This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/PRYnC3oeTfy-W24rdCg_1_UYkfk.roa File: PRYnC3oeTfy-W24rdCg_1_UYkfk.roa (raw, json) Hash identifier: WhAD+KHHEL29n/DvCO+VMSo/5s8yhsaBcbSWYfdk1pc= Subject key identifier: 3D:16:27:0B:7A:1E:4D:FC:BE:5B:6E:2B:74:28:3F:D7:F5:18:91:F9 Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Certificate serial: 019B7B35C195E901F726C6B729A0AF6F255F Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/PRYnC3oeTfy-W24rdCg_1_UYkfk.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47331 IP address blocks: 93.155.0.0/17 maxlen: 24 178.217.236.0/22 maxlen: 24 2a00:1d30::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:95:e9:01:f7:26:c6:b7:29:a0:af:6f:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d16270b7a1e4dfcbe5b6e2b74283fd7f51891f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:f3:5c:d7:b1:2a:90:24:9a:3d:95:ea:5b: 11:af:d0:51:15:a1:34:d5:3d:cf:8f:2c:ac:bf:d1: 90:02:e6:7b:5c:4b:5a:11:a3:8a:f1:97:6a:5d:56: bf:38:33:39:7f:29:dc:1f:f6:d5:f0:51:93:eb:df: 4d:44:b3:d1:23:f7:dc:0a:8a:5c:8c:b1:74:a8:b3: 21:7b:49:f0:aa:06:ce:23:2f:44:b2:22:cf:d5:8e: 10:45:f2:59:8c:b9:a6:55:1c:98:01:8b:2f:75:fe: 98:c3:bb:11:f7:15:9f:62:6c:91:5b:fa:07:20:09: 78:52:74:fe:a4:08:88:d4:73:3f:c2:de:b1:f0:8f: a4:1c:8b:a9:36:45:0e:2d:d3:4d:b5:58:56:df:83: e8:16:40:bb:22:3e:10:72:f2:b7:d2:3c:41:90:4e: 89:06:42:86:94:4d:71:52:06:d7:12:ca:02:37:37: 8e:3f:ac:c7:04:37:34:41:36:8e:c6:fa:5a:24:00: e4:f0:39:28:00:6d:80:c0:8a:2a:ef:96:c1:80:c3: 64:d3:a8:d9:09:c7:38:aa:81:c1:ad:ae:51:ac:7e: c6:04:38:2f:0b:0f:88:5c:ef:5b:81:a7:3b:59:a6: e0:c9:62:48:1c:74:38:8b:99:c1:47:5a:86:04:6b: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:27:0B:7A:1E:4D:FC:BE:5B:6E:2B:74:28:3F:D7:F5:18:91:F9 X509v3 Authority Key Identifier: keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/PRYnC3oeTfy-W24rdCg_1_UYkfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.155.0.0/17 178.217.236.0/22 IPv6: 2a00:1d30::/29 Signature Algorithm: sha256WithRSAEncryption 3f:b5:b2:c3:04:08:2a:ad:ca:86:4a:b5:1b:fa:9e:41:27:6e: ae:82:6f:bf:36:5f:f7:8e:93:8b:1c:fb:16:79:d9:73:db:1f: 96:7d:e0:e1:70:34:91:10:29:de:da:93:99:9f:59:c0:f2:7b: b7:06:55:aa:04:29:f9:5b:ed:88:73:e9:b3:0a:d9:e3:89:70: 70:4f:7e:ad:0f:8b:9d:3f:13:df:c4:31:ac:a6:15:1b:bc:9b: 22:cd:45:b3:71:35:2f:75:a5:d8:5b:3e:bc:6e:87:2c:5b:86: 58:3d:43:fb:32:59:3f:4d:df:c6:b8:24:fc:93:aa:dc:cf:62: ae:0c:b2:61:ad:33:79:41:28:4f:24:2e:82:ce:95:dc:a4:db: 54:8a:29:fc:8d:c4:73:3d:4e:c2:f8:84:54:89:db:9a:20:00: fb:ca:44:aa:c7:f2:2b:42:ef:12:f0:fb:ec:64:15:59:a7:ff: f3:16:3e:60:bb:0a:0a:6b:6d:78:8d:c5:8a:5c:68:3f:0c:b7: 08:a1:54:56:06:44:66:c0:b4:1a:d5:97:1f:c0:e6:59:db:d7: 19:08:e9:59:96:74:ea:57:78:34:e0:fd:6f:87:b4:60:a5:85: d6:7e:42:1b:ae:ea:dc:cc:74:e9:b5:4d:7b:8a:4f:5a:15:e9: f3:7f:19:1f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NcGV6QH3Jsa3KaCvbyVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5 MzViODgwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDE2MjcwYjdhMWU0ZGZjYmU1YjZlMmI3NDI4M2ZkN2Y1MTg5MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7zXNexKpAkmj2V6lsRr9BRFaE0 1T3Pjyysv9GQAuZ7XEtaEaOK8ZdqXVa/ODM5fyncH/bV8FGT699NRLPRI/fcCopc jLF0qLMhe0nwqgbOIy9EsiLP1Y4QRfJZjLmmVRyYAYsvdf6Yw7sR9xWfYmyRW/oH IAl4UnT+pAiI1HM/wt6x8I+kHIupNkUOLdNNtVhW34PoFkC7Ij4QcvK30jxBkE6J BkKGlE1xUgbXEsoCNzeOP6zHBDc0QTaOxvpaJADk8DkoAG2AwIoq75bBgMNk06jZ Ccc4qoHBra5RrH7GBDgvCw+IXO9bgac7WabgyWJIHHQ4i5nBR1qGBGsFKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD0WJwt6Hk38vltuK3QoP9f1GJH5MB8GA1UdIwQY MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt ZmM2MGZiMTI1NTczLzEvUFJZbkMzb2VUZnktVzI0cmRDZ18xX1VZa2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHXZsAAwQC stnsMA0EAgACMAcDBQMqAB0wMA0GCSqGSIb3DQEBCwUAA4IBAQA/tbLDBAgqrcqG SrUb+p5BJ26ugm+/Nl/3jpOLHPsWedlz2x+WfeDhcDSRECne2pOZn1nA8nu3BlWq BCn5W+2Ic+mzCtnjiXBwT36tD4udPxPfxDGsphUbvJsizUWzcTUvdaXYWz68bocs W4ZYPUP7Mlk/Td/GuCT8k6rcz2KuDLJhrTN5QShPJC6CzpXcpNtUiin8jcRzPU7C +IRUiduaIAD7ykSqx/IrQu8S8PvsZBVZp//zFj5guwoKa214jcWKXGg/DLcIoVRW BkRmwLQa1ZcfwOZZ29cZCOlZlnTqV3g04P1vh7RgpYXWfkIbrurczHTptU17ik9a Fenzfxkf -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:40 2026 by rpki-client