This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/PWpDsLMHEz8TOyrA-SyzsSx50x4.roa File: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (raw, json) Hash identifier: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ= Subject key identifier: 3D:6A:43:B0:B3:07:13:3F:13:3B:2A:C0:F9:2C:B3:B1:2C:79:D3:1E Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Certificate serial: 019B7F845DA2137C6E342FBC20AB20258BF0 Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/PWpDsLMHEz8TOyrA-SyzsSx50x4.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42267 IP address blocks: 185.121.153.0/24 maxlen: 24 185.121.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:a2:13:7c:6e:34:2f:bc:20:ab:20:25:8b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6a43b0b307133f133b2ac0f92cb3b12c79d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:6a:1b:c7:b6:95:5d:d8:53:74:2f:b2:c6: 07:04:b5:65:f6:e2:e5:6b:71:dc:7a:d9:45:c0:87: 2e:40:e2:1b:b4:4d:70:11:a9:d4:d1:9c:be:cd:1c: f4:e8:07:cd:e5:16:a0:86:59:be:4d:95:7c:55:76: 65:af:50:d9:2d:36:73:6f:af:bd:d0:69:e6:6d:0a: 8c:e8:59:22:90:39:ee:82:79:34:88:e6:8f:be:d5: 9e:12:82:d9:4d:ef:5c:d0:44:da:3a:9d:32:38:6f: 7c:ec:d4:d0:a9:30:1b:00:1a:5c:19:f6:57:b8:20: 92:ae:ac:cd:b5:d3:c1:bf:8b:26:b7:75:0b:ff:f9: 93:bd:ce:6f:f5:47:e7:74:8d:02:c1:dc:59:d9:a3: 28:49:d6:e8:ca:cb:01:26:95:75:9e:77:e0:db:9f: 2d:63:2d:94:69:e0:bf:6c:21:09:c6:7e:ea:2e:6a: ee:28:c9:7b:2e:dc:b8:81:26:82:2d:21:e2:b0:8e: c8:bd:94:9a:13:82:fd:92:9f:a5:06:e9:9e:1c:0b: 06:f6:74:08:ba:19:73:24:30:41:ac:4d:b4:e4:d1: 75:f4:d8:69:71:f2:44:70:23:a1:3a:12:94:8c:99: 19:41:4e:b6:08:4a:50:0f:58:96:f6:34:d4:78:ae: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:43:B0:B3:07:13:3F:13:3B:2A:C0:F9:2C:B3:B1:2C:79:D3:1E X509v3 Authority Key Identifier: keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/PWpDsLMHEz8TOyrA-SyzsSx50x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.153.0/24 185.121.155.0/24 Signature Algorithm: sha256WithRSAEncryption b5:1d:31:d4:41:17:91:38:fa:1d:3e:c1:06:bc:73:c5:78:b6: c1:46:80:75:f6:ea:e4:8a:bf:a0:a1:19:2e:46:93:66:a1:25: 23:a3:52:0a:88:5e:a7:2c:5b:12:c6:52:f8:48:ec:02:94:7b: 4e:e8:22:b6:04:b9:cf:df:cd:b9:08:b2:89:41:31:e1:96:85: 50:38:85:55:74:32:e0:c4:05:b9:05:04:b8:09:a2:1f:b3:e8: a7:9b:6b:f0:ef:5a:d5:5f:13:45:43:97:86:1d:b1:f6:cf:a2: 1d:08:e5:ee:39:06:5b:88:93:3d:d7:fc:43:72:31:fa:1a:53: 04:26:2c:48:55:2f:cd:9f:16:5f:95:74:ac:31:e3:e0:7a:4a: 30:e4:8a:dc:ae:73:49:58:a6:4b:68:c7:97:f4:0d:07:46:37: 0f:65:49:9d:b0:61:84:53:66:41:9b:94:3c:11:fd:b7:f3:bb: 7f:8d:f7:90:a9:8e:04:16:c7:58:86:d6:a1:94:cb:13:50:94: e1:3f:35:c8:88:1e:cc:a2:c7:cd:f5:19:68:3d:57:b5:11:30: e9:a2:e9:9d:38:19:49:bb:07:04:d3:b1:51:35:4e:95:fe:a1: 84:3f:cd:fe:ad:1c:c0:e9:78:58:de:5b:0c:37:3b:98:46:02: e9:db:cc:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hF2iE3xuNC+8IKsgJYvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZmNmZmQxMDBkYzAwN2YxYTk2YTQ0MzBlYTg3MjM4OWM1 N2Q2Y2YwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDZhNDNiMGIzMDcxMzNmMTMzYjJhYzBmOTJjYjNiMTJjNzlkMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuppqG8e2lV3YU3QvssYHBLVl9uLl a3HcetlFwIcuQOIbtE1wEanU0Zy+zRz06AfN5Raghlm+TZV8VXZlr1DZLTZzb6+9 0GnmbQqM6FkikDnugnk0iOaPvtWeEoLZTe9c0ETaOp0yOG987NTQqTAbABpcGfZX uCCSrqzNtdPBv4smt3UL//mTvc5v9UfndI0CwdxZ2aMoSdboyssBJpV1nnfg258t Yy2UaeC/bCEJxn7qLmruKMl7Lty4gSaCLSHisI7IvZSaE4L9kp+lBumeHAsG9nQI uhlzJDBBrE205NF19NhpcfJEcCOhOhKUjJkZQU62CEpQD1iW9jTUeK6uYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1qQ7CzBxM/EzsqwPkss7EsedMeMB8GA1UdIwQY MBaAFN38/9EA3AB/GpakQw6ocjicV9bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUt MTVhNmU3ZGY0NWM5LzEvUFdwRHNMTUhFejhUT3lyQS1TeXpzU3g1MHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUtMTVhNmU3ZGY0NWM5 LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXmZAwQA uXmbMA0GCSqGSIb3DQEBCwUAA4IBAQC1HTHUQReROPodPsEGvHPFeLbBRoB19urk ir+goRkuRpNmoSUjo1IKiF6nLFsSxlL4SOwClHtO6CK2BLnP3825CLKJQTHhloVQ OIVVdDLgxAW5BQS4CaIfs+inm2vw71rVXxNFQ5eGHbH2z6IdCOXuOQZbiJM91/xD cjH6GlMEJixIVS/NnxZflXSsMePgekow5IrcrnNJWKZLaMeX9A0HRjcPZUmdsGGE U2ZBm5Q8Ef2387t/jfeQqY4EFsdYhtahlMsTUJThPzXIiB7MosfN9RloPVe1ETDp oumdOBlJuwcE07FRNU6V/qGEP83+rRzA6XhY3lsMNzuYRgLp28zU -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:40 2026 by rpki-client