This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa File: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (raw, json) Hash identifier: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw= Subject key identifier: 3F:09:BE:5B:65:EA:66:36:C6:48:25:B5:BE:AC:21:D0:83:1A:65:97 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B77C7084D72D30122381070EE376D1B9E Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 5.182.252.0/22 maxlen: 24 37.18.160.0/20 maxlen: 24 37.58.128.0/17 maxlen: 24 45.145.124.0/22 maxlen: 24 46.20.160.0/20 maxlen: 24 62.102.224.0/19 maxlen: 24 79.98.96.0/21 maxlen: 24 81.22.216.0/21 maxlen: 24 91.103.232.0/21 maxlen: 24 91.206.156.0/23 maxlen: 24 91.217.94.0/23 maxlen: 24 91.229.230.0/23 maxlen: 24 92.61.72.0/21 maxlen: 24 94.127.8.0/21 maxlen: 24 103.77.32.0/22 maxlen: 24 103.229.36.0/23 maxlen: 24 103.232.172.0/22 maxlen: 24 109.69.192.0/21 maxlen: 24 109.237.240.0/20 maxlen: 24 128.127.128.0/20 maxlen: 24 146.247.88.0/21 maxlen: 24 149.255.136.0/21 maxlen: 24 178.249.160.0/21 maxlen: 24 185.15.128.0/22 maxlen: 24 185.42.132.0/22 maxlen: 24 185.49.120.0/23 maxlen: 24 185.65.224.0/22 maxlen: 24 185.67.88.0/22 maxlen: 24 185.79.148.0/22 maxlen: 24 185.90.96.0/22 maxlen: 24 185.95.120.0/22 maxlen: 24 185.149.8.0/22 maxlen: 24 185.172.16.0/22 maxlen: 24 185.196.248.0/22 maxlen: 24 185.204.140.0/22 maxlen: 24 185.208.248.0/22 maxlen: 24 188.66.56.0/22 maxlen: 24 194.177.32.0/19 maxlen: 24 195.214.240.0/21 maxlen: 24 212.51.160.0/19 maxlen: 24 213.108.64.0/21 maxlen: 24 213.151.168.0/23 maxlen: 24 213.151.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:08:4d:72:d3:01:22:38:10:70:ee:37:6d:1b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f09be5b65ea6636c64825b5beac21d0831a6597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:d5:e1:67:a9:c1:59:e0:ce:bb:58:26:13: 11:62:4b:cb:ae:fa:f1:4e:72:d4:fb:da:e3:fe:fc: 15:13:30:c8:85:fa:4c:b9:f6:36:74:e9:72:38:46: e3:26:bd:84:c6:27:7c:f2:54:03:c8:10:05:52:d7: f4:27:68:94:18:a7:a8:1a:5e:e9:a3:c3:ee:b6:91: 75:f2:0a:d1:9e:43:ff:f8:db:75:87:42:06:51:86: fd:32:ea:0c:70:09:16:09:66:dc:85:1c:6a:78:c6: b7:8d:10:b1:5c:c9:5a:a9:5d:17:f9:c2:c8:fb:10: f7:bf:0f:0f:ba:cc:59:16:11:8c:22:a5:c0:97:83: f1:fc:0e:26:15:97:fc:63:67:79:06:74:b9:cb:8b: 19:af:83:8b:90:51:20:2e:68:93:0c:31:45:02:3b: a0:85:fb:7c:d7:81:17:76:ef:98:98:95:94:d3:90: f0:f5:4d:d4:97:3f:1a:78:d3:0e:d6:0b:0a:b3:eb: 6d:8e:9c:29:56:b0:d1:42:9f:86:2c:f3:2c:e6:3f: 02:e6:d6:21:d4:1a:97:f4:ac:2b:7a:10:e2:9e:f4: 11:c6:9a:0d:4b:04:63:fa:73:58:fe:ee:97:f0:95: ff:fb:77:43:40:b3:bc:7f:db:2e:5d:90:76:d9:ee: ef:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:09:BE:5B:65:EA:66:36:C6:48:25:B5:BE:AC:21:D0:83:1A:65:97 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.252.0/22 37.18.160.0/20 37.58.128.0/17 45.145.124.0/22 46.20.160.0/20 62.102.224.0/19 79.98.96.0/21 81.22.216.0/21 91.103.232.0/21 91.206.156.0/23 91.217.94.0/23 91.229.230.0/23 