This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/pRYI-6UQ3yoFuethzPMKeOEwBNs.roa File: pRYI-6UQ3yoFuethzPMKeOEwBNs.roa (raw, json) Hash identifier: 9Jr2qQjo4i1NAgsOB4ab/Qa+eaYNGkm+we9jGg2Kgcc= Subject key identifier: A5:16:08:FB:A5:10:DF:2A:05:B9:EB:61:CC:F3:0A:78:E1:30:04:DB Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Certificate serial: 019B7F15AB47FCBE64AD73F4FBC796D3260B Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/pRYI-6UQ3yoFuethzPMKeOEwBNs.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 89.222.36.0/24 maxlen: 24 89.222.37.0/24 maxlen: 24 89.222.38.0/24 maxlen: 24 89.222.39.0/24 maxlen: 24 89.222.40.0/24 maxlen: 24 89.222.41.0/24 maxlen: 24 89.222.42.0/24 maxlen: 24 89.222.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ab:47:fc:be:64:ad:73:f4:fb:c7:96:d3:26:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a51608fba510df2a05b9eb61ccf30a78e13004db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:83:11:df:09:40:cd:b3:61:15:c2:91:f8:d3: b2:05:6f:76:56:ef:47:05:2c:85:ef:27:03:1f:3e: bc:84:cc:fa:4c:73:4a:d5:8a:72:9a:74:02:28:07: 67:8c:de:23:33:0d:0e:b5:17:a1:d8:2e:30:4a:78: a9:81:ec:d4:6b:f2:8e:14:ca:a8:97:18:8d:0d:85: 92:f8:2b:7a:54:dc:ce:b7:1c:ef:1b:95:3f:f2:33: 24:06:24:9a:f8:d6:3e:1b:64:4a:c8:c8:14:57:10: da:d6:79:9f:60:9a:60:8c:85:c0:83:5e:0e:84:a3: 88:dd:e8:08:cf:b4:f6:02:aa:42:fa:03:61:6c:b1: 34:96:7f:e2:ee:57:23:96:6a:7e:34:0e:2d:a9:de: bf:f9:a9:9e:52:b8:de:24:23:cb:b0:06:67:ab:70: b2:0f:ed:1e:fc:61:65:6e:bd:a1:4a:7d:2a:83:f0: 7d:cc:a5:9c:4d:d6:4a:f5:e6:cd:fe:64:44:f8:51: 36:55:2d:7c:04:9f:6c:ea:38:91:8c:ca:2b:f6:fc: a8:fa:47:28:cc:97:a0:ec:8f:11:ee:11:e9:d5:6d: 47:75:54:44:df:24:e3:11:6e:d0:1b:01:d2:55:a1: f1:dc:97:93:85:78:7d:21:1b:95:1c:f6:0e:70:4c: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:08:FB:A5:10:DF:2A:05:B9:EB:61:CC:F3:0A:78:E1:30:04:DB X509v3 Authority Key Identifier: keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/pRYI-6UQ3yoFuethzPMKeOEwBNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.36.0-89.222.43.255 Signature Algorithm: sha256WithRSAEncryption 4f:9c:8e:e0:72:a2:c5:07:5f:20:b7:f4:05:19:8f:4d:37:33: 31:52:5f:58:a2:6c:b1:37:a1:5e:e5:d2:9b:f6:d3:8f:93:26: ac:9e:1a:6f:77:c3:a9:de:61:8a:e6:10:f3:8e:e3:97:6b:a3: 7c:b1:0b:ff:9b:70:14:cb:9e:87:9f:7a:89:bd:57:58:fa:5c: 14:e8:46:da:02:3a:15:f7:ab:af:ac:bc:a2:d0:12:c0:59:1f: 2c:8a:04:fa:a9:be:53:12:b8:f9:5e:81:fc:2b:3d:dd:62:71: 8f:b2:36:75:13:a1:2e:5a:94:f0:fa:da:e2:46:4b:a2:24:4d: 06:b9:1e:23:a2:ba:49:a1:b9:d5:45:f2:36:a3:ab:1d:ab:c8: 14:29:a3:64:43:4c:64:ae:d1:6d:e8:a7:3b:5e:93:77:07:84: cf:15:87:94:27:23:fa:6c:28:3e:63:dd:87:bb:97:1a:0f:c7: 70:28:ee:5a:ca:db:9a:54:d3:68:59:3c:10:a1:46:2d:9e:d9: 12:f6:ca:a8:0e:05:eb:5b:37:65:60:ee:e4:00:52:63:43:bf: db:13:05:be:f0:ba:04:5c:91:31:4d:e7:d5:b8:16:99:9e:f4: 6f:31:01:65:d0:28:c6:38:6f:3e:90:09:8f:85:14:88:c3:3e: 47:3b:b8:3d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FatH/L5krXP0+8eW0yYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0 M2JhZDcwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTE2MDhmYmE1MTBkZjJhMDViOWViNjFjY2YzMGE3OGUxMzAwNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44MR3wlAzbNhFcKR+NOyBW92Vu9H BSyF7ycDHz68hMz6THNK1YpymnQCKAdnjN4jMw0OtReh2C4wSnipgezUa/KOFMqo lxiNDYWS+Ct6VNzOtxzvG5U/8jMkBiSa+NY+G2RKyMgUVxDa1nmfYJpgjIXAg14O hKOI3egIz7T2AqpC+gNhbLE0ln/i7lcjlmp+NA4tqd6/+ameUrjeJCPLsAZnq3Cy D+0e/GFlbr2hSn0qg/B9zKWcTdZK9ebN/mRE+FE2VS18BJ9s6jiRjMor9vyo+kco zJeg7I8R7hHp1W1HdVRE3yTjEW7QGwHSVaHx3JeThXh9IRuVHPYOcEwgbQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKUWCPulEN8qBbnrYczzCnjhMATbMB8GA1UdIwQY MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt MmZiMjk1OGFiOGJiLzEvcFJZSS02VVEzeW9GdWV0aHpQTUtlT0V3Qk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJZ3iQD BAJZ3igwDQYJKoZIhvcNAQELBQADggEBAE+cjuByosUHXyC39AUZj003MzFSX1ii bLE3oV7l0pv204+TJqyeGm93w6neYYrmEPOO45dro3yxC/+bcBTLnoefeom9V1j6 XBToRtoCOhX3q6+svKLQEsBZHyyKBPqpvlMSuPlegfwrPd1icY+yNnUToS5alPD6 2uJGS6IkTQa5HiOiukmhudVF8jajqx2ryBQpo2RDTGSu0W3opztek3cHhM8Vh5Qn I/psKD5j3Ye7lxoPx3Ao7lrK25pU02hZPBChRi2e2RL2yqgOBetbN2Vg7uQAUmND v9sTBb7wugRckTFN59W4Fpme9G8xAWXQKMY4bz6QCY+FFIjDPkc7uD0= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:40 2026 by rpki-client