This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/PRWWZTPfSbsdOcFDzXqI07gWKnM.roa File: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (raw, json) Hash identifier: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM= Subject key identifier: 3D:15:96:65:33:DF:49:BB:1D:39:C1:43:CD:7A:88:D3:B8:16:2A:73 Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2 Certificate serial: 019B7B35D719F453593C746D306FCBE54660 Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/PRWWZTPfSbsdOcFDzXqI07gWKnM.roa Signing time: Thu 01 Jan 2026 20:18:04 +0000 ROA not before: Thu 01 Jan 2026 20:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20483 IP address blocks: 178.21.24.0/21 maxlen: 21 217.150.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d7:19:f4:53:59:3c:74:6d:30:6f:cb:e5:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d15966533df49bb1d39c143cd7a88d3b8162a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:8d:ac:fe:56:cb:6a:01:23:ee:cf:8c:4a: 9a:de:45:53:f5:4b:6d:b6:54:21:4d:a5:30:9b:df: bc:77:f9:15:5c:18:b7:52:2a:97:1f:2a:3a:bc:4b: 8d:54:d0:bf:78:53:1e:3f:34:70:88:72:40:4c:9d: 33:95:0d:83:d7:92:87:44:5a:71:b1:5a:cf:01:97: 86:67:75:41:ac:25:8e:04:d4:f5:5a:d8:96:b6:71: 5b:13:92:4a:92:17:70:55:91:06:d7:33:70:19:cd: 9d:4f:e8:98:3e:62:3c:a0:d7:e4:06:5f:d2:4f:bc: 28:af:b7:0b:c7:2f:68:23:67:02:4b:37:a8:22:7b: 0b:1a:55:26:68:a6:91:32:73:0e:93:18:37:84:32: 6a:a2:4c:6c:ed:1e:e4:fa:59:97:e5:71:4c:ed:b5: f7:cf:74:ff:7f:f3:5c:eb:51:aa:86:e1:1f:e1:55: 2e:d8:e5:f1:e3:f5:de:ad:df:ee:80:1f:25:8f:3b: 73:bd:cf:32:a8:a6:36:5d:33:57:48:7f:02:42:a1: fe:77:90:84:76:c4:b4:b8:e7:4c:4f:4c:31:ac:4b: cb:57:dc:bb:a9:69:b7:dc:2f:5d:f7:90:75:ee:7a: 46:fe:35:49:53:1d:1e:16:b3:18:ad:30:9f:48:0e: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:96:65:33:DF:49:BB:1D:39:C1:43:CD:7A:88:D3:B8:16:2A:73 X509v3 Authority Key Identifier: keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/PRWWZTPfSbsdOcFDzXqI07gWKnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.21.24.0/21 217.150.0.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:3a:73:d7:c7:7f:2b:7b:d4:db:48:bc:26:73:36:62:1b:62: fe:3f:59:a8:83:31:bf:e2:8f:6a:5c:0c:ff:6f:57:34:b1:25: c6:4d:73:06:ba:38:bd:89:69:15:f6:39:60:03:8d:d6:f6:5c: 27:64:9b:63:36:2a:48:83:25:ca:11:20:8f:66:b8:a3:98:8c: 47:ce:bf:75:54:ca:2f:63:f5:78:10:a6:58:43:3b:51:4b:95: 58:4e:07:47:a5:1e:da:14:44:7d:c3:54:9b:83:05:66:b0:c4: f4:47:c8:a7:0a:e1:fe:64:29:67:a6:f6:a3:96:e6:8a:7d:fc: ab:07:c5:ed:ef:4e:b0:55:d2:54:32:bc:c0:14:df:06:38:1d: c5:4c:72:2f:4c:7b:48:b0:f8:b9:33:d3:07:0f:df:a2:6b:1c: 7d:b8:ef:12:b0:29:52:bd:20:d9:c9:ba:c6:be:4a:c2:22:47: 86:dd:38:35:95:12:91:1d:ef:4d:f6:6a:e3:ea:f1:49:8c:d2: d0:32:3e:98:48:a6:0e:2f:73:e8:a0:90:b8:bd:0f:a3:dc:0b: 76:0a:ae:70:8e:c5:3c:06:03:b0:ca:4d:ca:ef:39:17:f6:17: 3b:36:a3:42:b7:c1:41:65:64:e5:d7:40:87:f5:c5:31:de:01: dd:19:90:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NdcZ9FNZPHRtMG/L5UZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNmFkZDNlYTE1OWY2M2ZmNThkNmIzZGZmZDJjYTQxNmFj MDMzYTIwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDE1OTY2NTMzZGY0OWJiMWQzOWMxNDNjZDdhODhkM2I4MTYyYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pSNrP5Wy2oBI+7PjEqa3kVT9Utt tlQhTaUwm9+8d/kVXBi3UiqXHyo6vEuNVNC/eFMePzRwiHJATJ0zlQ2D15KHRFpx sVrPAZeGZ3VBrCWOBNT1WtiWtnFbE5JKkhdwVZEG1zNwGc2dT+iYPmI8oNfkBl/S T7wor7cLxy9oI2cCSzeoInsLGlUmaKaRMnMOkxg3hDJqokxs7R7k+lmX5XFM7bX3 z3T/f/Nc61GqhuEf4VUu2OXx4/Xerd/ugB8ljztzvc8yqKY2XTNXSH8CQqH+d5CE dsS0uOdMT0wxrEvLV9y7qWm33C9d95B17npG/jVJUx0eFrMYrTCfSA6YnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD0VlmUz30m7HTnBQ816iNO4FipzMB8GA1UdIwQY MBaAFBpq3T6hWfY/9Y1rPf/SykFqwDOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR21yZFBxRlo5al8xaldzOV85TEtRV3JBTTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hZGU4ODEtZWY0NS00ZDA5LWI2MzQt M2EwMWM2M2Y4NGY3LzEvUFJXV1pUUGZTYnNkT2NGRHpYcUkwN2dXS25NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hZGU4ODEtZWY0NS00ZDA5LWI2MzQtM2EwMWM2M2Y4NGY3 LzEvR21yZFBxRlo5al8xaldzOV85TEtRV3JBTTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDshUYAwQF 2ZYAMA0GCSqGSIb3DQEBCwUAA4IBAQCfOnPXx38re9TbSLwmczZiG2L+P1mogzG/ 4o9qXAz/b1c0sSXGTXMGuji9iWkV9jlgA43W9lwnZJtjNipIgyXKESCPZrijmIxH zr91VMovY/V4EKZYQztRS5VYTgdHpR7aFER9w1SbgwVmsMT0R8inCuH+ZClnpvaj luaKffyrB8Xt706wVdJUMrzAFN8GOB3FTHIvTHtIsPi5M9MHD9+iaxx9uO8SsClS vSDZybrGvkrCIkeG3Tg1lRKRHe9N9mrj6vFJjNLQMj6YSKYOL3PooJC4vQ+j3At2 Cq5wjsU8BgOwyk3K7zkX9hc7NqNCt8FBZWTl10CH9cUx3gHdGZCc -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:37 2026 by rpki-client