This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa File: PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa (raw, json) Hash identifier: UsJVbDBJ3BYi/wLg7BLlATz/hycpIsDhQ1LAnNbDRWA= Subject key identifier: 3C:2C:EB:FB:CA:5F:2A:EE:96:AF:A8:45:4D:34:3C:79:05:3C:4C:F2 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA56161E4F13026AAA65DF1A2177B08 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212504 IP address blocks: 2a10:4646:140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:61:61:e4:f1:30:26:aa:a6:5d:f1:a2:17:7b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c2cebfbca5f2aee96afa8454d343c79053c4cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:0c:17:8e:f7:01:cf:9e:2e:53:81:4a:ff: 8c:41:a5:9a:d3:f8:7f:c8:1a:b7:dd:57:1b:cd:6d: f6:17:b9:74:d7:4e:51:b2:e1:ec:d5:1b:fe:c3:2d: 76:36:a8:f1:00:f9:05:9c:31:20:29:35:d8:51:91: e2:e2:9d:05:c1:3b:ba:a7:2f:9c:98:00:3d:04:38: 18:9b:a2:80:f2:65:b5:1e:bb:be:62:36:f7:6c:db: d3:25:2d:46:0b:5b:9d:d8:e2:2b:40:f0:3a:ab:b0: 43:dc:b8:eb:ff:f3:7d:98:d3:4c:89:60:0b:83:83: 52:33:20:99:c8:c5:aa:de:78:51:77:b0:c9:30:e8: c5:97:1f:1c:65:08:62:90:94:4b:cd:ee:e1:b0:04: 46:38:25:20:d3:19:14:3c:d9:87:e2:5f:f4:13:2b: 63:cb:9c:09:cb:5a:9f:ef:00:35:27:35:37:40:13: d0:8c:28:12:df:0f:49:92:81:d9:21:b9:0a:a9:cc: cf:a8:3f:6f:13:55:fc:31:c3:5e:f4:50:6d:56:73: 94:c1:fc:da:6e:1b:fe:5d:16:96:38:71:ab:ab:59: 4f:73:9f:d4:b8:3a:2e:e8:c5:56:0a:11:5e:c3:fa: 2b:bc:22:14:c5:be:f2:11:ee:a3:8d:0c:8f:59:39: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2C:EB:FB:CA:5F:2A:EE:96:AF:A8:45:4D:34:3C:79:05:3C:4C:F2 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/PCzr-8pfKu6Wr6hFTTQ8eQU8TPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:140::/44 Signature Algorithm: sha256WithRSAEncryption 0d:79:42:e9:e5:1d:c3:e2:cb:85:ce:41:0a:1f:59:a0:65:1e: 76:a6:89:89:4c:13:10:4c:82:e5:bb:3e:3d:5c:55:32:c9:1b: 1f:4b:b3:a9:9b:15:0c:53:1f:d1:a9:67:ed:a5:24:8c:46:27: 52:75:f1:85:24:c6:ab:75:85:78:bf:7b:52:86:79:f4:06:db: e4:5f:63:4a:08:94:12:ed:1c:a0:dc:39:81:a1:f5:81:e1:18: ac:56:b9:30:2f:a7:00:0f:a1:a7:04:2f:fd:82:20:9e:62:b3: 99:f4:6f:f3:40:51:1d:32:2f:0d:b2:67:dd:10:2d:41:f4:72: b2:81:7b:3b:a7:82:ef:66:09:df:ad:49:49:94:02:9e:f8:57: 04:0e:15:b3:a7:73:8b:f9:2c:ae:3f:10:58:ed:20:a3:f9:fa: 66:ab:4c:0f:44:48:08:07:60:c4:e0:00:fc:e2:d1:f8:55:ee: f8:d8:85:db:94:c1:26:26:ea:72:dc:c8:ea:98:10:01:7a:66: 85:fd:4f:38:0a:8d:9d:d9:45:89:6d:17:7e:52:7e:44:96:d1: a1:19:8b:c3:c5:bc:83:c5:61:32:2b:76:ea:29:2c:88:17:50: 50:2d:52:e2:01:d1:99:3c:0c:64:f4:7e:08:bb:57:b7:4f:51: d7:79:48:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWFh5PEwJqqmXfGiF3sIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzJjZWJmYmNhNWYyYWVlOTZhZmE4NDU0ZDM0M2M3OTA1M2M0Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YMF473Ac+eLlOBSv+MQaWa0/h/ yBq33VcbzW32F7l0105RsuHs1Rv+wy12NqjxAPkFnDEgKTXYUZHi4p0FwTu6py+c mAA9BDgYm6KA8mW1Hru+Yjb3bNvTJS1GC1ud2OIrQPA6q7BD3Ljr//N9mNNMiWAL g4NSMyCZyMWq3nhRd7DJMOjFlx8cZQhikJRLze7hsARGOCUg0xkUPNmH4l/0Eytj y5wJy1qf7wA1JzU3QBPQjCgS3w9JkoHZIbkKqczPqD9vE1X8McNe9FBtVnOUwfza bhv+XRaWOHGrq1lPc5/UuDou6MVWChFew/orvCIUxb7yEe6jjQyPWTmHCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDws6/vKXyrulq+oRU00PHkFPEzyMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvUEN6ci04cGZLdTZXcjZoRlRUUThlUVU4VFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgFA MA0GCSqGSIb3DQEBCwUAA4IBAQANeULp5R3D4suFzkEKH1mgZR52pomJTBMQTILl uz49XFUyyRsfS7OpmxUMUx/RqWftpSSMRidSdfGFJMardYV4v3tShnn0BtvkX2NK CJQS7Ryg3DmBofWB4RisVrkwL6cAD6GnBC/9giCeYrOZ9G/zQFEdMi8NsmfdEC1B 9HKygXs7p4LvZgnfrUlJlAKe+FcEDhWzp3OL+SyuPxBY7SCj+fpmq0wPREgIB2DE 4AD84tH4Ve742IXblMEmJupy3MjqmBABemaF/U84Co2d2UWJbRd+Un5EltGhGYvD xbyDxWEyK3bqKSyIF1BQLVLiAdGZPAxk9H4Iu1e3T1HXeUjq -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:38 2026 by rpki-client