This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Prtm22vbQehmnlO5aEmPr0BFZa4.roa File: Prtm22vbQehmnlO5aEmPr0BFZa4.roa (raw, json) Hash identifier: 2TJTM+cDnTV/eFEpw6CMVHfCzUzdPWSSepuSHNmY9Qo= Subject key identifier: 3E:BB:66:DB:6B:DB:41:E8:66:9E:53:B9:68:49:8F:AF:40:45:65:AE Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Certificate serial: 019B775907B791F2BB9CDA47020856B6BE1E Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Prtm22vbQehmnlO5aEmPr0BFZa4.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.123.0.0/24 maxlen: 24 91.123.1.0/24 maxlen: 24 91.123.2.0/24 maxlen: 24 91.123.3.0/24 maxlen: 24 91.123.4.0/24 maxlen: 24 91.123.5.0/24 maxlen: 24 91.123.6.0/24 maxlen: 24 91.123.7.0/24 maxlen: 24 91.123.8.0/24 maxlen: 24 91.123.9.0/24 maxlen: 24 91.123.10.0/24 maxlen: 24 91.123.11.0/24 maxlen: 24 91.123.12.0/24 maxlen: 24 91.123.13.0/24 maxlen: 24 91.123.14.0/24 maxlen: 24 91.123.15.0/24 maxlen: 24 190.106.160.0/24 maxlen: 24 190.106.161.0/24 maxlen: 24 190.106.162.0/24 maxlen: 24 190.106.163.0/24 maxlen: 24 190.106.164.0/24 maxlen: 24 190.106.165.0/24 maxlen: 24 190.106.166.0/24 maxlen: 24 190.106.167.0/24 maxlen: 24 190.106.168.0/24 maxlen: 24 190.106.169.0/24 maxlen: 24 190.106.170.0/24 maxlen: 24 190.106.171.0/24 maxlen: 24 190.106.172.0/24 maxlen: 24 190.106.173.0/24 maxlen: 24 190.106.174.0/24 maxlen: 24 190.106.175.0/24 maxlen: 24 190.106.176.0/24 maxlen: 24 190.106.177.0/24 maxlen: 24 190.106.178.0/24 maxlen: 24 190.106.179.0/24 maxlen: 24 190.106.180.0/24 maxlen: 24 190.106.181.0/24 maxlen: 24 190.106.182.0/24 maxlen: 24 190.106.183.0/24 maxlen: 24 190.106.184.0/24 maxlen: 24 190.106.185.0/24 maxlen: 24 190.106.186.0/24 maxlen: 24 190.106.187.0/24 maxlen: 24 190.106.188.0/24 maxlen: 24 190.106.189.0/24 maxlen: 24 190.106.190.0/24 maxlen: 24 190.106.191.0/24 maxlen: 24 206.195.128.0/24 maxlen: 24 206.195.129.0/24 maxlen: 24 206.195.130.0/24 maxlen: 24 206.195.131.0/24 maxlen: 24 206.195.132.0/24 maxlen: 24 206.195.133.0/24 maxlen: 24 206.195.134.0/24 maxlen: 24 206.195.135.0/24 maxlen: 24 206.195.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:b7:91:f2:bb:9c:da:47:02:08:56:b6:be:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ebb66db6bdb41e8669e53b968498faf404565ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:4a:e5:2f:f0:13:1d:39:83:92:35:30:06: 6e:e6:e7:f1:ac:37:d9:4c:55:4b:8f:56:2f:c7:c8: ae:08:b0:45:7f:ba:af:97:9f:27:c1:e7:fc:fe:51: 7a:f4:b1:88:89:a5:9e:e6:31:59:60:64:26:f1:c6: f1:48:c7:31:a2:8d:3b:80:4e:b0:04:76:d1:04:28: 96:cf:b2:dc:6d:3e:dc:10:04:f5:bf:4f:12:99:70: 8d:1e:ff:4c:ef:ea:d6:70:67:4b:ca:46:98:92:47: 46:5f:37:cf:00:40:4b:a6:8a:41:2f:27:8d:67:90: b0:0a:65:9b:7f:3e:2e:54:4d:73:6a:34:cd:81:c9: 42:13:9f:f9:ec:b9:50:95:8f:9d:98:e1:a8:63:b4: 77:0e:68:38:56:a4:ac:ef:93:ef:e8:27:19:5a:6e: 7f:ac:25:72:45:ad:0e:7f:43:79:20:92:80:7c:8e: