This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/PZUNEFSsi2EAtJC1GuHC2NlkXxA.roa File: PZUNEFSsi2EAtJC1GuHC2NlkXxA.roa (raw, json) Hash identifier: /tkslrULiVJOec10rJ3heV6M14iq+3R/d0Ua499Pzo8= Subject key identifier: 3D:95:0D:10:54:AC:8B:61:00:B4:90:B5:1A:E1:C2:D8:D9:64:5F:10 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6E7DACA7E46E679FDA7586A70CD6B Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/PZUNEFSsi2EAtJC1GuHC2NlkXxA.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 5.172.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e7:da:ca:7e:46:e6:79:fd:a7:58:6a:70:cd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d950d1054ac8b6100b490b51ae1c2d8d9645f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:11:03:64:3c:6f:e9:8f:f9:9e:8c:55:1b: b1:8a:06:83:31:61:7f:66:8d:1b:92:20:a3:4d:60: 59:68:c0:b1:28:68:3b:a4:9b:40:06:68:1a:e4:8f: d6:30:4d:17:14:47:f0:59:a4:99:f9:f4:24:96:b6: ed:9a:89:b1:d6:ac:f4:ec:39:be:fc:23:6b:e2:ee: b9:c9:23:33:3f:56:fb:95:b5:86:57:ce:2f:31:03: d9:1d:f3:b1:86:cd:0e:d2:cc:2f:93:64:f2:dc:84: 04:5b:90:f6:99:93:fc:9d:b3:d7:70:fd:60:24:d2: 07:ad:70:43:39:28:6a:ed:69:b8:dc:1d:bb:46:fa: 39:1e:4e:7d:7d:c6:40:f9:fd:de:af:e6:6f:15:5f: 01:f7:c0:ca:e2:32:ad:b5:60:9d:50:80:48:84:e9: 33:1a:9d:24:e6:d5:ce:63:23:cb:17:61:ed:ba:a2: f5:e0:2d:da:02:ee:f6:29:ed:1c:d8:ba:e8:1a:7e: f5:36:fe:35:0f:4f:c5:1e:d0:77:f5:66:12:17:1d: d6:1b:f6:e4:78:34:bf:4d:72:57:0f:51:c2:dd:5b: 5f:0e:dc:94:14:86:bd:67:d3:c1:75:7e:02:3c:30: ed:cd:40:2e:75:b1:e7:1f:4a:af:c2:30:dd:cc:8a: b9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:0D:10:54:AC:8B:61:00:B4:90:B5:1A:E1:C2:D8:D9:64:5F:10 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/PZUNEFSsi2EAtJC1GuHC2NlkXxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.33.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f2:e5:41:c0:b2:25:16:91:2d:51:a3:91:3c:3b:a6:cb:eb: dd:21:c7:b0:24:04:89:05:19:a2:31:b1:de:dd:77:7b:d6:40: b9:b4:20:6a:a1:42:c1:1f:86:4f:fa:81:45:c3:6c:f0:95:e1: 25:98:ea:c9:77:99:68:82:78:4d:71:b5:ed:5a:40:86:d7:9c: 72:f8:62:fd:b1:90:6f:2f:6a:36:74:40:62:1f:8f:8d:a1:69: ff:45:fe:46:54:a5:71:30:22:90:b1:35:7b:d3:75:1c:7d:b1: e9:4f:bb:db:d1:b9:35:e0:2b:26:e5:fe:4b:f7:06:9b:52:de: 5a:a9:d1:61:6a:21:a4:8d:0d:80:ae:d2:f6:03:fa:2a:6e:4b: a1:09:a7:7c:2b:9d:86:6f:fa:68:b8:92:86:e5:7e:95:b2:13: 74:ae:56:e3:a9:70:84:ca:09:25:5d:c8:88:8f:be:ec:e6:09: 95:52:36:ef:a7:9f:c3:e0:fa:b7:a8:3a:d9:b8:ed:54:5d:df: 0e:ac:c6:db:0b:b1:be:ec:94:4d:d6:40:3b:e9:14:9b:10:c2: 06:9e:9c:ec:31:6e:3b:e7:90:78:ea:41:f0:64:10:9e:27:02: 67:bc:9e:b0:92:6a:42:91:b4:d3:de:0c:77:5b:46:47:f2:3b: 46:c0:08:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pufayn5G5nn9p1hqcM1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk1MGQxMDU0YWM4YjYxMDBiNDkwYjUxYWUxYzJkOGQ5NjQ1ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscQRA2Q8b+mP+Z6MVRuxigaDMWF/ Zo0bkiCjTWBZaMCxKGg7pJtABmga5I/WME0XFEfwWaSZ+fQklrbtmomx1qz07Dm+ /CNr4u65ySMzP1b7lbWGV84vMQPZHfOxhs0O0swvk2Ty3IQEW5D2mZP8nbPXcP1g JNIHrXBDOShq7Wm43B27Rvo5Hk59fcZA+f3er+ZvFV8B98DK4jKttWCdUIBIhOkz Gp0k5tXOYyPLF2HtuqL14C3aAu72Ke0c2LroGn71Nv41D0/FHtB39WYSFx3WG/bk eDS/TXJXD1HC3VtfDtyUFIa9Z9PBdX4CPDDtzUAudbHnH0qvwjDdzIq50wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2VDRBUrIthALSQtRrhwtjZZF8QMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvUFpVTkVGU3NpMkVBdEpDMUd1SEMyTmxrWHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABawhMA0G CSqGSIb3DQEBCwUAA4IBAQBm8uVBwLIlFpEtUaORPDumy+vdIcewJASJBRmiMbHe 3Xd71kC5tCBqoULBH4ZP+oFFw2zwleElmOrJd5lognhNcbXtWkCG15xy+GL9sZBv L2o2dEBiH4+NoWn/Rf5GVKVxMCKQsTV703UcfbHpT7vb0bk14Csm5f5L9wabUt5a qdFhaiGkjQ2ArtL2A/oqbkuhCad8K52Gb/pouJKG5X6VshN0rlbjqXCEygklXciI j77s5gmVUjbvp5/D4Pq3qDrZuO1UXd8OrMbbC7G+7JRN1kA76RSbEMIGnpzsMW47 55B46kHwZBCeJwJnvJ6wkmpCkbTT3gx3W0ZH8jtGwAgo -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:25 2026 by rpki-client