This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa File: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (raw, json) Hash identifier: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc= Subject key identifier: 3F:05:D9:DF:A7:B0:F9:C5:06:64:4A:04:8C:FB:1D:8B:09:70:18:38 Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702 Certificate serial: 019B7E38834CA5C018E9CD0B8CFDFE636B75 Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 91.221.250.0/23 maxlen: 23 141.78.128.0/18 maxlen: 18 185.234.32.0/22 maxlen: 22 185.250.220.0/22 maxlen: 22 2a02:2761::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:4c:a5:c0:18:e9:cd:0b:8c:fd:fe:63:6b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f05d9dfa7b0f9c506644a048cfb1d8b09701838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:ff:14:ec:c2:4a:56:98:ab:3d:8a:95:d4: 40:cc:72:92:8f:97:e0:67:87:3e:c7:91:9d:cd:a7: 97:e3:d9:62:cd:71:9b:56:d7:76:e3:b7:b2:17:0b: 8e:80:74:f1:ae:82:26:6c:fb:86:ad:78:67:c1:0d: 4f:04:7b:54:ae:3b:3f:b4:df:48:da:5c:d3:1d:55: 6c:d6:5a:42:86:a5:c2:b0:86:ed:bc:31:1c:e2:a0: 4b:a8:4d:52:2d:32:5a:81:6b:f1:59:60:e9:ab:17: 44:d3:4b:2a:d4:ec:3f:70:be:31:6a:9d:5d:31:d8: a1:0d:52:05:b9:88:60:d3:a4:1e:bb:d8:3b:c7:a6: b4:bb:9b:5a:5b:37:e5:e8:24:23:11:0f:58:c7:20: 13:76:3e:0f:86:31:0b:60:29:5c:a1:24:12:a9:39: 9f:50:9d:9e:5e:a6:57:6e:92:09:f1:02:88:cd:46: bb:48:ba:43:91:33:01:22:fb:69:cd:24:71:33:01: 52:75:5a:4a:08:d6:2a:27:81:c5:de:53:47:66:e1: 99:e6:de:20:00:62:8e:6a:4a:96:a6:a8:4c:5e:68: 0a:f0:4e:55:ed:49:46:1c:19:82:65:e0:40:fd:61: 9b:06:8f:73:fa:f2:22:7c:c3:a1:2e:b9:48:f3:6e: c4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:05:D9:DF:A7:B0:F9:C5:06:64:4A:04:8C:FB:1D:8B:09:70:18:38 X509v3 Authority Key Identifier: keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.250.0/23 141.78.128.0/18 185.234.32.0/22 185.250.220.0/22 IPv6: 2a02:2761::/32 Signature Algorithm: sha256WithRSAEncryption 03:73:b0:84:5e:13:99:47:16:fe:a2:57:ee:8c:9f:9d:b2:65: 45:eb:4e:b2:62:09:1a:a1:b9:30:1d:77:e1:2b:56:05:d0:03: ed:e0:ff:fe:e5:c9:b6:10:d2:79:ad:41:e0:d9:e0:1e:22:41: 83:1a:98:1d:a2:b1:8f:73:21:37:f3:fe:4f:9f:d9:b1:ca:9a: 72:43:18:13:f7:44:f7:8e:2e:49:42:2e:c1:f2:f4:23:7e:84: 64:9c:be:c9:25:c5:33:1d:74:75:1a:cd:98:21:a3:0d:7c:19: 2c:4d:1f:59:35:5a:ab:14:c5:74:ab:13:5a:d9:94:2b:a2:51: 2c:4a:b9:84:ad:bc:45:30:c2:77:a2:bc:1e:16:56:d6:f0:b2: 04:81:f7:6e:5d:79:f2:1a:9f:6c:0c:2a:38:20:40:c3:2d:f1: c0:e4:1c:ba:a1:83:4c:82:b4:a3:78:40:ec:3f:5d:54:0b:c5: dd:d7:63:c7:75:8e:9c:73:68:79:0d:26:b3:49:8f:4c:d9:40: 80:22:7c:1f:b5:3e:64:ee:fb:ac:c8:57:fa:46:20:14:74:3f: ce:df:a3:02:8a:f9:c3:15:53:e8:63:57:13:dc:92:07:cf:56: 43:af:1b:e8:a4:f3:09:4e:c1:20:8e:3a:dc:47:cd:6a:26:b5: ba:a9:cb:ca -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+OINMpcAY6c0LjP3+Y2t1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl YTU3MDIwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjA1ZDlkZmE3YjBmOWM1MDY2NDRhMDQ4Y2ZiMWQ4YjA5NzAxODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvb/FOzCSlaYqz2KldRAzHKSj5fg Z4c+x5GdzaeX49lizXGbVtd247eyFwuOgHTxroImbPuGrXhnwQ1PBHtUrjs/tN9I 2lzTHVVs1lpChqXCsIbtvDEc4qBLqE1SLTJagWvxWWDpqxdE00sq1Ow/cL4xap1d MdihDVIFuYhg06Qeu9g7x6a0u5taWzfl6CQjEQ9YxyATdj4PhjELYClcoSQSqTmf UJ2eXqZXbpIJ8QKIzUa7SLpDkTMBIvtpzSRxMwFSdVpKCNYqJ4HF3lNHZuGZ5t4g AGKOakqWpqhMXmgK8E5V7UlGHBmCZeBA/WGbBo9z+vIifMOhLrlI827EvQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFD8F2d+nsPnFBmRKBIz7HYsJcBg4MB8GA1UdIwQY MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt ZjIyNzQ5NjVjMDk1LzEvUHdYWjM2ZXctY1VHWkVvRWpQc2Rpd2x3R0RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1 LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW936AwQG jU6AAwQCueogAwQCufrcMA0EAgACMAcDBQAqAidhMA0GCSqGSIb3DQEBCwUAA4IB AQADc7CEXhOZRxb+olfujJ+dsmVF606yYgkaobkwHXfhK1YF0APt4P/+5cm2ENJ5 rUHg2eAeIkGDGpgdorGPcyE38/5Pn9mxyppyQxgT90T3ji5JQi7B8vQjfoRknL7J JcUzHXR1Gs2YIaMNfBksTR9ZNVqrFMV0qxNa2ZQrolEsSrmErbxFMMJ3orweFlbW 8LIEgfduXXnyGp9sDCo4IEDDLfHA5By6oYNMgrSjeEDsP11UC8Xd12PHdY6cc2h5 DSazSY9M2UCAInwftT5k7vusyFf6RiAUdD/O36MCivnDFVPoY1cT3JIHz1ZDrxvo pPMJTsEgjjrcR81qJrW6qcvK -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:50 2026 by rpki-client