This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pXczaRb5J9UllKq33TtWBDjWwkA.roa File: pXczaRb5J9UllKq33TtWBDjWwkA.roa (raw, json) Hash identifier: 74rjDyf01wI7tAS3bHl737bf2fVN8ON5Gym9pNQCra4= Subject key identifier: A5:77:33:69:16:F9:27:D5:25:94:AA:B7:DD:3B:56:04:38:D6:C2:40 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019C328612675BB3A3F163521969FC7FAA1B Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pXczaRb5J9UllKq33TtWBDjWwkA.roa Signing time: Fri 06 Feb 2026 10:36:13 +0000 ROA not before: Fri 06 Feb 2026 10:36:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 81.18.48.0/24 maxlen: 24 109.121.45.0/24 maxlen: 24 178.219.6.0/24 maxlen: 24 185.47.91.0/24 maxlen: 24 188.255.198.0/24 maxlen: 24 188.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:86:12:67:5b:b3:a3:f1:63:52:19:69:fc:7f:aa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Feb 6 10:36:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a577336916f927d52594aab7dd3b560438d6c240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:95:29:dc:e3:3a:10:5e:f2:9b:dc:40:d4:83: 6e:dc:de:38:51:85:e2:72:0f:df:d3:03:21:fd:c0: 8e:fe:8b:a0:61:3e:15:50:b1:13:c2:6b:28:3b:e3: 3f:93:9a:b4:79:f3:e6:3a:47:8f:4d:cf:ac:d0:ee: 2b:70:b5:76:a4:76:74:43:9d:bf:b5:45:9a:51:ee: d3:5e:d6:b7:33:10:7c:10:a4:5e:18:66:54:2c:48: 26:fe:ff:81:e2:3b:4d:65:ae:57:f4:61:14:5d:47: d2:14:90:9a:a5:2c:88:7c:01:2d:41:c6:3b:b0:94: 81:e9:2e:9b:fc:64:e9:b5:cb:08:64:e7:cb:40:ce: 95:57:e5:e1:bb:e8:74:cd:1d:40:2a:d2:98:65:84: 0d:b4:d8:70:6b:b5:38:43:ea:0d:37:30:8d:4b:3f: 8c:1b:59:54:fe:63:1a:1d:d3:2a:39:99:b3:94:11: 55:9f:58:d4:a3:e3:18:71:13:50:3b:5d:7a:42:98: 76:50:ef:b3:02:b4:36:f0:86:77:38:2a:e5:9d:a3: 16:3a:b7:76:f5:6a:c1:50:51:41:55:f7:94:18:bd: 16:1e:da:c5:03:a2:aa:09:1a:4b:c3:2d:aa:ce:12: fe:a0:ef:91:ae:4a:04:76:10:b2:46:db:31:b5:c7: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:33:69:16:F9:27:D5:25:94:AA:B7:DD:3B:56:04:38:D6:C2:40 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pXczaRb5J9UllKq33TtWBDjWwkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.48.0/24 109.121.45.0/24 178.219.6.0/24 185.47.91.0/24 188.255.198.0/24 188.255.247.0/24 Signature Algorithm: sha256WithRSAEncryption a5:f5:ff:08:89:67:e1:7a:3b:5f:c7:32:12:ab:8e:50:24:8f: 7c:52:b3:1f:35:27:a7:af:eb:92:2b:82:e9:46:c8:96:99:c6: 1e:77:4a:49:41:4c:b2:10:a7:bc:22:4d:c6:c0:ad:29:54:65: 48:95:b0:43:d7:75:3f:d6:7b:6e:60:38:bc:85:ab:53:bb:b1: b4:27:d8:b1:78:09:d1:b0:d6:5b:cd:18:10:07:2d:ca:f2:b9: 6c:7b:16:38:61:aa:ca:06:5b:c7:18:7e:37:fc:58:a0:b9:9a: 37:d6:af:ad:27:b1:3a:7c:cb:a5:c2:e6:31:2d:07:4f:dc:db: 23:77:e6:8b:fd:d9:bc:32:6d:a6:cf:a3:11:c5:76:03:13:99: c2:6a:a6:85:cf:a9:7e:e3:f4:46:67:0f:b9:2d:f5:84:fc:9c: 67:36:1d:95:59:24:d3:6d:4e:68:b4:47:7c:13:17:54:22:32: 02:b2:06:46:d3:52:93:12:5f:cd:01:99:b6:b7:b5:cf:0c:7a: c8:5d:ff:bd:b4:5f:80:af:98:a2:4b:9c:b9:a4:75:9e:4a:8c: 5a:7c:a6:ce:32:d0:a8:c0:76:2a:d8:67:f1:ba:8f:32:81:32: d2:d0:fd:36:a8:d8:aa:da:81:ac:85:58:20:c8:da:95:ed:7e: 04:8b:c6:60 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwyhhJnW7Oj8WNSGWn8f6obMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMjA2MTAzNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTc3MzM2OTE2ZjkyN2Q1MjU5NGFhYjdkZDNiNTYwNDM4ZDZjMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZUp3OM6EF7ym9xA1INu3N44UYXi cg/f0wMh/cCO/ougYT4VULETwmsoO+M/k5q0efPmOkePTc+s0O4rcLV2pHZ0Q52/ tUWaUe7TXta3MxB8EKReGGZULEgm/v+B4jtNZa5X9GEUXUfSFJCapSyIfAEtQcY7 sJSB6S6b/GTptcsIZOfLQM6VV+Xhu+h0zR1AKtKYZYQNtNhwa7U4Q+oNNzCNSz+M G1lU/mMaHdMqOZmzlBFVn1jUo+MYcRNQO116Qph2UO+zArQ28IZ3OCrlnaMWOrd2 9WrBUFFBVfeUGL0WHtrFA6KqCRpLwy2qzhL+oO+RrkoEdhCyRtsxtcc25QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKV3M2kW+SfVJZSqt907VgQ41sJAMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvcFhjemFSYjVKOVVsbEtxMzNUdFdCRGpXd2tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAURIwAwQA bXktAwQAstsGAwQAuS9bAwQAvP/GAwQAvP/3MA0GCSqGSIb3DQEBCwUAA4IBAQCl 9f8IiWfhejtfxzISq45QJI98UrMfNSenr+uSK4LpRsiWmcYed0pJQUyyEKe8Ik3G wK0pVGVIlbBD13U/1ntuYDi8hatTu7G0J9ixeAnRsNZbzRgQBy3K8rlsexY4YarK BlvHGH43/FiguZo31q+tJ7E6fMulwuYxLQdP3Nsjd+aL/dm8Mm2mz6MRxXYDE5nC aqaFz6l+4/RGZw+5LfWE/JxnNh2VWSTTbU5otEd8ExdUIjICsgZG01KTEl/NAZm2 t7XPDHrIXf+9tF+Ar5iiS5y5pHWeSoxafKbOMtCowHYq2Gfxuo8ygTLS0P02qNiq 2oGshVggyNqV7X4Ei8Zg -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:31 2026 by rpki-client