This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa File: PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa (raw, json) Hash identifier: oUnwI/hWFydpEOEqwC9HOMZdSyF2a1xfxAbzlwQhdS8= Subject key identifier: 3D:9F:E0:05:2D:89:0C:14:79:51:1F:59:CA:2E:91:FC:0E:72:D6:F3 Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044 Certificate serial: 019B7C7F37F704B08EC31F6FC20FDCA57DB7 Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa Signing time: Fri 02 Jan 2026 02:17:50 +0000 ROA not before: Fri 02 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206663 IP address blocks: 185.167.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:37:f7:04:b0:8e:c3:1f:6f:c2:0f:dc:a5:7d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044 Validity Not Before: Jan 2 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9fe0052d890c1479511f59ca2e91fc0e72d6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:40:e8:96:de:a6:7b:95:b3:7a:85:36:aa: ec:44:d7:21:52:4d:3a:6c:e4:4c:f2:9d:ff:f3:f9: f3:5d:72:34:a7:35:6e:97:cb:2b:52:bc:d1:c9:31: 05:38:d2:c8:ce:11:05:e2:bb:f6:4c:56:02:63:3d: 58:01:8b:c4:cf:b9:cd:f7:de:75:bf:0d:4b:63:b3: 11:7d:f9:e7:ee:7c:74:14:d5:d4:56:c8:5c:ef:84: 28:f5:e1:7b:38:3e:bc:5d:75:ee:49:ce:cd:7c:df: 1d:dc:4b:bf:25:77:cb:9a:22:f6:be:71:91:4c:cb: f6:b0:e4:70:ce:7b:25:f9:21:a1:14:a7:36:02:cc: 4f:59:ce:5f:38:2e:68:f8:b5:2e:94:50:ee:70:b5: 0b:0d:d3:74:14:f2:13:a0:c9:d7:65:a0:3c:b1:aa: 2c:8d:09:05:32:91:a1:ee:14:a4:f8:25:66:ff:31: d2:33:d7:94:bb:fb:fc:d4:c1:d1:94:e4:d9:da:2d: a6:f9:2d:63:51:a3:d3:5c:ca:8d:01:94:b9:d1:92: 33:af:e8:82:da:16:0c:82:fe:0b:04:9a:1a:6d:0a: dc:b1:e9:47:fd:92:7d:e2:84:21:76:60:e1:f7:82: 03:82:ae:9e:ba:94:86:11:a4:8f:d3:f4:89:e6:1a: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:E0:05:2D:89:0C:14:79:51:1F:59:CA:2E:91:FC:0E:72:D6:F3 X509v3 Authority Key Identifier: keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/PZ_gBS2JDBR5UR9Zyi6R_A5y1vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.180.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c2:00:4b:76:97:fc:d4:7a:22:65:81:a8:e7:c0:b6:b9:05: 6c:ff:b0:e2:47:0a:ef:b6:ac:29:3a:5b:32:70:5d:86:44:da: e3:32:64:89:9f:d6:62:39:d6:9a:b4:59:71:d6:8e:4d:8a:04: 58:8f:b0:37:98:91:6b:ad:b1:2f:69:0d:be:74:46:7f:0b:ee: e5:2d:3a:2d:3c:f8:55:96:fb:ba:59:7a:7d:04:08:15:42:0f: 4a:bb:02:11:f1:94:18:d2:9b:ff:bc:bc:2b:4f:d0:bf:da:39: bd:67:77:07:ba:41:6e:ea:54:1c:32:ec:c4:13:b9:73:b5:a0: d6:92:99:8b:45:42:34:44:55:fe:23:71:99:05:22:99:db:74: 14:a1:02:38:06:57:48:ff:bb:b5:0f:e2:e0:97:22:14:3a:64: 6d:5b:81:53:32:6b:2c:b9:9e:cc:20:f6:38:bc:4c:08:d2:dc: f5:13:8f:6a:cd:7e:96:00:23:75:9c:4b:4b:94:3a:99:73:c8: da:ba:41:44:42:d1:25:88:e7:b0:cc:21:39:b6:e2:43:0b:3a: bf:39:26:d6:dc:df:d6:5b:25:12:f2:8f:24:95:ab:1d:b4:a4: 67:b3:45:bc:b6:7e:44:9d:3c:3b:87:6a:53:f5:3c:b3:57:f2: 6e:b9:81:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fzf3BLCOwx9vwg/cpX23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNmIzMzYxYTFhMmEwMGRiY2UzMTkwMTk4MjdmZWJiNzE1 YmQwNDQwHhcNMjYwMTAyMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDlmZTAwNTJkODkwYzE0Nzk1MTFmNTljYTJlOTFmYzBlNzJkNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWVA6JbepnuVs3qFNqrsRNchUk06 bORM8p3/8/nzXXI0pzVul8srUrzRyTEFONLIzhEF4rv2TFYCYz1YAYvEz7nN9951 vw1LY7MRffnn7nx0FNXUVshc74Qo9eF7OD68XXXuSc7NfN8d3Eu/JXfLmiL2vnGR TMv2sORwznsl+SGhFKc2AsxPWc5fOC5o+LUulFDucLULDdN0FPIToMnXZaA8saos jQkFMpGh7hSk+CVm/zHSM9eUu/v81MHRlOTZ2i2m+S1jUaPTXMqNAZS50ZIzr+iC 2hYMgv4LBJoabQrcselH/ZJ94oQhdmDh94IDgq6eupSGEaSP0/SJ5hqT7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2f4AUtiQwUeVEfWcoukfwOctbzMB8GA1UdIwQY MBaAFP9rM2GhoqANvOMZAZgn/rtxW9BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUt ZjYyMzIwOTUxYTM2LzEvUFpfZ0JTMkpEQlI1VVI5WnlpNlJfQTV5MXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NmY5YTAtODc0Ni00YjMyLTgzZWUtZjYyMzIwOTUxYTM2 LzEvXzJzellhR2lvQTI4NHhrQm1DZi11M0ZiMEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuae0MA0G CSqGSIb3DQEBCwUAA4IBAQA5wgBLdpf81HoiZYGo58C2uQVs/7DiRwrvtqwpOlsy cF2GRNrjMmSJn9ZiOdaatFlx1o5NigRYj7A3mJFrrbEvaQ2+dEZ/C+7lLTotPPhV lvu6WXp9BAgVQg9KuwIR8ZQY0pv/vLwrT9C/2jm9Z3cHukFu6lQcMuzEE7lztaDW kpmLRUI0RFX+I3GZBSKZ23QUoQI4BldI/7u1D+LglyIUOmRtW4FTMmssuZ7MIPY4 vEwI0tz1E49qzX6WACN1nEtLlDqZc8jaukFEQtEliOewzCE5tuJDCzq/OSbW3N/W WyUS8o8klasdtKRns0W8tn5EnTw7h2pT9TyzV/JuuYEN -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:04 2026 by rpki-client