This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa File: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (raw, json) Hash identifier: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE= Subject key identifier: 3D:9B:CC:EC:E5:77:1C:14:83:CE:EC:F7:98:14:A4:36:06:4F:CE:67 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019B7D5CF8A0ACF1F83F4DA3354BA2E8E76B Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 193.105.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f8:a0:ac:f1:f8:3f:4d:a3:35:4b:a2:e8:e7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9bccece5771c1483ceecf79814a436064fce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:6e:5e:23:65:ed:aa:68:36:ef:d7:54:f0: 17:10:5e:98:a6:05:8b:48:9a:62:7e:c4:5e:9d:3e: dd:58:48:ea:da:3a:2d:89:ee:07:b4:6f:38:bb:6f: 14:67:95:31:01:aa:75:e0:eb:8a:7d:6f:18:dc:2f: c5:92:33:09:83:da:0f:47:74:24:00:44:74:72:8e: 8b:29:be:f6:ec:17:e5:f6:48:38:94:ea:51:8e:c7: c2:b7:11:c2:86:77:b3:9c:a0:48:e3:00:5b:fc:7c: e0:67:d4:2c:0b:13:e3:25:8f:f5:43:b0:7e:4d:28: d6:a0:4f:4f:fa:99:6d:a5:7c:14:6b:f1:7a:d8:b8: ef:53:78:1d:68:ea:1b:1b:76:41:01:5b:49:92:b4: b8:80:f7:c7:ad:07:36:e5:12:54:c3:64:96:27:bf: 43:e1:12:c6:a2:0d:1a:21:90:20:09:45:89:7d:c9: c5:ae:71:07:fb:00:2e:79:e3:65:16:e8:5b:ef:62: 7d:d5:61:12:76:7a:b6:d3:f6:dd:53:19:fe:3f:c8: a7:ac:98:9a:17:53:cd:62:43:55:77:07:8f:83:5c: f8:ca:33:88:4d:91:b3:b2:d9:30:84:98:7c:da:69: e8:26:b3:f9:ca:78:df:d9:b2:e5:cc:b9:f8:a8:3b: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:CC:EC:E5:77:1C:14:83:CE:EC:F7:98:14:A4:36:06:4F:CE:67 X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.33.0/24 Signature Algorithm: sha256WithRSAEncryption b4:88:e1:38:45:67:86:23:6e:df:80:87:7b:d3:89:56:e6:8c: 43:17:59:e2:05:52:f3:e5:db:65:19:8c:f4:b1:2c:9c:d3:9c: f3:60:da:cf:88:ba:2f:ed:e6:d6:f9:7f:f7:e4:c2:7c:0d:69: db:3a:db:e0:e3:8a:2b:b5:84:dd:66:2e:f3:c2:81:2e:61:73: bd:d1:2a:dd:d9:99:89:65:bf:7a:4c:e7:52:39:e5:34:08:b7: 12:6a:4f:6c:c3:99:2f:fd:65:c4:27:59:23:9e:e4:4d:5c:7b: 21:6a:bc:c9:74:ea:fa:09:75:a8:12:f9:18:35:d5:b8:ec:a8: 01:f9:5a:72:67:9e:4b:9b:93:7e:2b:6d:97:a7:4a:de:45:9e: 97:26:03:6d:f8:b0:68:0f:eb:6f:d2:cd:bd:8f:69:79:38:7c: 00:7b:96:f0:62:4e:50:ba:f1:a4:0b:0f:e2:b6:72:f6:8c:4a: 82:93:c5:f5:f3:81:aa:b4:42:b5:81:46:a1:ec:96:dd:74:9d: 4f:68:66:65:37:06:04:3d:db:e4:3d:46:ea:db:e1:09:3b:74: 1f:a1:ed:53:b5:1b:83:aa:bd:bc:ae:4c:60:e9:2a:d1:4f:7e: 14:64:df:b8:81:f7:f9:51:c5:9c:b1:ab:16:33:6d:ac:3b:ce: 6b:bd:53:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPigrPH4P02jNUui6OdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDliY2NlY2U1NzcxYzE0ODNjZWVjZjc5ODE0YTQzNjA2NGZjZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFVuXiNl7apoNu/XVPAXEF6YpgWL SJpifsRenT7dWEjq2jotie4HtG84u28UZ5UxAap14OuKfW8Y3C/FkjMJg9oPR3Qk AER0co6LKb727Bfl9kg4lOpRjsfCtxHChneznKBI4wBb/HzgZ9QsCxPjJY/1Q7B+ TSjWoE9P+pltpXwUa/F62LjvU3gdaOobG3ZBAVtJkrS4gPfHrQc25RJUw2SWJ79D 4RLGog0aIZAgCUWJfcnFrnEH+wAueeNlFuhb72J91WESdnq20/bdUxn+P8inrJia F1PNYkNVdwePg1z4yjOITZGzstkwhJh82mnoJrP5ynjf2bLlzLn4qDs6xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2bzOzldxwUg87s95gUpDYGT85nMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvUFp2TTdPVjNIQlNEenV6M21CU2tOZ1pQem1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkhMA0G CSqGSIb3DQEBCwUAA4IBAQC0iOE4RWeGI27fgId704lW5oxDF1niBVLz5dtlGYz0 sSyc05zzYNrPiLov7ebW+X/35MJ8DWnbOtvg44ortYTdZi7zwoEuYXO90Srd2ZmJ Zb96TOdSOeU0CLcSak9sw5kv/WXEJ1kjnuRNXHsharzJdOr6CXWoEvkYNdW47KgB +VpyZ55Lm5N+K22Xp0reRZ6XJgNt+LBoD+tv0s29j2l5OHwAe5bwYk5QuvGkCw/i tnL2jEqCk8X184GqtEK1gUah7JbddJ1PaGZlNwYEPdvkPUbq2+EJO3Qfoe1TtRuD qr28rkxg6SrRT34UZN+4gff5UcWcsasWM22sO85rvVM0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client