This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/pzTDdoiRqJT_m82j1zVgjxb2XAc.roa File: pzTDdoiRqJT_m82j1zVgjxb2XAc.roa (raw, json) Hash identifier: m6adch5DIkkECliQTrAwnaj3Hlmzg1nCza1B5z8+Tj0= Subject key identifier: A7:34:C3:76:88:91:A8:94:FF:9B:CD:A3:D7:35:60:8F:16:F6:5C:07 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019B7910EA60B00682D9CA69751B13D150E9 Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/pzTDdoiRqJT_m82j1zVgjxb2XAc.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51175 IP address blocks: 185.191.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ea:60:b0:06:82:d9:ca:69:75:1b:13:d1:50:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a734c3768891a894ff9bcda3d735608f16f65c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:30:99:2d:be:85:b0:1f:d3:a0:16:70:d8: 31:a9:a8:3f:b2:f2:e0:8a:84:8c:b1:5b:8b:60:20: 20:a1:b1:29:76:1b:2d:52:e0:03:1b:86:6f:00:0c: 4b:3d:8d:22:7c:28:28:ac:d8:2b:c6:f9:34:76:e8: 57:0f:a4:a6:df:26:67:13:57:3e:ce:50:55:8b:db: d3:a4:8a:6a:f8:b5:51:ba:94:86:34:53:90:28:e2: ad:13:6e:da:5a:20:04:af:3b:82:49:16:3e:ba:70: 17:d6:2a:dc:e7:3b:6f:56:20:49:fe:c6:c1:d1:14: d0:c8:a5:1f:46:a7:ff:e7:5f:27:b9:0d:6d:07:93: b0:64:7e:6b:0f:38:f4:9d:d5:ed:7d:1d:ba:20:d5: 87:54:5d:58:ce:2b:0c:30:56:26:18:69:26:1f:4d: d5:7b:d7:cd:4e:69:e0:ab:0e:08:63:97:fe:29:7b: 46:4d:33:da:ba:2a:00:a0:86:95:29:38:23:e2:4c: 27:72:b5:3f:44:e1:f5:e7:9e:c4:e3:71:04:e4:06: ec:08:ec:89:e9:60:4d:e0:62:dc:23:87:04:45:fd: 7c:d3:c5:81:87:00:03:4f:8a:5e:91:ba:94:76:93: f2:0f:62:03:ed:2c:8e:d8:76:ba:7b:2b:0c:71:17: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:34:C3:76:88:91:A8:94:FF:9B:CD:A3:D7:35:60:8F:16:F6:5C:07 X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/pzTDdoiRqJT_m82j1zVgjxb2XAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.244.0/23 Signature Algorithm: sha256WithRSAEncryption 48:ac:69:0b:7e:cf:e0:78:c7:00:5e:04:cd:93:c5:01:2f:be: 81:26:29:96:97:4f:06:0d:04:a2:e3:bf:30:db:fb:0d:41:6e: 66:4e:bb:b2:a6:4a:b8:39:2c:af:70:a1:67:18:f7:0f:64:ec: 15:78:3a:dd:ff:42:26:9d:c4:39:45:5d:cf:60:1c:4d:43:75: 84:5b:53:76:4a:29:9f:e5:3a:2d:ed:5d:d0:4f:88:b9:14:1a: 2e:50:82:d0:c8:2e:00:c8:2f:6a:d3:1c:c5:11:c8:34:5f:54: 7d:e6:88:64:72:fd:1d:e4:17:5c:ab:66:88:66:3e:08:5a:8b: 06:2a:4d:40:36:39:6b:14:44:ba:fd:d0:0e:e4:0e:54:ea:7c: 49:27:4a:b5:bc:63:8d:80:dd:5c:67:89:3d:b7:bd:26:84:df: bd:9d:9f:c3:ee:0a:7f:f1:cf:75:ed:c7:48:b5:e1:85:71:76: eb:ba:c0:07:e2:fa:28:d2:9e:1f:bd:a4:4b:1b:55:9a:ce:f1: 7e:ff:4c:48:41:d2:1e:e2:71:1f:f6:8a:7f:22:43:f3:44:02: 08:dc:68:1d:10:46:64:e1:e9:78:bc:b6:46:59:d6:24:70:68: 5e:20:2f:a4:c3:83:2d:7d:bf:1e:e9:a9:18:cc:d6:4e:55:68: 7c:c3:b3:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOpgsAaC2cppdRsT0VDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzM0YzM3Njg4OTFhODk0ZmY5YmNkYTNkNzM1NjA4ZjE2ZjY1YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+AwmS2+hbAf06AWcNgxqag/svLg ioSMsVuLYCAgobEpdhstUuADG4ZvAAxLPY0ifCgorNgrxvk0duhXD6Sm3yZnE1c+ zlBVi9vTpIpq+LVRupSGNFOQKOKtE27aWiAErzuCSRY+unAX1irc5ztvViBJ/sbB 0RTQyKUfRqf/518nuQ1tB5OwZH5rDzj0ndXtfR26INWHVF1YzisMMFYmGGkmH03V e9fNTmngqw4IY5f+KXtGTTPauioAoIaVKTgj4kwncrU/ROH1557E43EE5AbsCOyJ 6WBN4GLcI4cERf1808WBhwADT4pekbqUdpPyD2ID7SyO2Ha6eysMcRd+6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKc0w3aIkaiU/5vNo9c1YI8W9lwHMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvcHpURGRvaVJxSlRfbTgyajF6VmdqeGIyWEFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUtMDU5MDM5NGEyZWZh LzEvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub/0MA0G CSqGSIb3DQEBCwUAA4IBAQBIrGkLfs/geMcAXgTNk8UBL76BJimWl08GDQSi478w 2/sNQW5mTruypkq4OSyvcKFnGPcPZOwVeDrd/0ImncQ5RV3PYBxNQ3WEW1N2Simf 5Tot7V3QT4i5FBouUILQyC4AyC9q0xzFEcg0X1R95ohkcv0d5Bdcq2aIZj4IWosG Kk1ANjlrFES6/dAO5A5U6nxJJ0q1vGONgN1cZ4k9t70mhN+9nZ/D7gp/8c917cdI teGFcXbrusAH4voo0p4fvaRLG1WazvF+/0xIQdIe4nEf9op/IkPzRAII3GgdEEZk 4el4vLZGWdYkcGheIC+kw4Mtfb8e6akYzNZOVWh8w7P2 -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:11 2026 by rpki-client