This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa File: PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa (raw, json) Hash identifier: zpbHMlu/w1HEUchKRFkwd6YcheD+dLbmS6kNnfJbB7M= Subject key identifier: 3D:90:06:40:62:FA:F9:68:EC:1B:77:6C:2B:E5:7C:89:7A:90:61:CF Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Certificate serial: 019B7EA72DA1E528544919D4BEDA78C77EDC Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197086 IP address blocks: 91.217.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2d:a1:e5:28:54:49:19:d4:be:da:78:c7:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d90064062faf968ec1b776c2be57c897a9061cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:77:d8:67:b9:79:32:56:52:a7:b1:b1:29: 1a:32:f2:8f:0b:0b:7c:b2:3d:6e:b8:71:5e:5c:1a: e9:86:d0:fe:d6:07:54:7e:56:9c:f0:fd:b0:21:07: a7:bf:5c:b9:12:7c:5c:5e:d2:de:22:2f:9b:19:76: 00:65:2c:53:e6:1e:fe:7f:bc:6d:c2:91:7e:b5:d9: cb:ab:47:38:da:9a:4f:9d:04:39:ac:1a:05:dd:4f: 65:ae:32:48:9a:f6:fa:60:88:d5:f4:85:ba:b0:5c: 5e:ac:71:a6:ac:45:cf:df:f6:85:a0:b9:bd:06:1b: 22:99:5b:87:4e:43:0b:8f:57:03:96:5b:ae:1b:f6: 7e:7a:81:78:43:2b:d0:6a:7f:85:20:3e:a8:b3:36: df:21:85:29:58:01:36:48:eb:6f:ac:66:38:b2:38: d5:4d:b1:d1:81:14:2e:7e:2d:9f:aa:ed:a3:af:7d: e0:d6:72:53:c8:c1:54:a2:f6:42:49:54:f4:82:22: ba:ed:de:44:1c:37:d6:3a:5f:44:43:a3:d7:57:1f: fd:3f:ca:a2:3d:63:d8:ef:6e:f0:53:66:6b:72:8c: 72:92:c0:4d:9c:5d:3a:a0:aa:e3:99:70:e7:90:36: dc:be:f9:26:f8:e2:9f:58:77:02:14:a2:34:62:a0: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:90:06:40:62:FA:F9:68:EC:1B:77:6C:2B:E5:7C:89:7A:90:61:CF X509v3 Authority Key Identifier: keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/PZAGQGL6-WjsG3dsK-V8iXqQYc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.205.0/24 Signature Algorithm: sha256WithRSAEncryption c5:8b:e9:4d:e3:86:ae:93:81:02:c1:da:e5:13:be:b8:5c:50: 4c:14:5a:7c:0b:ea:3b:91:50:c9:02:a0:04:92:73:11:b3:cc: e4:46:80:68:47:48:65:1c:c0:af:84:16:07:4e:52:27:6c:81: a1:13:2c:5c:cf:a3:28:3c:6f:5e:6e:ae:9b:be:d2:f0:78:3d: 4e:5a:80:0e:77:97:98:76:ed:b5:29:7b:c9:b7:92:a7:6e:4d: ec:4f:3c:38:6f:5d:8a:8d:b0:c3:d9:e5:35:3a:65:88:ef:7b: bd:72:1f:98:47:ce:ca:73:e5:11:4f:81:99:6f:41:3f:2d:f5: 4f:ef:0f:64:71:2d:10:68:03:5f:83:80:42:88:27:36:43:ec: a0:4e:27:03:dd:6e:d5:48:52:c6:a4:96:73:44:00:74:3a:96: cc:96:c6:31:3e:54:1d:41:0b:96:09:84:35:53:31:fe:57:dd: 95:af:3d:79:ce:fe:22:34:b1:6d:38:dc:66:dc:d5:00:6a:f5: 0a:7e:75:7c:29:46:4f:1d:29:af:5d:f2:a8:35:23:ef:ed:82: 56:6c:dc:b8:0e:6e:ca:01:70:45:eb:28:61:25:f4:13:00:b4: 9e:e4:c2:f4:dd:f0:26:f2:09:6c:62:c6:36:cb:95:87:11:06: df:13:5d:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+py2h5ShUSRnUvtp4x37cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh M2ExODMwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDkwMDY0MDYyZmFmOTY4ZWMxYjc3NmMyYmU1N2M4OTdhOTA2MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vV32Ge5eTJWUqexsSkaMvKPCwt8 sj1uuHFeXBrphtD+1gdUflac8P2wIQenv1y5EnxcXtLeIi+bGXYAZSxT5h7+f7xt wpF+tdnLq0c42ppPnQQ5rBoF3U9lrjJImvb6YIjV9IW6sFxerHGmrEXP3/aFoLm9 BhsimVuHTkMLj1cDlluuG/Z+eoF4QyvQan+FID6oszbfIYUpWAE2SOtvrGY4sjjV TbHRgRQufi2fqu2jr33g1nJTyMFUovZCSVT0giK67d5EHDfWOl9EQ6PXVx/9P8qi PWPY727wU2ZrcoxyksBNnF06oKrjmXDnkDbcvvkm+OKfWHcCFKI0YqCa9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2QBkBi+vlo7Bt3bCvlfIl6kGHPMB8GA1UdIwQY MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt ZDU4YjA5NGRmMDZjLzEvUFpBR1FHTDYtV2pzRzNkc0stVjhpWHFRWWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nNMA0G CSqGSIb3DQEBCwUAA4IBAQDFi+lN44auk4ECwdrlE764XFBMFFp8C+o7kVDJAqAE knMRs8zkRoBoR0hlHMCvhBYHTlInbIGhEyxcz6MoPG9ebq6bvtLweD1OWoAOd5eY du21KXvJt5Knbk3sTzw4b12KjbDD2eU1OmWI73u9ch+YR87Kc+URT4GZb0E/LfVP 7w9kcS0QaANfg4BCiCc2Q+ygTicD3W7VSFLGpJZzRAB0OpbMlsYxPlQdQQuWCYQ1 UzH+V92Vrz15zv4iNLFtONxm3NUAavUKfnV8KUZPHSmvXfKoNSPv7YJWbNy4Dm7K AXBF6yhhJfQTALSe5ML03fAm8glsYsY2y5WHEQbfE13p -----END CERTIFICATE-----Generated at Mon Jan 26 18:11:29 2026 by rpki-client