This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/PZ31ij_f35z3baYKKAZFGVEp6QY.roa File: PZ31ij_f35z3baYKKAZFGVEp6QY.roa (raw, json) Hash identifier: Azm3iFHK2wZX1k58GaEHQq5yAK/+Odtok/+po77w/58= Subject key identifier: 3D:9D:F5:8A:3F:DF:DF:9C:F7:6D:A6:0A:28:06:45:19:51:29:E9:06 Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11 Certificate serial: 019B7B36D0DB4D93765DD0AAEAF26041BE00 Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/PZ31ij_f35z3baYKKAZFGVEp6QY.roa Signing time: Thu 01 Jan 2026 20:19:08 +0000 ROA not before: Thu 01 Jan 2026 20:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59767 IP address blocks: 185.19.64.0/22 maxlen: 22 2a04:1040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d0:db:4d:93:76:5d:d0:aa:ea:f2:60:41:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9df58a3fdfdf9cf76da60a280645195129e906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e6:04:2c:94:cf:f3:5b:58:0a:ad:0b:a9:84: d3:c0:20:dc:a7:e9:b4:82:9f:c8:ff:c7:99:48:64: dd:a7:56:b4:b2:c0:0d:a1:5f:10:d3:6b:a6:de:7d: 89:f0:64:5b:4a:08:d9:01:05:bd:9f:1b:72:15:12: 00:ae:7a:ed:4e:f2:16:ea:e0:4e:d1:ed:cc:3a:ac: 57:43:84:9a:89:7a:3d:2e:5c:d5:1c:1d:bb:ee:dd: 7b:7b:b9:0d:08:f6:ca:22:75:f1:b8:75:83:1a:29: 0f:7d:ab:17:6b:d5:7d:94:c1:83:a8:12:9b:be:61: 45:aa:53:bb:57:d6:9d:ff:c3:5a:ee:ee:91:6e:23: 12:27:b9:c2:76:b1:ea:84:d4:f6:a7:a3:bd:f7:c3: f5:9a:5d:a9:53:09:a2:1e:7d:ca:d8:1b:62:b5:83: fb:21:23:e6:6f:83:0e:ed:10:f9:be:8a:53:3d:77: 21:02:a0:9f:f1:9b:42:92:21:39:e0:59:19:0d:2e: 3a:df:85:d3:93:ef:ec:84:30:49:60:74:08:92:01: ef:33:cc:8f:e0:0c:93:53:e5:f6:25:64:8e:95:46: 4b:b5:4c:e5:d8:fc:43:16:bb:73:62:41:95:2d:20: 17:f5:c7:44:5b:7b:44:d2:b6:c9:5a:bd:42:56:b2: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9D:F5:8A:3F:DF:DF:9C:F7:6D:A6:0A:28:06:45:19:51:29:E9:06 X509v3 Authority Key Identifier: keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/PZ31ij_f35z3baYKKAZFGVEp6QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.64.0/22 IPv6: 2a04:1040::/29 Signature Algorithm: sha256WithRSAEncryption 72:ff:8f:3f:96:a2:0e:c3:42:cf:b7:8f:42:b6:40:52:5b:49: 2d:c5:61:9b:10:d7:7e:ba:47:9d:2a:0f:3a:3e:ba:66:96:41: 0a:16:10:44:47:90:11:96:0c:16:b8:57:51:54:24:7a:bd:2d: 07:fe:00:11:6b:d9:c7:21:2c:fc:85:68:52:e9:90:ae:d6:c9: e5:29:e0:f4:a7:7a:8a:63:13:f0:66:7c:4e:d0:28:37:86:1e: b4:50:b2:7c:29:8e:39:c1:bc:4f:e4:eb:e2:3c:20:38:a3:dd: 2a:5e:5c:fc:2a:bf:b1:fb:54:56:83:a2:4e:75:e7:a6:0b:18: f5:00:a1:55:da:5f:2b:03:5d:a8:d6:7a:9d:8d:a6:49:ff:43: a2:29:f4:c6:9f:2b:da:f6:6b:9f:65:79:7a:15:0e:bc:f9:8d: f7:a8:1b:aa:11:e6:6e:7a:7a:a3:3f:ac:1b:f0:42:ea:57:dd: 0d:21:3d:d3:dc:fb:4e:50:6b:3f:2a:af:bd:a2:68:77:dc:92: e3:37:d7:c8:dc:e2:ad:c6:4c:5e:a8:e5:74:21:ed:9a:31:7b: e1:34:24:3a:fa:ca:ad:a1:4c:b1:e5:7e:3c:8b:3b:45:92:c2: 23:ce:8e:ef:25:a0:b6:f6:5f:37:2a:c2:86:4a:d7:b2:d8:06: fb:d1:12:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NtDbTZN2XdCq6vJgQb4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjBkNWM3OGMxMDdiY2Y5YzcxNTQ1M2QyMTQ0NGY2OTZl NDRiMTEwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDlkZjU4YTNmZGZkZjljZjc2ZGE2MGEyODA2NDUxOTUxMjllOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eYELJTP81tYCq0LqYTTwCDcp+m0 gp/I/8eZSGTdp1a0ssANoV8Q02um3n2J8GRbSgjZAQW9nxtyFRIArnrtTvIW6uBO 0e3MOqxXQ4SaiXo9LlzVHB277t17e7kNCPbKInXxuHWDGikPfasXa9V9lMGDqBKb vmFFqlO7V9ad/8Na7u6RbiMSJ7nCdrHqhNT2p6O998P1ml2pUwmiHn3K2BtitYP7 ISPmb4MO7RD5vopTPXchAqCf8ZtCkiE54FkZDS4634XTk+/shDBJYHQIkgHvM8yP 4AyTU+X2JWSOlUZLtUzl2PxDFrtzYkGVLSAX9cdEW3tE0rbJWr1CVrLEbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD2d9Yo/39+c922mCigGRRlRKekGMB8GA1UdIwQY MBaAFEsg1ceMEHvPnHFUU9IURPaW5EsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTct NGI5YTYwNThiNDIzLzEvUFozMWlqX2YzNXozYmFZS0tBWkZHVkVwNlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZTQ4YjYtN2ZiMC00YTEyLWIzZTctNGI5YTYwNThiNDIz LzEvU3lEVng0d1FlOC1jY1ZSVDBoUkU5cGJrU3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRNAMA0E AgACMAcDBQMqBBBAMA0GCSqGSIb3DQEBCwUAA4IBAQBy/48/lqIOw0LPt49CtkBS W0ktxWGbENd+ukedKg86PrpmlkEKFhBER5ARlgwWuFdRVCR6vS0H/gARa9nHISz8 hWhS6ZCu1snlKeD0p3qKYxPwZnxO0Cg3hh60ULJ8KY45wbxP5OviPCA4o90qXlz8 Kr+x+1RWg6JOdeemCxj1AKFV2l8rA12o1nqdjaZJ/0OiKfTGnyva9mufZXl6FQ68 +Y33qBuqEeZuenqjP6wb8ELqV90NIT3T3PtOUGs/Kq+9omh33JLjN9fI3OKtxkxe qOV0Ie2aMXvhNCQ6+sqtoUyx5X48iztFksIjzo7vJaC29l83KsKGStey2Ab70RJ6 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:30 2026 by rpki-client