This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/PzcN4F3pkDnlYvW4HH79zj0Cmtc.roa File: PzcN4F3pkDnlYvW4HH79zj0Cmtc.roa (raw, json) Hash identifier: LEAdYC23MLKW0M/JM3SBHOt8Jw/nCj9KXkKRrcVxDzY= Subject key identifier: 3F:37:0D:E0:5D:E9:90:39:E5:62:F5:B8:1C:7E:FD:CE:3D:02:9A:D7 Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad Certificate serial: 019B7BA351F8D843E3FBC598C22106E8C7D0 Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/PzcN4F3pkDnlYvW4HH79zj0Cmtc.roa Signing time: Thu 01 Jan 2026 22:17:39 +0000 ROA not before: Thu 01 Jan 2026 22:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25251 IP address blocks: 81.94.32.0/23 maxlen: 23 81.94.35.0/24 maxlen: 24 81.94.37.0/24 maxlen: 24 81.94.39.0/24 maxlen: 24 81.94.42.0/24 maxlen: 24 81.94.44.0/24 maxlen: 24 81.94.45.0/24 maxlen: 24 81.94.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:51:f8:d8:43:e3:fb:c5:98:c2:21:06:e8:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f370de05de99039e562f5b81c7efdce3d029ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:70:e0:48:60:ce:6a:40:1c:21:a6:2a:30: 7f:4d:df:a3:b1:56:65:b9:31:4a:6b:23:96:9b:38: 2b:ee:99:bb:25:bb:d5:e6:42:ec:f3:d2:de:65:e1: f8:10:4a:85:57:eb:c4:b2:77:55:93:b7:79:b9:ba: f5:18:36:61:27:49:84:f7:98:fc:f7:16:88:fa:c3: e9:5c:38:63:3b:26:58:c5:a8:db:9d:49:31:49:0b: 49:f1:7a:99:70:17:ee:a4:52:2b:a9:68:fa:58:16: e3:58:e0:95:ac:78:de:70:f4:c6:5c:4d:10:9f:7c: bc:26:a5:44:4e:b6:6d:b4:f8:46:52:12:b2:22:d4: 7e:65:ac:4a:2c:dc:c1:69:bb:55:7f:76:8f:27:a4: bb:af:c4:71:09:fd:74:1b:f6:f8:da:86:ff:a6:06: 7e:a0:ee:68:82:d3:8a:8e:6f:0f:8f:ac:49:aa:ef: e6:e2:84:a2:ed:a8:19:52:a9:44:4d:ea:3a:68:33: 82:5c:55:0a:14:24:d2:f7:d9:16:eb:53:f8:b3:9e: 34:47:36:80:02:0f:ff:44:98:44:3e:a7:6c:71:9d: 0f:90:e6:96:03:00:63:7e:8a:7d:73:86:fd:ca:73: d6:6a:50:63:7a:22:0a:25:39:48:b0:b0:d2:2f:fd: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:37:0D:E0:5D:E9:90:39:E5:62:F5:B8:1C:7E:FD:CE:3D:02:9A:D7 X509v3 Authority Key Identifier: keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/PzcN4F3pkDnlYvW4HH79zj0Cmtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.94.32.0/23 81.94.35.0/24 81.94.37.0/24 81.94.39.0/24 81.94.42.0/24 81.94.44.0/22 Signature Algorithm: sha256WithRSAEncryption 33:54:9a:dd:16:28:26:4d:c2:c3:92:97:0e:3c:3f:53:27:27: 58:23:21:35:87:80:a0:1a:7e:0e:c7:89:0e:12:1f:f7:b6:ce: b4:1a:fb:00:37:45:b1:2c:3f:31:f4:0e:ac:ee:b6:72:84:52: 54:b4:05:5e:54:97:0f:84:12:04:b4:22:fd:b9:f8:b5:b4:60: d0:70:80:9b:f2:fc:89:fd:1c:03:53:99:da:8b:75:7a:02:80: 46:89:ef:04:c3:ef:a8:a5:c6:56:ec:8e:a9:de:e1:8b:3e:b5: c2:9c:ba:35:cc:39:d8:58:57:b2:66:bf:9a:fc:a5:dc:fc:92: b9:f2:43:b2:dd:5e:79:3d:3e:b4:c9:55:ce:94:0d:1e:47:9c: f9:bd:93:fb:82:08:69:10:2e:a0:50:31:40:8a:d4:d4:91:a9: fe:56:3a:75:10:99:0e:d1:9b:f4:f1:3a:bd:58:e1:1c:70:7f: 50:c4:41:f5:a0:ea:bb:e6:5a:7f:60:60:aa:21:de:af:f5:96: a4:15:92:36:9c:97:44:72:a6:37:ff:66:22:38:6f:a3:ec:e7: 4e:ec:a1:a7:11:7c:c0:b3:e2:b7:c5:0b:f3:2c:03:fa:f3:a9: e4:f5:c7:50:00:1a:6e:ba:ab:ab:98:a6:8d:8b:62:9f:72:a6: 00:2f:31:2c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7o1H42EPj+8WYwiEG6MfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmM4YzA2ZDJkM2MyODAxZjA1NDU4ZmM4MzQxM2RiMGE1 ZGRmYWQwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjM3MGRlMDVkZTk5MDM5ZTU2MmY1YjgxYzdlZmRjZTNkMDI5YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh5w4EhgzmpAHCGmKjB/Td+jsVZl uTFKayOWmzgr7pm7JbvV5kLs89LeZeH4EEqFV+vEsndVk7d5ubr1GDZhJ0mE95j8 9xaI+sPpXDhjOyZYxajbnUkxSQtJ8XqZcBfupFIrqWj6WBbjWOCVrHjecPTGXE0Q n3y8JqVETrZttPhGUhKyItR+ZaxKLNzBabtVf3aPJ6S7r8RxCf10G/b42ob/pgZ+ oO5ogtOKjm8Pj6xJqu/m4oSi7agZUqlETeo6aDOCXFUKFCTS99kW61P4s540RzaA Ag//RJhEPqdscZ0PkOaWAwBjfop9c4b9ynPWalBjeiIKJTlIsLDSL/3fJQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFD83DeBd6ZA55WL1uBx+/c49AprXMB8GA1UdIwQY MBaAFLxsjAbS08KAHwVFj8g0E9sKXd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTct NGI0M2E0NzM4MmI2LzEvUHpjTjRGM3BrRG5sWXZXNEhINzl6ajBDbXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTctNGI0M2E0NzM4MmI2 LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBUV4gAwQA UV4jAwQAUV4lAwQAUV4nAwQAUV4qAwQCUV4sMA0GCSqGSIb3DQEBCwUAA4IBAQAz VJrdFigmTcLDkpcOPD9TJydYIyE1h4CgGn4Ox4kOEh/3ts60GvsAN0WxLD8x9A6s 7rZyhFJUtAVeVJcPhBIEtCL9ufi1tGDQcICb8vyJ/RwDU5nai3V6AoBGie8Ew++o pcZW7I6p3uGLPrXCnLo1zDnYWFeyZr+a/KXc/JK58kOy3V55PT60yVXOlA0eR5z5 vZP7gghpEC6gUDFAitTUkan+Vjp1EJkO0Zv08Tq9WOEccH9QxEH1oOq75lp/YGCq Id6v9ZakFZI2nJdEcqY3/2YiOG+j7OdO7KGnEXzAs+K3xQvzLAP686nk9cdQABpu uqurmKaNi2KfcqYALzEs -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:54 2026 by rpki-client