This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PfU-pIQUztpuCpjeK4PA6M387xY.roa File: PfU-pIQUztpuCpjeK4PA6M387xY.roa (raw, json) Hash identifier: IxKP4N/sSJx4IV1KMlr0VGqT7A6A6/R7M00aHJnoW/w= Subject key identifier: 3D:F5:3E:A4:84:14:CE:DA:6E:0A:98:DE:2B:83:C0:E8:CD:FC:EF:16 Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B7BA4C45599B67BF84D0E1470A3D08B68 Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PfU-pIQUztpuCpjeK4PA6M387xY.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 5.253.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c4:55:99:b6:7b:f8:4d:0e:14:70:a3:d0:8b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df53ea48414ceda6e0a98de2b83c0e8cdfcef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:78:93:a4:ab:a9:88:62:b6:c7:f8:62:a2: 23:20:33:ea:2a:cf:ce:3e:48:be:87:df:c5:a4:85: ee:1a:48:98:e4:b7:f9:ff:fa:80:85:d9:e6:8b:d2: de:f8:d9:b2:49:e8:26:02:40:a8:bf:e5:52:c3:10: e6:ea:f1:88:c5:cc:f5:9c:06:ad:e2:4d:8a:46:e3: fa:eb:62:22:03:f5:79:ae:49:b1:7b:7a:5b:7c:30: 9a:c4:3a:b6:be:ee:9a:59:81:35:c2:b1:2b:af:a8: 8f:93:fa:1f:f5:09:c6:3c:b3:cb:99:aa:ca:41:86: fe:bf:dd:af:0e:91:52:85:1f:10:6e:f1:43:a1:83: d7:8d:5b:a3:36:d7:74:65:dc:c4:e2:55:c4:16:fc: 1b:5a:d4:48:2c:ad:37:61:6e:41:cd:cd:8d:7d:d0: a2:98:d5:1d:a0:2a:c9:3a:93:4e:47:94:df:9b:80: 48:ad:2e:c2:da:d7:01:51:c8:29:e3:e1:f8:7d:a6: ea:7b:75:6c:fb:75:cd:50:8d:d0:62:09:21:38:d3: 4d:6a:26:86:e7:dc:76:91:0b:aa:5d:4d:e0:31:a9: 8a:5d:49:2e:5a:d0:b8:3f:78:2a:40:dc:13:7a:7b: 49:8e:9e:54:27:82:5d:63:52:92:09:de:db:ba:19: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:3E:A4:84:14:CE:DA:6E:0A:98:DE:2B:83:C0:E8:CD:FC:EF:16 X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/PfU-pIQUztpuCpjeK4PA6M387xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.189.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:8d:fe:f5:8c:0b:6b:d5:f4:e5:05:36:76:51:40:36:e6:82: 04:78:98:e7:e9:97:43:ff:fa:d4:fd:ba:db:be:2c:79:ee:b3: 17:84:ff:f2:02:16:23:7e:e0:57:32:5f:a7:b2:27:b1:c7:2c: 1c:6d:59:e7:e1:a7:c4:03:36:bc:a7:4c:09:aa:32:d0:51:a2: e9:4e:a6:c3:6d:7c:7d:a1:ab:68:b6:71:f2:c6:34:02:a1:84: 57:ba:b2:ae:cb:c0:d4:68:e0:fd:c5:7e:4a:de:d6:94:c6:2c: 32:ce:a5:76:19:01:7b:fb:2f:e0:13:1b:49:89:d5:fe:66:3f: a1:09:0e:4b:06:89:9b:76:0b:f6:f9:a2:a8:e3:b9:b6:fe:1b: d0:23:cb:d5:97:da:7a:16:63:df:d5:70:ac:81:48:87:aa:08: 1f:17:89:cd:cf:47:80:a2:da:ea:12:a0:85:1a:d0:af:2a:3d: 28:2c:ec:ef:bf:e5:c9:ab:7b:5f:01:1a:22:d1:95:1f:be:3d: 3a:bd:c9:b0:cb:45:b5:f5:4b:04:da:70:0f:cf:de:85:eb:a6: a4:49:8b:72:4a:c6:dc:25:0a:72:af:d2:e5:5a:d2:7b:bc:45: 7e:41:2f:d4:17:fc:88:f9:0b:30:70:df:ff:b7:69:fd:4c:8b: f5:b6:21:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMRVmbZ7+E0OFHCj0ItoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGY1M2VhNDg0MTRjZWRhNmUwYTk4ZGUyYjgzYzBlOGNkZmNlZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hd4k6SrqYhitsf4YqIjIDPqKs/O Pki+h9/FpIXuGkiY5Lf5//qAhdnmi9Le+NmySegmAkCov+VSwxDm6vGIxcz1nAat 4k2KRuP662IiA/V5rkmxe3pbfDCaxDq2vu6aWYE1wrErr6iPk/of9QnGPLPLmarK QYb+v92vDpFShR8QbvFDoYPXjVujNtd0ZdzE4lXEFvwbWtRILK03YW5Bzc2NfdCi mNUdoCrJOpNOR5Tfm4BIrS7C2tcBUcgp4+H4fabqe3Vs+3XNUI3QYgkhONNNaiaG 59x2kQuqXU3gMamKXUkuWtC4P3gqQNwTentJjp5UJ4JdY1KSCd7buhkDxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD31PqSEFM7abgqY3iuDwOjN/O8WMB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvUGZVLXBJUVV6dHB1Q3BqZUs0UEE2TTM4N3hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf29MA0G CSqGSIb3DQEBCwUAA4IBAQAujf71jAtr1fTlBTZ2UUA25oIEeJjn6ZdD//rU/brb vix57rMXhP/yAhYjfuBXMl+nsiexxywcbVnn4afEAza8p0wJqjLQUaLpTqbDbXx9 oatotnHyxjQCoYRXurKuy8DUaOD9xX5K3taUxiwyzqV2GQF7+y/gExtJidX+Zj+h CQ5LBombdgv2+aKo47m2/hvQI8vVl9p6FmPf1XCsgUiHqggfF4nNz0eAotrqEqCF GtCvKj0oLOzvv+XJq3tfARoi0ZUfvj06vcmwy0W19UsE2nAPz96F66akSYtySsbc JQpyr9LlWtJ7vEV+QS/UF/yI+QswcN//t2n9TIv1tiF2 -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:32 2026 by rpki-client