This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/pf4imHRU2e6GfZe8rQKhzIc5LBg.roa File: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (raw, json) Hash identifier: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg= Subject key identifier: A5:FE:22:98:74:54:D9:EE:86:7D:97:BC:AD:02:A1:CC:87:39:2C:18 Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4 Certificate serial: 019B7B3684346A9279618232E44B55A1340B Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/pf4imHRU2e6GfZe8rQKhzIc5LBg.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47540 IP address blocks: 185.97.214.0/24 maxlen: 24 2a13:cfc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:84:34:6a:92:79:61:82:32:e4:4b:55:a1:34:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fe22987454d9ee867d97bcad02a1cc87392c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:0b:26:69:78:e3:0c:1e:78:73:5e:26:16: d4:ed:85:2c:43:98:8c:4c:34:c4:c0:b0:c5:fd:e8: 87:f7:3c:5a:ca:92:38:8b:1b:7a:1f:6f:e7:83:83: 5f:4a:9d:89:14:1a:79:9d:a7:bb:70:51:c2:00:88: 57:6c:b3:59:9f:b1:0d:93:1f:9c:19:36:f8:83:b3: 0d:9f:35:42:eb:bb:1d:c3:cb:a8:9e:14:de:b8:45: 7e:cd:52:e2:45:bb:b8:56:0f:cc:a2:49:db:3f:0d: 72:68:65:45:9c:be:1a:ac:cf:31:fe:c4:ba:4d:02: 1a:c4:e0:07:26:bf:1a:40:20:86:2c:ec:7c:fd:43: fa:ab:f1:ba:f9:14:ec:0c:66:43:c1:cc:36:13:0c: a1:56:0e:ee:2e:08:a6:2f:3f:f7:0c:59:08:4d:95: 90:7e:6f:53:2e:16:61:1c:80:1c:95:cd:d5:52:4a: b7:53:8d:ff:e6:b5:f1:99:aa:69:2d:14:3e:a8:9d: 05:35:fb:5d:ac:b8:01:ba:9e:21:b1:2f:e0:2e:8c: b0:df:4a:cb:a3:60:ee:a6:b1:39:19:6e:f8:cb:b9: d8:71:19:e4:a3:d5:0c:72:ca:74:55:a0:d9:85:87: 1a:c6:eb:55:1d:d7:19:48:2c:bf:f2:df:28:81:70: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:22:98:74:54:D9:EE:86:7D:97:BC:AD:02:A1:CC:87:39:2C:18 X509v3 Authority Key Identifier: keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/pf4imHRU2e6GfZe8rQKhzIc5LBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.214.0/24 IPv6: 2a13:cfc0::/29 Signature Algorithm: sha256WithRSAEncryption 64:b3:e1:84:12:71:0f:44:99:c2:c1:b4:8e:44:8e:ef:36:6a: 2f:b2:48:7b:78:f2:43:12:05:db:4f:62:0b:41:da:b3:e9:3d: 42:44:53:75:08:71:ee:d1:4b:9b:32:d2:89:ee:f9:a8:b2:cc: 26:57:bc:dd:bd:aa:5f:fc:63:f2:17:c1:91:1b:33:91:09:21: 31:46:74:66:65:ce:13:d7:bf:da:82:5b:ee:aa:2b:fb:2b:61: 49:9e:33:44:4b:66:d7:f7:98:39:5a:8d:8a:82:a7:3c:95:2f: dc:e3:23:13:6f:21:33:d0:72:a3:f7:ba:3b:28:9b:3e:30:c5: 60:e3:5d:08:3f:5e:b6:c3:36:b5:29:83:7f:47:f2:8d:fb:ef: 16:ce:af:f3:e3:69:bf:86:ab:66:ea:ec:bb:37:b7:0b:2a:0c: 05:65:a2:b8:5d:9d:05:04:d3:14:32:5e:2f:e9:e2:c0:8a:4c: aa:86:ee:3f:14:7a:9c:3b:73:a4:30:51:01:48:75:c9:8b:84: c4:95:63:02:b6:1a:d0:93:c9:d7:b3:31:1e:9b:79:85:ca:90: 18:ec:a4:1d:17:27:e3:84:4a:72:c2:4a:49:ff:71:7d:64:ea: d1:c5:40:4d:bb:49:35:6d:d9:28:6b:c3:ae:8b:e3:50:bb:32: b7:d0:c1:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NoQ0apJ5YYIy5EtVoTQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5 Mzc1YjQwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZlMjI5ODc0NTRkOWVlODY3ZDk3YmNhZDAyYTFjYzg3MzkyYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgLJml44wweeHNeJhbU7YUsQ5iM TDTEwLDF/eiH9zxaypI4ixt6H2/ng4NfSp2JFBp5nae7cFHCAIhXbLNZn7ENkx+c GTb4g7MNnzVC67sdw8uonhTeuEV+zVLiRbu4Vg/MoknbPw1yaGVFnL4arM8x/sS6 TQIaxOAHJr8aQCCGLOx8/UP6q/G6+RTsDGZDwcw2EwyhVg7uLgimLz/3DFkITZWQ fm9TLhZhHIAclc3VUkq3U43/5rXxmappLRQ+qJ0FNftdrLgBup4hsS/gLoyw30rL o2DuprE5GW74y7nYcRnko9UMcsp0VaDZhYcaxutVHdcZSCy/8t8ogXAh6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKX+Iph0VNnuhn2XvK0CocyHOSwYMB8GA1UdIwQY MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt NDA2MGYyMTFmM2MzLzEvcGY0aW1IUlUyZTZHZlplOHJRS2h6SWM1TEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWHWMA0E AgACMAcDBQMqE8/AMA0GCSqGSIb3DQEBCwUAA4IBAQBks+GEEnEPRJnCwbSORI7v Nmovskh7ePJDEgXbT2ILQdqz6T1CRFN1CHHu0UubMtKJ7vmosswmV7zdvapf/GPy F8GRGzORCSExRnRmZc4T17/aglvuqiv7K2FJnjNES2bX95g5Wo2Kgqc8lS/c4yMT byEz0HKj97o7KJs+MMVg410IP162wza1KYN/R/KN++8Wzq/z42m/hqtm6uy7N7cL KgwFZaK4XZ0FBNMUMl4v6eLAikyqhu4/FHqcO3OkMFEBSHXJi4TElWMCthrQk8nX szEem3mFypAY7KQdFyfjhEpywkpJ/3F9ZOrRxUBNu0k1bdkoa8Oui+NQuzK30MEW -----END CERTIFICATE-----Generated at Mon Jan 26 02:18:43 2026 by rpki-client