This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PwGGdicn-dzJJrTaKHNU5skr5KE.roa File: PwGGdicn-dzJJrTaKHNU5skr5KE.roa (raw, json) Hash identifier: 7RwwAawtHe4fHhMCrpHBb2J3NbRIQjtekWjKMyKHrh4= Subject key identifier: 3F:01:86:76:27:27:F9:DC:C9:26:B4:DA:28:73:54:E6:C9:2B:E4:A1 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C802496458F36770E01D362A29A3926 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PwGGdicn-dzJJrTaKHNU5skr5KE.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 328126 IP address blocks: 80.15.228.0/24 maxlen: 32 80.15.229.0/24 maxlen: 32 80.15.230.0/24 maxlen: 32 80.15.231.0/24 maxlen: 32 80.15.232.0/24 maxlen: 32 80.15.233.0/24 maxlen: 32 80.15.234.0/24 maxlen: 32 80.15.235.0/24 maxlen: 32 80.15.242.0/24 maxlen: 32 80.15.243.0/24 maxlen: 32 80.15.244.0/24 maxlen: 32 80.15.245.0/24 maxlen: 32 80.15.246.0/24 maxlen: 32 80.15.247.0/24 maxlen: 32 80.15.248.0/24 maxlen: 32 80.15.249.0/24 maxlen: 32 80.15.250.0/24 maxlen: 32 80.15.251.0/24 maxlen: 32 80.15.252.0/24 maxlen: 32 80.15.253.0/24 maxlen: 32 80.15.254.0/24 maxlen: 32 80.15.255.0/24 maxlen: 32 90.84.143.0/24 maxlen: 32 90.84.148.0/24 maxlen: 32 90.84.153.0/24 maxlen: 32 193.249.225.0/24 maxlen: 32 2a01:c9c0:c000::/48 maxlen: 128 2a01:c9c0:c002::/48 maxlen: 128 2a01:c9c0:c004::/48 maxlen: 128 2a01:c9c0:c006::/48 maxlen: 128 2a01:c9c0:c008::/48 maxlen: 128 2a01:c9c0:c009::/48 maxlen: 48 2a01:c9c0:c00a::/48 maxlen: 128 2a01:c9c0:c00c::/48 maxlen: 128 2a01:c9c0:c00f::/48 maxlen: 128 2a01:c9c0:c010::/48 maxlen: 128 2a01:c9c0:c012::/48 maxlen: 128 2a01:c9c0:c014::/48 maxlen: 128 2a01:c9c0:c016::/48 maxlen: 128 2a01:c9c0:c018::/48 maxlen: 128 2a01:c9c0:c01a::/48 maxlen: 128 2a01:c9c0:c01c::/48 maxlen: 128 2a01:c9c0:c01e::/48 maxlen: 128 2a01:c9c0:c020::/48 maxlen: 128 2a01:c9c0:c022::/48 maxlen: 128 2a01:c9c0:c024::/48 maxlen: 128 2a01:c9c0:c026::/48 maxlen: 128 2a01:c9c0:c040::/48 maxlen: 128 2a01:c9c0:c060::/48 maxlen: 128 2a01:c9c0:c062::/48 maxlen: 128 2a01:c9c0:c080::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:24:96:45:8f:36:77:0e:01:d3:62:a2:9a:39:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0186762727f9dcc926b4da287354e6c92be4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:ad:71:88:e4:7c:5d:57:1b:0a:b4:51:d2: 1b:b8:bf:51:c5:12:8e:f6:01:2e:e9:ee:af:2c:ec: ac:f5:7f:77:5e:43:25:9b:d1:07:b0:ab:e9:b9:79: 59:be:16:7c:84:20:16:91:2e:8f:4d:2c:ba:c1:b8: f9:dd:e9:e3:68:f4:80:21:54:70:4b:4e:30:6a:6a: 9b:3b:d0:1d:66:16:16:6a:9d:4c:18:25:04:b8:bd: 8a:99:91:19:6c:2a:28:2d:25:c4:4f:f8:5e:60:83: 2e:a8:68:59:35:89:17:90:85:94:46:90:d6:8d:e6: a6:9f:91:37:99:e3:3d:a8:92:9d:d1:8a:ab:2c:6c: 8d:6c:05:40:9b:c1:fe:60:01:6d:86:3a:64:4b:6d: 65:0a:bc:2a:e6:f1:bf:8a:26:85:2e:2e:f8:9d:3f: 53:c0:68:c6:23:c8:26:50:5f:43:da:8d:6a:99:88: b5:c5:27:13:6d:f9:9c:34:42:2e:dd:98:0e:ad:3a: 00:73:a4:8d:d0:21:28:4b:5a:28:2e:d3:c3:32:dd: b3:89:1b:e2:79:68:cf:0f:cd:ee:cb:91:b6:af:a5: bd:84:06:f9:0d:66:dd:d8:fd:66:49:47:7d:9d:10: 88:27:b8:77:47:d1:9b:ff:d9:4a:e2:44:c9:c4:dd: 9d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:01:86:76:27:27:F9:DC:C9:26:B4:DA:28:73:54:E6:C9:2B:E4:A1 