This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa File: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (raw, json) Hash identifier: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs= Subject key identifier: 3C:CC:F2:FE:A5:75:51:8F:F4:64:A0:7D:91:D3:95:B9:85:93:9A:67 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F1438DDC2519B9E6D74F1BD41B3C7A5 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa Signing time: Fri 02 Jan 2026 14:19:50 +0000 ROA not before: Fri 02 Jan 2026 14:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 45.141.234.0/24 maxlen: 24 78.159.131.0/24 maxlen: 24 93.152.207.0/24 maxlen: 24 93.152.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:38:dd:c2:51:9b:9e:6d:74:f1:bd:41:b3:c7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cccf2fea575518ff464a07d91d395b985939a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:a8:4e:69:2c:94:3d:73:b2:20:f8:85:23: 82:9d:54:fd:6c:3f:20:7a:51:73:08:6e:80:ee:df: f1:6a:aa:f6:af:1c:ca:67:45:9d:f8:d6:5a:9e:d9: f4:7a:d4:5e:72:fa:e3:90:e6:56:42:c7:11:0a:28: 5f:09:ce:a1:34:72:2d:94:e8:97:82:ad:d9:d1:91: e4:3b:e9:6c:a4:0b:08:f1:73:d9:a7:c1:01:44:9e: 98:a6:6c:09:36:0b:b8:ee:d2:00:dd:36:8c:55:7e: e9:dc:eb:d2:ed:fb:e9:3a:9d:8e:6a:06:ff:38:84: 9f:5b:c2:03:95:31:ae:fb:b4:fe:26:2c:cf:b2:aa: b5:89:0f:a4:57:bb:22:96:fa:d8:79:1e:7e:b1:38: b9:62:47:70:9d:f5:63:1e:b5:eb:22:83:a6:c8:82: 8d:95:14:76:8c:91:05:63:32:3e:75:c3:57:bc:b5: f5:e5:79:40:76:af:69:18:f5:ed:5f:07:fb:e0:10: 90:75:c8:7e:59:2f:92:31:18:e6:5a:08:4a:1c:5a: 9b:81:0d:92:1c:94:d2:3f:35:d3:9d:08:e3:65:1f: 9a:ff:50:7d:a9:4a:e5:13:e7:84:e9:f8:66:0a:d9: f6:ce:8f:7c:e2:f6:78:6b:1e:d8:67:54:ec:3a:c8: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CC:F2:FE:A5:75:51:8F:F4:64:A0:7D:91:D3:95:B9:85:93:9A:67 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.234.0/24 78.159.131.0/24 93.152.207.0/24 93.152.217.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ae:02:ac:61:39:36:f2:72:71:40:37:95:1f:99:40:99:fd: b6:d9:cc:46:3d:51:ae:f2:d2:32:ae:dc:b8:e7:65:fe:d0:9c: 1f:4f:d8:86:97:98:07:7c:4a:f2:2d:52:74:fe:ff:93:d0:28: 76:c2:23:cf:23:9c:c9:5f:73:82:8d:9a:19:bf:92:10:20:74: 60:5c:26:8d:fe:2b:ab:37:86:0f:04:4b:57:97:5e:28:5e:fe: 33:91:53:fd:8c:8e:39:5b:1c:52:71:2b:da:77:dd:50:1d:c3: 11:67:c6:61:4b:32:18:29:28:b4:7d:ba:4f:38:72:bc:ee:7e: 0b:99:dd:c0:54:c3:06:50:60:82:75:58:1f:cb:6b:8b:c8:6b: 2f:b2:e2:1a:98:a0:43:59:9b:65:32:17:2d:37:97:f4:91:f3: c2:7a:74:49:63:ba:30:0f:9c:fa:a3:1d:78:a0:c1:04:6b:2c: 0f:64:6f:4b:62:0f:aa:a9:18:8d:53:cc:7e:be:fa:e8:88:34: c5:46:1a:c0:ff:eb:ca:94:e8:4d:92:52:2d:60:f2:42:f9:8d: 69:67:92:f6:af:f3:a9:ee:fa:6f:a9:dc:94:f2:33:4b:f8:4e: bc:09:db:84:ad:77:8d:e8:6e:ec:e9:9b:08:11:7a:ef:8c:4b: a0:5e:3a:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FDjdwlGbnm108b1Bs8elMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2NjZjJmZWE1NzU1MThmZjQ2NGEwN2Q5MWQzOTViOTg1OTM5YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV2oTmkslD1zsiD4hSOCnVT9bD8g elFzCG6A7t/xaqr2rxzKZ0Wd+NZantn0etRecvrjkOZWQscRCihfCc6hNHItlOiX gq3Z0ZHkO+lspAsI8XPZp8EBRJ6YpmwJNgu47tIA3TaMVX7p3OvS7fvpOp2Oagb/ OISfW8IDlTGu+7T+JizPsqq1iQ+kV7silvrYeR5+sTi5YkdwnfVjHrXrIoOmyIKN lRR2jJEFYzI+dcNXvLX15XlAdq9pGPXtXwf74BCQdch+WS+SMRjmWghKHFqbgQ2S HJTSPzXTnQjjZR+a/1B9qUrlE+eE6fhmCtn2zo984vZ4ax7YZ1TsOsiXswIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDzM8v6ldVGP9GSgfZHTlbmFk5pnMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvUE16eV9xVjFVWV8wWktCOWtkT1Z1WVdUbW1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY3qAwQA Tp+DAwQAXZjPAwQAXZjZMA0GCSqGSIb3DQEBCwUAA4IBAQBKrgKsYTk28nJxQDeV H5lAmf222cxGPVGu8tIyrty452X+0JwfT9iGl5gHfEryLVJ0/v+T0Ch2wiPPI5zJ X3OCjZoZv5IQIHRgXCaN/iurN4YPBEtXl14oXv4zkVP9jI45WxxScSvad91QHcMR Z8ZhSzIYKSi0fbpPOHK87n4Lmd3AVMMGUGCCdVgfy2uLyGsvsuIamKBDWZtlMhct N5f0kfPCenRJY7owD5z6ox14oMEEaywPZG9LYg+qqRiNU8x+vvroiDTFRhrA/+vK lOhNklItYPJC+Y1pZ5L2r/Op7vpvqdyU8jNL+E68CduErXeN6G7s6ZsIEXrvjEug Xjqm -----END CERTIFICATE-----Generated at Fri Jan 23 09:21:42 2026 by rpki-client