:aa:3f:24: 0e:1a:f4:c9:f9:d8:29:7f:3a:9d:ec:d9:86:6a:4f: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:D6:E6:E0:56:E7:1A:45:9B:CC:FF:5F:85:B2:4A:CD:A4:E9:8A X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/PE7W5uBW5xpFm8z_X4WySs2k6Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.0.0/18 81.29.64.0/19 89.151.64.0/18 178.236.144.0/20 185.68.112.0/22 IPv6: 2a02:16f8::/32 Signature Algorithm: sha256WithRSAEncryption 12:a9:f7:5f:c9:2c:0a:c7:00:d6:27:85:d6:9c:03:58:b8:4d: ef:17:fe:6c:82:79:8e:7d:e3:34:7d:f4:28:1a:e6:da:1d:e9: dd:f6:61:e8:2b:8f:ce:56:26:80:98:62:2d:9e:e3:a9:e6:54: a7:c2:93:db:0a:93:a7:6c:eb:84:a8:07:17:7e:b9:78:97:b5: 47:59:10:24:be:76:97:e2:eb:06:14:39:61:5f:3c:c8:a9:26: 37:39:73:3b:07:5f:e9:6a:c7:46:9d:78:17:d2:bb:55:69:86: ed:f4:02:b7:3f:3b:54:8a:c0:15:d1:31:8b:34:13:ce:74:f6: 0c:b5:01:dd:dd:3f:37:ff:22:38:de:b4:00:14:f2:27:f3:09: 13:82:b3:b8:ea:a1:58:79:a9:fc:73:21:14:f6:a8:6e:4c:8d: 23:d8:1e:46:1f:4f:dd:5e:69:15:52:08:0c:be:3b:39:7c:e5: 0e:fa:07:df:10:bf:20:63:ee:2f:f9:d8:63:1e:03:6a:24:42: bc:51:9e:7d:ef:b0:b6:8a:34:9b:55:2b:87:cb:19:28:44:de: 13:bf:e1:67:ce:43:3a:94:95:d1:b8:e4:7c:cd:28:9e:41:ac: 2b:25:25:bc:8b:ae:96:fd:84:1b:98:be:4b:1d:e4:e0:b2:cb: 91:79:b1:73 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NVIUa3a6AEEMQ0qCBGvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRlZDZlNmUwNTZlNzFhNDU5YmNjZmY1Zjg1YjI0YWNkYTRlOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/wwVBe5s+GKj3PgrRpGWAmws+QC bLZXrFZ05UaWVbxV10J2iieIrnHmoLdo41tfaLf0N6LAtiBPs7u3P2zgAejF0c6m bminRnOv1gyTa4bj8NtWbT8wU7f64CkuoOFJWPDZn01Mt9kMWtBQmvNs+fimhFjw ELdlLiyukjOmol/ePftLj2vuolTTfFqdp64vcEKp8Gav08KCFgkv7xBWVTmwJhBS A0FUxttq6sNpN86x2eto1vR+rxlUSWxlEVgv+QrnCONhilz0xqUHjKNhBTG+wAnt qfM2tBQUzXcd75jiITyaJll++q9vNo6qPyQOGvTJ+dgpfzqd7NmGak9ToQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFDxO1ubgVucaRZvM/1+FskrNpOmKMB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvUEU3VzV1Qlc1eHBGbTh6X1g0V3lTczJrNllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGLuwAAwQF UR1AAwQGWZdAAwQEsuyQAwQCuURwMA0EAgACMAcDBQAqAhb4MA0GCSqGSIb3DQEB CwUAA4IBAQASqfdfySwKxwDWJ4XWnANYuE3vF/5sgnmOfeM0ffQoGubaHend9mHo K4/OViaAmGItnuOp5lSnwpPbCpOnbOuEqAcXfrl4l7VHWRAkvnaX4usGFDlhXzzI qSY3OXM7B1/pasdGnXgX0rtVaYbt9AK3PztUisAV0TGLNBPOdPYMtQHd3T83/yI4 3rQAFPIn8wkTgrO46qFYean8cyEU9qhuTI0j2B5GH0/dXmkVUggMvjs5fOUO+gff EL8gY+4v+dhjHgNqJEK8UZ5977C2ijSbVSuHyxkoRN4Tv+FnzkM6lJXRuOR8zSie QawrJSW8i66W/YQbmL5LHeTgssuRebFz -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:22 2026 by rpki-client