This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/pzHxNXyOi4GRP6r-amA2FHPYm4c.roa File: pzHxNXyOi4GRP6r-amA2FHPYm4c.roa (raw, json) Hash identifier: Cssj6oFLhW5MKHfO9x9I1MSj8gbmy2wVWTOFBqf8hZ4= Subject key identifier: A7:31:F1:35:7C:8E:8B:81:91:3F:AA:FE:6A:60:36:14:73:D8:9B:87 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4F621B7E572D6E919162581E55EC Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/pzHxNXyOi4GRP6r-amA2FHPYm4c.roa Signing time: Thu 01 Jan 2026 12:19:05 +0000 ROA not before: Thu 01 Jan 2026 12:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211557 IP address blocks: 213.238.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4f:62:1b:7e:57:2d:6e:91:91:62:58:1e:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a731f1357c8e8b81913faafe6a60361473d89b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:30:6f:37:3e:5e:a3:05:c2:07:6d:40:53:69: b9:6c:da:dc:51:f0:03:bf:c0:87:90:f5:8e:9e:58: ae:9b:ca:3f:e3:9e:52:73:b8:5e:33:60:fb:bc:0c: 09:d4:81:07:b3:b9:87:50:d6:21:fa:36:94:b4:eb: 06:2f:bc:65:fe:2f:e4:21:1e:fe:ed:de:d6:83:6f: 49:1a:06:f0:ab:c7:6b:47:d3:10:57:39:5e:21:ce: b0:b1:05:94:b9:4f:75:1e:93:f1:9f:a4:2a:9d:41: da:c0:8e:ff:e4:de:ec:58:d5:d2:f2:5a:2c:97:e1: 72:9d:0c:c2:5f:e2:36:de:ba:0f:88:4a:99:eb:99: 6b:15:13:d4:42:4b:48:fc:bd:d2:99:6c:e0:26:32: 4a:3c:ab:ce:8b:fc:1e:e0:f7:91:3a:06:49:cb:27: da:1c:2c:b4:09:f4:ec:36:6e:55:8c:40:04:2f:71: ce:e1:7e:0b:cc:cd:e4:fd:66:11:90:23:f6:f8:6f: 6e:f4:ac:e0:c0:ac:4e:74:eb:ed:b5:98:f4:fd:f8: 1b:04:3b:2d:3b:16:f3:84:98:da:0a:7e:62:e6:84: 23:21:20:e5:5d:3d:c2:a5:20:51:1c:6c:35:ef:74: 94:3a:84:55:f9:ee:30:a4:42:b0:32:97:8f:78:e6: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:F1:35:7C:8E:8B:81:91:3F:AA:FE:6A:60:36:14:73:D8:9B:87 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/pzHxNXyOi4GRP6r-amA2FHPYm4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.166.0/24 Signature Algorithm: sha256WithRSAEncryption ae:d2:6f:42:8a:f6:b8:72:f1:c2:62:8e:54:80:5a:a1:46:90: 1c:5d:35:e8:24:13:49:9a:e5:6d:df:9b:66:49:64:1e:cf:88: 8f:c9:be:be:1d:d5:66:75:6d:8f:d9:30:39:2b:ff:cb:85:1e: ca:88:4b:dc:86:c4:72:15:c0:36:02:e4:34:69:67:95:68:57: 70:6e:ce:f0:24:dc:c2:a9:41:a3:81:4a:7d:da:02:44:b7:c1: e9:e4:43:1c:6c:0e:44:93:98:69:8f:b8:67:eb:f2:49:17:a4: be:f2:ff:02:72:56:8f:40:10:1f:b0:c2:12:bd:79:71:cb:72: 2c:0b:41:d8:6e:15:66:3f:71:57:f2:f0:78:97:f5:df:b3:3e: 7d:53:46:b8:bd:fb:34:dc:46:2d:22:29:bf:e2:05:7a:23:96: 23:3e:a7:b3:c3:61:6f:5b:fb:06:9c:5b:10:fa:91:af:26:5a: 62:a5:45:87:ed:8f:a3:ac:cd:d1:a3:08:03:54:9f:07:9d:f2: fc:76:f3:5d:51:b8:8d:60:41:a5:6d:d1:9b:40:87:42:e8:a2: 90:af:8f:b7:7c:c1:99:8d:ea:70:13:9d:d7:5e:b0:fe:6e:0b: be:13:15:1c:cf:cf:2c:1f:e9:81:96:96:5e:07:5e:dc:83:2d: 6f:b5:76:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f09iG35XLW6RkWJYHlXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzMxZjEzNTdjOGU4YjgxOTEzZmFhZmU2YTYwMzYxNDczZDg5Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zBvNz5eowXCB21AU2m5bNrcUfAD v8CHkPWOnlium8o/455Sc7heM2D7vAwJ1IEHs7mHUNYh+jaUtOsGL7xl/i/kIR7+ 7d7Wg29JGgbwq8drR9MQVzleIc6wsQWUuU91HpPxn6QqnUHawI7/5N7sWNXS8los l+FynQzCX+I23roPiEqZ65lrFRPUQktI/L3SmWzgJjJKPKvOi/we4PeROgZJyyfa HCy0CfTsNm5VjEAEL3HO4X4LzM3k/WYRkCP2+G9u9KzgwKxOdOvttZj0/fgbBDst OxbzhJjaCn5i5oQjISDlXT3CpSBRHGw173SUOoRV+e4wpEKwMpePeObgLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcx8TV8jouBkT+q/mpgNhRz2JuHMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvcHpIeE5YeU9pNEdSUDZyLWFtQTJGSFBZbTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6mMA0G CSqGSIb3DQEBCwUAA4IBAQCu0m9Civa4cvHCYo5UgFqhRpAcXTXoJBNJmuVt35tm SWQez4iPyb6+HdVmdW2P2TA5K//LhR7KiEvchsRyFcA2AuQ0aWeVaFdwbs7wJNzC qUGjgUp92gJEt8Hp5EMcbA5Ek5hpj7hn6/JJF6S+8v8CclaPQBAfsMISvXlxy3Is C0HYbhVmP3FX8vB4l/Xfsz59U0a4vfs03EYtIim/4gV6I5YjPqezw2FvW/sGnFsQ +pGvJlpipUWH7Y+jrM3RowgDVJ8HnfL8dvNdUbiNYEGlbdGbQIdC6KKQr4+3fMGZ jepwE53XXrD+bgu+ExUcz88sH+mBlpZeB17cgy1vtXay -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:11 2026 by rpki-client