This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/PfIfsUmHCecT0quWuMMLRmwtU_o.roa File: PfIfsUmHCecT0quWuMMLRmwtU_o.roa (raw, json) Hash identifier: 1Lg6Rrqt3IOywh0QJkAE12er2k2miVzqT2LnmDFzGxQ= Subject key identifier: 3D:F2:1F:B1:49:87:09:E7:13:D2:AB:96:B8:C3:0B:46:6C:2D:53:FA Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Certificate serial: 019B7DCB348B36A6C5B50F02BC9C3E107A29 Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/PfIfsUmHCecT0quWuMMLRmwtU_o.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 5.183.16.0/24 maxlen: 24 5.183.17.0/24 maxlen: 24 2a0e:7400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:34:8b:36:a6:c5:b5:0f:02:bc:9c:3e:10:7a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df21fb1498709e713d2ab96b8c30b466c2d53fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:81:81:d6:0c:16:4f:94:61:85:d4:95:54: 88:ce:58:44:03:b0:cb:c3:98:db:fb:c5:a4:c9:86: 84:37:d2:82:7d:0c:67:8e:7a:d4:60:60:0a:05:72: 04:c7:df:f4:f5:62:4a:11:97:8b:b8:88:84:09:f3: 4e:65:2e:ec:2f:62:58:1d:98:1c:4b:5d:93:91:06: 51:28:00:79:92:fd:cc:39:a9:9c:6d:8e:61:a5:89: 59:31:d5:fa:b4:62:04:4d:0d:9d:77:b5:9d:9b:68: 51:98:c4:03:d2:d3:8b:97:ae:1c:b7:cf:6c:ff:7b: 27:e5:d0:19:c8:bb:be:73:f1:cb:5e:75:71:af:ea: 43:5f:07:91:26:8b:1f:e0:9b:af:9e:16:ba:de:78: 3c:1c:ba:30:3c:07:d2:08:ad:26:d2:ab:1b:eb:93: 47:13:22:fc:48:27:b4:97:04:9a:03:f1:59:51:a9: 5f:a0:ec:23:6a:96:37:8d:41:8d:b4:13:ca:9a:43: 3a:d9:1f:f7:ef:db:49:e2:48:5d:d5:70:28:36:ae: cf:a6:a9:5b:97:11:0f:00:b1:ef:c6:db:35:7f:67: da:20:b9:c7:1c:a0:c2:9c:b1:c7:ce:03:b5:9c:09: 1f:a3:00:aa:92:24:56:1d:0f:bf:f0:9e:ca:18:b8: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F2:1F:B1:49:87:09:E7:13:D2:AB:96:B8:C3:0B:46:6C:2D:53:FA X509v3 Authority Key Identifier: keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/PfIfsUmHCecT0quWuMMLRmwtU_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.16.0/23 IPv6: 2a0e:7400::/29 Signature Algorithm: sha256WithRSAEncryption 5c:d5:0c:21:3a:7f:2b:d0:eb:b5:5d:82:2d:cb:3f:ca:d2:3a: f2:8d:22:df:22:1c:f4:0c:70:7f:a1:45:60:bc:0c:99:4b:d9: de:3f:6b:90:eb:a9:1a:a2:1c:8e:d2:e6:b5:a8:11:02:67:37: 4d:a7:d1:62:49:52:06:f1:21:c5:7f:a5:9a:c1:7e:bf:ff:39: 2d:3d:38:e2:8f:f4:e5:97:18:d8:12:01:1f:0c:22:66:09:db: b8:b7:a6:93:10:70:00:99:23:4b:38:09:26:0c:dc:8d:50:b6: ea:75:4d:e1:44:e3:13:9b:08:09:fe:22:b8:6c:75:ea:87:37: fd:d2:05:61:4d:b9:08:40:e1:30:29:98:09:1a:09:9a:0b:19: a5:ca:dd:60:43:ab:a6:ff:01:cf:ff:c5:71:c6:8b:a9:6c:ab: 72:31:1a:46:4e:1b:d1:a7:52:92:e2:54:88:a3:0a:20:93:14: 75:0b:1c:8c:68:f6:ef:e3:04:b5:69:a2:c1:5a:f7:23:d5:e8: f0:23:fd:88:50:ac:df:56:e0:5c:b8:12:ca:6f:cd:b9:70:5f: 59:e9:5b:e2:2f:29:74:26:d5:a9:14:5c:69:35:0a:c1:0c:15: 9d:5d:7b:ab:a5:c1:b2:c7:4c:ba:2b:1e:19:5f:fa:66:67:03: 83:86:f1:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yzSLNqbFtQ8CvJw+EHopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw MWVkYjUwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGYyMWZiMTQ5ODcwOWU3MTNkMmFiOTZiOGMzMGI0NjZjMmQ1M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllWBgdYMFk+UYYXUlVSIzlhEA7DL w5jb+8WkyYaEN9KCfQxnjnrUYGAKBXIEx9/09WJKEZeLuIiECfNOZS7sL2JYHZgc S12TkQZRKAB5kv3MOamcbY5hpYlZMdX6tGIETQ2dd7Wdm2hRmMQD0tOLl64ct89s /3sn5dAZyLu+c/HLXnVxr+pDXweRJosf4Juvnha63ng8HLowPAfSCK0m0qsb65NH EyL8SCe0lwSaA/FZUalfoOwjapY3jUGNtBPKmkM62R/379tJ4khd1XAoNq7Ppqlb lxEPALHvxts1f2faILnHHKDCnLHHzgO1nAkfowCqkiRWHQ+/8J7KGLg4yQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD3yH7FJhwnnE9KrlrjDC0ZsLVP6MB8GA1UdIwQY MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt OWJiZDFlZWJlMzNlLzEvUGZJZnNVbUhDZWNUMHF1V3VNTUxSbXd0VV9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBBbcQMA0E AgACMAcDBQMqDnQAMA0GCSqGSIb3DQEBCwUAA4IBAQBc1QwhOn8r0Ou1XYItyz/K 0jryjSLfIhz0DHB/oUVgvAyZS9neP2uQ66kaohyO0ua1qBECZzdNp9FiSVIG8SHF f6WawX6//zktPTjij/TllxjYEgEfDCJmCdu4t6aTEHAAmSNLOAkmDNyNULbqdU3h ROMTmwgJ/iK4bHXqhzf90gVhTbkIQOEwKZgJGgmaCxmlyt1gQ6um/wHP/8Vxxoup bKtyMRpGThvRp1KS4lSIowogkxR1CxyMaPbv4wS1aaLBWvcj1ejwI/2IUKzfVuBc uBLKb825cF9Z6VviLyl0JtWpFFxpNQrBDBWdXXurpcGyx0y6Kx4ZX/pmZwODhvFB -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:32 2026 by rpki-client