This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa File: pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa (raw, json) Hash identifier: HWDJb2FM7pBuEZ/mgtOH62KOhrf0YhTnBeYZLVDImO0= Subject key identifier: A5:F7:B9:07:4A:A5:D5:1D:E3:09:82:B8:7C:6C:F9:0A:D2:EB:59:D3 Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321 Certificate serial: 019B7F15351B0B3B88F9BAD76962A34B6B43 Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213799 IP address blocks: 185.7.242.0/24 maxlen: 24 185.7.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:35:1b:0b:3b:88:f9:ba:d7:69:62:a3:4b:6b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5f7b9074aa5d51de30982b87c6cf90ad2eb59d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:08:f7:68:f0:66:b6:95:db:46:0f:94:4f: e9:0f:4d:9a:53:00:7f:65:69:36:05:fc:f5:bb:20: 38:fd:84:9b:dd:a9:e6:c5:13:17:03:d8:18:a1:98: a4:e7:88:dd:fb:4a:65:ae:a0:f3:58:9a:91:74:f4: 8a:6f:9f:85:89:17:02:cf:37:2e:a2:bc:79:25:ca: 98:f4:bd:9b:07:a4:b3:d5:eb:00:24:52:89:6a:42: 4d:99:01:ca:4e:65:78:5d:07:7d:a5:21:18:89:b3: ad:78:0f:8f:06:5c:c2:72:64:1c:13:c1:8d:de:c4: 94:8a:54:66:dc:44:59:88:58:66:bc:00:40:4f:73: af:d7:87:8f:ca:71:41:2b:f5:f5:9a:ad:0f:14:ac: 05:b7:0a:a9:d2:f8:6c:9c:f2:8f:da:f2:88:45:3c: 33:5b:0a:24:28:99:cc:d0:e3:0b:88:f2:8d:82:80: 84:05:e5:ed:1b:55:5f:fe:99:07:6a:ef:dc:87:b4: 3f:96:a7:67:46:ae:99:89:6d:e7:d2:b1:2d:78:3b: fe:1b:fd:17:37:35:88:27:d4:7d:d6:f4:a0:64:5f: de:ad:87:fa:b8:d0:d7:ba:30:cc:fc:67:4a:96:67: 7d:cb:9c:53:a2:fb:d5:f7:1f:b5:8d:36:6f:8b:58: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F7:B9:07:4A:A5:D5:1D:E3:09:82:B8:7C:6C:F9:0A:D2:EB:59:D3 X509v3 Authority Key Identifier: keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/pfe5B0ql1R3jCYK4fGz5CtLrWdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.242.0/23 Signature Algorithm: sha256WithRSAEncryption 43:75:38:01:13:9a:7e:09:be:d0:c1:85:06:ca:f1:b1:de:90: 74:1c:6a:45:c0:1b:3e:93:16:5e:31:28:65:da:7f:82:76:76: d6:81:65:34:33:51:41:a4:64:87:32:5e:cb:30:4c:5d:72:3f: f3:93:48:46:28:00:97:b3:60:c6:12:a0:11:99:f5:96:f1:2f: 2f:e4:da:48:9e:10:e5:98:2e:28:50:e5:d0:30:23:5e:0f:8a: a0:59:46:33:a6:df:1a:a4:88:7f:10:c1:c5:44:85:c3:36:c6: 26:11:db:2f:a5:28:4d:67:83:d5:26:61:05:3b:01:15:08:a9: d8:84:a2:7a:13:14:9b:1c:0e:7e:46:67:43:92:7f:31:27:55: 22:97:61:fd:cd:b0:7a:4a:55:77:68:64:2a:5e:c8:ed:79:e7: 34:eb:f6:62:64:5a:d2:b1:b3:9f:5f:35:19:7a:fb:aa:0c:15: 90:33:dc:ad:ca:2c:4b:97:e4:ac:6b:0b:ce:3e:4e:d8:e6:b1: 74:67:ce:5f:d1:0d:12:ba:3b:b9:2c:52:6a:0c:23:66:34:82: 08:40:69:b5:d1:4b:03:05:55:76:45:5e:a5:4e:69:75:69:88: 70:45:b4:ce:3c:33:a1:ab:31:b9:3a:f9:f1:2e:61:b5:b5:52: ac:42:10:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTUbCzuI+brXaWKjS2tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx ZDMzMjEwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWY3YjkwNzRhYTVkNTFkZTMwOTgyYjg3YzZjZjkwYWQyZWI1OWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArioI92jwZraV20YPlE/pD02aUwB/ ZWk2Bfz1uyA4/YSb3anmxRMXA9gYoZik54jd+0plrqDzWJqRdPSKb5+FiRcCzzcu orx5JcqY9L2bB6Sz1esAJFKJakJNmQHKTmV4XQd9pSEYibOteA+PBlzCcmQcE8GN 3sSUilRm3ERZiFhmvABAT3Ov14ePynFBK/X1mq0PFKwFtwqp0vhsnPKP2vKIRTwz WwokKJnM0OMLiPKNgoCEBeXtG1Vf/pkHau/ch7Q/lqdnRq6ZiW3n0rEteDv+G/0X NzWIJ9R91vSgZF/erYf6uNDXujDM/GdKlmd9y5xTovvV9x+1jTZvi1h4KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKX3uQdKpdUd4wmCuHxs+QrS61nTMB8GA1UdIwQY MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt NDNkZjQ3ZDVhMWU3LzEvcGZlNUIwcWwxUjNqQ1lLNGZHejVDdExyV2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3 LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQfyMA0G CSqGSIb3DQEBCwUAA4IBAQBDdTgBE5p+Cb7QwYUGyvGx3pB0HGpFwBs+kxZeMShl 2n+CdnbWgWU0M1FBpGSHMl7LMExdcj/zk0hGKACXs2DGEqARmfWW8S8v5NpInhDl mC4oUOXQMCNeD4qgWUYzpt8apIh/EMHFRIXDNsYmEdsvpShNZ4PVJmEFOwEVCKnY hKJ6ExSbHA5+RmdDkn8xJ1Uil2H9zbB6SlV3aGQqXsjteec06/ZiZFrSsbOfXzUZ evuqDBWQM9ytyixLl+SsawvOPk7Y5rF0Z85f0Q0Suju5LFJqDCNmNIIIQGm10UsD BVV2RV6lTml1aYhwRbTOPDOhqzG5OvnxLmG1tVKsQhA+ -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:54 2026 by rpki-client