This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pzl3z6EChF3cNhedYXBDAkP5TlM.roa File: pzl3z6EChF3cNhedYXBDAkP5TlM.roa (raw, json) Hash identifier: pIbvIHGnYHn+4teo6W4qccf8iFYqNY8KtKxAq9y+GvY= Subject key identifier: A7:39:77:CF:A1:02:84:5D:DC:36:17:9D:61:70:43:02:43:F9:4E:53 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84724DE63443F5325FD8EC84B8A3DA Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pzl3z6EChF3cNhedYXBDAkP5TlM.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 31.56.36.0/24 maxlen: 24 31.56.57.0/24 maxlen: 24 31.59.19.0/24 maxlen: 24 31.59.22.0/24 maxlen: 24 31.59.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:72:4d:e6:34:43:f5:32:5f:d8:ec:84:b8:a3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a73977cfa102845ddc36179d6170430243f94e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:2e:4f:0a:8a:18:47:c1:40:f2:50:29:f2: 28:ce:bb:b6:01:c8:ee:3b:bc:ed:a5:d6:ad:24:b5: 50:2e:7b:52:a2:51:ab:89:6d:79:d2:4a:5a:7a:7d: 69:35:2b:18:be:52:11:25:56:d9:28:32:ba:cf:84: 17:8c:63:b8:8b:fe:7d:ff:f2:7a:0a:db:0d:ef:6b: 00:94:14:22:22:1b:bd:fc:c2:f7:02:0a:d1:c6:eb: 51:d1:7a:ab:89:e9:89:44:3c:f1:78:c5:11:c3:4d: 68:5c:50:82:9a:2a:69:9f:fe:ea:ab:53:b0:f6:4b: 06:9e:a8:64:3a:49:17:af:b9:43:59:3d:c2:e4:26: 54:c7:d2:85:8e:4c:c4:67:11:13:3b:d4:ac:4d:44: bc:52:31:dd:54:8d:bf:b3:3d:67:a5:f2:25:ec:45: f9:da:0b:49:ea:75:80:c3:53:99:af:31:cd:8c:2a: 60:86:ce:86:a3:31:ba:12:85:18:32:e4:d0:25:00: 0e:1a:fa:15:25:38:d8:f9:b9:f7:87:00:c8:b2:4e: 84:c1:3f:12:52:52:a3:35:e0:7b:44:a5:47:0e:aa: 78:8f:86:50:15:10:ef:ef:c7:ae:5f:ff:67:bd:a8: cc:4d:f0:44:c4:b5:d9:a2:25:54:6d:8c:ee:6d:ea: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:39:77:CF:A1:02:84:5D:DC:36:17:9D:61:70:43:02:43:F9:4E:53 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pzl3z6EChF3cNhedYXBDAkP5TlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.36.0/24 31.56.57.0/24 31.59.19.0/24 31.59.22.0/24 31.59.25.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:33:0f:99:a7:71:de:14:be:b0:8e:35:35:7d:1d:77:49:a0: 04:58:39:36:3d:97:e5:96:cb:40:87:35:eb:b8:97:55:f7:5a: fa:15:b9:17:a9:6b:76:79:6f:60:a0:64:10:99:a9:14:b1:5f: ad:7c:1d:59:4d:af:6c:29:37:96:99:c8:a5:14:6f:5d:90:47: 99:c8:ff:ab:78:f1:95:fa:b6:1b:32:e0:23:d0:a7:7d:89:24: 1f:3d:c7:05:a4:31:93:71:18:17:f2:08:54:d9:f1:cf:45:e6: 47:05:a4:c6:fd:da:58:c3:0c:07:bf:3c:98:80:57:8c:19:73: 70:44:f4:20:63:d5:c5:18:c0:87:b5:38:e4:7c:34:b4:76:be: 57:c7:aa:61:fb:1c:fd:29:5c:fd:8f:81:f8:81:c4:29:18:91: 9e:d2:42:83:cc:09:e0:42:30:98:d2:04:51:67:55:35:f8:ed: c6:d3:25:4f:ef:9a:ff:9b:b7:74:93:52:61:cb:07:46:4b:92: 3d:06:17:17:db:2b:83:67:51:82:b2:8f:57:12:2e:85:83:12: 2b:94:48:0b:5d:17:7a:10:d7:a9:2a:f4:7f:7b:28:a3:4e:47: a5:d3:62:7d:a8:ab:e6:df:44:e9:b0:38:3d:fe:83:f7:20:cc: a4:2d:02:ad -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hHJN5jRD9TJf2OyEuKPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzM5NzdjZmExMDI4NDVkZGMzNjE3OWQ2MTcwNDMwMjQzZjk0ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59kuTwqKGEfBQPJQKfIozru2Acju O7ztpdatJLVQLntSolGriW150kpaen1pNSsYvlIRJVbZKDK6z4QXjGO4i/59//J6 CtsN72sAlBQiIhu9/ML3AgrRxutR0XqriemJRDzxeMURw01oXFCCmippn/7qq1Ow 9ksGnqhkOkkXr7lDWT3C5CZUx9KFjkzEZxETO9SsTUS8UjHdVI2/sz1npfIl7EX5 2gtJ6nWAw1OZrzHNjCpghs6GozG6EoUYMuTQJQAOGvoVJTjY+bn3hwDIsk6EwT8S UlKjNeB7RKVHDqp4j4ZQFRDv78euX/9nvajMTfBExLXZoiVUbYzuberFhwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKc5d8+hAoRd3DYXnWFwQwJD+U5TMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcHpsM3o2RUNoRjNjTmhlZFlYQkRBa1A1VGxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzgkAwQA Hzg5AwQAHzsTAwQAHzsWAwQAHzsZMA0GCSqGSIb3DQEBCwUAA4IBAQCKMw+Zp3He FL6wjjU1fR13SaAEWDk2PZfllstAhzXruJdV91r6FbkXqWt2eW9goGQQmakUsV+t fB1ZTa9sKTeWmcilFG9dkEeZyP+rePGV+rYbMuAj0Kd9iSQfPccFpDGTcRgX8ghU 2fHPReZHBaTG/dpYwwwHvzyYgFeMGXNwRPQgY9XFGMCHtTjkfDS0dr5Xx6ph+xz9 KVz9j4H4gcQpGJGe0kKDzAngQjCY0gRRZ1U1+O3G0yVP75r/m7d0k1JhywdGS5I9 BhcX2yuDZ1GCso9XEi6FgxIrlEgLXRd6ENepKvR/eyijTkel02J9qKvm30TpsDg9 /oP3IMykLQKt -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:33 2026 by rpki-client