This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/1pw_z4ALbNcIneHL4Ij33SpACpI.roa File: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (raw, json) Hash identifier: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY= Subject key identifier: D6:9C:3F:CF:80:0B:6C:D7:08:9D:E1:CB:E0:88:F7:DD:2A:40:0A:92 Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Certificate serial: 019B7C12FF6CD5BF5279CC1E2DA11493696F Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/1pw_z4ALbNcIneHL4Ij33SpACpI.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15401 IP address blocks: 2.56.156.0/23 maxlen: 23 2.56.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ff:6c:d5:bf:52:79:cc:1e:2d:a1:14:93:69:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d69c3fcf800b6cd7089de1cbe088f7dd2a400a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:88:cf:e2:cc:35:05:68:af:c8:63:40:0a: 20:0f:b9:41:f0:0b:de:15:ea:13:86:c1:37:59:95: 6d:d7:c5:36:65:25:ac:56:16:d1:5a:58:96:1f:c6: 7a:b7:1d:41:4f:18:ad:4b:e0:20:1c:e7:13:19:58: 0c:38:2d:dc:cc:af:ca:5e:da:14:1e:20:5a:48:84: fb:76:bd:f7:22:16:08:a6:a8:a9:37:c3:ce:f5:f6: 7e:75:4c:b8:c1:a0:8f:6a:f0:ee:48:83:33:fc:40: dd:4e:dc:5b:45:9e:4a:42:83:08:9d:a8:bf:2c:20: 53:c1:dc:6d:ef:28:80:38:41:7f:91:c8:87:71:1a: 31:f1:6c:18:ab:77:d2:38:d1:7c:69:a0:60:ed:f4: bb:8a:68:ca:a9:55:e9:d7:a1:79:d7:99:38:7c:a9: 3b:99:80:13:f0:40:15:de:d6:46:55:db:04:74:b7: 59:51:0c:65:ce:ea:2c:f0:4a:cd:8c:dd:3f:9b:c5: 34:49:c2:be:7c:3f:36:b1:c0:ce:6b:f6:ae:68:af: 00:42:36:4c:89:42:6a:1c:d9:56:93:b2:9c:9d:68: 24:00:19:18:29:43:26:f9:30:76:3f:9b:b9:da:21: 01:2e:65:a3:2e:02:29:86:6f:64:f7:d4:df:da:b6: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:3F:CF:80:0B:6C:D7:08:9D:E1:CB:E0:88:F7:DD:2A:40:0A:92 X509v3 Authority Key Identifier: keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/1pw_z4ALbNcIneHL4Ij33SpACpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.156.0-2.56.158.255 Signature Algorithm: sha256WithRSAEncryption 36:bf:a8:e0:ff:3b:ef:e6:55:37:f3:33:2c:28:8e:d5:77:80: 34:43:a0:24:4a:1c:f0:4f:f9:7f:c1:ec:bc:d1:08:b3:24:ed: 85:0c:8d:9e:5c:85:22:08:ff:9e:1f:ca:b4:db:ae:4c:55:5c: 1a:46:a5:9f:f6:d5:d4:24:2c:13:87:c4:54:dc:2a:fd:dd:78: c4:c5:f4:c0:fb:06:af:06:22:e1:d3:39:de:0b:70:0e:0e:d8: b3:48:85:d5:86:e6:bc:7d:07:1c:e5:b4:cf:bf:e2:e6:08:9c: f0:c6:7c:af:84:49:fb:09:3b:8c:65:00:18:d2:b1:47:fd:b8: 34:21:9e:d5:47:1d:3e:6e:42:b2:2e:0c:4f:e1:3f:ad:b9:52: 79:7c:64:cc:24:6c:f3:40:a4:d0:09:1d:18:df:8a:14:fb:a0: 20:79:f8:11:74:33:9b:b0:2d:c0:1e:f4:3a:07:bb:27:b5:14: fb:13:1b:2e:b9:06:2e:e3:38:16:47:62:4c:5f:63:f5:15:c4: b2:9e:43:e5:85:98:24:02:a1:0a:3e:7a:fe:2c:e3:31:00:30: b2:78:98:89:b1:b1:f2:11:d2:4e:17:33:63:d2:ea:7b:28:15: 65:71:6f:13:f5:08:dc:eb:e4:e2:d8:3a:78:c6:13:72:30:f3: 42:c9:ae:29 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Ev9s1b9SecweLaEUk2lvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy NDk4ZWYwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjljM2ZjZjgwMGI2Y2Q3MDg5ZGUxY2JlMDg4ZjdkZDJhNDAwYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQuIz+LMNQVor8hjQAogD7lB8Ave FeoThsE3WZVt18U2ZSWsVhbRWliWH8Z6tx1BTxitS+AgHOcTGVgMOC3czK/KXtoU HiBaSIT7dr33IhYIpqipN8PO9fZ+dUy4waCPavDuSIMz/EDdTtxbRZ5KQoMInai/ LCBTwdxt7yiAOEF/kciHcRox8WwYq3fSONF8aaBg7fS7imjKqVXp16F515k4fKk7 mYAT8EAV3tZGVdsEdLdZUQxlzuos8ErNjN0/m8U0ScK+fD82scDOa/auaK8AQjZM iUJqHNlWk7KcnWgkABkYKUMm+TB2P5u52iEBLmWjLgIphm9k99Tf2rYacQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNacP8+AC2zXCJ3hy+CI990qQAqSMB8GA1UdIwQY MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt NzMwYzRkNDcyYThhLzEvMXB3X3o0QUxiTmNJbmVITDRJajMzU3BBQ3BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAICOJwD BAACOJ4wDQYJKoZIhvcNAQELBQADggEBADa/qOD/O+/mVTfzMywojtV3gDRDoCRK HPBP+X/B7LzRCLMk7YUMjZ5chSII/54fyrTbrkxVXBpGpZ/21dQkLBOHxFTcKv3d eMTF9MD7Bq8GIuHTOd4LcA4O2LNIhdWG5rx9BxzltM+/4uYInPDGfK+ESfsJO4xl ABjSsUf9uDQhntVHHT5uQrIuDE/hP625Unl8ZMwkbPNApNAJHRjfihT7oCB5+BF0 M5uwLcAe9DoHuye1FPsTGy65Bi7jOBZHYkxfY/UVxLKeQ+WFmCQCoQo+ev4s4zEA MLJ4mImxsfIR0k4XM2PS6nsoFWVxbxP1CNzr5OLYOnjGE3Iw80LJrik= -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:16 2026 by rpki-client