This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/PwrSsxL-Egr1Rf-yWM6dF8KNicg.roa File: PwrSsxL-Egr1Rf-yWM6dF8KNicg.roa (raw, json) Hash identifier: ZF0noI6Bm7SJE3lO11+fxPjlvi4dxC50P26QEAuQDds= Subject key identifier: 3F:0A:D2:B3:12:FE:12:0A:F5:45:FF:B2:58:CE:9D:17:C2:8D:89:C8 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019B042FA3C780ED7DE39F5D18C7DFAE8592 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/PwrSsxL-Egr1Rf-yWM6dF8KNicg.roa Signing time: Tue 09 Dec 2025 17:36:29 +0000 ROA not before: Tue 09 Dec 2025 17:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50612 IP address blocks: 185.147.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:2f:a3:c7:80:ed:7d:e3:9f:5d:18:c7:df:ae:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Dec 9 17:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f0ad2b312fe120af545ffb258ce9d17c28d89c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1c:39:6f:31:f2:0d:f3:95:81:02:42:4e:2f: f1:22:ae:e1:53:a8:a5:b2:17:4e:17:9b:03:94:8e: e1:4c:7d:dc:1d:f7:7a:8e:c6:0e:99:18:32:d2:db: 34:7b:03:25:2c:cb:93:8e:d7:55:08:3b:bd:7d:54: 07:82:ab:0f:01:5f:e6:82:ff:c4:1e:77:b7:fb:d5: 65:c1:28:2a:26:fa:9f:21:81:77:b1:6a:ce:0d:d4: 9a:5b:e9:f9:4c:1a:f7:51:1e:c9:ad:2e:d5:87:04: 07:81:1f:0b:70:54:04:5f:39:79:8d:0b:02:2d:80: 90:99:62:8e:fa:ac:7c:fc:6b:1d:69:18:6a:0e:d6: d3:92:6d:ea:f5:c2:d3:31:18:38:1a:fa:4f:2e:f7: ff:6e:01:b2:5d:de:43:49:bb:92:ba:d3:83:1d:6b: 82:10:87:26:36:c3:2e:3f:0f:36:75:1d:10:6f:f0: 20:f4:06:b6:ec:06:12:41:60:7a:20:7e:6e:3c:78: c9:40:f6:8b:bb:d7:60:c1:1e:95:1c:a0:4d:d1:c6: 0d:35:7f:67:5e:64:c4:0a:87:19:39:2d:59:81:4d: c1:f1:45:21:ea:ea:89:62:6c:ac:6f:41:3d:4b:ca: ca:31:05:87:3f:d3:24:83:0f:65:b9:5c:f4:b8:bd: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0A:D2:B3:12:FE:12:0A:F5:45:FF:B2:58:CE:9D:17:C2:8D:89:C8 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/PwrSsxL-Egr1Rf-yWM6dF8KNicg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.126.0/24 Signature Algorithm: sha256WithRSAEncryption 61:6f:3f:d4:41:e2:ff:40:a1:65:70:ce:04:8f:56:79:92:d1: 53:d1:02:20:4b:2e:69:08:97:5c:c7:89:7c:41:cd:99:86:c9: 0a:fb:26:e0:08:49:5e:ba:ef:24:ae:57:a6:98:8f:29:c0:65: 59:ca:f6:06:13:8c:da:7b:b2:a2:0a:52:dd:11:eb:41:15:22: a6:36:47:e7:32:92:27:2a:f8:b5:f2:23:ef:2e:1b:81:30:5d: 94:99:ec:55:87:2a:e6:49:75:fd:3c:e5:0a:69:88:c3:61:5c: 58:54:f5:f7:80:bc:57:70:5f:42:85:a7:c9:0d:b0:2a:52:b7: 68:2a:f5:78:7c:a8:6a:a9:d3:5b:de:63:72:35:62:ad:b5:12: 18:30:95:17:ee:80:9b:ba:c2:91:25:c1:51:b9:7e:27:09:67: a3:3e:46:51:30:10:bf:c9:db:ef:48:b7:37:cb:cd:74:bb:31: e6:bf:9c:e6:55:e7:d8:d3:14:06:04:88:b4:c0:6a:f9:c9:55: d8:3a:e6:a4:68:c8:f8:26:4e:8e:5c:4e:0b:63:c6:a3:65:6d: 26:24:e0:88:0f:e5:e4:cd:76:94:b1:8a:7d:67:d3:56:b8:85: 63:e6:51:ea:cd:ed:ba:03:c2:15:66:3b:2f:2f:e7:0e:b1:be: a4:0d:19:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsEL6PHgO19459dGMffroWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjUxMjA5MTczNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjBhZDJiMzEyZmUxMjBhZjU0NWZmYjI1OGNlOWQxN2MyOGQ4OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBw5bzHyDfOVgQJCTi/xIq7hU6il shdOF5sDlI7hTH3cHfd6jsYOmRgy0ts0ewMlLMuTjtdVCDu9fVQHgqsPAV/mgv/E Hne3+9VlwSgqJvqfIYF3sWrODdSaW+n5TBr3UR7JrS7VhwQHgR8LcFQEXzl5jQsC LYCQmWKO+qx8/GsdaRhqDtbTkm3q9cLTMRg4GvpPLvf/bgGyXd5DSbuSutODHWuC EIcmNsMuPw82dR0Qb/Ag9Aa27AYSQWB6IH5uPHjJQPaLu9dgwR6VHKBN0cYNNX9n XmTECocZOS1ZgU3B8UUh6uqJYmysb0E9S8rKMQWHP9Mkgw9luVz0uL1IbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8K0rMS/hIK9UX/sljOnRfCjYnIMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvUHdyU3N4TC1FZ3IxUmYteVdNNmRGOEtOaWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZN+MA0G CSqGSIb3DQEBCwUAA4IBAQBhbz/UQeL/QKFlcM4Ej1Z5ktFT0QIgSy5pCJdcx4l8 Qc2ZhskK+ybgCEleuu8krlemmI8pwGVZyvYGE4zae7KiClLdEetBFSKmNkfnMpIn Kvi18iPvLhuBMF2UmexVhyrmSXX9POUKaYjDYVxYVPX3gLxXcF9ChafJDbAqUrdo KvV4fKhqqdNb3mNyNWKttRIYMJUX7oCbusKRJcFRuX4nCWejPkZRMBC/ydvvSLc3 y810uzHmv5zmVefY0xQGBIi0wGr5yVXYOuakaMj4Jk6OXE4LY8ajZW0mJOCID+Xk zXaUsYp9Z9NWuIVj5lHqze26A8IVZjsvL+cOsb6kDRlh -----END CERTIFICATE-----Generated at Fri Dec 12 18:33:05 2025 by rpki-client