This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PZSqql4bmYf423yACENwkDBcyis.roa File: PZSqql4bmYf423yACENwkDBcyis.roa (raw, json) Hash identifier: s5xfcupGhBMx+5ErFOa9uX3HthQo5Cx2J0q3BjG2r1c= Subject key identifier: 3D:94:AA:AA:5E:1B:99:87:F8:DB:7C:80:08:43:70:90:30:5C:CA:2B Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75632896B42EB1A46EC31C36D8A5F Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PZSqql4bmYf423yACENwkDBcyis.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206313 IP address blocks: 185.197.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:32:89:6b:42:eb:1a:46:ec:31:c3:6d:8a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d94aaaa5e1b9987f8db7c8008437090305cca2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:eb:60:9e:ed:01:88:e6:03:ed:70:51:fb: d5:2b:6d:47:fe:7b:9b:36:34:83:b0:9f:10:b7:02: d6:0c:af:db:44:ba:06:f7:e7:5b:d3:a6:22:57:b6: e7:5d:2e:92:76:59:7f:45:32:6b:59:27:de:59:f5: e7:92:09:c0:b2:01:bc:eb:60:d4:49:4c:40:c8:71: 40:b3:29:65:ad:eb:44:77:8c:e2:fb:48:28:a0:9a: ee:5d:3c:2f:1f:36:c8:4b:ac:d5:9e:f7:54:14:8a: 73:35:74:65:e3:c5:a3:2b:25:17:6d:5a:07:a8:6c: 57:92:ba:ce:9c:c9:95:05:30:19:cd:3b:26:ef:fa: 22:ef:7c:ba:e4:01:9f:d2:02:96:82:72:5a:b6:8f: 37:c9:63:eb:70:7f:27:d8:5e:78:34:6c:a3:35:7f: b9:63:53:dd:f6:34:50:29:ef:e9:d3:a6:0d:3b:c9: 05:c5:12:23:b3:af:dd:9f:cf:bb:cd:08:e3:b3:57: f1:ea:25:8d:44:3b:0f:f6:d3:11:ec:5b:50:84:77: 3a:0c:e8:f8:34:61:97:00:f6:9e:13:7c:f7:b6:8c: 73:a3:3c:ab:32:91:82:06:99:50:fc:ec:01:01:e5: a3:95:f4:71:0a:b7:4e:47:ac:f3:1d:48:3e:bc:d6: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:AA:AA:5E:1B:99:87:F8:DB:7C:80:08:43:70:90:30:5C:CA:2B X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/PZSqql4bmYf423yACENwkDBcyis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.132.0/24 Signature Algorithm: sha256WithRSAEncryption 11:64:83:a9:e6:81:63:8d:35:c1:80:24:52:59:63:d1:0e:00: 67:71:83:b9:95:34:d6:27:74:e3:30:51:72:6b:93:26:82:b3: c2:04:5b:cb:85:47:54:73:e1:7c:e5:b1:ae:f7:40:4d:7a:64: c1:80:f5:8a:9d:40:43:f8:2e:df:1d:63:28:7e:ac:8b:41:5b: aa:e1:6e:38:67:af:fd:af:07:c1:3d:52:dd:85:c5:33:30:10: f1:17:10:0e:2d:7a:61:6a:3f:05:68:a2:c4:ba:0a:f9:0c:4d: 21:fc:70:d3:91:62:0f:2d:3b:34:8d:dd:67:04:90:b2:25:be: 42:66:62:5f:5d:51:da:2b:85:f2:ed:04:b3:9a:f8:16:65:56: 55:7b:7f:0d:30:0b:4d:7d:41:26:80:b0:38:d8:6d:3f:18:7b: b3:e2:ca:8b:20:24:db:f0:d8:9e:33:c8:b5:fa:b0:25:56:69: ef:f5:63:be:6f:6f:dc:b2:83:48:3c:6d:27:6f:42:67:7b:f7: c2:50:98:37:f2:4c:85:90:c4:de:85:b3:61:67:74:8b:63:b9: f9:29:d1:0c:bd:ba:33:ac:5e:6a:2d:49:04:27:03:19:d6:1d: 0e:04:56:fc:58:c3:bd:a6:1b:3d:9f:39:18:4d:84:89:f5:6b: 4d:99:ef:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1YyiWtC6xpG7DHDbYpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk0YWFhYTVlMWI5OTg3ZjhkYjdjODAwODQzNzA5MDMwNWNjYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhDrYJ7tAYjmA+1wUfvVK21H/nub NjSDsJ8QtwLWDK/bRLoG9+db06YiV7bnXS6Sdll/RTJrWSfeWfXnkgnAsgG862DU SUxAyHFAsyllretEd4zi+0gooJruXTwvHzbIS6zVnvdUFIpzNXRl48WjKyUXbVoH qGxXkrrOnMmVBTAZzTsm7/oi73y65AGf0gKWgnJato83yWPrcH8n2F54NGyjNX+5 Y1Pd9jRQKe/p06YNO8kFxRIjs6/dn8+7zQjjs1fx6iWNRDsP9tMR7FtQhHc6DOj4 NGGXAPaeE3z3toxzozyrMpGCBplQ/OwBAeWjlfRxCrdOR6zzHUg+vNYO+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2UqqpeG5mH+Nt8gAhDcJAwXMorMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvUFpTcXFsNGJtWWY0MjN5QUNFTndrREJjeWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucWEMA0G CSqGSIb3DQEBCwUAA4IBAQARZIOp5oFjjTXBgCRSWWPRDgBncYO5lTTWJ3TjMFFy a5MmgrPCBFvLhUdUc+F85bGu90BNemTBgPWKnUBD+C7fHWMofqyLQVuq4W44Z6/9 rwfBPVLdhcUzMBDxFxAOLXphaj8FaKLEugr5DE0h/HDTkWIPLTs0jd1nBJCyJb5C ZmJfXVHaK4Xy7QSzmvgWZVZVe38NMAtNfUEmgLA42G0/GHuz4sqLICTb8NieM8i1 +rAlVmnv9WO+b2/csoNIPG0nb0Jne/fCUJg38kyFkMTehbNhZ3SLY7n5KdEMvboz rF5qLUkEJwMZ1h0OBFb8WMO9phs9nzkYTYSJ9WtNme97 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:37 2026 by rpki-client