This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/pCWS_26lWVBmz3evvhhCPtQ3724.roa File: pCWS_26lWVBmz3evvhhCPtQ3724.roa (raw, json) Hash identifier: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4= Subject key identifier: A4:25:92:FF:6E:A5:59:50:66:CF:77:AF:BE:18:42:3E:D4:37:EF:6E Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a Certificate serial: 019B7C1356590DE7ECD0B2CE87E16A6FF73C Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/pCWS_26lWVBmz3evvhhCPtQ3724.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35802 IP address blocks: 195.10.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:56:59:0d:e7:ec:d0:b2:ce:87:e1:6a:6f:f7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42592ff6ea5595066cf77afbe18423ed437ef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:07:23:75:af:a6:a1:b3:39:35:fd:a0:8b: 90:96:23:fb:47:ab:19:16:c4:03:5f:19:5a:52:86: f5:8b:07:62:b6:9d:55:4d:b6:25:fb:21:89:75:dd: 8a:14:1a:51:e2:ba:25:73:2f:20:7d:2e:5d:9b:a5: 07:b8:a7:c0:64:4a:fd:16:e3:82:8f:d3:81:f5:06: c7:01:05:ca:e2:e3:75:bc:72:2b:15:ca:51:45:20: 01:a0:1f:46:af:3e:ac:d0:00:ba:d2:91:c4:88:37: f6:cc:0c:c0:29:7b:9b:40:8c:6c:5c:26:1c:71:ca: bc:87:37:4d:3b:3c:20:fd:33:fb:cd:8a:37:22:1f: 26:15:83:44:6b:d4:ef:a5:18:cc:9e:bc:29:7f:f9: 01:01:0b:58:9c:69:e1:0a:5b:8f:45:17:65:8b:f5: 96:cc:5d:b2:71:a2:23:7b:a8:80:f9:11:7f:7c:1c: 42:84:e4:72:66:a1:cb:89:91:e5:38:f4:fe:61:45: aa:60:d5:fd:79:ba:5f:1f:de:d1:af:ed:d7:5c:10: cb:fe:d6:9d:a3:d3:0d:22:19:5e:75:af:35:24:51: d4:99:62:88:49:d7:ec:61:1e:df:ba:f2:06:61:9d: e1:78:98:8b:f4:5c:f7:58:ee:2a:06:d8:6f:1f:c7: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:92:FF:6E:A5:59:50:66:CF:77:AF:BE:18:42:3E:D4:37:EF:6E X509v3 Authority Key Identifier: keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/pCWS_26lWVBmz3evvhhCPtQ3724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.198.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c9:8c:04:cc:ac:d5:6f:aa:93:f0:20:8d:de:c4:de:e9:d5: 6f:39:ed:42:43:91:5d:d8:85:9f:2c:8e:ba:ea:f5:71:fe:15: 92:44:a0:e6:0c:74:b8:ba:50:46:01:ba:41:9e:a4:cf:2c:37: c9:79:be:78:2b:7d:7c:22:44:ed:68:d3:50:ac:0a:e0:9d:2a: 34:35:43:f7:31:b7:f7:2e:88:4b:2f:f6:73:7e:55:00:ce:5e: 9c:99:d4:f6:8f:61:ce:9e:d9:32:4d:02:12:5c:a2:fc:2b:5f: 0b:95:8a:ad:7d:b2:bd:88:c9:76:70:58:90:29:64:72:8d:6d: 43:31:a8:fa:73:52:a2:9d:dd:4f:6c:27:82:77:1f:89:6a:43: d0:a5:69:34:93:03:9c:b4:ab:80:9b:c7:ec:64:8a:68:40:29: 6d:25:a9:dc:5a:a3:85:5f:e2:b8:7a:50:e7:05:62:e5:ee:7c: f0:f6:d5:d6:4b:68:63:a9:64:ef:05:32:fb:07:d4:b8:40:30: 5a:8f:de:28:85:d3:21:bf:3c:22:f0:89:bb:62:1c:fa:95:d7: c5:77:e9:80:18:8a:14:1f:d9:46:13:27:05:87:c7:31:d6:98: 14:ed:7e:2d:c4:3d:52:5e:59:0c:ae:05:ba:f7:69:dc:07:ad: be:ca:9d:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1ZZDefs0LLOh+Fqb/c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWIyNjIzYTM5ZDU1NmM1MGI3MDQ2ZDM2NDQ3ZmI2MjFh Zjk3NGEwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDI1OTJmZjZlYTU1OTUwNjZjZjc3YWZiZTE4NDIzZWQ0MzdlZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspgHI3WvpqGzOTX9oIuQliP7R6sZ FsQDXxlaUob1iwditp1VTbYl+yGJdd2KFBpR4rolcy8gfS5dm6UHuKfAZEr9FuOC j9OB9QbHAQXK4uN1vHIrFcpRRSABoB9Grz6s0AC60pHEiDf2zAzAKXubQIxsXCYc ccq8hzdNOzwg/TP7zYo3Ih8mFYNEa9TvpRjMnrwpf/kBAQtYnGnhCluPRRdli/WW zF2ycaIje6iA+RF/fBxChORyZqHLiZHlOPT+YUWqYNX9ebpfH97Rr+3XXBDL/tad o9MNIhleda81JFHUmWKISdfsYR7fuvIGYZ3heJiL9Fz3WO4qBthvH8epHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQlkv9upVlQZs93r74YQj7UN+9uMB8GA1UdIwQY MBaAFNBbJiOjnVVsULcEbTZEf7Yhr5dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEt MDY1Y2ExZjM2MzEwLzEvcENXU18yNmxXVkJtejNldnZoaENQdFEzNzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMGNhNzYtZTI2NC00MGYxLTlkOGEtMDY1Y2ExZjM2MzEw LzEvMEZzbUk2T2RWV3hRdHdSdE5rUl90aUd2bDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrGMA0G CSqGSIb3DQEBCwUAA4IBAQAMyYwEzKzVb6qT8CCN3sTe6dVvOe1CQ5Fd2IWfLI66 6vVx/hWSRKDmDHS4ulBGAbpBnqTPLDfJeb54K318IkTtaNNQrArgnSo0NUP3Mbf3 LohLL/ZzflUAzl6cmdT2j2HOntkyTQISXKL8K18LlYqtfbK9iMl2cFiQKWRyjW1D Maj6c1Kind1PbCeCdx+JakPQpWk0kwOctKuAm8fsZIpoQCltJancWqOFX+K4elDn BWLl7nzw9tXWS2hjqWTvBTL7B9S4QDBaj94ohdMhvzwi8Im7Yhz6ldfFd+mAGIoU H9lGEycFh8cx1pgU7X4txD1SXlkMrgW692ncB62+yp3m -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:54 2026 by rpki-client