f2:f8:24:e6:7a:d3:75:23:72:81:5e:ad:4d:76:d1: a2:d5:85:ca:3f:b6:6c:1b:80:03:47:2b:56:e6:bc: 3f:2c:0d:05:7e:ff:fb:a7:9c:78:59:b5:f0:35:3b: 36:8b:d7:ea:57:1d:41:ee:4b:71:15:25:8f:bd:2e: 83:75:4c:6a:cc:c4:de:d8:31:49:58:1c:32:20:d0: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:66:DB:6B:DB:41:E8:66:9E:53:B9:68:49:8F:AF:40:45:65:AE X509v3 Authority Key Identifier: keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/Prtm22vbQehmnlO5aEmPr0BFZa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.123.0.0/20 190.106.160.0/19 206.195.128.0-206.195.136.255 Signature Algorithm: sha256WithRSAEncryption 8a:08:6d:e0:b3:29:91:7c:3c:b9:1f:a8:4b:02:66:f8:be:c2: 48:88:ec:b0:c2:5d:d9:1a:f7:4b:9a:3c:da:ff:56:93:bc:01: dc:ab:bb:97:f9:dd:a8:99:e8:ac:40:85:6d:ab:d8:d0:54:35: b2:f2:fe:95:6d:8c:03:23:26:7a:0a:fb:34:bc:c3:f4:eb:80: 63:3d:36:58:9c:df:46:12:12:a0:a6:99:52:ad:e9:bc:3c:cb: 6a:34:ba:f1:b7:11:53:dd:fe:57:b1:43:3c:b8:d7:43:76:80: 7b:90:ac:09:cb:7c:62:05:fd:26:59:93:ab:a7:b0:49:16:09: 9b:e9:2d:f7:b2:ff:b9:b9:e0:8a:b4:1c:cb:94:82:a6:72:17: 86:22:a5:1f:f8:fb:d3:67:84:eb:c1:7e:3c:4b:8d:43:65:bd: 65:2f:89:8e:7f:cb:7b:75:0c:da:5f:a1:a7:0c:75:43:11:26: 09:c6:7f:ab:a8:2d:80:6e:96:f3:ca:27:ca:35:d5:35:71:42: fd:5e:3b:1a:b7:9b:bd:b5:9d:f2:aa:6e:ba:26:62:13:62:b9: f1:4b:d8:f2:2b:e6:29:12:a0:da:af:62:78:ea:4b:52:3f:9c: ee:85:a9:5b:b7:a3:37:b9:e3:a2:03:aa:80:1e:68:31:41:da: af:0f:ed:51 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WQe3kfK7nNpHAghWtr4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm MDIxOTYwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWJiNjZkYjZiZGI0MWU4NjY5ZTUzYjk2ODQ5OGZhZjQwNDU2NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+hK5S/wEx05g5I1MAZu5ufxrDfZ TFVLj1Yvx8iuCLBFf7qvl58nwef8/lF69LGIiaWe5jFZYGQm8cbxSMcxoo07gE6w BHbRBCiWz7LcbT7cEAT1v08SmXCNHv9M7+rWcGdLykaYkkdGXzfPAEBLpopBLyeN Z5CwCmWbfz4uVE1zajTNgclCE5/57LlQlY+dmOGoY7R3Dmg4VqSs75Pv6CcZWm5/ rCVyRa0Of0N5IJKAfI7y+CTmetN1I3KBXq1NdtGi1YXKP7ZsG4ADRytW5rw/LA0F fv/7p5x4WbXwNTs2i9fqVx1B7ktxFSWPvS6DdUxqzMTe2DFJWBwyINCvHwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFD67Zttr20HoZp5TuWhJj69ARWWuMB8GA1UdIwQY MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt NTIwMWEyM2Q3YTQ5LzEvUHJ0bTIydmJRZWhtbmxPNWFFbVByMEJGWmE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5 LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEW3sAAwQF vmqgMAwDBAfOw4ADBADOw4gwDQYJKoZIhvcNAQELBQADggEBAIoIbeCzKZF8PLkf qEsCZvi+wkiI7LDCXdka90uaPNr/VpO8Adyru5f53aiZ6KxAhW2r2NBUNbLy/pVt jAMjJnoK+zS8w/TrgGM9Nlic30YSEqCmmVKt6bw8y2o0uvG3EVPd/lexQzy410N2 gHuQrAnLfGIF/SZZk6unsEkWCZvpLfey/7m54Iq0HMuUgqZyF4YipR/4+9NnhOvB fjxLjUNlvWUviY5/y3t1DNpfoacMdUMRJgnGf6uoLYBulvPKJ8o11TVxQv1eOxq3 m721nfKqbromYhNiufFL2PIr5ikSoNqvYnjqS1I/nO6FqVu3oze546IDqoAeaDFB 2q8P7VE= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:37 2026 by rpki-client