This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa File: PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa (raw, json) Hash identifier: 2NL/gh4kC5fIE0HniOqEKL8Ijhb8+hqlpLKTL/K3tGs= Subject key identifier: 3F:38:DE:19:76:43:98:6A:DC:04:BF:B9:48:BC:FA:62:4C:50:C8:3A Certificate issuer: /CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Certificate serial: 019B7AC7FA024F4EB2C1666F6FD2F19EFC59 Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa Signing time: Thu 01 Jan 2026 18:18:04 +0000 ROA not before: Thu 01 Jan 2026 18:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206616 IP address blocks: 185.149.92.0/22 maxlen: 29 212.15.88.0/21 maxlen: 21 2a07:7a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fa:02:4f:4e:b2:c1:66:6f:6f:d2:f1:9e:fc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73 Validity Not Before: Jan 1 18:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f38de197643986adc04bfb948bcfa624c50c83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:24:a0:16:fd:00:3f:22:f2:0b:e5:ed:ee: c3:77:66:11:a7:59:2a:8e:13:cd:da:48:f8:71:ab: ba:23:83:9e:57:31:ba:75:6e:d3:21:b5:79:d5:a2: c7:9d:28:80:bc:53:c0:34:61:7f:5f:d1:c7:06:b1: 97:e5:17:d1:f1:42:71:91:5c:71:0d:c2:c3:07:98: 7c:29:a9:94:ea:08:e4:dc:f9:ae:de:93:99:98:32: cd:01:11:c7:41:66:46:84:83:6f:2e:bf:4d:13:ee: c0:3d:0e:7c:26:64:8c:98:b4:7e:0d:99:d0:8d:81: c3:13:2f:3f:96:24:57:6a:25:cd:87:13:4f:0d:d6: 55:96:38:70:0f:17:3f:f8:ca:53:0b:76:e8:e7:db: 37:56:2c:5f:ef:ae:8a:d4:c2:6b:86:a4:87:6f:51: 7e:a7:f6:a4:e0:7a:35:8b:d0:86:12:8d:27:dd:8e: db:43:01:29:ab:ee:bb:1b:b8:e4:12:ef:50:43:0c: 70:0e:f7:07:79:c9:0f:d3:7a:00:46:a8:5d:85:c8: 5a:e9:7d:0f:1b:b9:0c:3f:9a:f1:05:60:84:4e:ff: a2:97:b4:b7:af:9b:07:60:28:65:a0:9a:ab:45:ca: 75:8b:2c:cd:e0:69:0b:47:cc:dd:1e:12:0a:cf:21: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:38:DE:19:76:43:98:6A:DC:04:BF:B9:48:BC:FA:62:4C:50:C8:3A X509v3 Authority Key Identifier: keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.92.0/22 212.15.88.0/21 IPv6: 2a07:7a80::/29 Signature Algorithm: sha256WithRSAEncryption 50:48:f4:1d:8d:7b:1f:e1:73:68:dc:99:25:a5:a8:d1:e9:70: d8:0f:aa:43:84:11:b9:c8:11:aa:e5:66:8b:27:d4:53:f1:2b: e4:43:6a:07:1f:14:a5:36:62:09:e3:e4:e1:62:a9:81:04:0c: 9d:55:4c:31:99:3e:da:bb:3e:f3:fa:ba:44:26:af:ab:e2:11: 57:b3:10:59:ec:8d:9d:93:52:c0:14:7b:e9:9b:8c:ee:82:a7: 0e:d8:14:ee:7a:87:db:6b:56:91:17:de:9f:cd:d5:15:f5:50: ed:c4:a3:25:19:05:90:8d:0c:14:7b:0d:a2:ac:bb:77:24:30: fa:c4:44:c2:4e:d2:9e:83:d2:fb:5f:ae:2d:93:f0:68:59:53: 4d:5e:c1:5d:6f:27:8d:ee:08:34:2c:20:3c:40:82:c3:7b:9e: 63:f0:57:e5:fc:11:51:0e:57:66:41:9e:e9:99:37:e7:49:bb: 03:14:ea:75:1d:2b:a2:99:2c:33:6e:95:19:61:f9:0e:10:fa: c1:b4:26:aa:04:68:59:d1:65:af:42:9d:f0:33:ed:5d:cb:c4: 54:3c:c1:dd:69:1f:c3:e2:e3:30:ad:90:33:fc:8a:ce:61:06: be:75:af:2a:ca:82:97:d3:bd:9f:55:97:21:bf:a0:2d:a0:b9: 39:cc:00:ef -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x/oCT06ywWZvb9LxnvxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYmE3MWU0NmM3NTkxNmI4ZTVkZTE5M2NjN2Y4MTA2OWRm ODZmNzMwHhcNMjYwMTAxMTgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjM4ZGUxOTc2NDM5ODZhZGMwNGJmYjk0OGJjZmE2MjRjNTBjODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxokoBb9AD8i8gvl7e7Dd2YRp1kq jhPN2kj4cau6I4OeVzG6dW7TIbV51aLHnSiAvFPANGF/X9HHBrGX5RfR8UJxkVxx DcLDB5h8KamU6gjk3Pmu3pOZmDLNARHHQWZGhINvLr9NE+7APQ58JmSMmLR+DZnQ jYHDEy8/liRXaiXNhxNPDdZVljhwDxc/+MpTC3bo59s3Vixf766K1MJrhqSHb1F+ p/ak4Ho1i9CGEo0n3Y7bQwEpq+67G7jkEu9QQwxwDvcHeckP03oARqhdhcha6X0P G7kMP5rxBWCETv+il7S3r5sHYChloJqrRcp1iyzN4GkLR8zdHhIKzyEL7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD843hl2Q5hq3AS/uUi8+mJMUMg6MB8GA1UdIwQY MBaAFCC6ceRsdZFrjl3hk8x/gQad+G9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEt NDg0NTAwYmNmYjA3LzEvUHpqZUdYWkRtR3JjQkwtNVNMejZZa3hReURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kMDY0MmMtODRlNi00MjkwLWFmYjEtNDg0NTAwYmNmYjA3 LzEvSUxweDVHeDFrV3VPWGVHVHpILUJCcDM0YjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZVcAwQD 1A9YMA0EAgACMAcDBQMqB3qAMA0GCSqGSIb3DQEBCwUAA4IBAQBQSPQdjXsf4XNo 3JklpajR6XDYD6pDhBG5yBGq5WaLJ9RT8SvkQ2oHHxSlNmIJ4+ThYqmBBAydVUwx mT7auz7z+rpEJq+r4hFXsxBZ7I2dk1LAFHvpm4zugqcO2BTueofba1aRF96fzdUV 9VDtxKMlGQWQjQwUew2irLt3JDD6xETCTtKeg9L7X64tk/BoWVNNXsFdbyeN7gg0 LCA8QILDe55j8Ffl/BFRDldmQZ7pmTfnSbsDFOp1HSuimSwzbpUZYfkOEPrBtCaq BGhZ0WWvQp3wM+1dy8RUPMHdaR/D4uMwrZAz/IrOYQa+da8qyoKX072fVZchv6At oLk5zADv -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:05 2026 by rpki-client