This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/P4g9yTAv1bQsEHzbCNOJ067tquU.roa File: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (raw, json) Hash identifier: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY= Subject key identifier: 3F:88:3D:C9:30:2F:D5:B4:2C:10:7C:DB:08:D3:89:D3:AE:ED:AA:E5 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019B7AC899659A1DD70F65F33220394F44F5 Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/P4g9yTAv1bQsEHzbCNOJ067tquU.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61157 IP address blocks: 95.174.80.0/21 maxlen: 21 2a04:2f80::/29 maxlen: 29 2a04:2f80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:65:9a:1d:d7:0f:65:f3:32:20:39:4f:44:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f883dc9302fd5b42c107cdb08d389d3aeedaae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:74:cb:43:a6:29:a8:e6:9c:13:2f:2f:ab: ae:e9:bc:79:b6:84:9a:7d:6e:ea:6f:35:d7:db:d3: f2:8c:1f:27:71:ea:02:fd:68:6f:7c:01:46:6c:14: f3:03:38:80:cd:5a:bb:39:4c:2a:f4:bc:ed:2a:3a: 11:3c:f6:27:cc:95:68:84:9f:91:cc:e5:43:2c:29: e2:0c:d1:9c:cb:c2:89:38:97:98:19:92:83:86:c6: 2d:5d:45:df:17:4c:c7:e4:b4:d1:bc:05:3a:c6:80: f0:ba:d1:b7:8c:dc:98:77:59:5b:e7:d0:3c:92:e3: 40:3d:17:22:54:8e:0e:b3:8b:be:92:1c:e5:34:94: 52:49:e0:56:98:e4:f8:8b:15:75:07:a0:48:31:11: 35:69:53:92:2a:be:0a:bc:67:08:66:9f:11:53:08: 4f:2c:8c:9a:7e:ad:8c:c8:6a:f1:a2:77:a6:9a:b6: da:55:fb:a8:6c:0c:79:3e:57:9f:11:70:89:74:07: 39:11:9b:91:ab:0a:31:cd:55:33:3b:6f:dd:18:fe: f5:d2:f1:5e:89:3a:44:0c:a4:6e:fb:da:51:1f:8c: 68:9f:3a:c2:e5:e6:69:5d:ef:87:ec:0d:20:a6:03: db:f2:4d:6b:91:a1:6c:1f:1b:28:ec:87:b6:ff:49: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:3D:C9:30:2F:D5:B4:2C:10:7C:DB:08:D3:89:D3:AE:ED:AA:E5 X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/P4g9yTAv1bQsEHzbCNOJ067tquU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.80.0/21 IPv6: 2a04:2f80::/29 Signature Algorithm: sha256WithRSAEncryption 7e:31:bf:c6:d2:9d:9a:53:c2:f4:e6:cc:89:9f:20:65:04:6e: 16:95:4b:6d:bc:a9:b6:02:07:7e:ee:b4:14:ab:76:da:a4:47: cd:08:85:bd:b3:53:96:78:d4:cf:83:4a:00:90:e1:9b:bc:4c: 17:ac:59:0a:d0:62:ad:0f:cb:88:25:92:f5:7e:7a:26:ce:53: cd:ff:20:08:d7:7b:c3:fe:09:ef:23:8b:47:3b:a6:52:9f:d6: 39:cd:a8:9c:c1:a6:96:70:1c:21:5a:83:d8:68:e6:31:47:28: d7:ed:c2:59:bb:7f:44:0a:2e:fa:6f:51:e1:1a:aa:c5:37:22: b7:54:d0:1d:69:b5:82:39:8f:e8:f3:18:99:20:46:1e:47:55: f0:3c:f2:9d:47:d7:7c:fe:e9:86:5b:ea:35:8c:7a:b3:aa:1f: 8f:43:50:51:e1:bf:69:8f:cb:79:88:c7:2c:06:77:5b:80:44: 45:7c:b6:c3:da:a8:ef:f9:b2:8d:87:9b:59:55:bf:23:5f:ea: a0:5a:35:88:0f:02:f1:e6:34:c6:3a:ce:77:b8:ef:fc:7c:ce: 81:21:89:b6:c9:b8:27:6e:b4:c5:fb:ba:07:1e:1e:9c:37:67: a3:75:c1:03:b8:20:a5:22:c7:6b:e6:94:6c:2c:4e:c1:10:47: db:0c:e8:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJllmh3XD2XzMiA5T0T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjg4M2RjOTMwMmZkNWI0MmMxMDdjZGIwOGQzODlkM2FlZWRhYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nt0y0OmKajmnBMvL6uu6bx5toSa fW7qbzXX29PyjB8nceoC/WhvfAFGbBTzAziAzVq7OUwq9LztKjoRPPYnzJVohJ+R zOVDLCniDNGcy8KJOJeYGZKDhsYtXUXfF0zH5LTRvAU6xoDwutG3jNyYd1lb59A8 kuNAPRciVI4Os4u+khzlNJRSSeBWmOT4ixV1B6BIMRE1aVOSKr4KvGcIZp8RUwhP LIyafq2MyGrxonemmrbaVfuobAx5PlefEXCJdAc5EZuRqwoxzVUzO2/dGP710vFe iTpEDKRu+9pRH4xonzrC5eZpXe+H7A0gpgPb8k1rkaFsHxso7Ie2/0mpIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD+IPckwL9W0LBB82wjTidOu7arlMB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvUDRnOXlUQXYxYlFzRUh6YkNOT0owNjd0cXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDX65QMA0E AgACMAcDBQMqBC+AMA0GCSqGSIb3DQEBCwUAA4IBAQB+Mb/G0p2aU8L05syJnyBl BG4WlUttvKm2Agd+7rQUq3bapEfNCIW9s1OWeNTPg0oAkOGbvEwXrFkK0GKtD8uI JZL1fnomzlPN/yAI13vD/gnvI4tHO6ZSn9Y5zaicwaaWcBwhWoPYaOYxRyjX7cJZ u39ECi76b1HhGqrFNyK3VNAdabWCOY/o8xiZIEYeR1XwPPKdR9d8/umGW+o1jHqz qh+PQ1BR4b9pj8t5iMcsBndbgERFfLbD2qjv+bKNh5tZVb8jX+qgWjWIDwLx5jTG Os53uO/8fM6BIYm2ybgnbrTF+7oHHh6cN2ejdcEDuCClIsdr5pRsLE7BEEfbDOh7 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:33 2026 by rpki-client