This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/pwRfNzXMGOEuy9-A9ygooZEM6n8.roa File: pwRfNzXMGOEuy9-A9ygooZEM6n8.roa (raw, json) Hash identifier: sFyYjRFOUtVZQUg+k6G6omkeszu0+pmN0gGghnRFGQE= Subject key identifier: A7:04:5F:37:35:CC:18:E1:2E:CB:DF:80:F7:28:28:A1:91:0C:EA:7F Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Certificate serial: 019B7BA397AC899B0709C64825DF73F0BE21 Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/pwRfNzXMGOEuy9-A9ygooZEM6n8.roa Signing time: Thu 01 Jan 2026 22:17:57 +0000 ROA not before: Thu 01 Jan 2026 22:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5500 IP address blocks: 193.108.218.0/24 maxlen: 24 195.72.113.0/24 maxlen: 24 195.72.114.0/23 maxlen: 23 195.128.250.0/23 maxlen: 23 195.206.192.0/19 maxlen: 19 217.22.80.0/20 maxlen: 20 2a05:aa40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:97:ac:89:9b:07:09:c6:48:25:df:73:f0:be:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c Validity Not Before: Jan 1 22:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7045f3735cc18e12ecbdf80f72828a1910cea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:ab:0a:49:21:14:53:18:99:24:8e:05:ac: 50:f3:78:51:4a:2f:38:a9:1b:76:2e:3c:0b:33:7f: 20:61:30:60:96:f9:04:1b:77:f2:1f:cf:60:74:0b: 4d:d1:26:64:97:c8:47:03:57:9f:99:bd:48:e2:02: 07:81:e6:a2:52:39:7e:34:25:22:f5:93:47:68:aa: fc:ad:63:96:ac:f6:b3:83:44:be:bf:46:a9:97:f4: 1b:eb:f0:bb:da:97:74:7c:bb:68:cc:e7:a7:2b:57: 3f:33:06:1d:62:b2:9d:25:52:36:c7:16:91:31:ff: 43:83:0a:97:14:cf:01:65:40:03:8b:72:4c:fa:dc: f3:81:06:72:7e:3a:fe:5e:38:86:9c:6a:36:e1:5e: 94:1d:d9:09:02:0c:9c:9d:c2:5a:47:ef:ec:78:bb: 4c:7c:8b:b6:76:04:12:a9:9d:58:7b:7a:30:60:d5: cd:35:aa:74:99:eb:0d:ca:7b:76:cc:c1:85:c3:04: a5:1d:90:e1:19:84:17:cc:96:21:55:c9:5a:72:33: 11:84:1f:e9:82:42:2a:c6:62:8c:bc:26:80:63:f0: 6f:51:f0:0a:72:cf:90:fc:67:68:18:56:b7:bf:7b: 99:59:83:f9:19:d1:8b:71:63:d9:c1:df:ab:62:fe: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:04:5F:37:35:CC:18:E1:2E:CB:DF:80:F7:28:28:A1:91:0C:EA:7F X509v3 Authority Key Identifier: keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/pwRfNzXMGOEuy9-A9ygooZEM6n8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.218.0/24 195.72.113.0-195.72.115.255 195.128.250.0/23 195.206.192.0/19 217.22.80.0/20 IPv6: 2a05:aa40::/29 Signature Algorithm: sha256WithRSAEncryption 0c:be:d2:ad:15:b1:b8:c2:aa:99:b1:7c:92:ba:ce:b6:1c:bc: f0:1d:5b:63:21:c8:2a:f5:0c:42:70:e6:8b:30:fd:4f:de:e1: ab:47:e6:1e:6e:a4:f3:25:0d:8e:a6:84:d8:c6:64:bc:2a:f9: b6:37:9b:0f:8e:d0:ef:74:7d:1a:c6:1b:c2:59:7d:1c:d3:ef: 74:26:85:ed:8f:59:4b:27:b7:e7:29:11:71:a9:bb:1c:ff:52: c3:a3:bf:9c:a7:80:26:bc:af:d9:c8:ea:37:d1:0a:91:1c:d3: 6c:27:75:ac:23:a5:c1:38:80:fc:23:5b:ab:b3:c9:48:3b:22: 59:3a:51:2d:63:8b:07:75:d5:ac:6a:dd:6b:08:9d:9f:9d:0c: 4f:7d:e0:4a:76:80:0b:6b:26:1a:6a:02:55:32:86:0b:ec:ba: c6:36:da:a4:19:df:71:04:82:b2:c3:b2:05:e1:72:1f:4f:e1: ab:6b:5a:3e:26:e1:92:39:ce:ca:c3:2e:81:5e:1e:dc:95:f1: 8d:ce:38:91:23:1e:ed:cb:d1:a4:9a:ab:e4:65:4b:b9:a2:47: 5f:eb:2c:87:7a:c4:9a:7d:8f:3a:b9:18:01:73:8c:fd:43:4b: b9:a8:29:bc:d9:6a:94:2d:96:a2:fa:23:41:52:6d:f4:7f:3c: 74:2f:9c:7f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt7o5esiZsHCcZIJd9z8L4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5 ZDhkN2MwHhcNMjYwMTAxMjIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA0NWYzNzM1Y2MxOGUxMmVjYmRmODBmNzI4MjhhMTkxMGNlYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpWrCkkhFFMYmSSOBaxQ83hRSi84 qRt2LjwLM38gYTBglvkEG3fyH89gdAtN0SZkl8hHA1efmb1I4gIHgeaiUjl+NCUi 9ZNHaKr8rWOWrPazg0S+v0apl/Qb6/C72pd0fLtozOenK1c/MwYdYrKdJVI2xxaR Mf9DgwqXFM8BZUADi3JM+tzzgQZyfjr+XjiGnGo24V6UHdkJAgycncJaR+/seLtM fIu2dgQSqZ1Ye3owYNXNNap0mesNynt2zMGFwwSlHZDhGYQXzJYhVclacjMRhB/p gkIqxmKMvCaAY/BvUfAKcs+Q/GdoGFa3v3uZWYP5GdGLcWPZwd+rYv4DJQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFKcEXzc1zBjhLsvfgPcoKKGRDOp/MB8GA1UdIwQY MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt NzI4ZTk5NjdkYWNhLzEvcHdSZk56WE1HT0V1eTktQTl5Z29vWkVNNm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQAwWzaMAwD BADDSHEDBALDSHADBAHDgPoDBAXDzsADBATZFlAwDQQCAAIwBwMFAyoFqkAwDQYJ KoZIhvcNAQELBQADggEBAAy+0q0VsbjCqpmxfJK6zrYcvPAdW2MhyCr1DEJw5osw /U/e4atH5h5upPMlDY6mhNjGZLwq+bY3mw+O0O90fRrGG8JZfRzT73Qmhe2PWUsn t+cpEXGpuxz/UsOjv5yngCa8r9nI6jfRCpEc02wndawjpcE4gPwjW6uzyUg7Ilk6 US1jiwd11axq3WsInZ+dDE994Ep2gAtrJhpqAlUyhgvsusY22qQZ33EEgrLDsgXh ch9P4atrWj4m4ZI5zsrDLoFeHtyV8Y3OOJEjHu3L0aSaq+RlS7miR1/rLId6xJp9 jzq5GAFzjP1DS7moKbzZapQtlqL6I0FSbfR/PHQvnH8= -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:52 2026 by rpki-client