This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/PEzreo_YaPTvZmeHLlLFR5kVjWY.roa File: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (raw, json) Hash identifier: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k= Subject key identifier: 3C:4C:EB:7A:8F:D8:68:F4:EF:66:67:87:2E:52:C5:47:99:15:8D:66 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B783442C0C050135DE78C27020A5E8D91 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/PEzreo_YaPTvZmeHLlLFR5kVjWY.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207490 IP address blocks: 80.72.16.0/23 maxlen: 23 80.72.26.0/23 maxlen: 24 2a00:8740:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:c0:c0:50:13:5d:e7:8c:27:02:0a:5e:8d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4ceb7a8fd868f4ef6667872e52c54799158d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:08:1c:dd:a2:32:9e:c9:9a:79:71:5d:95:43: 0e:05:da:9c:9d:ee:b5:19:ae:ef:8a:a4:f2:f9:ba: d4:18:d1:69:ff:a9:8a:b7:5f:66:b7:8f:01:60:fe: cc:72:2c:b7:ae:e0:b9:4d:6e:57:4a:39:00:06:25: 6a:0d:67:3d:17:0e:72:e2:9b:ed:56:4b:01:7a:1b: 3f:23:5c:32:38:e8:95:d1:91:61:81:d4:b6:46:22: 0d:dd:c0:76:b3:c9:8d:a5:9a:28:17:a5:c3:19:aa: 07:1d:4b:6e:cd:42:63:b0:48:1a:96:90:48:68:94: cf:6c:50:ff:51:e6:85:6e:dd:85:2f:88:84:a0:1a: ae:f4:ac:bb:f0:ad:e9:d6:55:34:78:6b:31:51:08: ec:2c:60:8c:b5:e8:12:9e:f4:7d:07:dc:31:f2:a4: c7:59:e3:d6:43:19:5e:53:82:1e:fa:29:70:f6:f7: ce:4f:2b:6c:cd:d0:30:eb:45:77:49:d7:96:73:50: e8:89:08:25:12:9f:7e:00:52:4d:4b:19:7d:e8:e4: 69:87:3c:48:ce:67:2d:8b:8c:33:5a:81:78:36:aa: fd:c5:cf:ff:75:54:83:f7:71:ac:c1:5f:00:8d:90: ff:25:47:2d:c2:69:56:4e:a7:bc:76:9c:fd:4a:13: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4C:EB:7A:8F:D8:68:F4:EF:66:67:87:2E:52:C5:47:99:15:8D:66 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/PEzreo_YaPTvZmeHLlLFR5kVjWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.72.16.0/23 80.72.26.0/23 IPv6: 2a00:8740:500::/40 Signature Algorithm: sha256WithRSAEncryption 2c:12:46:52:c8:95:7a:d2:ab:7a:42:cb:98:be:5b:50:5e:67: f4:b9:9e:99:d5:11:fc:35:31:ac:bf:37:a7:e6:52:f6:18:95: 95:48:c0:1f:b5:22:83:b4:1e:07:bb:79:e5:67:b6:4b:6c:f2: 82:7f:4a:88:89:2d:53:dc:3f:7b:a0:da:16:0b:28:61:84:3e: 56:22:ca:07:df:b1:83:0b:7f:51:a8:59:e1:17:c9:e7:19:b0: dc:03:0b:d0:aa:35:bb:f2:04:21:66:db:3f:25:62:4e:b0:bd: 77:fe:59:35:5c:6e:c1:d1:9a:b1:b4:ec:9e:2a:ea:6e:e7:d7: 6f:9a:67:51:d4:03:63:23:1f:f9:b4:ac:b0:c5:78:00:3a:92: 10:32:ba:ab:c1:ba:2c:0b:ec:c0:a7:56:a1:42:27:5a:f7:4a: 80:c6:c4:00:40:a4:cf:71:a4:8e:d1:2b:5c:6a:47:53:d9:5b: c6:fd:47:2d:7a:ba:29:0b:b8:fe:fc:a6:62:b4:fd:b1:05:16: 02:70:c1:8e:f6:0b:56:4e:61:3d:75:30:72:97:9a:c2:a4:da: b7:2b:29:6e:4c:8e:0d:f2:e5:1f:26:0e:7e:2e:c3:8f:f3:2c: 56:75:93:6c:46:95:3c:08:a5:31:de:a7:8d:a3:62:3a:38:93: ba:c5:3d:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4NELAwFATXeeMJwIKXo2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRjZWI3YThmZDg2OGY0ZWY2NjY3ODcyZTUyYzU0Nzk5MTU4ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwgc3aIynsmaeXFdlUMOBdqcne61 Ga7viqTy+brUGNFp/6mKt19mt48BYP7Mciy3ruC5TW5XSjkABiVqDWc9Fw5y4pvt VksBehs/I1wyOOiV0ZFhgdS2RiIN3cB2s8mNpZooF6XDGaoHHUtuzUJjsEgalpBI aJTPbFD/UeaFbt2FL4iEoBqu9Ky78K3p1lU0eGsxUQjsLGCMtegSnvR9B9wx8qTH WePWQxleU4Ie+ilw9vfOTytszdAw60V3SdeWc1DoiQglEp9+AFJNSxl96ORphzxI zmcti4wzWoF4Nqr9xc//dVSD93GswV8AjZD/JUctwmlWTqe8dpz9ShOkCQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDxM63qP2Gj072Znhy5SxUeZFY1mMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvUEV6cmVvX1lhUFR2Wm1lSExsTEZSNWtWaldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBUEgQAwQB UEgaMA4EAgACMAgDBgAqAIdABTANBgkqhkiG9w0BAQsFAAOCAQEALBJGUsiVetKr ekLLmL5bUF5n9LmemdUR/DUxrL83p+ZS9hiVlUjAH7Uig7QeB7t55We2S2zygn9K iIktU9w/e6DaFgsoYYQ+ViLKB9+xgwt/UahZ4RfJ5xmw3AML0Ko1u/IEIWbbPyVi TrC9d/5ZNVxuwdGasbTsnirqbufXb5pnUdQDYyMf+bSssMV4ADqSEDK6q8G6LAvs wKdWoUInWvdKgMbEAECkz3GkjtErXGpHU9lbxv1HLXq6KQu4/vymYrT9sQUWAnDB jvYLVk5hPXUwcpeawqTatyspbkyODfLlHyYOfi7Dj/MsVnWTbEaVPAilMd6njaNi OjiTusU9pA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:46 2026 by rpki-client