This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/PWYIIVzGxcrUmuYP_HiFUaq9umQ.roa File: PWYIIVzGxcrUmuYP_HiFUaq9umQ.roa (raw, json) Hash identifier: P2ZkiiKRktbcpR8VoucO1Vi8r25iD3YokcBeWOA8VNg= Subject key identifier: 3D:66:08:21:5C:C6:C5:CA:D4:9A:E6:0F:FC:78:85:51:AA:BD:BA:64 Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Certificate serial: 019B7C12A3FED2FF076D1C2CF62A848FBF08 Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/PWYIIVzGxcrUmuYP_HiFUaq9umQ.roa Signing time: Fri 02 Jan 2026 00:19:15 +0000 ROA not before: Fri 02 Jan 2026 00:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211775 IP address blocks: 5.150.8.0/21 maxlen: 21 194.59.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a3:fe:d2:ff:07:6d:1c:2c:f6:2a:84:8f:bf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6608215cc6c5cad49ae60ffc788551aabdba64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:07:90:9d:5b:29:5c:6c:d7:39:b5:59:cc: 3c:53:c6:4c:27:0e:5b:cd:29:da:9a:44:6e:e0:1b: 4a:b8:ba:c7:8a:0e:07:13:2e:d9:7d:b5:b1:4e:f7: 06:5a:a2:91:db:36:65:2a:2b:26:2b:f3:c5:df:7c: 89:4d:28:76:53:36:fd:18:9f:5f:d6:c0:e0:85:41: 45:d3:51:8d:6a:24:75:58:86:a7:41:f8:6d:0b:34: 63:f4:07:3e:65:60:40:1e:c9:23:84:35:5b:a3:a3: 2f:e7:a3:00:ce:58:ec:f9:2f:b8:40:24:85:41:55: ab:6e:63:8b:58:8d:0e:93:b7:ab:4c:b0:fa:ac:f8: 29:f9:81:3c:3a:8e:85:ba:94:6a:00:72:bd:72:58: db:b5:6b:f1:6c:4a:c6:6d:70:55:2c:b5:54:29:11: fa:c4:a2:11:87:19:81:53:19:9e:53:c9:a5:0c:0e: 90:5c:c4:ca:8b:60:0b:d8:e8:3b:14:92:2e:a8:df: 53:10:02:09:4b:58:31:b5:12:aa:eb:72:83:82:91: 63:52:44:e8:3d:d5:f3:cc:18:9f:ee:88:9e:75:4d: cf:ea:a4:59:05:61:6a:8e:e0:76:98:7b:00:f3:5d: c9:cc:dc:44:a5:ef:fa:e3:dc:e7:9a:b1:ad:4d:20: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:08:21:5C:C6:C5:CA:D4:9A:E6:0F:FC:78:85:51:AA:BD:BA:64 X509v3 Authority Key Identifier: keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/PWYIIVzGxcrUmuYP_HiFUaq9umQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.8.0/21 194.59.0.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:b0:74:21:6b:2f:a3:82:5e:f9:58:a2:5e:e9:bf:5e:45:ab: 8c:4a:90:63:cc:9a:c7:60:6f:fc:d6:ce:a2:ee:c9:78:05:d0: 84:19:0c:55:eb:b8:e8:7c:9b:e6:6d:68:b2:69:c9:6b:d5:14: e4:87:53:62:ec:48:e1:97:73:ad:94:5c:83:2e:3f:75:60:40: ac:c5:ab:73:3c:52:c6:a1:82:ad:c5:ab:d6:57:5a:98:12:7a: 9d:32:4a:f0:5b:93:b4:30:06:a8:2f:6d:51:08:15:ca:e0:69: 0c:21:8f:a0:81:1c:ad:2b:98:9a:bb:5e:6b:0a:f9:f7:ad:0d: de:95:a4:4f:2b:ce:f2:d7:0c:1a:35:04:75:be:42:c3:49:03: bc:c5:25:b6:63:3b:36:2e:aa:2a:ba:9f:04:75:be:42:83:f3: a8:c2:ba:e0:6a:a7:54:07:37:46:9e:2e:db:61:0d:ae:22:1e: c1:e0:4c:7b:6b:8e:b4:3a:f2:ed:51:f1:13:cb:02:5a:ee:93: 48:26:62:c7:0f:91:39:4e:f8:8b:11:77:f0:8c:0d:3d:40:28: 18:74:a5:e4:d8:bb:62:5f:cc:ca:01:ed:53:89:12:2d:8a:73: 66:fd:32:26:bf:3b:1d:a4:32:29:0c:c0:57:74:ae:11:5b:30: 64:6c:7e:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EqP+0v8HbRws9iqEj78IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri OWJkZWEwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDY2MDgyMTVjYzZjNWNhZDQ5YWU2MGZmYzc4ODU1MWFhYmRiYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyUHkJ1bKVxs1zm1Wcw8U8ZMJw5b zSnamkRu4BtKuLrHig4HEy7ZfbWxTvcGWqKR2zZlKismK/PF33yJTSh2Uzb9GJ9f 1sDghUFF01GNaiR1WIanQfhtCzRj9Ac+ZWBAHskjhDVbo6Mv56MAzljs+S+4QCSF QVWrbmOLWI0Ok7erTLD6rPgp+YE8Oo6FupRqAHK9cljbtWvxbErGbXBVLLVUKRH6 xKIRhxmBUxmeU8mlDA6QXMTKi2AL2Og7FJIuqN9TEAIJS1gxtRKq63KDgpFjUkTo PdXzzBif7oiedU3P6qRZBWFqjuB2mHsA813JzNxEpe/649znmrGtTSBRAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1mCCFcxsXK1JrmD/x4hVGqvbpkMB8GA1UdIwQY MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt Njg2N2M0YWUzMTYxLzEvUFdZSUlWekd4Y3JVbXVZUF9IaUZVYXE5dW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZYIAwQB wjsAMA0GCSqGSIb3DQEBCwUAA4IBAQArsHQhay+jgl75WKJe6b9eRauMSpBjzJrH YG/81s6i7sl4BdCEGQxV67jofJvmbWiyaclr1RTkh1Ni7Ejhl3OtlFyDLj91YECs xatzPFLGoYKtxavWV1qYEnqdMkrwW5O0MAaoL21RCBXK4GkMIY+ggRytK5iau15r Cvn3rQ3elaRPK87y1wwaNQR1vkLDSQO8xSW2Yzs2Lqoqup8Edb5Cg/OowrrgaqdU BzdGni7bYQ2uIh7B4Ex7a460OvLtUfETywJa7pNIJmLHD5E5TviLEXfwjA09QCgY dKXk2LtiX8zKAe1TiRItinNm/TImvzsdpDIpDMBXdK4RWzBkbH5f -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:45 2026 by rpki-client