This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PwCYDy-nx1DrplykIQvhAT9a-nU.roa File: PwCYDy-nx1DrplykIQvhAT9a-nU.roa (raw, json) Hash identifier: 9aRH+4veftDtJHxrPfZVPhTiAqP7epXjSfoe8iXqFRo= Subject key identifier: 3F:00:98:0F:2F:A7:C7:50:EB:A6:5C:A4:21:0B:E1:01:3F:5A:FA:75 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019C4D20AF4CB12545D24A1503280C7AE08C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PwCYDy-nx1DrplykIQvhAT9a-nU.roa Signing time: Wed 11 Feb 2026 14:35:13 +0000 ROA not before: Wed 11 Feb 2026 14:35:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.87.243.0/24 maxlen: 24 45.146.128.0/24 maxlen: 24 2a09:17c0:1000::/48 maxlen: 48 2a0a:2d07:24::/48 maxlen: 48 2a0f:e6c7::/32 maxlen: 32 2a12:ac43:baca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4d:20:af:4c:b1:25:45:d2:4a:15:03:28:0c:7a:e0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Feb 11 14:35:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f00980f2fa7c750eba65ca4210be1013f5afa75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:23:b3:f9:ad:dc:fc:cf:f9:1e:8c:42:13: 2a:a6:a8:84:fe:45:56:25:3f:36:63:e9:64:39:6a: 9c:d3:f5:98:10:f0:4b:e2:25:9f:e0:22:93:b3:a6: 58:56:20:74:e2:c4:da:6b:94:49:84:9e:77:b0:6a: 9b:e6:ce:6e:ed:c7:cc:bf:02:cb:dc:98:f2:3b:53: a6:60:80:42:51:db:93:a6:cd:e2:6c:35:0e:34:15: 9e:31:42:0f:9a:34:d3:67:d6:b2:a7:8c:e9:07:f5: 00:a0:60:45:3d:9b:30:61:b5:a7:5f:1a:e7:66:bb: 6a:31:a7:24:2d:b7:0b:61:7c:a7:9a:34:78:5c:72: 01:ba:37:0c:3f:c3:60:eb:41:18:f4:b0:48:cc:55: 62:30:a6:7e:e1:6b:da:c2:74:4a:84:bd:77:35:ed: 29:69:74:f4:61:28:d1:b9:14:9b:2b:9b:29:bd:d8: 26:62:94:52:1c:37:38:61:a2:b3:8e:d3:c0:a0:ce: 74:8c:ff:40:62:88:06:3c:c8:99:db:d3:12:43:ec: 77:08:10:85:df:58:ce:cc:f7:17:95:47:b0:18:79: 9e:ea:e4:3d:61:8d:8d:e9:ed:d0:57:97:25:df:ce: cd:8d:08:62:08:8c:ae:d0:86:88:e6:64:c1:8a:bf: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:98:0F:2F:A7:C7:50:EB:A6:5C:A4:21:0B:E1:01:3F:5A:FA:75 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PwCYDy-nx1DrplykIQvhAT9a-nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.243.0/24 45.146.128.0/24 IPv6: 2a09:17c0:1000::/48 2a0a:2d07:24::/48 2a0f:e6c7::/32 2a12:ac43:baca::/48 Signature Algorithm: sha256WithRSAEncryption c2:90:6d:ba:cf:a7:77:ca:8d:6f:33:18:31:35:45:88:79:50: f9:d0:78:ef:55:77:ff:f6:bb:a1:e4:a8:91:af:50:3e:fa:77: 91:15:e7:df:46:3d:0a:23:25:51:0f:7f:66:89:cd:a4:ed:ce: 06:df:e6:0b:7c:53:08:e8:6e:4d:74:c1:b6:36:71:c8:86:53: 44:56:d0:b5:ee:fc:d6:2c:61:8e:f7:82:06:4c:6b:f5:e1:87: 53:8e:7d:bf:18:6f:4b:51:1f:f5:0b:a7:0d:0f:27:78:ea:54: 4b:39:26:51:f8:e5:c6:98:2b:f3:fe:fc:ac:04:da:c0:6c:c1: 27:a9:a8:25:9f:ef:47:3e:7d:19:a3:c0:ea:b4:68:c1:8e:a9: 71:25:3b:6b:e7:c6:e6:98:ab:6b:a8:97:23:c9:37:49:21:70: 40:36:8c:ce:2b:2e:73:ab:74:81:e5:f0:ee:cf:f2:63:01:21: cf:aa:ec:ff:be:25:d1:7c:e8:8a:c5:25:24:eb:a6:d5:bc:6a: d3:04:07:45:f8:08:c9:9f:33:e8:da:db:e1:d0:06:e7:54:0b: ba:14:7b:f6:60:39:c6:60:3f:07:b8:37:5d:50:af:91:0b:15: 84:4b:b2:c8:50:14:2c:4d:5d:90:b2:75:ce:76:40:5f:6a:4a: e0:71:d4:37 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZxNIK9MsSVF0koVAygMeuCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMjExMTQzNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjAwOTgwZjJmYTdjNzUwZWJhNjVjYTQyMTBiZTEwMTNmNWFmYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtkjs/mt3PzP+R6MQhMqpqiE/kVW JT82Y+lkOWqc0/WYEPBL4iWf4CKTs6ZYViB04sTaa5RJhJ53sGqb5s5u7cfMvwLL 3JjyO1OmYIBCUduTps3ibDUONBWeMUIPmjTTZ9ayp4zpB/UAoGBFPZswYbWnXxrn ZrtqMackLbcLYXynmjR4XHIBujcMP8Ng60EY9LBIzFViMKZ+4WvawnRKhL13Ne0p aXT0YSjRuRSbK5spvdgmYpRSHDc4YaKzjtPAoM50jP9AYogGPMiZ29MSQ+x3CBCF 31jOzPcXlUewGHme6uQ9YY2N6e3QV5cl387NjQhiCIyu0IaI5mTBir/TrQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFD8AmA8vp8dQ66ZcpCEL4QE/Wvp1MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUHdDWUR5LW54MURycGx5a0lRdmhBVDlhLW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjASBAIAATAMAwQALVfzAwQA LZKAMCgEAgACMCIDBwAqCRfAEAADBwAqCi0HACQDBQAqD+bHAwcAKhKsQ7rKMA0G CSqGSIb3DQEBCwUAA4IBAQDCkG26z6d3yo1vMxgxNUWIeVD50HjvVXf/9ruh5KiR r1A++neRFeffRj0KIyVRD39mic2k7c4G3+YLfFMI6G5NdMG2NnHIhlNEVtC17vzW LGGO94IGTGv14YdTjn2/GG9LUR/1C6cNDyd46lRLOSZR+OXGmCvz/vysBNrAbMEn qagln+9HPn0Zo8DqtGjBjqlxJTtr58bmmKtrqJcjyTdJIXBANozOKy5zq3SB5fDu z/JjASHPquz/viXRfOiKxSUk66bVvGrTBAdF+AjJnzPo2tvh0AbnVAu6FHv2YDnG YD8HuDddUK+RCxWES7LIUBQsTV2QsnXOdkBfakrgcdQ3 -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:38 2026 by rpki-client