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/PwGGdicn-dzJJrTaKHNU5skr5KE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.15.228.0-80.15.235.255 80.15.242.0-80.15.255.255 90.84.143.0/24 90.84.148.0/24 90.84.153.0/24 193.249.225.0/24 IPv6: 2a01:c9c0:c000::/48 2a01:c9c0:c002::/48 2a01:c9c0:c004::/48 2a01:c9c0:c006::/48 2a01:c9c0:c008::-2a01:c9c0:c00a:ffff:ffff:ffff:ffff:ffff 2a01:c9c0:c00c::/48 2a01:c9c0:c00f::-2a01:c9c0:c010:ffff:ffff:ffff:ffff:ffff 2a01:c9c0:c012::/48 2a01:c9c0:c014::/48 2a01:c9c0:c016::/48 2a01:c9c0:c018::/48 2a01:c9c0:c01a::/48 2a01:c9c0:c01c::/48 2a01:c9c0:c01e::/48 2a01:c9c0:c020::/48 2a01:c9c0:c022::/48 2a01:c9c0:c024::/48 2a01:c9c0:c026::/48 2a01:c9c0:c040::/48 2a01:c9c0:c060::/48 2a01:c9c0:c062::/48 2a01:c9c0:c080::/48 Signature Algorithm: sha256WithRSAEncryption 6f:21:e9:26:b5:83:71:98:c3:46:b3:b1:b7:ff:fd:72:92:b5: 95:fc:5e:ce:64:0c:9f:83:61:31:75:f8:11:cb:4b:93:f6:d7: b4:c5:f4:c6:ce:26:f5:f9:02:ea:d3:aa:83:f2:99:24:8b:ff: cc:41:eb:de:d5:d9:e7:e7:72:16:20:5c:49:1d:ee:4e:e2:44: e6:9b:f3:da:df:36:ca:92:37:8c:25:6c:20:61:cd:8e:16:9a: 0d:94:7a:55:53:db:89:02:93:25:6a:05:94:85:35:51:15:c6: 9a:a8:b9:13:f4:c8:b2:c5:76:70:71:34:cd:eb:4a:b5:96:e2: d8:fc:33:9a:43:d2:03:b5:98:21:ee:ff:07:6a:31:f7:55:6e: 3d:12:db:5a:ab:07:ac:50:22:d9:d0:71:95:f5:76:84:4a:2a: 6e:b6:38:fd:80:d2:dc:2a:7b:ff:7c:b4:c0:ee:29:e4:af:9f: 56:ed:c5:20:2b:49:ae:f8:3f:01:81:c4:c4:f9:c0:99:64:55: 23:a1:d7:3e:0c:b1:2e:01:65:13:ef:c6:5d:3b:2f:d9:c2:b2: 02:aa:dd:18:ec:3f:c6:dd:5c:da:39:87:88:80:2c:33:69:08: 58:e7:31:ce:ec:33:dc:4a:0e:fb:26:77:8a:12:d3:5a:3b:a8: ee:ed:f5:f0 -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISAZt8gCSWRY82dw4B02KimjkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjAxODY3NjI3MjdmOWRjYzkyNmI0ZGEyODczNTRlNmM5MmJlNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutitcYjkfF1XGwq0UdIbuL9RxRKO 9gEu6e6vLOys9X93XkMlm9EHsKvpuXlZvhZ8hCAWkS6PTSy6wbj53enjaPSAIVRw S04wamqbO9AdZhYWap1MGCUEuL2KmZEZbCooLSXET/heYIMuqGhZNYkXkIWURpDW jeamn5E3meM9qJKd0YqrLGyNbAVAm8H+YAFthjpkS21lCrwq5vG/iiaFLi74nT9T wGjGI8gmUF9D2o1qmYi1xScTbfmcNEIu3ZgOrToAc6SN0CEoS1ooLtPDMt2ziRvi eWjPD83uy5G2r6W9hAb5DWbd2P1mSUd9nRCIJ7h3R9Gb/9lK4kTJxN2dVQIDAQAB o4IDIjCCAx4wHQYDVR0OBBYEFD8BhnYnJ/ncySa02ihzVObJK+ShMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvUHdHR2RpY24tZHpKSnJUYUtITlU1c2tyNUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBNgYIKwYBBQUHAQcBAf8EggElMIIBITA5BAIAATAzMAwD BAJQD+QDBAJQD+gwCwMEAVAP8gMDBFAAAwQAWlSPAwQAWlSUAwQAWlSZAwQAwfnh MIHjBAIAAjCB3AMHACoBycDAAAMHACoBycDAAgMHACoBycDABAMHACoBycDABjAS AwcDKgHJwMAIAwcAKgHJwMAKAwcAKgHJwMAMMBIDBwAqAcnAwA8DBwAqAcnAwBAD BwAqAcnAwBIDBwAqAcnAwBQDBwAqAcnAwBYDBwAqAcnAwBgDBwAqAcnAwBoDBwAq AcnAwBwDBwAqAcnAwB4DBwAqAcnAwCADBwAqAcnAwCIDBwAqAcnAwCQDBwAqAcnA wCYDBwAqAcnAwEADBwAqAcnAwGADBwAqAcnAwGIDBwAqAcnAwIAwDQYJKoZIhvcN AQELBQADggEBAG8h6Sa1g3GYw0azsbf//XKStZX8Xs5kDJ+DYTF1+BHLS5P217TF 9MbOJvX5AurTqoPymSSL/8xB697V2efnchYgXEkd7k7iROab89rfNsqSN4wlbCBh zY4Wmg2UelVT24kCkyVqBZSFNVEVxpqouRP0yLLFdnBxNM3rSrWW4tj8M5pD0gO1 mCHu/wdqMfdVbj0S21qrB6xQItnQcZX1doRKKm62OP2A0twqe/98tMDuKeSvn1bt xSArSa74PwGBxMT5wJlkVSOh1z4MsS4BZRPvxl07L9nCsgKq3RjsP8bdXNo5h4iA LDNpCFjnMc7sM9xKDvsmd4oS01o7qO7t9fA= -----END CERTIFICATE-----Generated at Thu Jan 22 23:35:32 2026 by rpki-client