This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa
File: pz_LxxSTUEK41xRGO49WFkaPamo.roa (raw, json)
Hash identifier: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=
Subject key identifier: A7:3F:CB:C7:14:93:50:42:B8:D7:14:46:3B:8F:56:16:46:8F:6A:6A
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019B7BA3E51115322EBC20196063223A48DD
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa
Signing time: Thu 01 Jan 2026 22:18:17 +0000
ROA not before: Thu 01 Jan 2026 22:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47692
IP address blocks: 185.46.184.0/24 maxlen: 24
185.46.185.0/24 maxlen: 24
185.46.186.0/24 maxlen: 24
185.46.187.0/24 maxlen: 24
185.205.80.0/24 maxlen: 24
185.205.81.0/24 maxlen: 24
185.205.82.0/24 maxlen: 24
185.205.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:e5:11:15:32:2e:bc:20:19:60:63:22:3a:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jan 1 22:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a73fcbc714935042b8d714463b8f5616468f6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:10:23:45:f0:f3:05:e1:f2:4f:13:d0:e7:
36:8f:67:af:74:f2:e1:79:e4:0c:bc:2a:5b:77:f0:
9d:de:3b:e4:be:7b:4d:f9:4a:49:51:bb:45:22:6a:
10:9e:ff:87:49:1d:93:e5:64:e1:09:65:03:8e:a5:
24:99:d8:9d:6e:ba:8b:af:1c:ce:d5:61:3c:5c:00:
75:eb:76:b2:20:02:df:9e:da:65:9e:e9:41:df:6d:
3f:e8:85:d8:e7:3d:d0:14:09:08:7a:bd:a6:be:08:
81:ca:30:43:68:ff:25:8e:5f:17:d8:36:99:a4:d7:
74:ba:2b:fd:9b:bb:64:95:7f:f7:fb:7e:f0:d6:2b:
29:46:49:1c:7a:65:57:d5:ec:79:6a:15:80:81:0e:
5c:5c:75:31:23:e6:b4:d7:cf:d3:dd:de:9e:e5:04:
b6:2a:33:e2:4f:42:78:86:5b:41:ed:8a:8b:6c:4a:
a6:90:f7:02:f1:c4:80:c9:09:e4:d9:88:7f:37:b4:
86:88:2d:5d:64:eb:21:3b:c7:86:3c:af:56:20:d1:
a7:49:2e:97:eb:13:19:31:08:fd:64:7e:b4:93:16:
60:31:15:3c:00:d6:ea:b8:99:36:c8:97:74:ed:ca:
8a:13:30:3a:d4:58:69:6c:88:43:6b:00:5e:b5:4f:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3F:CB:C7:14:93:50:42:B8:D7:14:46:3B:8F:56:16:46:8F:6A:6A
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.184.0/22
185.205.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:34:fb:40:96:ef:7a:e8:b9:56:98:a2:a8:d4:63:60:e1:78:
48:6f:38:36:66:38:0c:8d:e8:f6:ee:c1:2b:ef:ef:40:e0:be:
b1:d5:4d:1f:a6:70:f8:84:60:d9:67:54:08:85:96:b9:da:42:
6a:69:d4:0a:fb:82:ce:0b:52:65:ea:13:ea:bb:d7:44:c9:29:
d6:14:2a:ef:29:de:28:af:0b:6f:7e:ef:ef:c9:72:7b:45:29:
9d:f5:36:d9:55:d4:45:70:7a:42:b7:d9:a6:8c:d0:e0:35:e9:
11:37:62:d5:70:6e:e6:d9:7e:d0:a6:0b:9d:5c:58:3f:4c:2f:
df:ea:23:7d:f8:8d:cf:30:92:70:40:a7:84:fe:30:b1:d0:b3:
7c:b8:95:ce:45:15:ca:33:04:26:38:bc:65:54:25:b3:f0:7f:
40:84:0b:81:04:7e:42:a1:e3:0b:7d:08:4d:5b:9c:94:64:ba:
91:a6:16:eb:25:fc:3d:47:55:ff:14:d2:b2:13:2a:30:a9:7b:
72:7e:24:f2:e6:a0:1e:a9:65:b2:fb:d6:de:9c:fb:63:42:6e:
75:ff:4b:33:e4:b3:9c:c8:9a:7f:75:ed:fb:83:d5:57:d6:1e:
9e:c4:3a:d5:33:84:63:3a:4d:04:e4:2e:a7:76:45:37:13:4d:
a3:82:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:29 2026 by rpki-client