This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/PAWQJ--pyQDWqisMk27pgjU-VTo.roa File: PAWQJ--pyQDWqisMk27pgjU-VTo.roa (raw, json) Hash identifier: LFkt5XtALwLDqGdtvqPz4gaQ669NVQcvwDZAzQf4rZY= Subject key identifier: 3C:05:90:27:EF:A9:C9:00:D6:AA:2B:0C:93:6E:E9:82:35:3E:55:3A Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Certificate serial: 019B7F83B55D0A8288D45A88529FE5DDEA2C Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/PAWQJ--pyQDWqisMk27pgjU-VTo.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202041 IP address blocks: 185.45.156.0/22 maxlen: 22 185.45.156.0/23 maxlen: 23 185.45.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b5:5d:0a:82:88:d4:5a:88:52:9f:e5:dd:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c059027efa9c900d6aa2b0c936ee982353e553a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:da:22:2a:0b:f5:c3:c8:dd:97:40:93:74: 3a:c5:90:48:1a:14:fd:a4:10:4e:bd:c4:06:e9:67: ac:47:2b:3f:a4:01:18:8b:7c:9f:1b:8b:76:64:9c: 69:b6:41:68:c8:e5:0e:d1:b3:8f:56:0b:10:ec:29: 40:e7:a3:04:e5:3a:68:a5:f8:97:f0:18:ea:99:55: a2:20:10:5c:19:bc:fc:82:cf:1d:13:d7:69:ca:22: 06:a7:44:bc:4d:bf:38:36:0b:41:fc:bd:af:32:86: 67:06:56:2d:83:a2:5a:ae:53:2e:b4:ee:c7:42:21: f5:e3:83:2c:36:11:35:8c:b9:ca:41:8e:ce:d9:c3: 78:19:7f:ce:e7:f6:c0:d0:4c:b9:24:49:8e:b7:6f: 13:d6:12:f3:1b:1c:ac:31:7d:cc:fd:ec:d3:64:18: 73:12:1f:e9:f1:2a:9f:54:b9:98:e9:41:3d:8c:54: 11:29:ef:53:62:48:30:8d:3a:12:41:6f:55:06:ee: 36:c2:97:93:fa:f6:e3:3d:b9:26:7e:71:76:7d:f5: ea:dd:6e:85:62:90:d0:db:aa:2e:11:be:61:2d:de: 54:19:70:ca:1e:38:c3:56:b2:b9:ae:a4:d6:da:69: 19:9f:1e:24:61:c1:30:5f:5e:3b:1b:de:7b:b0:ce: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:90:27:EF:A9:C9:00:D6:AA:2B:0C:93:6E:E9:82:35:3E:55:3A X509v3 Authority Key Identifier: keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/PAWQJ--pyQDWqisMk27pgjU-VTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.156.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:31:5f:f6:1a:7f:1d:34:6e:9c:1d:5e:c7:75:91:c8:70:e9: 7a:b8:40:d6:ff:b6:c9:47:90:7e:c9:44:53:c7:83:77:18:d5: 6a:cb:01:0c:63:ad:1b:0e:b9:bb:0a:a6:ec:a3:05:a0:1c:d5: 39:4e:94:a5:2f:12:be:f9:4b:9d:ca:61:0c:d5:6e:a8:b4:86: 4c:fa:9b:c8:8d:90:24:00:91:85:bf:fe:65:c8:05:c9:bf:1b: 7a:cd:5a:8e:02:b3:8d:65:25:34:cc:89:65:a3:2c:02:76:3c: 97:00:a1:96:fd:95:45:b1:a8:bb:2d:bb:89:e4:94:e0:5f:2b: d5:5b:75:a8:5e:d4:33:6c:cb:69:6e:64:0d:76:ce:1f:a6:26: 0c:68:40:1a:be:e3:02:85:c0:70:8d:d8:30:0d:7a:1f:77:06: 52:a6:5e:63:f6:2e:51:d6:14:f3:07:bb:ae:f4:90:6b:97:3a: 68:20:16:80:93:88:9a:ce:8d:1e:f9:af:0c:1a:49:2b:8e:17: eb:bc:57:a0:0f:4e:41:d8:95:16:3d:7d:fb:0a:eb:9a:4f:9f: 11:ba:06:29:41:8f:cd:9e:51:17:2e:11:58:66:b6:7e:9d:12: ec:76:22:47:e5:69:f9:49:ee:65:e8:e6:c0:fc:a6:63:9f:a5: a7:4c:e0:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7VdCoKI1FqIUp/l3eosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj ZTFjZDcwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA1OTAyN2VmYTljOTAwZDZhYTJiMGM5MzZlZTk4MjM1M2U1NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz07aIioL9cPI3ZdAk3Q6xZBIGhT9 pBBOvcQG6WesRys/pAEYi3yfG4t2ZJxptkFoyOUO0bOPVgsQ7ClA56ME5TpopfiX 8BjqmVWiIBBcGbz8gs8dE9dpyiIGp0S8Tb84NgtB/L2vMoZnBlYtg6JarlMutO7H QiH144MsNhE1jLnKQY7O2cN4GX/O5/bA0Ey5JEmOt28T1hLzGxysMX3M/ezTZBhz Eh/p8SqfVLmY6UE9jFQRKe9TYkgwjToSQW9VBu42wpeT+vbjPbkmfnF2ffXq3W6F YpDQ26ouEb5hLd5UGXDKHjjDVrK5rqTW2mkZnx4kYcEwX147G957sM76dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwFkCfvqckA1qorDJNu6YI1PlU6MB8GA1UdIwQY MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt ZWFmOTI0NzMxMjE4LzEvUEFXUUotLXB5UURXcWlzTWsyN3BnalUtVlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4 LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS2cMA0G CSqGSIb3DQEBCwUAA4IBAQAtMV/2Gn8dNG6cHV7HdZHIcOl6uEDW/7bJR5B+yURT x4N3GNVqywEMY60bDrm7CqbsowWgHNU5TpSlLxK++UudymEM1W6otIZM+pvIjZAk AJGFv/5lyAXJvxt6zVqOArONZSU0zIlloywCdjyXAKGW/ZVFsai7LbuJ5JTgXyvV W3WoXtQzbMtpbmQNds4fpiYMaEAavuMChcBwjdgwDXofdwZSpl5j9i5R1hTzB7uu 9JBrlzpoIBaAk4iazo0e+a8MGkkrjhfrvFegD05B2JUWPX37CuuaT58RugYpQY/N nlEXLhFYZrZ+nRLsdiJH5Wn5Se5l6ObA/KZjn6WnTOBl -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:42 2026 by rpki-client