This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/PzBJvCvuKoLcfTByzdz7KrKT9g0.roa File: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (raw, json) Hash identifier: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc= Subject key identifier: 3F:30:49:BC:2B:EE:2A:82:DC:7D:30:72:CD:DC:FB:2A:B2:93:F6:0D Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd Certificate serial: 019B7BA52769D21803C0EA37A182D619501B Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/PzBJvCvuKoLcfTByzdz7KrKT9g0.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205798 IP address blocks: 193.141.109.0/24 maxlen: 24 193.141.121.0/24 maxlen: 24 193.142.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:69:d2:18:03:c0:ea:37:a1:82:d6:19:50:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f3049bc2bee2a82dc7d3072cddcfb2ab293f60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:bf:79:e4:14:a8:0e:2b:ff:7f:45:90:63: f3:87:4f:34:2a:9e:70:a8:54:6c:af:4d:c1:8d:67: 87:8e:d9:39:b3:88:77:36:24:a4:28:64:5d:ba:17: 70:8f:92:2c:fb:e8:02:bf:a9:47:eb:a3:7e:61:3e: e1:07:22:68:f0:90:90:78:50:f0:53:51:dc:c8:f8: cd:be:7b:ed:03:28:7b:86:45:86:bf:67:a1:19:d0: c9:c2:33:6a:2c:37:3b:ac:cb:8a:dc:7c:87:be:07: 6d:dd:50:1e:c8:c7:79:8e:f0:c9:a3:ee:b3:29:57: e8:26:f4:0a:f1:9f:fb:78:ba:2b:19:36:81:8e:c2: eb:92:a9:91:b3:19:d0:99:d9:2b:2c:f6:1c:a6:e9: e1:88:14:0a:e1:85:f3:ed:a5:0c:32:0d:f2:d4:1c: 46:86:a9:7e:94:32:81:f5:67:b2:fa:c8:29:35:e6: 33:70:61:e6:43:d9:e3:dd:ff:e2:17:be:f6:41:53: 58:d6:eb:bd:a4:79:41:aa:6d:0d:45:35:cf:20:07: 7d:27:65:09:ee:26:02:70:c4:28:5e:d6:83:8e:25: 31:bf:ca:24:6d:f1:71:01:a0:1f:d4:75:6f:97:65: 5a:a8:3b:ca:43:4c:72:f6:45:25:5a:94:af:15:da: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:30:49:BC:2B:EE:2A:82:DC:7D:30:72:CD:DC:FB:2A:B2:93:F6:0D X509v3 Authority Key Identifier: keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/PzBJvCvuKoLcfTByzdz7KrKT9g0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.109.0/24 193.141.121.0/24 193.142.3.0/24 Signature Algorithm: sha256WithRSAEncryption 28:05:af:b2:19:7e:cf:43:5f:40:d3:93:77:4a:05:d3:16:62: 55:22:5f:4a:d4:73:cd:8a:78:e0:b1:ce:c3:84:51:62:0e:82: c1:43:5c:11:a4:1c:fe:e2:3f:26:f9:25:e8:dd:7f:2f:b7:34: 07:01:62:d2:d4:8f:d3:f3:c8:a5:e7:7f:5b:cd:a2:fe:28:23: 11:0a:f5:10:0f:ea:27:7d:5c:f4:4d:a4:ab:d1:b7:a0:5f:46: 3d:bd:07:4a:dc:48:97:5a:2f:5b:da:e1:a2:15:02:12:d8:96: d5:99:1d:a4:f8:a2:e4:70:48:07:0a:1d:47:2a:94:46:0d:68: c4:ba:8b:83:76:e7:84:40:f9:23:44:36:32:83:5d:56:2c:19: 7a:96:14:68:65:c9:7c:fa:56:ca:13:a1:b6:df:1c:9b:60:3b: ee:d6:58:1e:7d:3f:90:54:5d:c7:11:33:ca:68:49:71:03:cf: 4d:0a:ef:3b:de:fb:ab:70:93:bd:96:d1:a1:14:4a:fd:7b:b8: 86:7e:b8:f1:cd:67:b1:8f:51:14:93:f7:69:07:22:74:76:98: e2:7f:4b:e8:0b:f6:1e:25:b5:2b:a5:f1:3c:e3:6e:cf:9b:89: af:8b:44:93:a4:0c:f5:16:8c:4b:3b:5c:00:1e:bd:f4:62:e2: 37:6d:d9:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pSdp0hgDwOo3oYLWGVAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWI5MGI4OTgxYjU5MWQ3NWE3ZTkzNWUxMzA0YTc0MDc1 NjAyZmQwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjMwNDliYzJiZWUyYTgyZGM3ZDMwNzJjZGRjZmIyYWIyOTNmNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtim/eeQUqA4r/39FkGPzh080Kp5w qFRsr03BjWeHjtk5s4h3NiSkKGRduhdwj5Is++gCv6lH66N+YT7hByJo8JCQeFDw U1HcyPjNvnvtAyh7hkWGv2ehGdDJwjNqLDc7rMuK3HyHvgdt3VAeyMd5jvDJo+6z KVfoJvQK8Z/7eLorGTaBjsLrkqmRsxnQmdkrLPYcpunhiBQK4YXz7aUMMg3y1BxG hql+lDKB9Wey+sgpNeYzcGHmQ9nj3f/iF772QVNY1uu9pHlBqm0NRTXPIAd9J2UJ 7iYCcMQoXtaDjiUxv8okbfFxAaAf1HVvl2VaqDvKQ0xy9kUlWpSvFdqxZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD8wSbwr7iqC3H0wcs3c+yqyk/YNMB8GA1UdIwQY MBaAFNJbkLiYG1kddafpNeEwSnQHVgL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODct YTJhYmRhZGY1ZjkwLzEvUHpCSnZDdnVLb0xjZlRCeXpkejdLcktUOWcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yY2U1MjAtZWMwNy00NWVmLWI1ODctYTJhYmRhZGY1Zjkw LzEvMGx1UXVKZ2JXUjExcC1rMTRUQktkQWRXQXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwY1tAwQA wY15AwQAwY4DMA0GCSqGSIb3DQEBCwUAA4IBAQAoBa+yGX7PQ19A05N3SgXTFmJV Il9K1HPNinjgsc7DhFFiDoLBQ1wRpBz+4j8m+SXo3X8vtzQHAWLS1I/T88il539b zaL+KCMRCvUQD+onfVz0TaSr0begX0Y9vQdK3EiXWi9b2uGiFQIS2JbVmR2k+KLk cEgHCh1HKpRGDWjEuouDdueEQPkjRDYyg11WLBl6lhRoZcl8+lbKE6G23xybYDvu 1lgefT+QVF3HETPKaElxA89NCu873vurcJO9ltGhFEr9e7iGfrjxzWexj1EUk/dp ByJ0dpjif0voC/YeJbUrpfE8427Pm4mvi0STpAz1FoxLO1wAHr30YuI3bdkj -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client