This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/Pz1ijF7NvXZpwroWfDzmV2z1wts.roa File: Pz1ijF7NvXZpwroWfDzmV2z1wts.roa (raw, json) Hash identifier: 2MVgLGXOwFf2G7MSkrktFH0ASrpgVLNSAdBfzn0r5Z8= Subject key identifier: 3F:3D:62:8C:5E:CD:BD:76:69:C2:BA:16:7C:3C:E6:57:6C:F5:C2:DB Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f Certificate serial: 019B791056490BABDC9D1D0573CF3400A5A7 Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/Pz1ijF7NvXZpwroWfDzmV2z1wts.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47289 IP address blocks: 185.65.143.0/24 maxlen: 24 2a10:e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:56:49:0b:ab:dc:9d:1d:05:73:cf:34:00:a5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f3d628c5ecdbd7669c2ba167c3ce6576cf5c2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:c9:3f:15:d2:d6:b5:a2:99:95:45:75:aa: 3f:c7:b6:67:cb:68:22:ff:8b:e0:0a:c8:0e:c8:b7: 9a:bf:2f:d1:17:c4:0a:fd:71:42:2f:38:f1:76:f0: 0b:7e:79:e5:df:3c:b7:fe:ff:a3:97:1c:29:07:f1: db:2b:37:e2:9b:81:a6:5c:35:0e:2b:1e:6a:2b:f9: 4b:d4:5e:85:46:55:ef:03:5f:b3:6e:5b:5c:3d:e0: 13:3b:64:36:7c:9e:74:dd:48:70:31:fa:1a:32:d9: 93:62:32:0f:d9:3e:93:83:b8:ce:87:68:ac:08:ed: 61:34:3f:d7:3f:3d:92:d1:77:ab:ef:c6:94:b8:e1: d3:ae:92:4e:42:3e:d0:a4:f1:2f:f4:bb:b8:89:0f: a9:5f:12:8c:e0:62:84:ff:be:04:e8:cc:5e:24:52: 79:79:2e:1d:b1:1a:e0:80:49:bc:67:4f:06:ea:49: ac:c6:58:a8:22:02:4c:ea:4c:5d:5d:5f:d2:4a:9a: d3:9f:37:64:3e:ac:c6:04:cd:df:ad:4f:72:40:85: 8b:bf:52:d0:ef:8e:3d:bb:f7:9c:7a:48:75:76:64: 0b:1f:bc:33:8b:9f:ce:b2:1f:73:93:63:e5:f3:ab: 65:31:dd:01:72:72:0e:c7:8e:61:2d:f9:c1:e4:de: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3D:62:8C:5E:CD:BD:76:69:C2:BA:16:7C:3C:E6:57:6C:F5:C2:DB X509v3 Authority Key Identifier: keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/Pz1ijF7NvXZpwroWfDzmV2z1wts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.143.0/24 IPv6: 2a10:e80::/29 Signature Algorithm: sha256WithRSAEncryption 84:29:26:a2:ce:6c:4a:4b:16:46:7a:94:e5:dc:17:29:ce:17: c7:ce:73:69:52:44:4b:83:b3:7a:4f:8e:d5:d0:56:b3:fb:bf: a6:5a:c2:0e:7c:0f:86:e6:7d:78:b4:ca:b3:f0:23:ba:46:50: ea:d6:8c:ff:d6:3b:ce:bd:74:12:1f:8e:b0:f1:f6:fe:dd:d5: c9:c0:d7:33:dd:f1:3f:c0:bb:6b:e7:83:29:63:ac:d0:50:7a: 78:0c:dc:d4:d8:33:9c:1c:f3:04:76:5e:a6:0a:83:12:c0:cd: 08:ac:93:3f:61:db:ad:db:1e:92:13:39:f9:d0:2c:15:80:f1: 98:fc:14:20:c0:97:53:29:3f:ab:9a:f4:49:81:4a:32:bf:b8: 8f:42:79:13:bc:8a:10:ca:8a:cb:64:57:47:89:4a:76:bd:bb: 04:90:e4:96:3d:c7:4d:01:24:43:d8:4f:b3:b5:eb:94:8b:2e: fa:ff:05:cc:5c:0f:93:d7:3c:a0:56:2e:71:bf:cb:a3:84:35: a3:74:5d:83:87:3f:50:3f:71:74:74:95:e4:62:82:30:66:a0: 9c:25:e3:1f:b5:26:fe:8d:dc:74:60:51:49:2b:63:08:a5:22: f0:5a:95:ac:24:88:dd:7e:8b:b5:49:5a:58:2b:a5:cd:4b:2e: 02:77:ea:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EFZJC6vcnR0Fc880AKWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjFkYjdhMTViZDI0ZmJjYTE0NmNkMTJjYzcwZDQxMzlj ODViOWYwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjNkNjI4YzVlY2RiZDc2NjljMmJhMTY3YzNjZTY1NzZjZjVjMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAturJPxXS1rWimZVFdao/x7Zny2gi /4vgCsgOyLeavy/RF8QK/XFCLzjxdvALfnnl3zy3/v+jlxwpB/HbKzfim4GmXDUO Kx5qK/lL1F6FRlXvA1+zbltcPeATO2Q2fJ503UhwMfoaMtmTYjIP2T6Tg7jOh2is CO1hND/XPz2S0Xer78aUuOHTrpJOQj7QpPEv9Lu4iQ+pXxKM4GKE/74E6MxeJFJ5 eS4dsRrggEm8Z08G6kmsxlioIgJM6kxdXV/SSprTnzdkPqzGBM3frU9yQIWLv1LQ 7449u/ecekh1dmQLH7wzi5/Osh9zk2Pl86tlMd0BcnIOx45hLfnB5N4zQwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD89Yoxezb12acK6Fnw85lds9cLbMB8GA1UdIwQY MBaAFEBh23oVvST7yhRs0SzHDUE5yFufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYt MTk5ZDE0YzA2YmNiLzEvUHoxaWpGN052WFpwd3JvV2ZEem1WMnoxd3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYtMTk5ZDE0YzA2YmNi LzEvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUGPMA0E AgACMAcDBQMqEA6AMA0GCSqGSIb3DQEBCwUAA4IBAQCEKSaizmxKSxZGepTl3Bcp zhfHznNpUkRLg7N6T47V0Faz+7+mWsIOfA+G5n14tMqz8CO6RlDq1oz/1jvOvXQS H46w8fb+3dXJwNcz3fE/wLtr54MpY6zQUHp4DNzU2DOcHPMEdl6mCoMSwM0IrJM/ Ydut2x6SEzn50CwVgPGY/BQgwJdTKT+rmvRJgUoyv7iPQnkTvIoQyorLZFdHiUp2 vbsEkOSWPcdNASRD2E+zteuUiy76/wXMXA+T1zygVi5xv8ujhDWjdF2Dhz9QP3F0 dJXkYoIwZqCcJeMftSb+jdx0YFFJK2MIpSLwWpWsJIjdfou1SVpYK6XNSy4Cd+oP -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:25 2026 by rpki-client