This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/puznYVJBSnjY3qaeHb9vAhepdP0.roa File: puznYVJBSnjY3qaeHb9vAhepdP0.roa (raw, json) Hash identifier: zbqCzpyxFKeMQ5R4zIXRZXVtzDA8qKH99V6e5g7nt9s= Subject key identifier: A6:EC:E7:61:52:41:4A:78:D8:DE:A6:9E:1D:BF:6F:02:17:A9:74:FD Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6 Certificate serial: 019B7C7F0D81987342BF677EE617EE0E5547 Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/puznYVJBSnjY3qaeHb9vAhepdP0.roa Signing time: Fri 02 Jan 2026 02:17:39 +0000 ROA not before: Fri 02 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60163 IP address blocks: 185.54.28.0/24 maxlen: 24 185.54.29.0/24 maxlen: 24 185.54.30.0/24 maxlen: 24 185.54.31.0/24 maxlen: 24 2a02:4260::/32 maxlen: 32 2a02:4261::/32 maxlen: 32 2a02:4262::/32 maxlen: 32 2a02:4263::/32 maxlen: 32 2a02:4264::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0d:81:98:73:42:bf:67:7e:e6:17:ee:0e:55:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6 Validity Not Before: Jan 2 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ece76152414a78d8dea69e1dbf6f0217a974fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:3c:cc:14:7f:5c:3b:91:a4:b4:31:23:1c: f3:55:6f:73:f2:a9:0a:93:fb:11:a3:f2:04:53:36: 69:c3:ff:28:ed:99:20:21:3e:4a:ae:04:34:75:c8: 5a:6d:35:30:91:d9:98:0c:f3:9f:54:ff:c0:c7:12: 07:ac:c2:f5:b4:d3:81:17:fb:38:04:ca:86:fc:55: cb:7a:ba:65:a8:1b:0c:31:be:14:ff:f5:ad:1c:46: 21:e0:2d:61:09:2d:31:61:1b:4d:15:5c:df:71:ae: 53:b4:e4:a8:75:f9:bd:d1:8d:27:2f:99:f1:49:72: e6:51:e8:46:02:9a:fa:39:19:93:27:a7:53:60:95: 43:db:fb:31:73:c6:56:9a:2e:59:3b:1f:e6:a0:ed: 2c:82:3b:52:4d:1d:6d:7c:9c:73:b6:d9:be:40:e4: 4b:d7:5d:bc:be:99:d1:78:fe:c8:00:2c:2e:50:21: 62:67:70:d6:ca:ce:47:6b:a6:0a:12:10:22:5c:91: ff:6f:1b:44:d1:16:91:8a:a1:5f:63:63:36:88:af: 5b:9f:34:85:14:6d:61:61:a0:2b:ec:50:4a:99:91: 81:42:3a:1b:47:f8:d1:ad:6a:4d:7d:15:b9:fe:ed: 64:70:ac:9f:b9:e6:82:51:dc:b8:f0:df:31:15:bf: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:E7:61:52:41:4A:78:D8:DE:A6:9E:1D:BF:6F:02:17:A9:74:FD X509v3 Authority Key Identifier: keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/puznYVJBSnjY3qaeHb9vAhepdP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.28.0/22 IPv6: 2a02:4260::/29 Signature Algorithm: sha256WithRSAEncryption 76:1e:46:85:19:36:ec:a4:fd:e9:ae:f1:cd:15:fc:1d:d1:10: 66:8a:59:8b:7a:80:6b:28:df:c1:e1:f3:5f:9d:32:cd:ea:d7: 31:61:4e:d1:fe:a2:a1:05:8d:0b:99:e2:84:78:51:4b:0a:64: 26:f0:03:fe:45:b7:9f:d3:b2:3c:3c:4d:fc:4e:a8:62:b6:12: be:61:3c:c9:96:dd:57:41:0d:a0:48:1a:98:0b:c5:26:f3:24: 74:3f:ce:d2:8b:a9:d2:83:cb:1a:e8:55:23:70:09:8e:aa:38: b9:3b:b1:08:36:85:4e:17:3e:1a:f7:9b:b2:43:aa:02:8e:7c: 57:74:7d:97:53:35:64:6d:1c:d8:9d:ec:1e:30:c8:d9:25:18: 86:98:88:14:d9:96:0a:a1:98:a0:6d:4e:4a:0e:37:82:8b:6d: 9d:9a:a3:73:81:9b:85:02:07:1b:12:4d:f2:28:ab:06:97:84: e1:fc:78:ea:0a:fe:83:e5:31:90:75:91:f6:e2:33:e1:f2:e7: 81:31:af:32:b1:82:63:fb:f7:9b:51:4c:76:82:cd:30:d5:c0: a1:69:aa:e9:bc:97:5e:9e:71:c4:5b:50:2a:8f:fe:a6:87:9a: 96:2b:f9:e1:a3:a9:b4:20:03:a7:1e:bb:23:e3:e6:6e:02:f7: ae:4a:a3:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fw2BmHNCv2d+5hfuDlVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWFkZTNjMTkxMjc4YjJhYThhZDc2NzQyZWViYmRlZmU3 Mjg1ZTYwHhcNMjYwMTAyMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmVjZTc2MTUyNDE0YTc4ZDhkZWE2OWUxZGJmNmYwMjE3YTk3NGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCA8zBR/XDuRpLQxIxzzVW9z8qkK k/sRo/IEUzZpw/8o7ZkgIT5KrgQ0dchabTUwkdmYDPOfVP/AxxIHrML1tNOBF/s4 BMqG/FXLerplqBsMMb4U//WtHEYh4C1hCS0xYRtNFVzfca5TtOSodfm90Y0nL5nx SXLmUehGApr6ORmTJ6dTYJVD2/sxc8ZWmi5ZOx/moO0sgjtSTR1tfJxzttm+QORL 1128vpnReP7IACwuUCFiZ3DWys5Ha6YKEhAiXJH/bxtE0RaRiqFfY2M2iK9bnzSF FG1hYaAr7FBKmZGBQjobR/jRrWpNfRW5/u1kcKyfueaCUdy48N8xFb+yGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKbs52FSQUp42N6mnh2/bwIXqXT9MB8GA1UdIwQY MBaAFCua3jwZEniyqorXZ0Luu97+coXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMt Y2MwNTNmNmExZWU2LzEvcHV6bllWSkJTbmpZM3FhZUhiOXZBaGVwZFAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMtY2MwNTNmNmExZWU2 LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTYcMA0E AgACMAcDBQMqAkJgMA0GCSqGSIb3DQEBCwUAA4IBAQB2HkaFGTbspP3prvHNFfwd 0RBmilmLeoBrKN/B4fNfnTLN6tcxYU7R/qKhBY0LmeKEeFFLCmQm8AP+Rbef07I8 PE38TqhithK+YTzJlt1XQQ2gSBqYC8Um8yR0P87Si6nSg8sa6FUjcAmOqji5O7EI NoVOFz4a95uyQ6oCjnxXdH2XUzVkbRzYneweMMjZJRiGmIgU2ZYKoZigbU5KDjeC i22dmqNzgZuFAgcbEk3yKKsGl4Th/HjqCv6D5TGQdZH24jPh8ueBMa8ysYJj+/eb UUx2gs0w1cChaarpvJdennHEW1Aqj/6mh5qWK/nho6m0IAOnHrsj4+ZuAveuSqN5 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:20 2026 by rpki-client