This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/PwmWi-rpnbFZJkRqtlAo5_ztrwE.roa File: PwmWi-rpnbFZJkRqtlAo5_ztrwE.roa (raw, json) Hash identifier: BEARFRtNM/IRWUj5pvQOw/J9P46trrxP68Rk79zlGOs= Subject key identifier: 3F:09:96:8B:EA:E9:9D:B1:59:26:44:6A:B6:50:28:E7:FC:ED:AF:01 Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c Certificate serial: 019B7DC9EE77107025B416F729E2534AF175 Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/PwmWi-rpnbFZJkRqtlAo5_ztrwE.roa Signing time: Fri 02 Jan 2026 08:19:04 +0000 ROA not before: Fri 02 Jan 2026 08:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205780 IP address blocks: 185.206.96.0/24 maxlen: 24 185.206.97.0/24 maxlen: 24 185.206.98.0/24 maxlen: 24 185.206.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ee:77:10:70:25:b4:16:f7:29:e2:53:4a:f1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c Validity Not Before: Jan 2 08:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f09968beae99db15926446ab65028e7fcedaf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:06:2d:c7:a4:7e:12:01:e0:81:a5:de:0d: 2d:92:6d:dc:1a:02:8d:3d:fc:01:bf:03:03:79:04: 21:29:3b:c6:d5:fc:ea:7c:b1:95:61:7e:98:20:95: 73:de:bb:df:a1:c3:68:2a:59:e1:94:d0:e8:5a:b9: 62:9f:12:49:af:5b:35:d0:93:82:3b:a0:14:4c:f0: 81:e0:06:88:fe:3b:df:01:c7:35:84:aa:e4:ec:2b: 49:bd:51:48:87:d2:d4:ee:76:36:76:8c:86:aa:d7: 4c:23:71:80:fb:ee:9a:5c:7f:8f:fe:1a:29:98:99: b9:40:16:7e:37:bc:23:d3:c4:7d:17:44:64:ee:da: 84:90:99:27:cf:15:c0:61:f8:f0:0f:cd:06:20:bd: b9:b5:e0:3e:9b:14:2a:30:1c:2d:c3:3b:f6:e0:59: a2:3f:89:e9:d6:35:cb:8e:4d:9f:7c:9e:71:64:78: 7b:5a:c7:a6:5a:35:70:aa:10:33:1b:0e:54:0c:4a: 29:d0:cb:0f:12:91:d6:f2:56:64:18:25:22:76:2f: 4d:99:7a:99:63:e8:74:26:39:71:24:26:1d:0b:e5: b0:9e:17:56:65:ab:e1:3b:df:85:cc:79:5d:2a:d8: a0:7f:4f:b6:13:c4:3d:b6:57:87:29:76:e0:da:c6: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:09:96:8B:EA:E9:9D:B1:59:26:44:6A:B6:50:28:E7:FC:ED:AF:01 X509v3 Authority Key Identifier: keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/PwmWi-rpnbFZJkRqtlAo5_ztrwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:6c:44:27:c5:36:c1:80:6c:ea:1b:43:c9:35:56:35:7f:27: b7:b3:42:da:6c:9d:ff:d2:0a:ba:bf:f7:ec:be:2d:2f:bf:9f: b0:3a:15:de:a4:72:a6:c5:ae:38:b4:c0:70:44:b6:d9:08:d4: 00:c9:78:c0:95:b0:6f:25:35:33:80:2e:d5:f9:32:3a:44:f2: b5:01:f8:43:f1:67:0e:99:7c:2f:94:ba:5b:10:b8:a9:34:6a: 97:d4:e1:f1:16:8b:28:9a:b5:a9:b2:e6:0f:23:48:8b:65:9d: d6:d3:c3:bb:da:04:e1:59:f5:c8:27:66:f2:9f:00:c1:b9:10: 43:b8:52:d3:dd:e7:fa:9b:5c:ff:65:68:da:a5:a2:f0:e3:02: 5a:6c:eb:a0:89:76:7f:00:6c:f6:19:37:40:62:9f:de:2e:ee: bd:95:eb:c7:e3:9b:32:6e:06:a6:10:eb:70:1b:92:61:ac:42: 78:59:24:04:24:8d:0f:69:ff:c7:8d:a7:5f:86:d1:93:55:96: c7:61:53:f5:b1:dd:41:d4:b0:e6:e5:87:17:e2:93:11:a0:99: 20:3a:46:57:3e:86:0f:16:14:d1:08:fe:ac:4d:8a:ba:e2:47: c1:34:42:c5:20:2b:68:80:4e:7d:08:45:a3:bf:af:f1:11:5b: 38:23:4b:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ye53EHAltBb3KeJTSvF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZTk0Mjc4YjNlMTkwMTg2M2FkZDYxZDdiZGYyZDI3M2Nm MTM0MGMwHhcNMjYwMTAyMDgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjA5OTY4YmVhZTk5ZGIxNTkyNjQ0NmFiNjUwMjhlN2ZjZWRhZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnQGLcekfhIB4IGl3g0tkm3cGgKN PfwBvwMDeQQhKTvG1fzqfLGVYX6YIJVz3rvfocNoKlnhlNDoWrlinxJJr1s10JOC O6AUTPCB4AaI/jvfAcc1hKrk7CtJvVFIh9LU7nY2doyGqtdMI3GA++6aXH+P/hop mJm5QBZ+N7wj08R9F0Rk7tqEkJknzxXAYfjwD80GIL25teA+mxQqMBwtwzv24Fmi P4np1jXLjk2ffJ5xZHh7WsemWjVwqhAzGw5UDEop0MsPEpHW8lZkGCUidi9NmXqZ Y+h0JjlxJCYdC+WwnhdWZavhO9+FzHldKtigf0+2E8Q9tleHKXbg2saZ3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8Jlovq6Z2xWSZEarZQKOf87a8BMB8GA1UdIwQY MBaAFCfpQniz4ZAYY63WHXvfLSc88TQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQt YjdjOTlkZGFjNzAzLzEvUHdtV2ktcnBuYkZaSmtScXRsQW81X3p0cndFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZjQxYjQtMWRiOS00YWEyLWFkNzQtYjdjOTlkZGFjNzAz LzEvSi1sQ2VMUGhrQmhqcmRZZGU5OHRKenp4TkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc5gMA0G CSqGSIb3DQEBCwUAA4IBAQCMbEQnxTbBgGzqG0PJNVY1fye3s0LabJ3/0gq6v/fs vi0vv5+wOhXepHKmxa44tMBwRLbZCNQAyXjAlbBvJTUzgC7V+TI6RPK1AfhD8WcO mXwvlLpbELipNGqX1OHxFosomrWpsuYPI0iLZZ3W08O72gThWfXIJ2bynwDBuRBD uFLT3ef6m1z/ZWjapaLw4wJabOugiXZ/AGz2GTdAYp/eLu69levH45sybgamEOtw G5JhrEJ4WSQEJI0Paf/HjadfhtGTVZbHYVP1sd1B1LDm5YcX4pMRoJkgOkZXPoYP FhTRCP6sTYq64kfBNELFICtogE59CEWjv6/xEVs4I0uV -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:37 2026 by rpki-client