This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PQKYQfjw7vrNgzefnbpUwj4kRZc.roa File: PQKYQfjw7vrNgzefnbpUwj4kRZc.roa (raw, json) Hash identifier: 2WIMW7Xm+snO7/AEyUq25BAVNV/74hC7dySqj6HjpMs= Subject key identifier: 3D:02:98:41:F8:F0:EE:FA:CD:83:37:9F:9D:BA:54:C2:3E:24:45:97 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C34041B6B49CF5D2B59E2B95877B Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PQKYQfjw7vrNgzefnbpUwj4kRZc.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142594 IP address blocks: 2.56.166.0/24 maxlen: 24 45.90.145.0/24 maxlen: 24 45.90.146.0/24 maxlen: 24 45.90.147.0/24 maxlen: 24 45.140.220.0/24 maxlen: 24 45.140.221.0/24 maxlen: 24 77.83.241.0/24 maxlen: 24 85.202.161.0/24 maxlen: 24 185.227.71.0/24 maxlen: 24 185.234.74.0/24 maxlen: 24 194.31.140.0/24 maxlen: 24 194.56.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c3:40:41:b6:b4:9c:f5:d2:b5:9e:2b:95:87:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d029841f8f0eefacd83379f9dba54c23e244597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:fa:b9:b0:dc:92:3b:99:5e:3f:5c:77:43: 18:d9:c9:9b:b6:32:e0:5c:72:f5:d0:11:1a:4a:16: 04:37:53:9d:59:9b:14:26:1f:8a:85:0d:df:e7:a9: 0c:ba:28:6c:c1:b1:0d:fb:8b:ee:60:29:53:36:a5: f6:13:25:42:13:0c:c0:a9:0c:81:02:d2:12:bb:d0: b9:70:14:38:37:2c:e8:86:42:b9:69:d2:f0:35:85: 72:31:7d:5b:c4:b7:61:0a:e8:d4:82:1e:61:11:57: b9:b4:03:27:f9:b3:54:be:a1:2d:29:25:5f:dc:ae: 14:c0:bb:29:24:5d:0f:a1:bd:d8:a3:49:48:90:42: 37:0d:ce:0f:75:5d:3f:d5:68:5d:68:b0:f8:83:d1: 96:31:bd:54:9e:32:22:3c:10:0f:3a:84:1d:6a:e5: 0e:09:ab:67:96:4c:c1:b1:db:0e:de:5c:96:e4:7b: b2:ad:7e:c7:fc:7c:a8:cf:18:dd:d2:49:e7:7d:65: ca:f8:96:94:78:3f:9e:40:a5:fb:96:86:6c:68:bb: 16:83:59:9f:86:d0:af:3f:83:c2:e0:4e:85:db:54: 5d:75:ea:fd:26:00:b4:90:80:e7:77:ca:a7:8b:1b: d5:8b:3c:3e:7d:40:f4:6b:b6:9b:89:60:00:ac:33: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:98:41:F8:F0:EE:FA:CD:83:37:9F:9D:BA:54:C2:3E:24:45:97 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/PQKYQfjw7vrNgzefnbpUwj4kRZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.166.0/24 45.90.145.0-45.90.147.255 45.140.220.0/23 77.83.241.0/24 85.202.161.0/24 185.227.71.0/24 185.234.74.0/24 194.31.140.0/24 194.56.225.0/24 Signature Algorithm: sha256WithRSAEncryption 21:31:e2:70:3a:d7:10:96:07:ca:d7:ad:cb:ab:14:f1:97:9e: 39:e2:a4:63:25:b5:7b:6a:33:42:0d:eb:da:bd:95:f9:3d:15: c3:53:71:c7:8d:df:ba:7e:3c:e0:fc:61:3a:86:fc:fc:f7:16: 8f:95:01:3e:6f:f5:ff:01:63:e4:6d:a7:2a:99:8e:d2:27:6a: 80:78:e7:71:14:a9:bc:a9:04:81:0b:43:80:d3:6a:3d:0c:33: 12:8d:dd:e5:c2:17:1d:16:8e:be:45:0f:24:23:1d:14:ac:3c: 06:89:87:32:1e:15:10:28:ab:fe:31:6b:ad:6f:c3:51:f8:0e: 2f:55:21:4e:d8:31:b8:66:13:e5:87:39:d3:be:c5:a9:1a:9b: 26:31:4c:d8:98:f3:18:8b:4b:a7:c3:93:9f:f8:67:c0:65:15: 39:76:68:a7:82:61:0e:c5:d4:73:de:b7:c9:f3:e8:fa:e3:f0: 6d:0b:d9:4f:41:fe:47:70:20:a7:f0:58:09:5c:49:d7:71:5b: 71:89:83:e3:ea:1c:88:03:46:d7:49:33:ee:a1:4d:b6:49:39: 80:5e:1c:7f:00:29:79:2c:ef:61:64:a3:1c:a1:3d:58:91:43: 0e:61:d5:d9:e6:c3:bc:2d:86:d6:d5:97:68:3d:54:a0:3b:23: b1:77:9e:12 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt/gsNAQba0nPXStZ4rlYd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDAyOTg0MWY4ZjBlZWZhY2Q4MzM3OWY5ZGJhNTRjMjNlMjQ0NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWX6ubDckjuZXj9cd0MY2cmbtjLg XHL10BEaShYEN1OdWZsUJh+KhQ3f56kMuihswbEN+4vuYClTNqX2EyVCEwzAqQyB AtISu9C5cBQ4NyzohkK5adLwNYVyMX1bxLdhCujUgh5hEVe5tAMn+bNUvqEtKSVf 3K4UwLspJF0Pob3Yo0lIkEI3Dc4PdV0/1WhdaLD4g9GWMb1UnjIiPBAPOoQdauUO CatnlkzBsdsO3lyW5HuyrX7H/Hyozxjd0knnfWXK+JaUeD+eQKX7loZsaLsWg1mf htCvP4PC4E6F21Rdder9JgC0kIDnd8qnixvVizw+fUD0a7abiWAArDN4dwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFD0CmEH48O76zYM3n526VMI+JEWXMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvUFFLWVFmanc3dnJOZ3plZm5icFV3ajRrUlpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAAjimMAwD BAAtWpEDBAItWpADBAEtjNwDBABNU/EDBABVyqEDBAC540cDBAC56koDBADCH4wD BADCOOEwDQYJKoZIhvcNAQELBQADggEBACEx4nA61xCWB8rXrcurFPGXnjnipGMl tXtqM0IN69q9lfk9FcNTcceN37p+POD8YTqG/Pz3Fo+VAT5v9f8BY+RtpyqZjtIn aoB453EUqbypBIELQ4DTaj0MMxKN3eXCFx0Wjr5FDyQjHRSsPAaJhzIeFRAoq/4x a61vw1H4Di9VIU7YMbhmE+WHOdO+xakamyYxTNiY8xiLS6fDk5/4Z8BlFTl2aKeC YQ7F1HPet8nz6Prj8G0L2U9B/kdwIKfwWAlcSddxW3GJg+PqHIgDRtdJM+6hTbZJ OYBeHH8AKXks72FkoxyhPViRQw5h1dnmw7wthtbVl2g9VKA7I7F3nhI= -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:56 2026 by rpki-client