This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa File: PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa (raw, json) Hash identifier: 4btrLU4Yp51Rk7dJr+hkTDUzW5uwF4yGfkuoF/u5R5U= Subject key identifier: 3D:97:BF:97:6C:DE:45:6C:9F:2C:14:6C:7D:CD:FF:A1:9A:A7:90:15 Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Certificate serial: 019B7D5AD813FF54BE1BA6A5FA89CE735227 Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa Signing time: Fri 02 Jan 2026 06:17:44 +0000 ROA not before: Fri 02 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34903 IP address blocks: 45.130.208.0/22 maxlen: 24 2a0e:c240::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d8:13:ff:54:be:1b:a6:a5:fa:89:ce:73:52:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d97bf976cde456c9f2c146c7dcdffa19aa79015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:77:53:fd:3e:20:74:ff:bb:4e:8e:cc:d9: 16:eb:58:db:59:0c:45:ad:6d:01:1a:67:b0:da:66: 5c:37:aa:5a:ca:3c:c7:89:e8:e1:5e:dc:20:d0:03: 6f:9b:78:69:6f:29:e8:21:97:85:6c:56:64:16:e5: b7:71:3c:19:38:e4:31:c1:02:b4:fd:60:fc:30:e1: b1:d4:b1:43:df:aa:d0:94:96:98:aa:79:a4:e8:dd: 41:42:48:96:73:a1:e6:b2:7e:9c:9a:2d:5d:c4:32: f4:74:af:f8:75:76:3c:53:e1:b8:7c:0a:5c:9e:7c: a8:c2:eb:36:8b:22:10:70:cd:5a:02:2b:06:fe:de: 3c:9f:7d:b5:b6:e3:41:dc:7f:9e:57:bd:4a:9c:1a: 1e:84:f4:a2:4c:66:58:d0:fd:c7:c3:ee:e4:7c:4e: 99:f1:d5:1f:2f:47:b2:09:8e:6c:54:3c:fa:f7:e9: e2:d2:6b:55:c0:ca:96:9a:7c:cd:1b:a6:f4:2a:00: 96:24:ac:53:5e:e0:44:61:60:f3:1f:dc:23:50:4e: 86:7e:a2:91:c0:48:3a:1c:f1:e3:1f:6e:30:03:9e: 92:a1:86:1a:e4:53:18:91:5f:34:8b:e3:3e:d4:cf: 43:e1:51:b1:c5:54:72:b8:95:ec:01:2c:02:4e:97: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:BF:97:6C:DE:45:6C:9F:2C:14:6C:7D:CD:FF:A1:9A:A7:90:15 X509v3 Authority Key Identifier: keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.208.0/22 IPv6: 2a0e:c240::/29 Signature Algorithm: sha256WithRSAEncryption 02:ce:e2:f1:70:cc:17:2b:82:cf:29:f8:12:b1:03:80:7f:04: 56:04:c4:ad:02:77:eb:73:48:15:78:d6:3a:c2:44:74:fc:5d: 9c:61:ed:5a:e1:b3:2b:47:ae:5c:2d:c4:b7:78:1f:5f:6a:ba: b4:67:42:45:f5:8c:5d:d6:d9:0c:39:be:bc:e0:9c:ec:ff:5a: 2c:b8:31:97:2c:51:5a:e8:0d:50:b5:0c:81:c9:8e:d3:0c:af: 1d:dd:0b:3a:b6:3b:af:c3:33:73:05:2d:11:b9:dc:4f:a0:3c: 9d:89:87:60:8e:30:0e:91:49:e8:cf:c2:0c:81:81:3d:20:d6: c3:e6:25:ce:16:41:21:30:74:1f:7a:bb:bd:3c:6c:94:49:c3: ca:d5:09:0f:d8:6a:e3:5c:ea:36:f7:83:c5:90:57:31:be:53: 52:be:64:5c:ea:13:01:6a:1b:6f:6d:ce:04:bf:69:8b:16:ee: 14:d9:1f:0c:a8:6e:f1:90:79:a8:1b:fe:e0:4a:26:a6:c9:80: 9d:50:e8:4d:0c:d1:18:c5:24:dd:d3:4f:3d:a6:80:c3:4d:64: 1e:e9:c4:d5:9f:fa:0e:34:d3:d9:6a:13:cd:a0:7b:e9:ec:93: c7:01:3f:9a:9e:6e:4a:f4:0c:3e:5a:b8:e8:39:62:7b:4c:37: c2:28:52:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9WtgT/1S+G6al+onOc1InMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh YjkwYjEwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk3YmY5NzZjZGU0NTZjOWYyYzE0NmM3ZGNkZmZhMTlhYTc5MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk53U/0+IHT/u06OzNkW61jbWQxF rW0BGmew2mZcN6payjzHiejhXtwg0ANvm3hpbynoIZeFbFZkFuW3cTwZOOQxwQK0 /WD8MOGx1LFD36rQlJaYqnmk6N1BQkiWc6Hmsn6cmi1dxDL0dK/4dXY8U+G4fApc nnyowus2iyIQcM1aAisG/t48n321tuNB3H+eV71KnBoehPSiTGZY0P3Hw+7kfE6Z 8dUfL0eyCY5sVDz69+ni0mtVwMqWmnzNG6b0KgCWJKxTXuBEYWDzH9wjUE6GfqKR wEg6HPHjH24wA56SoYYa5FMYkV80i+M+1M9D4VGxxVRyuJXsASwCTpc6/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD2Xv5ds3kVsnywUbH3N/6Gap5AVMB8GA1UdIwQY MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt YTE4YzA2ZWM1MmU4LzEvUFplX2wyemVSV3lmTEJSc2ZjM19vWnFua0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4 LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYLQMA0E AgACMAcDBQMqDsJAMA0GCSqGSIb3DQEBCwUAA4IBAQACzuLxcMwXK4LPKfgSsQOA fwRWBMStAnfrc0gVeNY6wkR0/F2cYe1a4bMrR65cLcS3eB9farq0Z0JF9Yxd1tkM Ob684Jzs/1osuDGXLFFa6A1QtQyByY7TDK8d3Qs6tjuvwzNzBS0RudxPoDydiYdg jjAOkUnoz8IMgYE9INbD5iXOFkEhMHQferu9PGyUScPK1QkP2GrjXOo294PFkFcx vlNSvmRc6hMBahtvbc4Ev2mLFu4U2R8MqG7xkHmoG/7gSiamyYCdUOhNDNEYxSTd 0089poDDTWQe6cTVn/oONNPZahPNoHvp7JPHAT+anm5K9Aw+WrjoOWJ7TDfCKFIc -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:47 2026 by rpki-client