This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa File: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (raw, json) Hash identifier: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4= Subject key identifier: A5:C6:67:51:3F:3C:48:DD:6E:D9:1D:F1:3D:FE:8B:55:6E:40:C2:E4 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBB199C458BB41A17A23A6658B546 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 37.143.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bb:19:9c:45:8b:b4:1a:17:a2:3a:66:58:b5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5c667513f3c48dd6ed91df13dfe8b556e40c2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:89:fd:12:e5:47:16:2a:e3:38:21:f8:10: 40:19:fe:c8:eb:11:38:6a:09:b8:c7:19:70:58:a5: 42:e7:28:f9:8e:a0:dd:49:90:7a:c0:18:35:5f:5a: 7e:de:7a:fb:ba:66:cc:0c:07:e4:9b:dc:a0:a0:73: 15:40:71:19:23:8b:c3:ab:15:54:eb:f6:a1:27:ed: 42:2b:37:14:e7:02:b7:10:a2:08:a4:bd:5a:75:6c: bc:07:d5:09:2b:2e:50:a2:47:a7:eb:82:08:10:a3: 93:e6:da:4e:5e:e3:de:b3:1a:f2:bb:cf:ae:18:55: 25:d1:f4:06:3e:1e:30:f2:4a:fe:e0:fc:cc:17:8f: 63:26:1d:66:5f:07:cf:ac:d0:bb:ec:05:bb:21:72: fb:ec:13:62:c5:ca:aa:60:48:05:12:bc:19:5f:01: d7:2c:52:fe:37:30:95:32:da:24:71:08:c1:35:01: 03:be:24:bc:d4:1c:81:83:ab:d4:ae:8a:07:2c:d5: 2c:5c:de:ca:6a:ff:88:ad:d2:2a:cc:d7:7b:8a:46: 2d:e9:77:af:78:7c:c4:3b:b1:78:e6:74:84:41:0a: f0:15:19:24:a6:bc:47:cd:e3:66:db:c5:52:05:9f: 0c:65:c2:5b:e0:da:f4:6c:5e:03:70:a7:2f:d1:63: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C6:67:51:3F:3C:48:DD:6E:D9:1D:F1:3D:FE:8B:55:6E:40:C2:E4 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.0.0/22 Signature Algorithm: sha256WithRSAEncryption 49:e8:50:b8:36:89:4f:95:47:84:8c:32:c6:95:8d:bc:c7:58: 87:95:54:72:6a:f3:6e:28:38:89:4a:5b:0d:3c:2f:3a:33:48: 4a:46:27:f3:05:20:4c:f8:61:b5:37:00:40:11:b5:37:78:8f: 6c:1a:da:3a:42:71:e9:a8:0b:37:79:81:30:f8:29:7c:24:05: 19:da:48:b7:6e:6f:49:73:96:2d:1f:17:86:6d:4f:43:68:60: e3:78:7f:d0:3c:cd:3a:a0:b5:d9:d2:d0:4d:c3:fd:75:09:2e: ba:e3:05:00:89:bf:af:bb:13:09:1e:13:9c:60:0c:3d:81:0b: 4b:70:bb:ad:20:99:b1:44:a0:70:41:27:94:d0:94:2d:b5:0d: cf:76:bd:39:3c:33:d5:de:ba:69:8a:29:02:c5:09:2d:29:df: e8:d0:67:3f:b3:13:ee:9b:c2:e6:aa:59:d7:fa:92:56:dd:45: 05:95:12:98:7f:44:d0:b6:28:ab:ea:b7:1f:67:74:4a:80:64: 6f:db:99:86:71:c4:1d:cb:87:a2:e9:51:a2:29:d9:35:a1:b0: e7:62:c8:1d:2f:52:25:a3:fe:ba:b1:3d:cf:1b:ba:b1:d9:5c: 37:44:b9:4d:3e:56:40:d1:59:11:27:80:14:21:d7:2b:49:87: 43:f5:85:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LsZnEWLtBoXojpmWLVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWM2Njc1MTNmM2M0OGRkNmVkOTFkZjEzZGZlOGI1NTZlNDBjMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnyJ/RLlRxYq4zgh+BBAGf7I6xE4 agm4xxlwWKVC5yj5jqDdSZB6wBg1X1p+3nr7umbMDAfkm9ygoHMVQHEZI4vDqxVU 6/ahJ+1CKzcU5wK3EKIIpL1adWy8B9UJKy5Qoken64IIEKOT5tpOXuPesxryu8+u GFUl0fQGPh4w8kr+4PzMF49jJh1mXwfPrNC77AW7IXL77BNixcqqYEgFErwZXwHX LFL+NzCVMtokcQjBNQEDviS81ByBg6vUrooHLNUsXN7Kav+IrdIqzNd7ikYt6Xev eHzEO7F45nSEQQrwFRkkprxHzeNm28VSBZ8MZcJb4Nr0bF4DcKcv0WM8vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXGZ1E/PEjdbtkd8T3+i1VuQMLkMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvcGNablVUODhTTjF1MlIzeFBmNkxWVzVBd3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G CSqGSIb3DQEBCwUAA4IBAQBJ6FC4NolPlUeEjDLGlY28x1iHlVRyavNuKDiJSlsN PC86M0hKRifzBSBM+GG1NwBAEbU3eI9sGto6QnHpqAs3eYEw+Cl8JAUZ2ki3bm9J c5YtHxeGbU9DaGDjeH/QPM06oLXZ0tBNw/11CS664wUAib+vuxMJHhOcYAw9gQtL cLutIJmxRKBwQSeU0JQttQ3Pdr05PDPV3rppiikCxQktKd/o0Gc/sxPum8LmqlnX +pJW3UUFlRKYf0TQtiir6rcfZ3RKgGRv25mGccQdy4ei6VGiKdk1obDnYsgdL1Il o/66sT3PG7qx2Vw3RLlNPlZA0VkRJ4AUIdcrSYdD9YX7 -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:23 2026 by rpki-client