This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa File: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (raw, json) Hash identifier: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8= Subject key identifier: 3D:CE:7A:01:DF:A3:32:6D:AE:0A:4A:97:58:5E:72:F2:69:F9:8D:65 Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Certificate serial: 019B7A5B821035794DA6CB90F20F94A71AF3 Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13008 IP address blocks: 195.72.132.0/24 maxlen: 24 195.72.133.0/24 maxlen: 24 195.72.134.0/24 maxlen: 24 195.72.135.0/24 maxlen: 24 2001:67c:404::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:10:35:79:4d:a6:cb:90:f2:0f:94:a7:1a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dce7a01dfa3326dae0a4a97585e72f269f98d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:af:c1:42:9d:d8:34:2d:e3:ee:42:ff:47: 93:a3:63:7e:1e:6b:4d:58:6f:84:76:bb:fb:86:42: 94:0d:63:9f:d5:78:3b:6b:c8:ce:f2:b3:43:89:b4: 97:d1:b4:90:2f:a0:69:3a:36:69:d9:05:a3:74:fc: 84:b1:c0:15:ba:0c:8d:87:59:4a:b2:1b:4a:6d:b2: dd:05:aa:e9:9d:3b:9f:bb:da:09:27:6f:af:9d:42: 7b:75:9a:f1:cc:4d:ea:62:8a:af:f4:e5:f2:dc:47: f3:e9:d4:ef:51:28:3d:ca:a4:29:95:d7:0e:f4:2f: 5c:5b:30:c9:a5:a1:c8:d5:2f:ae:b1:18:f6:41:82: a5:bb:b7:b5:29:12:59:0f:66:ef:6b:b2:a8:cf:c8: 91:0f:4e:42:4a:d6:ac:c2:1e:e7:d8:48:a6:ea:c9: 3d:86:ec:c7:2f:fb:d5:53:e8:0b:43:ee:4e:48:e2: 36:6d:ff:5c:54:3d:57:1a:20:e5:c6:47:20:1f:cc: 47:99:e3:45:51:c7:3a:5e:7e:b1:bc:e8:20:86:72: 06:5a:cd:0b:00:46:77:77:d9:eb:72:cc:32:b6:7a: 95:34:c5:a9:2f:fb:04:92:5e:38:48:c8:cd:03:57: d7:b8:cd:b7:98:b8:b4:41:d1:da:61:28:75:27:bb: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CE:7A:01:DF:A3:32:6D:AE:0A:4A:97:58:5E:72:F2:69:F9:8D:65 X509v3 Authority Key Identifier: keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.132.0/22 IPv6: 2001:67c:404::/48 Signature Algorithm: sha256WithRSAEncryption 58:b3:bc:81:b5:30:7b:71:16:7d:aa:7e:b9:94:1f:13:63:5f: 95:f6:a7:8f:a9:79:37:fe:f1:25:e6:23:20:81:e2:f3:ba:56: 7c:84:ac:0e:28:c1:16:55:55:02:d3:18:23:f6:c3:f7:2b:71: 6d:99:97:27:1a:cc:80:cc:8b:24:0a:ca:ca:54:aa:94:31:e3: 2b:77:b1:aa:12:10:50:1a:bc:1d:4d:fc:b4:34:89:64:31:ee: 4c:c0:3a:52:0f:93:06:1d:df:48:e3:c0:95:4d:8d:f7:ba:ac: cb:b5:86:67:3f:52:a1:32:29:60:15:ee:d0:84:70:6d:58:63: a1:e2:8e:4d:75:3c:36:e2:f3:5e:5b:0f:1e:c6:58:d8:ac:7d: 47:c4:78:28:6a:05:2f:4f:fb:48:63:bd:88:57:13:cb:1e:e9: dc:e0:5b:47:be:cc:46:28:fe:22:68:81:32:15:39:15:a0:cb: 17:49:b9:21:10:bd:50:16:2d:1c:ea:84:da:8e:92:a6:e9:20: b7:6a:21:aa:fd:07:55:29:0c:40:7e:a2:aa:e1:57:02:54:db: 2a:cf:53:71:2d:a8:c1:09:21:dc:a5:f3:c8:be:95:59:11:3a: ae:78:62:40:34:06:f5:f3:89:18:55:a5:d5:f8:52:bc:00:fa: 85:98:f4:8e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6W4IQNXlNpsuQ8g+UpxrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYjQ0OWMxOThjYjk2NjM3YmFjMWE1YjZkNTFjYjMxZjI1 OGJiMmMwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGNlN2EwMWRmYTMzMjZkYWUwYTRhOTc1ODVlNzJmMjY5Zjk4ZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a2vwUKd2DQt4+5C/0eTo2N+HmtN WG+Edrv7hkKUDWOf1Xg7a8jO8rNDibSX0bSQL6BpOjZp2QWjdPyEscAVugyNh1lK shtKbbLdBarpnTufu9oJJ2+vnUJ7dZrxzE3qYoqv9OXy3Efz6dTvUSg9yqQpldcO 9C9cWzDJpaHI1S+usRj2QYKlu7e1KRJZD2bva7Koz8iRD05CStaswh7n2Eim6sk9 huzHL/vVU+gLQ+5OSOI2bf9cVD1XGiDlxkcgH8xHmeNFUcc6Xn6xvOgghnIGWs0L AEZ3d9nrcswytnqVNMWpL/sEkl44SMjNA1fXuM23mLi0QdHaYSh1J7vn9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD3OegHfozJtrgpKl1hecvJp+Y1lMB8GA1UdIwQY MBaAFGq0ScGYy5Zje6waW21RyzHyWLssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2Mt ZDY3ZGEzYzY5NjliLzEvUGM1NkFkLWpNbTJ1Q2txWFdGNXk4bW41aldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYjE4N2QtZWRkOC00MGVlLWExN2MtZDY3ZGEzYzY5Njli LzEvYXJSSndaakxsbU43ckJwYmJWSExNZkpZdXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCw0iEMA8E AgACMAkDBwAgAQZ8BAQwDQYJKoZIhvcNAQELBQADggEBAFizvIG1MHtxFn2qfrmU HxNjX5X2p4+peTf+8SXmIyCB4vO6VnyErA4owRZVVQLTGCP2w/crcW2ZlycazIDM iyQKyspUqpQx4yt3saoSEFAavB1N/LQ0iWQx7kzAOlIPkwYd30jjwJVNjfe6rMu1 hmc/UqEyKWAV7tCEcG1YY6Hijk11PDbi815bDx7GWNisfUfEeChqBS9P+0hjvYhX E8se6dzgW0e+zEYo/iJogTIVORWgyxdJuSEQvVAWLRzqhNqOkqbpILdqIar9B1Up DEB+oqrhVwJU2yrPU3EtqMEJIdyl88i+lVkROq54YkA0BvXziRhVpdX4UrwA+oWY 9I4= -----END CERTIFICATE-----Generated at Mon Feb 2 14:01:57 2026 by rpki-client