This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/pWNFve3JFzOWEIOafmb-tq3ozgk.roa File: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (raw, json) Hash identifier: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M= Subject key identifier: A5:63:45:BD:ED:C9:17:33:96:10:83:9A:7E:66:FE:B6:AD:E8:CE:09 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019B7AC899FB79501DCCF18D68CDC5D6CCBE Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/pWNFve3JFzOWEIOafmb-tq3ozgk.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62216 IP address blocks: 95.174.80.0/21 maxlen: 21 185.144.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:fb:79:50:1d:cc:f1:8d:68:cd:c5:d6:cc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a56345bdedc917339610839a7e66feb6ade8ce09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:17:25:34:a5:26:2e:cb:4c:42:28:e7:dd: cb:ba:61:d6:50:36:8e:d5:4d:df:46:67:ba:7c:30: b3:54:4f:ff:ab:71:d9:43:14:9d:b1:28:7a:5b:72: 91:36:58:fd:0f:97:74:00:30:7c:4e:70:8e:28:50: 3e:25:19:2e:d1:01:09:b7:c2:60:f0:50:99:a8:ae: fc:7f:9d:1a:46:8d:38:79:46:bc:f7:24:82:e3:94: 0d:eb:70:aa:81:35:9a:e7:6d:0a:1e:31:69:78:22: f4:04:34:86:93:a7:ef:cc:d0:fb:66:38:83:5f:33: 4f:e0:a8:63:8a:f0:6a:df:0e:f4:4e:ed:8d:5f:34: 1c:c6:c0:1b:50:0a:56:9e:06:98:42:3c:68:74:31: e8:12:13:2e:81:44:de:35:c9:ef:fb:4b:90:84:3a: f2:93:5c:62:89:a2:8b:40:b4:8e:d0:b1:7f:c5:ed: d6:c5:24:c7:10:a4:84:aa:d5:63:69:86:38:d2:16: 7f:22:de:13:f2:fb:c5:5b:99:b8:ec:3c:f0:ae:e8: c6:f7:18:54:cd:f7:d3:93:14:24:7b:b6:00:80:be: fd:cc:ca:2e:c7:00:5f:78:ed:fd:07:f0:3e:fd:32: 9e:44:7e:e0:97:89:f6:4b:86:91:19:61:a3:79:6f: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:45:BD:ED:C9:17:33:96:10:83:9A:7E:66:FE:B6:AD:E8:CE:09 X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/pWNFve3JFzOWEIOafmb-tq3ozgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.80.0/21 185.144.16.0/22 Signature Algorithm: sha256WithRSAEncryption 04:a4:4e:44:cd:20:b0:db:a5:48:90:1c:af:f4:05:87:17:c5: 89:f5:ee:c1:ce:a6:eb:9a:5c:63:0e:80:41:1d:c8:e9:eb:c0: 9a:82:84:79:e1:ba:12:33:b4:29:77:6e:c9:0e:78:8a:15:db: c8:6c:40:ad:eb:66:c6:8d:56:ae:44:7e:0d:f4:70:1e:a7:ef: 7b:ac:15:b9:56:cc:d3:41:88:94:f6:41:00:39:53:91:44:35: 50:54:20:27:1f:c7:f7:12:db:ab:00:82:67:ce:c2:9b:45:df: 2c:9a:22:ce:fb:01:be:e2:c9:15:c8:c6:c0:e4:c5:89:3a:29: 9a:b9:54:e3:14:a3:6c:7a:71:a4:d6:b0:c4:ac:a7:63:f2:ea: 45:4e:63:a0:d0:46:29:9a:ba:cb:67:9e:21:48:97:0f:9c:3d: d0:c4:aa:b9:ff:ea:6a:9d:d3:b3:00:a8:ed:40:27:c3:a7:5b: 24:5c:ac:5a:de:9e:5c:87:bf:2e:84:db:a7:b5:5c:f3:c6:35: fb:f3:66:ec:c5:a0:e1:a8:b3:00:06:a8:0a:67:5e:ce:ef:88: ef:99:42:e6:c8:ba:47:37:7e:35:ba:f4:84:4f:f1:30:78:c2: 40:b4:3f:83:94:e5:e7:c5:c5:b6:3b:43:c8:b1:73:a8:2a:da: d2:e9:ca:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yJn7eVAdzPGNaM3F1sy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTYzNDViZGVkYzkxNzMzOTYxMDgzOWE3ZTY2ZmViNmFkZThjZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8cXJTSlJi7LTEIo593LumHWUDaO 1U3fRme6fDCzVE//q3HZQxSdsSh6W3KRNlj9D5d0ADB8TnCOKFA+JRku0QEJt8Jg 8FCZqK78f50aRo04eUa89ySC45QN63CqgTWa520KHjFpeCL0BDSGk6fvzND7ZjiD XzNP4KhjivBq3w70Tu2NXzQcxsAbUApWngaYQjxodDHoEhMugUTeNcnv+0uQhDry k1xiiaKLQLSO0LF/xe3WxSTHEKSEqtVjaYY40hZ/It4T8vvFW5m47DzwrujG9xhU zffTkxQke7YAgL79zMouxwBfeO39B/A+/TKeRH7gl4n2S4aRGWGjeW+/kQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKVjRb3tyRczlhCDmn5m/rat6M4JMB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvcFdORnZlM0pGek9XRUlPYWZtYi10cTNvemdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX65QAwQC uZAQMA0GCSqGSIb3DQEBCwUAA4IBAQAEpE5EzSCw26VIkByv9AWHF8WJ9e7Bzqbr mlxjDoBBHcjp68CagoR54boSM7Qpd27JDniKFdvIbECt62bGjVauRH4N9HAep+97 rBW5VszTQYiU9kEAOVORRDVQVCAnH8f3EturAIJnzsKbRd8smiLO+wG+4skVyMbA 5MWJOimauVTjFKNsenGk1rDErKdj8upFTmOg0EYpmrrLZ54hSJcPnD3QxKq5/+pq ndOzAKjtQCfDp1skXKxa3p5ch78uhNuntVzzxjX782bsxaDhqLMABqgKZ17O74jv mULmyLpHN341uvSET/EweMJAtD+DlOXnxcW2O0PIsXOoKtrS6cpK -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:39 2026 by rpki-client