This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PZl7Gny-4Ey2OmWvDZamQDAB_Cs.roa
File: PZl7Gny-4Ey2OmWvDZamQDAB_Cs.roa (raw, json)
Hash identifier: 62yGauen55rz9taInDdNJPd+jB7qd3hjHc8o9pucRaQ=
Subject key identifier: 3D:99:7B:1A:7C:BE:E0:4C:B6:3A:65:AF:0D:96:A6:40:30:01:FC:2B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019B7C13422F8F3C9533EF70467CCB80BA62
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PZl7Gny-4Ey2OmWvDZamQDAB_Cs.roa
Signing time: Fri 02 Jan 2026 00:19:55 +0000
ROA not before: Fri 02 Jan 2026 00:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273098
IP address blocks: 185.181.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 18:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:42:2f:8f:3c:95:33:ef:70:46:7c:cb:80:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 00:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d997b1a7cbee04cb63a65af0d96a6403001fc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:b6:02:33:0e:b9:46:93:2c:52:37:30:6f:
8b:5e:0c:25:c9:23:d0:69:65:99:f0:c2:f5:57:89:
f3:b2:ee:44:56:7e:53:2d:60:fc:6b:5d:4a:0a:14:
7c:22:2d:19:b6:56:d2:e3:f7:44:95:e7:52:d5:03:
6a:1b:fd:03:89:34:1c:5a:04:81:55:a1:4f:90:70:
bc:17:50:e3:45:3c:1e:f8:65:5c:d8:56:a8:d4:36:
44:5f:db:1c:40:b0:e3:b3:8d:93:fa:d6:87:cd:ce:
49:4e:2f:53:7b:b0:92:ce:45:6c:46:b2:39:2b:29:
46:52:d3:e1:b6:fb:17:7f:6a:99:37:03:7a:58:13:
31:59:e1:c0:dc:0b:a5:f9:42:df:1f:81:1b:43:73:
58:3d:18:ba:4d:d8:b4:8c:f7:69:a1:01:c5:e8:22:
0d:6e:18:14:a8:ba:5c:51:98:73:08:37:b6:23:52:
d5:34:11:8d:00:9c:74:27:4b:1a:74:e6:8d:13:31:
ad:1d:c3:90:ea:94:37:55:88:69:bd:87:ef:c1:24:
df:01:95:9f:7d:43:15:cd:18:b4:4f:e8:27:2b:be:
e9:d4:ad:82:4c:2d:33:8c:f4:5b:0b:c4:e0:6a:53:
8a:85:a8:b3:87:a8:69:9a:ab:7a:76:eb:92:84:df:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:7B:1A:7C:BE:E0:4C:B6:3A:65:AF:0D:96:A6:40:30:01:FC:2B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PZl7Gny-4Ey2OmWvDZamQDAB_Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:57:e9:86:4d:79:5a:d6:f6:bb:7f:04:73:59:70:d1:51:f6:
e9:44:6c:5a:14:14:5a:3e:91:74:a1:c6:da:9a:cb:b2:49:2b:
4c:4b:62:85:50:84:79:37:2f:a6:b2:b8:ac:08:ce:24:ac:78:
22:0a:21:a0:cd:61:ac:bf:ce:23:77:e1:e5:c8:fb:42:63:06:
d3:b3:90:98:cd:b5:48:8a:d5:e2:81:d2:68:9d:40:95:32:93:
d7:b5:2c:02:9f:be:d7:8d:0f:84:19:f3:2e:64:ff:c6:e6:1e:
d5:91:82:4a:6b:f7:07:79:1c:db:46:86:88:b4:8b:d4:7f:8d:
ae:04:43:50:9b:23:30:9d:ae:6c:71:69:39:41:64:e2:fd:7f:
c3:7c:05:34:fa:46:b2:36:d0:da:97:a0:cf:cc:b5:7b:c2:f5:
f9:87:f1:c6:66:98:8f:18:fb:1a:19:e6:60:9c:e0:7c:a4:84:
5e:77:27:d0:7b:1d:07:cd:1f:d5:7e:35:be:ee:ef:ca:fc:e8:
c4:81:a1:f8:ca:bf:fb:e6:75:86:b9:38:7a:9c:d0:5f:f4:d9:
78:89:b4:16:70:f0:07:02:5c:11:a8:69:d6:7e:54:3a:b1:dc:
31:58:68:88:a1:2d:c6:45:de:0f:e6:5b:3b:9d:c6:ab:b9:83:
4d:d1:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:12 2026 by rpki-client