This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PzlMeoUeqV7fnhLh_KVBijJQc1A.roa File: PzlMeoUeqV7fnhLh_KVBijJQc1A.roa (raw, json) Hash identifier: Ejgp3pnQDnBP7U/Toez5EvU9LIl9WTZCpCqnPDZvapw= Subject key identifier: 3F:39:4C:7A:85:1E:A9:5E:DF:9E:12:E1:FC:A5:41:8A:32:50:73:50 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AAA78AD6A29329EB2FF368D532A22 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PzlMeoUeqV7fnhLh_KVBijJQc1A.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 82.153.246.0/24 maxlen: 24 109.176.21.0/24 maxlen: 24 109.176.23.0/24 maxlen: 24 109.176.206.0/24 maxlen: 24 213.218.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:aa:78:ad:6a:29:32:9e:b2:ff:36:8d:53:2a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f394c7a851ea95edf9e12e1fca5418a32507350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:ea:8f:2b:6f:4a:a9:e9:78:a4:6b:fa:d1: 84:d3:09:d1:91:f8:c8:33:03:25:2f:fe:8d:4e:e9: 47:81:e3:fc:39:16:d5:ca:64:6c:f1:7d:da:29:eb: d2:2d:7e:eb:16:50:8b:38:9e:5b:10:83:f8:57:af: 3e:84:c8:af:c5:24:85:61:b0:aa:f3:66:60:fe:b5: f7:11:cc:5c:1c:50:53:c5:72:f1:39:85:b2:1f:f6: 3d:86:ca:da:1a:77:0e:c4:6b:db:cd:28:62:e0:fc: a4:1a:02:a5:c4:11:73:60:d0:cf:8f:cb:c3:13:9f: 2a:bd:58:64:66:b2:6a:6a:77:fb:f9:5f:4c:b7:c8: c1:83:05:68:1d:b3:28:69:83:e8:c3:71:1d:7e:e0: 09:d5:85:f1:b7:ec:c4:18:12:c8:f5:c7:9a:df:72: 69:b4:a4:b8:83:98:85:68:73:88:8e:d4:ca:25:44: 23:10:50:3a:d2:a4:8f:55:97:75:d8:93:bd:19:34: df:1a:91:09:5c:40:43:bc:bf:c3:59:c9:a7:14:1f: d3:5b:97:61:6b:e4:7d:af:3e:5a:a9:1c:8a:4f:9c: ae:1b:2a:66:44:c8:c2:77:46:2a:a3:01:b4:c0:04: 5d:83:aa:a5:f8:9e:a1:d7:47:00:60:20:3f:f5:f3: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:4C:7A:85:1E:A9:5E:DF:9E:12:E1:FC:A5:41:8A:32:50:73:50 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PzlMeoUeqV7fnhLh_KVBijJQc1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.246.0/24 109.176.21.0/24 109.176.23.0/24 109.176.206.0/24 213.218.243.0/24 Signature Algorithm: sha256WithRSAEncryption 60:00:12:48:19:62:db:a7:bc:22:ee:bc:2c:2b:fb:75:c7:97: cd:ac:de:d9:4b:63:69:25:ae:b3:02:0e:bb:ec:7b:ab:1e:7d: 27:0b:83:97:fe:79:67:9b:b2:14:f4:ef:d1:19:16:c3:7b:4a: 3a:7f:cf:ab:46:eb:ca:a3:ae:bd:df:87:99:67:6f:54:dd:ab: ce:f9:7a:a6:d2:b4:bf:93:76:5a:bb:d6:89:b4:e1:29:c7:67: 48:79:24:2d:73:02:85:b3:b4:cd:99:ae:9d:48:1f:2a:ab:af: 74:ef:b7:48:72:fb:a5:b6:72:85:0d:12:40:6c:c4:67:ec:55: 31:b8:cc:a7:f4:8d:c9:b2:bd:b9:24:b9:97:df:98:30:99:9a: 1d:bc:3c:5e:3b:3c:67:a7:c7:4f:47:52:84:dd:94:57:d4:0c: d1:fa:68:e5:90:74:2f:3d:d8:bd:35:bb:82:6a:98:b0:e6:4c: 11:3c:66:a7:1d:a4:e2:2b:97:59:d8:8d:55:9d:5e:51:ff:31: 15:2d:89:6a:cb:9e:6f:ab:5e:70:b8:8b:d5:6e:04:89:cd:fe: b3:c2:a1:3a:86:df:58:f8:18:2c:87:2c:78:c0:26:86:f9:d4: 13:f3:0e:df:cc:71:ad:70:14:6d:49:c2:10:51:be:b6:99:7b: 61:c0:73:ef -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6Wqp4rWopMp6y/zaNUyoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjM5NGM3YTg1MWVhOTVlZGY5ZTEyZTFmY2E1NDE4YTMyNTA3MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6bqjytvSqnpeKRr+tGE0wnRkfjI MwMlL/6NTulHgeP8ORbVymRs8X3aKevSLX7rFlCLOJ5bEIP4V68+hMivxSSFYbCq 82Zg/rX3EcxcHFBTxXLxOYWyH/Y9hsraGncOxGvbzShi4PykGgKlxBFzYNDPj8vD E58qvVhkZrJqanf7+V9Mt8jBgwVoHbMoaYPow3EdfuAJ1YXxt+zEGBLI9cea33Jp tKS4g5iFaHOIjtTKJUQjEFA60qSPVZd12JO9GTTfGpEJXEBDvL/DWcmnFB/TW5dh a+R9rz5aqRyKT5yuGypmRMjCd0YqowG0wARdg6ql+J6h10cAYCA/9fNQgQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFD85THqFHqle354S4fylQYoyUHNQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUHpsTWVvVWVxVjdmbmhMaF9LVkJpakpRYzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUpn2AwQA bbAVAwQAbbAXAwQAbbDOAwQA1drzMA0GCSqGSIb3DQEBCwUAA4IBAQBgABJIGWLb p7wi7rwsK/t1x5fNrN7ZS2NpJa6zAg677HurHn0nC4OX/nlnm7IU9O/RGRbDe0o6 f8+rRuvKo66934eZZ29U3avO+Xqm0rS/k3Zau9aJtOEpx2dIeSQtcwKFs7TNma6d SB8qq69077dIcvultnKFDRJAbMRn7FUxuMyn9I3Jsr25JLmX35gwmZodvDxeOzxn p8dPR1KE3ZRX1AzR+mjlkHQvPdi9NbuCapiw5kwRPGanHaTiK5dZ2I1VnV5R/zEV LYlqy55vq15wuIvVbgSJzf6zwqE6ht9Y+Bgshyx4wCaG+dQT8w7fzHGtcBRtScIQ Ub62mXthwHPv -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:57 2026 by rpki-client