This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/PZr5CygKS5tL_Uziue-mB5uPrW0.roa File: PZr5CygKS5tL_Uziue-mB5uPrW0.roa (raw, json) Hash identifier: iqTRcziPZxSinFqw8OGyFmqApQJAuXTBKuBu7N0m6gg= Subject key identifier: 3D:9A:F9:0B:28:0A:4B:9B:4B:FD:4C:E2:B9:EF:A6:07:9B:8F:AD:6D Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19 Certificate serial: 019B7D5C7679AA1C1B7E021B4112636E8535 Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/PZr5CygKS5tL_Uziue-mB5uPrW0.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197290 IP address blocks: 46.31.128.0/23 maxlen: 24 46.31.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:76:79:aa:1c:1b:7e:02:1b:41:12:63:6e:85:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9af90b280a4b9b4bfd4ce2b9efa6079b8fad6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:6d:5b:a8:02:1f:ea:09:4a:da:53:b8:13: 8e:1c:f3:7f:46:2a:54:3a:6d:82:93:f6:60:92:dc: b9:b4:e3:3c:8c:20:9a:16:d3:9c:9b:ee:d0:1a:eb: 70:72:6d:00:04:a7:9e:07:04:dc:6e:25:1e:ad:7c: 53:19:9b:68:9f:56:60:17:f6:2c:f3:38:e3:af:a1: c1:ea:e1:1f:ea:da:b4:4e:5a:c2:fa:87:4e:7f:30: 9b:a0:67:97:56:d7:f1:b1:40:08:0b:de:3d:e8:c3: 94:79:ed:3a:79:52:55:5f:4f:51:c1:a1:ad:88:39: 6e:ac:68:bf:8b:b1:53:d2:b2:f5:87:07:f5:1c:f9: 7a:3f:55:16:16:fd:b7:a3:bd:e5:58:42:b6:10:ee: 18:93:b9:16:69:c0:bb:4d:c2:cc:d1:c1:11:a6:61: fe:ca:90:d6:38:23:70:67:b8:eb:3e:47:70:1b:f1: ac:44:8b:dc:5d:80:d4:a4:32:4f:7f:1d:5d:8c:ca: 98:2b:a2:82:57:52:b9:fd:f7:85:02:c7:7a:b1:7f: d0:31:04:c3:79:ff:02:49:3b:6d:44:21:f3:53:96: 38:d3:f7:00:df:de:8c:15:27:f5:14:90:95:e3:9e: 0f:24:08:30:93:65:41:d0:f8:9a:46:c9:6d:fe:e3: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:F9:0B:28:0A:4B:9B:4B:FD:4C:E2:B9:EF:A6:07:9B:8F:AD:6D X509v3 Authority Key Identifier: keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/PZr5CygKS5tL_Uziue-mB5uPrW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.128.0/22 Signature Algorithm: sha256WithRSAEncryption 38:3a:dc:a3:72:cd:47:39:e0:18:56:97:08:6c:8a:dd:10:fc: 6a:2d:60:9b:26:97:e0:50:32:e6:ec:da:d2:d2:77:16:6b:b0: 3b:dc:40:01:fb:c4:e6:7b:a6:00:aa:62:80:a2:2f:31:b5:48: 73:ba:b1:05:06:7d:79:a3:4f:58:d6:a9:17:a9:79:ee:2f:b2: 63:1a:f3:3b:29:dc:09:2c:fb:2b:de:23:ec:9e:13:c8:81:25: 89:09:63:3a:af:34:c0:73:62:4e:d7:5a:16:f9:f0:98:3c:ec: 08:a8:be:7c:2c:3f:1e:86:4c:48:02:67:b7:a5:c9:41:04:3c: 09:04:00:7d:92:c3:c1:32:d0:f5:a6:0e:db:b9:70:9d:10:80: 40:6d:40:c2:ac:86:a5:8f:c6:6e:ab:08:fa:03:61:22:e9:e0: b5:f8:b2:c0:27:27:cf:75:66:51:8e:4d:29:d8:c3:ea:f8:eb: 0d:ad:ca:7b:2f:21:8e:18:b2:02:f0:6a:19:4c:fe:dd:00:f1: 03:8d:54:62:38:16:14:e7:b8:a9:1b:a1:87:5c:42:f2:21:76: dd:22:ac:24:34:a4:e3:24:d2:77:ab:1a:a6:32:06:72:35:f4: f5:e9:85:2e:ce:b3:40:0d:46:ca:c3:94:3f:b9:b6:49:72:4a: d5:ad:c7:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHZ5qhwbfgIbQRJjboU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3 MzZiMTkwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDlhZjkwYjI4MGE0YjliNGJmZDRjZTJiOWVmYTYwNzliOGZhZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjxtW6gCH+oJStpTuBOOHPN/RipU Om2Ck/Zgkty5tOM8jCCaFtOcm+7QGutwcm0ABKeeBwTcbiUerXxTGZton1ZgF/Ys 8zjjr6HB6uEf6tq0TlrC+odOfzCboGeXVtfxsUAIC9496MOUee06eVJVX09RwaGt iDlurGi/i7FT0rL1hwf1HPl6P1UWFv23o73lWEK2EO4Yk7kWacC7TcLM0cERpmH+ ypDWOCNwZ7jrPkdwG/GsRIvcXYDUpDJPfx1djMqYK6KCV1K5/feFAsd6sX/QMQTD ef8CSTttRCHzU5Y40/cA396MFSf1FJCV454PJAgwk2VB0PiaRslt/uMgYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2a+QsoCkubS/1M4rnvpgebj61tMB8GA1UdIwQY MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et MzNlMjcwNWI0YzNlLzEvUFpyNUN5Z0tTNXRMX1V6aXVlLW1CNXVQclcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLh+AMA0G CSqGSIb3DQEBCwUAA4IBAQA4Otyjcs1HOeAYVpcIbIrdEPxqLWCbJpfgUDLm7NrS 0ncWa7A73EAB+8Tme6YAqmKAoi8xtUhzurEFBn15o09Y1qkXqXnuL7JjGvM7KdwJ LPsr3iPsnhPIgSWJCWM6rzTAc2JO11oW+fCYPOwIqL58LD8ehkxIAme3pclBBDwJ BAB9ksPBMtD1pg7buXCdEIBAbUDCrIalj8Zuqwj6A2Ei6eC1+LLAJyfPdWZRjk0p 2MPq+OsNrcp7LyGOGLIC8GoZTP7dAPEDjVRiOBYU57ipG6GHXELyIXbdIqwkNKTj JNJ3qxqmMgZyNfT16YUuzrNADUbKw5Q/ubZJckrVrcdX -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:25 2026 by rpki-client