This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/Pwvl_Zcat1KTzpuXYTtavIgP748.roa File: Pwvl_Zcat1KTzpuXYTtavIgP748.roa (raw, json) Hash identifier: iLZ+jEw20ZEVrfeL0bdjMhqCq56ZpvLuivOan0qgqsE= Subject key identifier: 3F:0B:E5:FD:97:1A:B7:52:93:CE:9B:97:61:3B:5A:BC:88:0F:EF:8F Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959 Certificate serial: 019B7F15216B05DA99BC068EEC9EEAF67675 Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/Pwvl_Zcat1KTzpuXYTtavIgP748.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 31.3.72.0/21 maxlen: 24 80.88.152.0/21 maxlen: 24 80.88.152.0/24 maxlen: 24 94.127.48.0/21 maxlen: 24 109.70.48.0/21 maxlen: 24 185.17.52.0/22 maxlen: 24 185.81.36.0/22 maxlen: 24 193.223.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:21:6b:05:da:99:bc:06:8e:ec:9e:ea:f6:76:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0be5fd971ab75293ce9b97613b5abc880fef8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:0c:39:74:14:f6:75:05:54:93:ba:a6:bb: 60:47:bd:6b:c2:d2:34:5e:3f:57:ab:97:da:28:c7: b1:03:32:bb:cf:a3:a9:af:aa:8c:45:0a:0c:cf:47: aa:f0:f7:90:d7:16:18:25:ea:bf:e0:5c:01:2e:a8: 21:30:bd:bc:d5:01:91:6d:a3:96:5e:46:1d:88:b7: ce:bb:6b:0d:f8:15:3c:ea:85:76:31:f3:18:3c:34: 43:4e:d5:2c:8f:e9:59:bc:02:4e:95:a7:d3:57:1b: 6b:d5:5b:45:70:81:1d:a6:eb:8d:ac:53:1e:64:2b: 3e:55:d4:dc:a7:f1:dc:24:4f:36:c2:3d:01:2c:1d: 0d:d2:8e:e4:ff:f6:d9:e2:e4:6f:32:a6:30:57:3c: bd:c9:6a:31:d0:d9:81:8b:75:37:f6:ce:d9:13:1c: 44:a0:e3:18:5c:fa:25:fa:e6:42:b0:5e:47:a3:3d: ec:19:4e:07:a3:38:45:dc:7b:d1:68:7e:65:91:15: 78:9e:49:60:90:b7:8a:9e:e6:44:d2:9e:8c:a7:b3: ea:5a:94:ac:52:c5:62:6f:e4:41:92:2b:17:1e:fd: 23:50:89:78:26:9d:a5:86:09:e2:4b:67:83:8a:4a: c4:42:a5:34:03:88:d2:c3:22:f0:f2:a4:c6:b8:4e: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:E5:FD:97:1A:B7:52:93:CE:9B:97:61:3B:5A:BC:88:0F:EF:8F X509v3 Authority Key Identifier: keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/Pwvl_Zcat1KTzpuXYTtavIgP748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.72.0/21 80.88.152.0/21 94.127.48.0/21 109.70.48.0/21 185.17.52.0/22 185.81.36.0/22 193.223.99.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:6a:bd:95:5d:3e:45:a3:e6:ec:49:c5:3e:94:48:89:d6:7c: 37:11:2c:4c:64:44:86:0b:fd:00:98:6e:ac:08:47:cd:d4:72: 7a:e2:cf:21:37:08:8c:16:64:b6:df:2d:e8:7f:79:d0:71:5d: d4:eb:e3:d2:86:8f:76:d4:29:de:81:a7:f7:3d:60:bb:24:16: d4:98:c0:3e:8c:b7:7d:99:1a:06:84:2f:31:cd:fa:e7:9b:bc: a6:ce:2c:e4:23:5f:b3:84:5a:08:00:a5:93:41:f8:e4:51:b9: b4:f2:a2:c8:e2:25:49:02:e8:7c:19:04:5d:ca:56:31:59:76: 92:99:31:5f:8d:67:9e:7a:29:21:eb:69:e6:22:51:6c:c6:58: 63:0d:03:14:b2:0e:80:97:20:f5:b2:37:80:93:b7:52:98:96: 6e:bc:1a:db:f6:f6:80:f5:30:b0:c5:ed:ce:a4:ab:3c:5f:6b: ce:7f:29:f7:c1:47:e5:a8:00:7c:3c:40:01:37:f1:b8:4e:4c: 80:69:07:4a:16:c4:95:07:71:7d:ad:72:db:2c:29:97:85:c8: a3:ac:3c:3b:fc:11:81:12:40:7b:79:8d:4c:0c:64:bf:be:eb: 4b:f6:f0:f2:0d:26:01:79:3d:07:9a:41:e2:37:ae:35:14:40: 0c:69:1b:c4 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/FSFrBdqZvAaO7J7q9nZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjlhMGE3M2UzYmE1NjkzODFkZGRhNmQ2NDcwZGM3Yzg3 M2M5NTkwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjBiZTVmZDk3MWFiNzUyOTNjZTliOTc2MTNiNWFiYzg4MGZlZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR0MOXQU9nUFVJO6prtgR71rwtI0 Xj9Xq5faKMexAzK7z6Opr6qMRQoMz0eq8PeQ1xYYJeq/4FwBLqghML281QGRbaOW XkYdiLfOu2sN+BU86oV2MfMYPDRDTtUsj+lZvAJOlafTVxtr1VtFcIEdpuuNrFMe ZCs+VdTcp/HcJE82wj0BLB0N0o7k//bZ4uRvMqYwVzy9yWox0NmBi3U39s7ZExxE oOMYXPol+uZCsF5Hoz3sGU4HozhF3HvRaH5lkRV4nklgkLeKnuZE0p6Mp7PqWpSs UsVib+RBkisXHv0jUIl4Jp2lhgniS2eDikrEQqU0A4jSwyLw8qTGuE4OvQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFD8L5f2XGrdSk86bl2E7WryID++PMB8GA1UdIwQY MBaAFG65oKc+O6VpOB3dptZHDcfIc8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEt ZTkwMjE5YmM4ZmYxLzEvUHd2bF9aY2F0MUtUenB1WFlUdGF2SWdQNzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jYWE2OGUtN2E5ZS00Y2FlLThkMmEtZTkwMjE5YmM4ZmYx LzEvYnJtZ3B6NDdwV2s0SGQybTFrY054OGh6eVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDHwNIAwQD UFiYAwQDXn8wAwQDbUYwAwQCuRE0AwQCuVEkAwQAwd9jMA0GCSqGSIb3DQEBCwUA A4IBAQAsar2VXT5Fo+bsScU+lEiJ1nw3ESxMZESGC/0AmG6sCEfN1HJ64s8hNwiM FmS23y3of3nQcV3U6+PSho921Cnegaf3PWC7JBbUmMA+jLd9mRoGhC8xzfrnm7ym zizkI1+zhFoIAKWTQfjkUbm08qLI4iVJAuh8GQRdylYxWXaSmTFfjWeeeikh62nm IlFsxlhjDQMUsg6AlyD1sjeAk7dSmJZuvBrb9vaA9TCwxe3OpKs8X2vOfyn3wUfl qAB8PEABN/G4TkyAaQdKFsSVB3F9rXLbLCmXhcijrDw7/BGBEkB7eY1MDGS/vutL 9vDyDSYBeT0HmkHiN641FEAMaRvE -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client