92.61.72.0/21 94.127.8.0/21 103.77.32.0/22 103.229.36.0/23 103.232.172.0/22 109.69.192.0/21 109.237.240.0/20 128.127.128.0/20 146.247.88.0/21 149.255.136.0/21 178.249.160.0/21 185.15.128.0/22 185.42.132.0/22 185.49.120.0/23 185.65.224.0/22 185.67.88.0/22 185.79.148.0/22 185.90.96.0/22 185.95.120.0/22 185.149.8.0/22 185.172.16.0/22 185.196.248.0/22 185.204.140.0/22 185.208.248.0/22 188.66.56.0/22 194.177.32.0/19 195.214.240.0/21 212.51.160.0/19 213.108.64.0/21 213.151.168.0/23 213.151.172.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:63:dc:60:8e:05:c4:18:7c:e6:f2:2c:5a:d4:02:42:13:9c: 7e:18:0a:65:75:c3:ed:39:8f:ac:65:8e:9d:ec:da:b5:c7:e1: c8:e6:90:a6:57:63:e6:ee:9d:94:75:91:dc:92:57:50:b3:6d: fe:bf:2d:09:a3:6a:92:ca:74:81:5c:0b:a3:23:64:c5:05:ac: fc:1f:41:90:4a:2d:18:c5:8d:d3:ac:ef:a3:b6:00:cf:2b:0e: 77:63:4a:77:df:e5:0b:66:a1:04:e6:e1:fc:a1:63:17:f6:29: 2d:af:b4:f4:fe:ae:86:e4:b0:d9:7b:61:5e:5a:de:97:e0:1b: 09:6c:dd:02:2c:56:fa:61:48:cf:28:c8:e8:72:82:ba:8a:cb: 9f:7b:0e:14:4c:9c:7c:b0:85:68:86:e8:43:db:e5:02:2c:b6: 03:6f:44:c9:0f:04:22:99:07:69:91:67:ef:0c:c4:ec:5a:31: 25:1a:64:3e:f5:a7:37:65:fe:c0:e7:02:57:01:b6:ee:4d:68: 18:6c:2a:61:10:fe:bb:5b:10:30:ae:06:05:37:4d:29:95:c9: 76:71:97:11:55:6e:a9:41:ec:5f:fe:58:e8:46:68:be:b1:1c: f6:c6:9b:fb:4a:8f:64:d6:07:03:3c:77:a9:2a:df:6c:78:ab: 1e:ea:75:a0 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt3xwhNctMBIjgQcO43bRueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjA5YmU1YjY1ZWE2NjM2YzY0ODI1YjViZWFjMjFkMDgzMWE2NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jTV4WepwVngzrtYJhMRYkvLrvrx TnLU+9rj/vwVEzDIhfpMufY2dOlyOEbjJr2Exid88lQDyBAFUtf0J2iUGKeoGl7p o8PutpF18grRnkP/+Nt1h0IGUYb9MuoMcAkWCWbchRxqeMa3jRCxXMlaqV0X+cLI +xD3vw8PusxZFhGMIqXAl4Px/A4mFZf8Y2d5BnS5y4sZr4OLkFEgLmiTDDFFAjug hft814EXdu+YmJWU05Dw9U3Ulz8aeNMO1gsKs+ttjpwpVrDRQp+GLPMs5j8C5tYh 1BqX9KwrehDinvQRxpoNSwRj+nNY/u6X8JX/+3dDQLO8f9suXZB22e7vtwIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFD8Jvltl6mY2xkgltb6sIdCDGmWXMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvUHdtLVcyWHFaamJHU0NXMXZxd2gwSU1hWlpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEAgW2/AMEBCUSoAMEByU6gAMEAi2RfAMEBC4UoAMEBT5m4AMEA09iYAMEA1EW 2AMEA1tn6AMEAVvOnAMEAVvZXgMEAVvl5gMEA1w9SAMEA15/CAMEAmdNIAMEAWfl JAMEAmforAMEA21FwAMEBG3t8AMEBIB/gAMEA5L3WAMEA5X/iAMEA7L5oAMEArkP gAMEArkqhAMEAbkxeAMEArlB4AMEArlDWAMEArlPlAMEArlaYAMEArlfeAMEArmV CAMEArmsEAMEArnE+AMEArnMjAMEArnQ+AMEArxCOAMEBcKxIAMEA8PW8AMEBdQz oAMEA9VsQAMEAdWXqAMEAdWXrDANBgkqhkiG9w0BAQsFAAOCAQEADmPcYI4FxBh8 5vIsWtQCQhOcfhgKZXXD7TmPrGWOnezatcfhyOaQpldj5u6dlHWR3JJXULNt/r8t CaNqksp0gVwLoyNkxQWs/B9BkEotGMWN06zvo7YAzysOd2NKd9/lC2ahBObh/KFj F/YpLa+09P6uhuSw2XthXlrel+AbCWzdAixW+mFIzyjI6HKCuorLn3sOFEycfLCF aIboQ9vlAiy2A29EyQ8EIpkHaZFn7wzE7FoxJRpkPvWnN2X+wOcCVwG27k1oGGwq YRD+u1sQMK4GBTdNKZXJdnGXEVVuqUHsX/5Y6EZovrEc9sab+0qPZNYHAzx3qSrf bHirHup1oA== -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:24 2026 by rpki-client