This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/PWseQmzX6iLF_AKjxIoDYYEV-zs.roa File: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (raw, json) Hash identifier: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4= Subject key identifier: 3D:6B:1E:42:6C:D7:EA:22:C5:FC:02:A3:C4:8A:03:61:81:15:FB:3B Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B77C6E3ADE840E61FB4C72C3D418C8CC8 Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/PWseQmzX6iLF_AKjxIoDYYEV-zs.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 185.38.28.0/22 maxlen: 24 185.95.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e3:ad:e8:40:e6:1f:b4:c7:2c:3d:41:8c:8c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6b1e426cd7ea22c5fc02a3c48a03618115fb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:68:bc:eb:64:29:17:7e:8a:b3:27:cb:1f: ea:6b:8b:76:f8:10:b8:ea:99:a5:88:02:8f:54:37: 11:aa:b1:5d:ee:45:a7:a2:52:9e:6e:9c:e3:61:14: 01:3c:fb:48:f5:3f:cc:e2:f7:d1:8b:0b:50:6f:e3: 76:85:5e:eb:09:5a:74:b0:16:16:70:40:c3:cd:c4: 87:06:76:45:44:56:7d:27:af:fe:46:65:e9:87:e0: 37:80:94:80:24:2f:2e:ab:55:9b:9e:ce:6e:cc:cb: bb:8e:7f:8f:9e:fc:08:fb:8a:a9:1e:94:03:ce:9d: b3:b1:91:34:7c:dc:a1:f9:5f:54:e1:55:7e:64:8a: e9:23:79:10:8b:a5:59:18:ab:5a:13:78:5e:f5:4b: 92:c8:7a:0c:93:a9:e0:74:ac:ac:b2:f6:6b:35:4e: b4:ef:2c:e5:23:e1:81:68:3d:1e:2e:5b:69:f6:13: 25:5e:73:14:95:3c:1d:30:26:cf:3c:49:e6:b4:9a: b7:57:66:5a:9b:68:40:94:38:c5:00:2f:84:67:6f: ca:1e:52:49:60:3f:99:39:5c:64:ab:ec:6b:00:9e: 7a:19:9b:65:be:c2:c9:f0:72:60:89:5b:78:17:a5: d9:d2:70:1a:95:37:ab:37:dc:07:3a:e1:08:54:68: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6B:1E:42:6C:D7:EA:22:C5:FC:02:A3:C4:8A:03:61:81:15:FB:3B X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/PWseQmzX6iLF_AKjxIoDYYEV-zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.28.0/22 185.95.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:ce:fd:f8:cc:08:31:e3:45:6c:42:56:72:97:9f:c1:2c:fc: a6:45:82:82:22:bd:bd:6b:44:a7:be:5f:78:1f:61:ff:bb:13: 01:0c:ef:fd:1c:59:ba:dc:7a:ec:03:cb:5e:e0:fa:8f:0d:91: ca:a3:ce:80:93:f3:b3:af:02:f0:d5:15:ed:f0:87:36:63:3a: 2f:f2:cb:df:ff:5d:5e:dc:e1:63:74:74:d2:66:46:c9:3b:72: 48:ed:25:23:7b:b5:80:b3:1f:e4:6f:d1:f1:a0:fa:ff:de:2d: 94:4f:c9:cf:f7:3c:30:43:2c:b9:95:32:33:85:e9:5f:c7:68: f2:e1:4f:95:ff:92:20:84:c3:da:dc:ad:a4:ab:49:8e:84:84: 12:ef:c9:fd:c3:05:34:f8:c9:71:33:eb:25:7d:b7:79:c2:2e: 77:38:6b:09:89:b8:f5:9a:84:2b:07:46:1b:54:2f:d1:40:7d: 91:9c:9b:83:51:a3:56:10:ff:6d:eb:4b:82:6a:7e:9f:24:31: 4a:be:85:45:9a:78:fd:83:0e:55:29:9f:55:70:3f:c9:08:d2: af:ac:13:3e:65:32:61:d4:9b:79:b6:c6:5b:57:cb:52:7e:34: cc:77:9d:a7:fc:05:1c:ab:3e:78:ba:b4:03:39:8f:13:3f:24: 09:ec:68:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuOt6EDmH7THLD1BjIzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDZiMWU0MjZjZDdlYTIyYzVmYzAyYTNjNDhhMDM2MTgxMTVmYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9ovOtkKRd+irMnyx/qa4t2+BC4 6pmliAKPVDcRqrFd7kWnolKebpzjYRQBPPtI9T/M4vfRiwtQb+N2hV7rCVp0sBYW cEDDzcSHBnZFRFZ9J6/+RmXph+A3gJSAJC8uq1Wbns5uzMu7jn+PnvwI+4qpHpQD zp2zsZE0fNyh+V9U4VV+ZIrpI3kQi6VZGKtaE3he9UuSyHoMk6ngdKyssvZrNU60 7yzlI+GBaD0eLltp9hMlXnMUlTwdMCbPPEnmtJq3V2Zam2hAlDjFAC+EZ2/KHlJJ YD+ZOVxkq+xrAJ56GZtlvsLJ8HJgiVt4F6XZ0nAalTerN9wHOuEIVGj36wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1rHkJs1+oixfwCo8SKA2GBFfs7MB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvUFdzZVFtelg2aUxGX0FLanhJb0RZWUVWLXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSYcAwQC uV/8MA0GCSqGSIb3DQEBCwUAA4IBAQAszv34zAgx40VsQlZyl5/BLPymRYKCIr29 a0Snvl94H2H/uxMBDO/9HFm63HrsA8te4PqPDZHKo86Ak/OzrwLw1RXt8Ic2Yzov 8svf/11e3OFjdHTSZkbJO3JI7SUje7WAsx/kb9HxoPr/3i2UT8nP9zwwQyy5lTIz helfx2jy4U+V/5IghMPa3K2kq0mOhIQS78n9wwU0+MlxM+slfbd5wi53OGsJibj1 moQrB0YbVC/RQH2RnJuDUaNWEP9t60uCan6fJDFKvoVFmnj9gw5VKZ9VcD/JCNKv rBM+ZTJh1Jt5tsZbV8tSfjTMd52n/AUcqz54urQDOY8TPyQJ7Gg4 -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:04 2026 by rpki-client