This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa File: pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa (raw, json) Hash identifier: IH7FpqZHwFM0JUZGv3kglgPf6fO/pFT+0CvShFXfFHE= Subject key identifier: A7:3D:B4:47:48:EB:15:54:35:C9:90:73:9B:76:D1:A8:D3:F9:73:0D Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65 Certificate serial: 019B77C6D900C99D1CFA8578ED2F9F367FB4 Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43542 IP address blocks: 78.156.128.0/19 maxlen: 19 185.85.92.0/22 maxlen: 22 2a00:d940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d9:00:c9:9d:1c:fa:85:78:ed:2f:9f:36:7f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a73db44748eb155435c990739b76d1a8d3f9730d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:46:b9:d3:cc:13:b2:b9:ec:f8:0e:72:e3: 5d:36:07:e8:4f:28:0f:db:30:c9:ff:55:9c:0c:ea: 5a:3a:91:da:58:71:9f:f6:66:73:02:d7:d3:e5:d9: fa:ef:1b:24:9d:c5:c0:f4:9c:48:b8:12:44:73:d8: d0:98:ba:44:75:a4:2d:01:4f:36:73:03:24:16:9b: 7e:cf:b0:7e:e8:e2:2e:14:fe:bc:bd:88:6d:75:2e: 75:8d:a2:3c:97:cf:3e:07:a0:93:7d:04:63:a6:58: fc:26:c6:b0:1e:71:79:8a:5d:51:98:89:43:ff:a2: aa:4b:1d:81:0a:84:51:7b:bf:96:30:99:c0:50:94: f7:ba:18:21:4b:71:c5:7a:5d:a3:4d:8a:35:35:de: 14:97:d5:cf:72:dd:b3:65:e2:25:4e:89:e5:d9:fe: 4b:2b:e2:59:46:ba:5e:e1:4d:cb:02:ca:da:8b:ee: 36:d1:86:9f:f0:57:45:40:68:d9:4f:ed:b8:d4:db: b8:81:4a:7b:fb:c3:8f:6c:93:49:b2:7b:84:2d:2f: 47:27:30:63:5f:ba:0c:42:d6:b8:de:2d:07:b8:c4: 15:42:fa:60:d0:a7:0e:1e:cd:1f:73:48:95:f0:80: f4:5b:ad:75:55:f4:20:d8:7f:7c:b9:ff:b4:77:87: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3D:B4:47:48:EB:15:54:35:C9:90:73:9B:76:D1:A8:D3:F9:73:0D X509v3 Authority Key Identifier: keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.156.128.0/19 185.85.92.0/22 IPv6: 2a00:d940::/32 Signature Algorithm: sha256WithRSAEncryption 08:c2:6d:04:1a:ae:2e:62:9f:2a:69:61:24:8b:d9:19:73:6d: 16:be:44:59:df:1b:5a:77:a4:a0:d3:70:7f:2b:2d:85:5f:7a: 24:08:3a:6f:93:9f:3c:5c:95:a9:c2:d4:12:09:d9:61:d9:40: f1:35:b6:de:07:2f:a4:7a:c3:9f:1e:96:da:6c:5e:3e:59:33: 02:d9:9a:60:bf:6c:d1:85:74:be:c4:09:6b:1b:d1:67:0f:76: e3:4e:cc:f3:45:b1:77:3b:44:d8:9a:be:cd:41:39:c1:2e:96: 04:8c:89:68:1b:2e:af:62:f6:50:f4:ed:ac:7b:41:96:f6:54: c5:af:9f:c0:b8:7e:19:f9:1f:16:18:1b:67:86:f0:a9:9f:c4: bb:81:81:79:13:80:17:b1:38:10:c7:f5:04:31:13:ef:36:81: c8:c9:6b:ba:52:41:14:b2:01:57:0c:ac:e0:47:4d:69:44:b6: 54:b5:67:59:dd:a2:df:0e:fc:f1:20:33:45:79:8d:8a:71:36: de:3d:4f:18:9f:0e:bb:e8:3d:36:16:9e:62:1f:24:64:44:03: 74:35:8e:97:d4:1c:d5:67:45:49:c9:f4:91:27:84:59:2a:0d: ec:22:16:9b:f1:65:00:ee:16:23:75:d4:2e:72:d2:ec:60:6e: 26:67:27:1a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xtkAyZ0c+oV47S+fNn+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTBjYTFiYWY5ZjlmNmZlMTNkODllMjY2NDQ3MDQ5M2Zl NjVlNjUwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzNkYjQ0NzQ4ZWIxNTU0MzVjOTkwNzM5Yjc2ZDFhOGQzZjk3MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZhGudPME7K57PgOcuNdNgfoTygP 2zDJ/1WcDOpaOpHaWHGf9mZzAtfT5dn67xskncXA9JxIuBJEc9jQmLpEdaQtAU82 cwMkFpt+z7B+6OIuFP68vYhtdS51jaI8l88+B6CTfQRjplj8JsawHnF5il1RmIlD /6KqSx2BCoRRe7+WMJnAUJT3uhghS3HFel2jTYo1Nd4Ul9XPct2zZeIlTonl2f5L K+JZRrpe4U3LAsrai+420Yaf8FdFQGjZT+241Nu4gUp7+8OPbJNJsnuELS9HJzBj X7oMQta43i0HuMQVQvpg0KcOHs0fc0iV8ID0W611VfQg2H98uf+0d4cGIwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKc9tEdI6xVUNcmQc5t20ajT+XMNMB8GA1UdIwQY MBaAFGFQyhuvn59v4T2J4mZEcEk/5l5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUt OTQ3ZWFkOWYxNGVkLzEvcHoyMFIwanJGVlExeVpCem0zYlJxTlA1Y3cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC81NTE0MzctOTg3Zi00OGQ0LWFhMGUtOTQ3ZWFkOWYxNGVk LzEvWVZES0c2LWZuMl9oUFluaVprUndTVF9tWG1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTpyAAwQC uVVcMA0EAgACMAcDBQAqANlAMA0GCSqGSIb3DQEBCwUAA4IBAQAIwm0EGq4uYp8q aWEki9kZc20WvkRZ3xtad6Sg03B/Ky2FX3okCDpvk588XJWpwtQSCdlh2UDxNbbe By+kesOfHpbabF4+WTMC2Zpgv2zRhXS+xAlrG9FnD3bjTszzRbF3O0TYmr7NQTnB LpYEjIloGy6vYvZQ9O2se0GW9lTFr5/AuH4Z+R8WGBtnhvCpn8S7gYF5E4AXsTgQ x/UEMRPvNoHIyWu6UkEUsgFXDKzgR01pRLZUtWdZ3aLfDvzxIDNFeY2KcTbePU8Y nw676D02Fp5iHyRkRAN0NY6X1BzVZ0VJyfSRJ4RZKg3sIhab8WUA7hYjddQuctLs YG4mZyca -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:41 2026 by rpki-client