This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/PwrlOtm2P7bSTHPu4qJvSXidoSw.roa File: PwrlOtm2P7bSTHPu4qJvSXidoSw.roa (raw, json) Hash identifier: H6VRRV9xRJe9egiq6XVsdHUwEnyAitSMRcYsekBGIfk= Subject key identifier: 3F:0A:E5:3A:D9:B6:3F:B6:D2:4C:73:EE:E2:A2:6F:49:78:9D:A1:2C Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Certificate serial: 019BD6DE7501B8579239D4F9BE146353AB99 Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/PwrlOtm2P7bSTHPu4qJvSXidoSw.roa Signing time: Mon 19 Jan 2026 15:27:41 +0000 ROA not before: Mon 19 Jan 2026 15:27:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214593 IP address blocks: 77.73.112.0/24 maxlen: 24 194.164.108.0/22 maxlen: 22 194.164.108.0/24 maxlen: 24 194.164.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:de:75:01:b8:57:92:39:d4:f9:be:14:63:53:ab:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Validity Not Before: Jan 19 15:27:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f0ae53ad9b63fb6d24c73eee2a26f49789da12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:cc:f0:67:00:59:da:ca:86:85:99:0f:54: 79:93:ff:05:0c:14:a3:54:67:aa:73:66:63:7a:ff: 92:4a:3b:46:44:fa:f7:4a:74:e0:6e:db:64:66:c8: c5:6a:ef:19:c2:7d:7a:bf:e9:27:96:1c:06:b3:99: 0d:20:39:a4:a5:73:4d:e2:3c:ad:61:4c:37:b8:ad: b4:b0:f5:4d:c5:9f:85:f0:25:a9:ef:ad:e3:a2:43: 73:86:05:45:6e:a6:94:2d:17:ad:21:ab:c5:ad:09: fd:45:33:2f:92:59:46:65:34:7e:d8:53:d7:e6:5b: 71:af:2e:b1:fc:d7:df:b1:3f:f0:e7:9a:a7:03:90: 2f:cf:d1:00:1a:cb:39:cc:ed:ff:3e:f5:5b:e4:20: af:d7:0a:5e:dc:ad:83:ea:be:e4:53:ec:19:f7:c1: 82:65:03:a1:06:a5:9c:4d:3b:40:cc:37:0a:31:83: fe:03:96:2c:a1:8c:4a:f7:0a:16:bb:48:b8:f3:a5: 8e:3c:70:85:69:a9:2b:bd:1a:8e:80:21:39:d6:8c: de:b7:5e:ba:59:71:78:86:b9:24:d6:38:43:da:cc: 54:c9:0e:ab:47:af:ad:62:1b:2d:b9:24:1f:75:66: 2a:99:88:39:7a:c6:dd:59:f7:0d:45:29:a8:bb:66: 98:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0A:E5:3A:D9:B6:3F:B6:D2:4C:73:EE:E2:A2:6F:49:78:9D:A1:2C X509v3 Authority Key Identifier: keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/PwrlOtm2P7bSTHPu4qJvSXidoSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.112.0/24 194.164.108.0/22 Signature Algorithm: sha256WithRSAEncryption 01:ed:bb:1a:c2:70:fc:b0:14:13:d7:85:26:6c:1c:f5:5b:a7: 1e:60:f2:11:c9:fd:d4:c3:ff:28:ba:4f:37:05:74:0d:5d:5e: da:86:cc:ac:db:d5:de:3e:45:7a:21:7e:4e:28:15:54:e8:03: e0:8d:ec:78:0a:43:6c:b0:ee:3f:d1:14:c1:10:ac:53:aa:d6: 3d:b8:e2:6c:ed:f8:7e:9b:30:a7:66:82:19:ff:f3:7b:73:38: 81:24:ec:7c:16:17:d6:a6:25:07:0f:2b:64:75:db:b7:5b:dd: 1b:8a:58:17:33:20:d5:b0:51:6d:22:4a:49:7f:f9:9a:00:2f: 63:93:a5:10:90:7a:51:85:4d:e9:2d:e6:ea:fa:3d:5d:25:a4: 07:81:b8:c4:be:68:b8:c3:55:bd:c9:d6:f8:01:65:89:e7:34: 24:cd:ab:f9:9c:58:dd:b9:e6:60:17:4e:ef:90:bf:4a:15:65: 31:e3:af:8d:97:9c:4a:5f:ac:07:dd:d7:ad:66:cb:eb:53:73: f1:e8:b4:78:13:0c:78:7c:18:ec:7b:0d:e5:7c:a0:bb:69:7b: 2b:45:23:ef:4f:4e:51:e9:ea:04:45:71:1d:69:bb:b8:4a:7d: c9:2a:76:3c:f2:03:7a:3c:11:1d:8f:cb:3e:65:6a:34:b5:7e: 6a:0f:eb:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvW3nUBuFeSOdT5vhRjU6uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDNlZDU3OTUzNDhhMDRlN2VjZDE3MmQ3NjQyZmE5NjIw OTcyODcwHhcNMjYwMTE5MTUyNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjBhZTUzYWQ5YjYzZmI2ZDI0YzczZWVlMmEyNmY0OTc4OWRhMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3LM8GcAWdrKhoWZD1R5k/8FDBSj VGeqc2Zjev+SSjtGRPr3SnTgbttkZsjFau8Zwn16v+knlhwGs5kNIDmkpXNN4jyt YUw3uK20sPVNxZ+F8CWp763jokNzhgVFbqaULRetIavFrQn9RTMvkllGZTR+2FPX 5ltxry6x/NffsT/w55qnA5Avz9EAGss5zO3/PvVb5CCv1wpe3K2D6r7kU+wZ98GC ZQOhBqWcTTtAzDcKMYP+A5YsoYxK9woWu0i486WOPHCFaakrvRqOgCE51ozet166 WXF4hrkk1jhD2sxUyQ6rR6+tYhstuSQfdWYqmYg5esbdWfcNRSmou2aYXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD8K5TrZtj+20kxz7uKib0l4naEsMB8GA1UdIwQY MBaAFKDT7VeVNIoE5+zRctdkL6liCXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUt NzkwYmM5MWE1OWU2LzEvUHdybE90bTJQN2JTVEhQdTRxSnZTWGlkb1N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUtNzkwYmM5MWE1OWU2 LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUlwAwQC wqRsMA0GCSqGSIb3DQEBCwUAA4IBAQAB7bsawnD8sBQT14UmbBz1W6ceYPIRyf3U w/8ouk83BXQNXV7ahsys29XePkV6IX5OKBVU6APgjex4CkNssO4/0RTBEKxTqtY9 uOJs7fh+mzCnZoIZ//N7cziBJOx8FhfWpiUHDytkddu3W90bilgXMyDVsFFtIkpJ f/maAC9jk6UQkHpRhU3pLebq+j1dJaQHgbjEvmi4w1W9ydb4AWWJ5zQkzav5nFjd ueZgF07vkL9KFWUx46+Nl5xKX6wH3detZsvrU3Px6LR4Ewx4fBjsew3lfKC7aXsr RSPvT05R6eoERXEdabu4Sn3JKnY88gN6PBEdj8s+ZWo0tX5qD+uJ -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:16 2026 by rpki-client