This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PZgcMD66szNtW_E4LO1X5zWqXZI.roa File: PZgcMD66szNtW_E4LO1X5zWqXZI.roa (raw, json) Hash identifier: jEkKvWlBByDmD+ujbnlra7YrdUbIY8JacrwXtcQAQQM= Subject key identifier: 3D:98:1C:30:3E:BA:B3:33:6D:5B:F1:38:2C:ED:57:E7:35:AA:5D:92 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1F5E4DA3C8585204105F7B6F4C3D Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PZgcMD66szNtW_E4LO1X5zWqXZI.roa Signing time: Fri 02 Jan 2026 06:18:02 +0000 ROA not before: Fri 02 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205138 IP address blocks: 2a01:8740:10::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1f:5e:4d:a3:c8:58:52:04:10:5f:7b:6f:4c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d981c303ebab3336d5bf1382ced57e735aa5d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:ad:ae:d6:05:09:4b:5e:1a:c2:71:d1:78: 4a:07:ed:c2:cb:6e:44:84:1b:77:cf:f5:4d:d7:8e: ef:88:3a:46:77:00:f2:18:cc:fa:f6:44:27:fb:2c: cb:f4:ed:0d:6c:eb:1e:78:a8:a9:3a:8a:7f:ef:ca: 72:9d:3a:76:aa:6c:25:0d:92:a7:1c:19:37:d6:4d: 10:11:45:4c:57:ee:02:70:6a:70:c7:b3:4c:25:c5: 9b:6f:97:5a:2e:1c:ed:8a:4b:34:94:95:4e:d2:69: 45:be:a6:17:51:c4:5b:1a:d6:21:f9:26:c2:e3:78: ea:ef:26:ca:17:08:c8:02:25:42:ec:a9:5d:35:2e: de:51:7d:9b:b2:11:fd:62:0f:0a:fc:de:a0:c0:5c: b6:e5:50:88:c8:02:51:75:68:61:d4:e7:95:6c:63: 75:4f:ec:04:a5:69:36:98:1d:d3:0b:68:79:8b:5b: 1b:24:c1:9c:3e:6d:5b:16:86:b2:1c:ab:3f:ef:b5: 93:b5:db:4b:e3:30:1c:4a:09:54:50:3b:7d:69:33: 7c:ef:c7:1d:67:c5:32:12:1a:46:4e:40:64:e8:9b: f3:a0:14:95:50:a5:91:d4:4c:34:0a:dc:4b:14:98: 23:ac:95:30:7a:02:aa:a7:94:47:6f:78:3c:37:f7: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:1C:30:3E:BA:B3:33:6D:5B:F1:38:2C:ED:57:E7:35:AA:5D:92 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PZgcMD66szNtW_E4LO1X5zWqXZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8740:10::/46 Signature Algorithm: sha256WithRSAEncryption 26:4f:08:47:b8:21:95:18:f7:48:04:c3:74:f2:08:5a:34:ec: 34:b1:ab:af:68:80:04:f9:40:05:07:1d:d6:8c:7f:2e:eb:1a: 65:b7:44:09:c8:d1:18:87:5d:ab:fe:7e:8d:f3:c1:1d:f6:d1: 69:46:45:91:24:07:74:0b:2d:e1:d2:cf:cf:40:45:c9:df:25: a8:62:85:2a:30:f1:7f:9e:3c:23:82:8a:1c:59:ff:ee:18:42: 4a:61:11:db:84:ea:47:b7:28:ce:49:52:fe:a8:57:2c:10:9b: af:e4:7c:98:39:09:3f:a0:d4:7e:a7:98:3b:63:0c:ff:bf:be: 32:d2:a4:e2:6c:43:62:5d:f3:d8:59:36:45:0e:b1:cd:13:78: d2:b4:86:2e:45:ed:24:96:35:af:a8:ba:a5:87:fd:cc:a2:2b: a0:0d:32:8e:e0:51:3e:f6:f1:1c:07:04:b2:0b:8a:6d:dc:fd: 49:1e:14:7d:f9:5b:e1:f5:c2:16:ad:c0:d5:07:b9:db:fc:7a: b1:f8:cd:fb:00:f0:3c:f8:9e:6f:51:ab:d2:49:00:e2:61:47: 24:6a:56:24:9a:06:d6:6e:26:f1:79:5e:84:a9:74:5b:57:54: 17:c5:a9:06:e1:55:b9:3d:c4:57:19:6a:85:84:06:54:64:62: 86:f7:9e:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9Wx9eTaPIWFIEEF97b0w9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk4MWMzMDNlYmFiMzMzNmQ1YmYxMzgyY2VkNTdlNzM1YWE1ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEytrtYFCUteGsJx0XhKB+3Cy25E hBt3z/VN147viDpGdwDyGMz69kQn+yzL9O0NbOseeKipOop/78pynTp2qmwlDZKn HBk31k0QEUVMV+4CcGpwx7NMJcWbb5daLhztiks0lJVO0mlFvqYXUcRbGtYh+SbC 43jq7ybKFwjIAiVC7KldNS7eUX2bshH9Yg8K/N6gwFy25VCIyAJRdWhh1OeVbGN1 T+wEpWk2mB3TC2h5i1sbJMGcPm1bFoayHKs/77WTtdtL4zAcSglUUDt9aTN878cd Z8UyEhpGTkBk6JvzoBSVUKWR1Ew0CtxLFJgjrJUwegKqp5RHb3g8N/ed1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD2YHDA+urMzbVvxOCztV+c1ql2SMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvUFpnY01ENjZzek50V19FNExPMVg1eldxWFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgGHQAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQAmTwhHuCGVGPdIBMN08ghaNOw0sauvaIAE+UAF Bx3WjH8u6xplt0QJyNEYh12r/n6N88Ed9tFpRkWRJAd0Cy3h0s/PQEXJ3yWoYoUq MPF/njwjgoocWf/uGEJKYRHbhOpHtyjOSVL+qFcsEJuv5HyYOQk/oNR+p5g7Ywz/ v74y0qTibENiXfPYWTZFDrHNE3jStIYuRe0kljWvqLqlh/3MoiugDTKO4FE+9vEc BwSyC4pt3P1JHhR9+Vvh9cIWrcDVB7nb/Hqx+M37APA8+J5vUavSSQDiYUckalYk mgbWbibxeV6EqXRbV1QXxakG4VW5PcRXGWqFhAZUZGKG954y -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:29 2026 by rpki-client