This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/PnfxL11O3EjH9h0EH3Rg7luqnAM.roa File: PnfxL11O3EjH9h0EH3Rg7luqnAM.roa (raw, json) Hash identifier: i4lQXSpeif5iY7JiCTfcDMb/7WzWvaV3TLIqruxq13Q= Subject key identifier: 3E:77:F1:2F:5D:4E:DC:48:C7:F6:1D:04:1F:74:60:EE:5B:AA:9C:03 Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf Certificate serial: 019B7CED9C66BFFE84D9344FC589F4DA28DA Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/PnfxL11O3EjH9h0EH3Rg7luqnAM.roa Signing time: Fri 02 Jan 2026 04:18:25 +0000 ROA not before: Fri 02 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213306 IP address blocks: 109.94.102.0/23 maxlen: 23 109.94.102.0/24 maxlen: 24 109.94.103.0/24 maxlen: 24 185.56.223.0/24 maxlen: 24 193.201.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9c:66:bf:fe:84:d9:34:4f:c5:89:f4:da:28:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e77f12f5d4edc48c7f61d041f7460ee5baa9c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:11:97:b1:32:f2:b0:9e:40:53:17:d2:59: 74:02:9f:5f:dc:8c:fb:97:d2:42:7a:7d:28:ce:a9: c7:a4:83:ff:cf:8f:3c:74:98:0c:3e:5f:e7:21:2a: 03:48:55:5c:a1:39:41:dd:6b:c9:bc:a0:4f:35:39: e4:10:4b:c1:54:1a:9b:da:5e:2e:f9:05:92:48:94: f7:e9:68:2f:67:f6:01:ac:b9:fb:55:3b:6f:bd:6a: c3:67:0c:3f:b8:32:e9:08:bc:c3:aa:b3:f4:52:b9: f9:c5:a4:aa:7a:4f:25:eb:25:7c:49:dd:36:1b:d8: 44:6e:c2:d0:6e:71:55:84:1b:7b:ab:5c:7d:38:fb: 6d:be:79:45:f0:98:f7:73:9b:ac:05:6c:18:94:49: a3:ae:40:5b:6f:39:62:26:32:d7:71:21:02:d4:b6: 1a:0e:68:45:80:19:b0:1e:d0:df:fe:8e:1e:cc:2b: 24:1f:5e:0e:9f:de:a3:e1:a3:94:e8:a2:ba:09:ef: 85:97:96:cc:2d:ed:5e:79:cb:4f:9d:d8:e1:e9:8a: e4:d4:56:22:93:8f:b7:b7:ca:3f:6c:cf:a0:bf:3b: 61:4a:7e:88:27:5d:17:49:3e:2c:3b:d0:76:e2:90: 7a:c6:60:88:7e:de:6f:4b:7c:f1:e0:6e:c6:57:89: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:77:F1:2F:5D:4E:DC:48:C7:F6:1D:04:1F:74:60:EE:5B:AA:9C:03 X509v3 Authority Key Identifier: keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/PnfxL11O3EjH9h0EH3Rg7luqnAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.94.102.0/23 185.56.223.0/24 193.201.207.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b4:0c:8a:35:3a:47:59:b5:66:66:31:80:6d:ba:ea:2f:62: 51:c1:3a:9c:45:29:bc:93:c1:1a:68:c7:1e:eb:7d:16:f3:68: d7:9d:f7:3b:7e:2b:90:e9:18:73:62:a8:88:d4:bb:4e:b0:8a: 2e:36:d2:cd:5f:87:5e:cd:2f:22:73:fe:fa:d8:57:6f:3c:54: ba:3d:9f:04:06:e7:2e:46:5c:01:86:e4:56:f9:a6:77:53:71: 02:43:bb:03:f6:80:13:cc:d1:60:a6:7b:c2:38:d1:c3:f8:b4: 60:5e:44:e6:04:2a:48:1b:4c:73:e7:80:0d:4a:9b:ea:8a:68: d3:f1:93:67:c9:b6:c5:72:1c:7f:6f:19:1d:ae:9f:65:52:2b: fd:5a:97:d1:a2:f4:29:c9:31:97:eb:3b:25:1f:2e:37:f7:83: ef:73:2d:15:82:b3:f1:4c:30:db:bf:d9:35:5c:2e:58:e8:06: 6c:c2:f2:67:7d:b9:ea:8d:b2:72:45:56:65:ec:ba:76:9b:fb: e9:34:f6:b9:4b:5d:16:f9:63:6d:41:b1:11:cd:55:28:33:33: e3:9b:43:82:a5:bc:9f:63:22:2b:e1:b3:29:99:ca:79:d7:75: bc:c0:35:85:85:c7:e6:c1:3d:fc:88:b0:13:62:c8:3f:73:a2: 83:3b:17:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87Zxmv/6E2TRPxYn02ijaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4 NTNjY2YwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc3ZjEyZjVkNGVkYzQ4YzdmNjFkMDQxZjc0NjBlZTViYWE5YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk8Rl7Ey8rCeQFMX0ll0Ap9f3Iz7 l9JCen0ozqnHpIP/z488dJgMPl/nISoDSFVcoTlB3WvJvKBPNTnkEEvBVBqb2l4u +QWSSJT36WgvZ/YBrLn7VTtvvWrDZww/uDLpCLzDqrP0Urn5xaSqek8l6yV8Sd02 G9hEbsLQbnFVhBt7q1x9OPttvnlF8Jj3c5usBWwYlEmjrkBbbzliJjLXcSEC1LYa DmhFgBmwHtDf/o4ezCskH14On96j4aOU6KK6Ce+Fl5bMLe1eectPndjh6Yrk1FYi k4+3t8o/bM+gvzthSn6IJ10XST4sO9B24pB6xmCIft5vS3zx4G7GV4lNKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD538S9dTtxIx/YdBB90YO5bqpwDMB8GA1UdIwQY MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt NmQ3MWZlMTNkNjFkLzEvUG5meEwxMU8zRWpIOWgwRUgzUmc3bHVxbkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbV5mAwQA uTjfAwQAwcnPMA0GCSqGSIb3DQEBCwUAA4IBAQAFtAyKNTpHWbVmZjGAbbrqL2JR wTqcRSm8k8EaaMce630W82jXnfc7fiuQ6RhzYqiI1LtOsIouNtLNX4dezS8ic/76 2FdvPFS6PZ8EBucuRlwBhuRW+aZ3U3ECQ7sD9oATzNFgpnvCONHD+LRgXkTmBCpI G0xz54ANSpvqimjT8ZNnybbFchx/bxkdrp9lUiv9WpfRovQpyTGX6zslHy4394Pv cy0VgrPxTDDbv9k1XC5Y6AZswvJnfbnqjbJyRVZl7Lp2m/vpNPa5S10W+WNtQbER zVUoMzPjm0OCpbyfYyIr4bMpmcp513W8wDWFhcfmwT38iLATYsg/c6KDOxf7 -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:52 2026 by rpki-client