This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pfwLznvoYJJqfRCh4o2zmPQohuE.roa File: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (raw, json) Hash identifier: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY= Subject key identifier: A5:FC:0B:CE:7B:E8:60:92:6A:7D:10:A1:E2:8D:B3:98:F4:28:86:E1 Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Certificate serial: 019B7910BC1CD6AD308D3D734729F3B18B41 Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pfwLznvoYJJqfRCh4o2zmPQohuE.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48894 IP address blocks: 91.223.182.0/24 maxlen: 24 91.226.99.0/24 maxlen: 24 91.240.216.0/24 maxlen: 24 193.9.21.0/24 maxlen: 24 193.104.240.0/24 maxlen: 24 195.206.228.0/24 maxlen: 24 195.206.229.0/24 maxlen: 24 2001:67c:2468::/48 maxlen: 48 2001:67c:2468:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:1c:d6:ad:30:8d:3d:73:47:29:f3:b1:8b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fc0bce7be860926a7d10a1e28db398f42886e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:19:b2:06:57:b5:aa:6f:12:82:2a:f7:ff: 34:c6:6a:7e:1b:86:69:c7:f8:11:0a:1e:5c:fd:43: ed:cd:4d:61:a1:d0:fb:aa:67:b0:5f:dd:2b:66:8f: d9:6a:20:f9:13:e5:ee:82:0c:f7:29:95:22:19:81: a8:34:fb:ea:b2:9d:c7:0e:18:7a:4f:e8:ef:1e:46: cc:5b:7e:01:e7:30:cc:ce:84:39:26:eb:d7:5e:8e: 8b:fc:37:17:b2:08:99:83:ee:52:83:47:bd:c1:76: 2b:f2:86:ae:f6:34:3e:8a:ba:f7:0f:9c:b9:e0:0b: 42:c1:56:21:7b:77:1a:da:b9:5c:23:ce:54:57:04: a1:ab:a1:5a:81:52:85:c3:36:11:74:52:db:4f:ed: 72:e0:cd:78:03:27:2a:48:3c:3d:1f:b4:45:5a:96: fe:17:a9:4f:36:c0:ef:a3:cb:b7:d5:93:e9:0a:77: ce:21:a0:0e:3d:b2:e3:63:0b:fe:ca:1a:18:1e:28: 37:5b:e2:4e:7d:cf:30:f1:8e:24:27:97:58:23:3f: 80:71:9e:b1:82:93:25:24:dc:b4:26:e6:eb:3e:2e: 9c:a5:03:81:e8:b0:69:9e:5d:64:1a:40:24:83:69: 95:45:4e:af:a6:81:34:42:1d:76:19:63:a3:47:25: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:0B:CE:7B:E8:60:92:6A:7D:10:A1:E2:8D:B3:98:F4:28:86:E1 X509v3 Authority Key Identifier: keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pfwLznvoYJJqfRCh4o2zmPQohuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.182.0/24 91.226.99.0/24 91.240.216.0/24 193.9.21.0/24 193.104.240.0/24 195.206.228.0/23 IPv6: 2001:67c:2468::/48 Signature Algorithm: sha256WithRSAEncryption bf:a4:b4:d8:75:3d:ef:e3:b8:fe:08:8f:bb:34:05:de:27:ea: a8:07:b8:4f:64:33:ee:91:6e:56:88:b6:99:8f:a6:ff:63:d2: 49:7c:2e:c3:04:b9:eb:75:15:1a:f2:20:59:53:bb:2f:e9:70: e5:c3:bc:84:7f:78:59:26:e3:ec:bc:23:34:18:82:0b:c2:65: b8:c6:70:ea:cf:b8:eb:a7:c5:ef:35:f7:cb:f0:4a:ac:31:c1: 3f:12:7d:b3:c7:e1:0c:27:1c:e0:a3:56:72:19:a3:98:e1:93: 24:53:66:fe:d6:db:8d:cb:2c:ac:01:a9:3b:37:a3:45:04:00: c2:e8:0c:e7:7d:a7:56:4a:c6:6d:97:04:45:89:0f:56:2d:6f: b2:81:3d:5e:dc:a8:21:d2:a9:bc:a4:d9:db:3f:8f:a9:13:0f: 04:1e:7a:d6:9d:32:17:84:af:4b:4b:3b:5f:85:fd:ef:d6:68: d9:84:e4:05:6a:ca:9e:3a:02:9c:b8:3d:8b:5c:cc:bb:84:9c: f8:9a:7a:9b:a4:ae:85:86:87:36:fb:74:c1:61:eb:03:98:49: 48:90:ba:03:d7:05:7d:1c:10:04:e2:04:68:5c:e4:20:67:2b: a0:07:fe:7c:35:48:ed:ae:0b:15:90:b4:01:a4:0a:b3:88:c9: 93:97:b7:8c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt5ELwc1q0wjT1zRynzsYtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3 MTQ4NzAwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZjMGJjZTdiZTg2MDkyNmE3ZDEwYTFlMjhkYjM5OGY0Mjg4NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztYZsgZXtapvEoIq9/80xmp+G4Zp x/gRCh5c/UPtzU1hodD7qmewX90rZo/ZaiD5E+Xuggz3KZUiGYGoNPvqsp3HDhh6 T+jvHkbMW34B5zDMzoQ5JuvXXo6L/DcXsgiZg+5Sg0e9wXYr8oau9jQ+irr3D5y5 4AtCwVYhe3ca2rlcI85UVwShq6FagVKFwzYRdFLbT+1y4M14AycqSDw9H7RFWpb+ F6lPNsDvo8u31ZPpCnfOIaAOPbLjYwv+yhoYHig3W+JOfc8w8Y4kJ5dYIz+AcZ6x gpMlJNy0JubrPi6cpQOB6LBpnl1kGkAkg2mVRU6vpoE0Qh12GWOjRyWE6wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFKX8C8576GCSan0QoeKNs5j0KIbhMB8GA1UdIwQY MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt YTU2YmYwY2Y0Y2JlLzEvcGZ3THpudm9ZSkpxZlJDaDRvMnptUFFvaHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQAW9+2AwQA W+JjAwQAW/DYAwQAwQkVAwQAwWjwAwQBw87kMA8EAgACMAkDBwAgAQZ8JGgwDQYJ KoZIhvcNAQELBQADggEBAL+ktNh1Pe/juP4Ij7s0Bd4n6qgHuE9kM+6RblaItpmP pv9j0kl8LsMEuet1FRryIFlTuy/pcOXDvIR/eFkm4+y8IzQYggvCZbjGcOrPuOun xe8198vwSqwxwT8SfbPH4QwnHOCjVnIZo5jhkyRTZv7W243LLKwBqTs3o0UEAMLo DOd9p1ZKxm2XBEWJD1Ytb7KBPV7cqCHSqbyk2ds/j6kTDwQeetadMheEr0tLO1+F /e/WaNmE5AVqyp46Apy4PYtczLuEnPiaepukroWGhzb7dMFh6wOYSUiQugPXBX0c EATiBGhc5CBnK6AH/nw1SO2uCxWQtAGkCrOIyZOXt4w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:56 2026 by rpki-client