This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa File: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (raw, json) Hash identifier: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM= Subject key identifier: 3C:96:8D:9C:38:3D:25:E5:B3:9B:67:06:7A:A1:2C:EC:72:C3:3F:65 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52AE7C8C6160CD015CA1E04515FBF Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12615 IP address blocks: 78.108.252.0/24 maxlen: 24 87.246.4.0/24 maxlen: 24 87.246.12.0/22 maxlen: 22 87.246.28.0/22 maxlen: 22 109.160.41.0/24 maxlen: 24 109.160.44.0/24 maxlen: 24 109.160.45.0/24 maxlen: 24 109.160.118.0/24 maxlen: 24 109.160.119.0/24 maxlen: 24 185.43.59.0/24 maxlen: 24 212.70.130.0/23 maxlen: 23 212.70.132.0/24 maxlen: 24 212.70.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2a:e7:c8:c6:16:0c:d0:15:ca:1e:04:51:5f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c968d9c383d25e5b39b67067aa12cec72c33f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:ae:b2:92:90:8d:71:eb:29:83:9a:a9:27: 88:82:db:64:61:c1:1b:3b:e2:3e:72:a8:6d:0b:87: 18:71:e9:63:21:c2:2c:9d:72:2d:b8:8b:dc:e9:55: 54:e9:b7:bd:15:45:75:d2:dd:ef:d3:1a:10:d3:98: 9e:52:82:80:bf:a4:f7:a9:f6:43:fc:3a:71:3d:dd: 48:1e:0b:cd:59:1d:73:8a:b9:c3:b4:24:11:b2:67: df:8a:0d:a3:ea:df:d4:6b:56:f8:f6:b3:aa:1b:16: 95:51:fb:65:c8:9a:06:f7:49:98:e3:8b:9f:39:23: ee:33:3b:b7:79:de:e4:2a:95:f5:52:f4:ec:ef:a1: f3:fd:41:c7:84:f7:2f:eb:c7:78:da:c1:dd:39:c5: bd:d2:f1:4f:53:21:98:ae:e0:39:90:69:f9:9e:bf: c9:0f:44:ab:9d:fc:9f:b2:3c:fd:a5:01:1c:99:a6: de:fb:25:94:2b:f7:97:ae:66:f8:df:fb:58:5d:2b: 57:8d:46:b5:1f:8c:73:63:77:b7:a9:57:88:10:8f: 7e:14:13:39:c7:74:58:81:0d:40:67:46:9b:ed:80: eb:4c:12:92:ac:0b:26:1c:d1:ba:c5:92:c8:81:32: c0:64:5a:99:d5:23:8c:cb:72:09:8f:cf:29:4f:6d: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:8D:9C:38:3D:25:E5:B3:9B:67:06:7A:A1:2C:EC:72:C3:3F:65 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.252.0/24 87.246.4.0/24 87.246.12.0/22 87.246.28.0/22 109.160.41.0/24 109.160.44.0/23 109.160.118.0/23 185.43.59.0/24 212.70.130.0-212.70.133.255 Signature Algorithm: sha256WithRSAEncryption 1f:27:49:fe:62:19:7d:ee:f6:b1:e7:1d:a6:60:6d:0e:d3:75: c9:25:62:d5:eb:30:fc:04:82:b5:31:be:75:25:31:82:ce:ae: fd:6e:5e:a5:d2:a3:f6:47:a4:b5:30:04:d3:1e:c3:d0:ec:ff: 38:ec:53:85:e5:c9:19:5c:cd:02:f8:a6:7e:26:a5:c6:53:12: 35:9b:fc:00:3c:07:5e:30:56:80:7a:35:e1:56:4e:6b:e4:8d: f8:8f:13:76:ae:a9:71:75:a0:62:44:50:bb:0e:eb:4f:ed:25: 56:69:1d:01:82:cf:6e:18:76:7f:95:7f:a4:d8:04:df:2d:ec: 22:a2:e6:31:de:25:41:de:8d:5f:c3:b1:dd:97:fc:e9:d0:fd: d5:72:d9:4e:9d:fa:74:0e:c6:af:0a:38:4a:35:d8:04:f6:4f: 59:98:c3:bb:fe:42:2d:bb:15:0d:68:bd:d1:c0:31:63:45:ae: 15:33:a9:91:90:62:b8:58:6b:b7:7a:41:63:2a:2f:75:07:38: c2:3c:67:69:52:49:a2:b1:3c:ac:8e:d1:f7:be:90:ab:e3:e9: 51:12:61:3a:72:d6:9b:c0:2e:89:91:08:53:b2:74:1b:9e:02: f2:37:91:5c:16:0e:d8:d6:bc:b6:2c:f7:ff:dc:61:49:42:9d: f9:d0:c2:ca -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+pSrnyMYWDNAVyh4EUV+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzk2OGQ5YzM4M2QyNWU1YjM5YjY3MDY3YWExMmNlYzcyYzMzZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/GuspKQjXHrKYOaqSeIgttkYcEb O+I+cqhtC4cYceljIcIsnXItuIvc6VVU6be9FUV10t3v0xoQ05ieUoKAv6T3qfZD /DpxPd1IHgvNWR1zirnDtCQRsmffig2j6t/Ua1b49rOqGxaVUftlyJoG90mY44uf OSPuMzu3ed7kKpX1UvTs76Hz/UHHhPcv68d42sHdOcW90vFPUyGYruA5kGn5nr/J D0Srnfyfsjz9pQEcmabe+yWUK/eXrmb43/tYXStXjUa1H4xzY3e3qVeIEI9+FBM5 x3RYgQ1AZ0ab7YDrTBKSrAsmHNG6xZLIgTLAZFqZ1SOMy3IJj88pT21CLQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDyWjZw4PSXls5tnBnqhLOxywz9lMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvUEphTm5EZzlKZVd6bTJjR2VxRXM3SExEUDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQATmz8AwQA V/YEAwQCV/YMAwQCV/YcAwQAbaApAwQBbaAsAwQBbaB2AwQAuSs7MAwDBAHURoID BAHURoQwDQYJKoZIhvcNAQELBQADggEBAB8nSf5iGX3u9rHnHaZgbQ7TdcklYtXr MPwEgrUxvnUlMYLOrv1uXqXSo/ZHpLUwBNMew9Ds/zjsU4XlyRlczQL4pn4mpcZT EjWb/AA8B14wVoB6NeFWTmvkjfiPE3auqXF1oGJEULsO60/tJVZpHQGCz24Ydn+V f6TYBN8t7CKi5jHeJUHejV/Dsd2X/OnQ/dVy2U6d+nQOxq8KOEo12AT2T1mYw7v+ Qi27FQ1ovdHAMWNFrhUzqZGQYrhYa7d6QWMqL3UHOMI8Z2lSSaKxPKyO0fe+kKvj 6VESYTpy1pvALomRCFOydBueAvI3kVwWDtjWvLYs9//cYUlCnfnQwso= -----END CERTIFICATE-----Generated at Tue Jan 20 03:34:13 2026 by rpki-client