This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/PZcwljxkluLyPsCu5IOqcb5bfu0.roa File: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (raw, json) Hash identifier: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM= Subject key identifier: 3D:97:30:96:3C:64:96:E2:F2:3E:C0:AE:E4:83:AA:71:BE:5B:7E:ED Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Certificate serial: 019B77596ED3D72C4DB81FBC575A27E803D5 Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/PZcwljxkluLyPsCu5IOqcb5bfu0.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 147.230.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:d3:d7:2c:4d:b8:1f:bc:57:5a:27:e8:03:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d9730963c6496e2f23ec0aee483aa71be5b7eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:7c:bb:2c:23:ad:6f:07:2d:b4:98:0d:0a: 4f:50:5e:75:e3:95:69:59:65:a4:3a:f3:0e:df:9a: c2:b8:e4:6c:29:84:ce:2e:2b:7b:e9:91:cf:0e:6c: d4:2b:02:16:00:fa:7c:b8:14:88:b4:f1:6a:86:1e: cc:ce:b2:f8:37:5b:63:80:1a:4f:99:aa:8a:34:9c: 84:c7:b4:5d:78:4f:44:67:1b:19:fc:2c:2c:2b:1b: 59:fc:71:85:f0:76:60:79:a1:7a:06:45:e3:c5:82: 5c:15:81:b5:81:15:f6:47:6e:83:77:57:30:70:64: bf:6f:9c:6b:c2:60:0a:b9:5f:27:3c:5c:bd:aa:d2: 61:e1:fc:62:0c:18:4a:b0:5a:f6:52:26:af:61:f7: ec:88:61:eb:0f:a6:d2:58:88:e8:ba:c2:3e:60:c2: 7f:c8:c5:64:47:5c:27:7e:9f:ef:61:07:44:21:61: fb:58:5f:db:bb:c2:db:85:11:ae:14:ae:bb:66:c9: f4:d3:93:71:a7:ca:a0:98:4c:58:98:c8:9d:66:86: e8:da:41:30:ae:0f:11:31:31:35:80:91:c3:29:f7: 44:4f:94:bb:e7:04:6c:5b:0f:31:01:03:f1:e3:f4: 23:eb:8b:12:21:be:d7:1d:ca:d8:fa:6e:fe:82:37: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:30:96:3C:64:96:E2:F2:3E:C0:AE:E4:83:AA:71:BE:5B:7E:ED X509v3 Authority Key Identifier: keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/PZcwljxkluLyPsCu5IOqcb5bfu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.230.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:ef:6c:f5:b0:94:a9:fb:3d:9b:94:b3:96:6f:16:7f:19:65: df:e6:9e:88:cb:7f:65:73:dc:89:a6:5c:c7:20:67:ff:19:65: 7f:0c:ca:1a:d7:5c:52:4b:60:01:f6:fe:1b:19:54:85:fe:63: e9:21:1e:4c:89:39:01:1c:20:7b:c2:4e:db:cf:50:56:9a:02: da:f8:b2:97:25:fa:b4:fa:7c:8b:09:1f:82:be:67:51:d1:7d: 5d:9a:fb:71:49:35:3b:16:7f:28:9b:aa:96:e0:b3:df:26:ce: 0b:37:25:7f:66:33:0a:e1:85:80:dd:ce:85:57:de:ef:65:6d: 14:2d:54:e2:fb:cc:5d:9c:23:7f:ec:a9:86:0f:e4:6f:81:0d: 05:dd:d8:fc:79:25:93:2d:da:ae:fd:0a:38:bb:29:fb:d7:8b: 5c:46:a1:27:fd:f4:04:25:ee:df:8a:78:6e:0a:dc:4c:8a:a5: 8b:6f:82:a8:32:d3:ce:e9:4f:8d:f9:ce:70:7e:12:02:e2:08: b1:48:61:01:39:c8:63:27:02:6d:e4:1a:d9:03:6c:30:7a:61: 4e:10:ca:d8:a8:a3:9f:52:51:a7:b4:85:8c:c8:58:74:36:6c: c5:8e:6b:4d:08:bf:e4:4a:d6:b3:70:b2:83:f9:5b:61:60:b7: 51:bb:f9:b2 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WW7T1yxNuB+8V1on6APVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5 OGNjMWEwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk3MzA5NjNjNjQ5NmUyZjIzZWMwYWVlNDgzYWE3MWJlNWI3ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7B8uywjrW8HLbSYDQpPUF5145Vp WWWkOvMO35rCuORsKYTOLit76ZHPDmzUKwIWAPp8uBSItPFqhh7MzrL4N1tjgBpP maqKNJyEx7RdeE9EZxsZ/CwsKxtZ/HGF8HZgeaF6BkXjxYJcFYG1gRX2R26Dd1cw cGS/b5xrwmAKuV8nPFy9qtJh4fxiDBhKsFr2UiavYffsiGHrD6bSWIjousI+YMJ/ yMVkR1wnfp/vYQdEIWH7WF/bu8LbhRGuFK67Zsn005Nxp8qgmExYmMidZobo2kEw rg8RMTE1gJHDKfdET5S75wRsWw8xAQPx4/Qj64sSIb7XHcrY+m7+gje2kQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFD2XMJY8ZJbi8j7AruSDqnG+W37tMB8GA1UdIwQY MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt MGZkMDJjNDQyNTNiLzEvUFpjd2xqeGtsdUx5UHNDdTVJT3FjYjViZnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk+YwDQYJ KoZIhvcNAQELBQADggEBABrvbPWwlKn7PZuUs5ZvFn8ZZd/mnojLf2Vz3ImmXMcg Z/8ZZX8MyhrXXFJLYAH2/hsZVIX+Y+khHkyJOQEcIHvCTtvPUFaaAtr4spcl+rT6 fIsJH4K+Z1HRfV2a+3FJNTsWfyibqpbgs98mzgs3JX9mMwrhhYDdzoVX3u9lbRQt VOL7zF2cI3/sqYYP5G+BDQXd2Px5JZMt2q79Cji7KfvXi1xGoSf99AQl7t+KeG4K 3EyKpYtvgqgy087pT435znB+EgLiCLFIYQE5yGMnAm3kGtkDbDB6YU4Qytioo59S Uae0hYzIWHQ2bMWOa00Iv+RK1rNwsoP5W2Fgt1G7+bI= -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:48 2026 by rpki-client