This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/pf2F8jqDhpJAuisFDDVK53DtP1c.roa File: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (raw, json) Hash identifier: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0= Subject key identifier: A5:FD:85:F2:3A:83:86:92:40:BA:2B:05:0C:35:4A:E7:70:ED:3F:57 Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Certificate serial: 019B7A5A84D2AF4DCF9B2A69FD81FCE78A3A Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/pf2F8jqDhpJAuisFDDVK53DtP1c.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 193.163.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:84:d2:af:4d:cf:9b:2a:69:fd:81:fc:e7:8a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fd85f23a83869240ba2b050c354ae770ed3f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:d3:5d:43:bf:e7:2f:91:1f:a8:0c:21:da: 64:39:0d:6a:83:55:5e:3f:bc:c2:76:5b:c6:b4:b9: 94:52:8f:2c:80:1f:7b:1c:1b:7d:b8:c6:f5:3d:c0: 98:3d:b2:e9:fc:47:f5:69:64:c9:5b:96:dc:95:2d: d6:66:7b:02:0a:69:d7:16:da:e6:f9:e9:78:39:0c: 9c:4d:56:fd:fb:ff:f9:de:e0:e7:f6:0b:17:4c:ae: 3a:6c:94:7c:8a:fb:e8:87:6c:25:fe:87:e4:b0:7a: 0f:b8:ea:92:de:8a:9d:e9:9e:0c:cf:c3:da:d9:ea: 23:6b:85:be:81:70:62:2e:82:5d:0f:54:9c:61:ff: 47:3d:46:87:48:23:65:c8:5d:c4:a3:a3:1e:6a:33: a8:a2:ce:21:51:31:c4:19:e0:d4:80:b6:27:a8:a1: fd:7e:65:3c:3d:40:4e:ea:c8:7d:5b:70:72:2d:20: 27:80:37:58:8f:5b:46:42:b2:7e:da:32:7d:40:18: 22:ce:50:db:62:88:e1:6f:51:c7:4f:94:1e:ee:cf: fd:ba:a3:69:4a:dd:36:ae:c7:21:b8:d0:59:6e:79: 06:5d:c8:41:29:ef:f1:46:ea:81:b7:48:e7:fd:c0: 77:3d:a1:c0:bd:dc:5f:2d:48:06:7d:fe:04:dc:ab: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:85:F2:3A:83:86:92:40:BA:2B:05:0C:35:4A:E7:70:ED:3F:57 X509v3 Authority Key Identifier: keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/pf2F8jqDhpJAuisFDDVK53DtP1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.128.0/24 Signature Algorithm: sha256WithRSAEncryption 53:fd:50:8a:f9:63:2c:43:ad:7d:f3:bc:b3:b1:33:e8:f2:90: 71:3e:f1:65:d7:1f:80:43:a0:1d:83:42:92:91:b6:b8:79:ae: eb:cf:a0:87:ef:99:7b:05:b0:eb:b5:19:ad:14:1e:bf:e2:61: 2e:55:37:a3:0c:49:fb:bf:d9:85:dd:62:92:bc:f4:31:1e:84: e3:7b:d9:bc:c9:74:01:2c:f0:5f:f3:d6:c5:b0:e1:c6:b5:98: 42:3a:73:0c:9c:18:48:eb:46:42:90:21:a5:40:bd:4b:d3:d7: a0:ea:ee:7d:76:44:ba:74:c7:79:d1:9b:72:77:28:92:11:4a: e1:b1:e0:d5:26:f7:e5:82:5a:36:94:ba:76:9c:f1:36:30:01: 11:26:98:95:16:03:53:b4:60:12:c6:8d:18:f7:92:75:b0:a3: 0b:d6:ea:78:14:41:af:f2:1f:9a:99:65:9b:69:13:88:39:0f: f5:80:ef:a5:42:2d:21:e4:1d:49:c6:93:42:33:70:1e:93:f2: 7c:cb:76:c6:b2:2a:0d:98:7b:a9:9e:23:7e:d3:c5:d3:29:86: 08:61:a9:e5:90:57:f7:c8:f6:57:57:03:26:14:02:f4:5d:a4: 94:56:20:ae:f1:b0:02:e8:21:b1:78:f1:a5:8f:f5:e9:87:1b: 1b:cb:eb:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoTSr03Pmypp/YH854o6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw OWVkMjcwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZkODVmMjNhODM4NjkyNDBiYTJiMDUwYzM1NGFlNzcwZWQzZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymLTXUO/5y+RH6gMIdpkOQ1qg1Ve P7zCdlvGtLmUUo8sgB97HBt9uMb1PcCYPbLp/Ef1aWTJW5bclS3WZnsCCmnXFtrm +el4OQycTVb9+//53uDn9gsXTK46bJR8ivvoh2wl/ofksHoPuOqS3oqd6Z4Mz8Pa 2eoja4W+gXBiLoJdD1ScYf9HPUaHSCNlyF3Eo6MeajOoos4hUTHEGeDUgLYnqKH9 fmU8PUBO6sh9W3ByLSAngDdYj1tGQrJ+2jJ9QBgizlDbYojhb1HHT5Qe7s/9uqNp St02rschuNBZbnkGXchBKe/xRuqBt0jn/cB3PaHAvdxfLUgGff4E3Kv4bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKX9hfI6g4aSQLorBQw1Sudw7T9XMB8GA1UdIwQY MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt ODU0MzRmNjE2OWYxLzEvcGYyRjhqcURocEpBdWlzRkREVks1M0R0UDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaOAMA0G CSqGSIb3DQEBCwUAA4IBAQBT/VCK+WMsQ61987yzsTPo8pBxPvFl1x+AQ6Adg0KS kba4ea7rz6CH75l7BbDrtRmtFB6/4mEuVTejDEn7v9mF3WKSvPQxHoTje9m8yXQB LPBf89bFsOHGtZhCOnMMnBhI60ZCkCGlQL1L09eg6u59dkS6dMd50ZtydyiSEUrh seDVJvflglo2lLp2nPE2MAERJpiVFgNTtGASxo0Y95J1sKML1up4FEGv8h+amWWb aROIOQ/1gO+lQi0h5B1JxpNCM3Aek/J8y3bGsioNmHupniN+08XTKYYIYanlkFf3 yPZXVwMmFAL0XaSUViCu8bAC6CGxePGlj/Xphxsby+vQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:34 2026 by rpki-client