This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/P3FM9rV7W0taknkodonPY5DGZHs.roa File: P3FM9rV7W0taknkodonPY5DGZHs.roa (raw, json) Hash identifier: 9EVLVpsGVeql2F+yrefxgDiR84qHt275s3nguMC8kkk= Subject key identifier: 3F:71:4C:F6:B5:7B:5B:4B:5A:92:79:28:76:89:CF:63:90:C6:64:7B Certificate issuer: /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7 Certificate serial: 019B7B35D7F399E702DF82BB9A9C030585C9 Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/P3FM9rV7W0taknkodonPY5DGZHs.roa Signing time: Thu 01 Jan 2026 20:18:04 +0000 ROA not before: Thu 01 Jan 2026 20:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39743 IP address blocks: 5.254.28.0/24 maxlen: 24 5.254.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d7:f3:99:e7:02:df:82:bb:9a:9c:03:05:85:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7 Validity Not Before: Jan 1 20:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f714cf6b57b5b4b5a9279287689cf6390c6647b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:10:f1:ab:18:1d:dc:94:15:b0:26:5c:3f: f2:f8:c2:7c:82:5b:60:1b:b2:a5:58:e8:f9:6a:2c: 79:3f:39:e5:45:45:8b:51:5d:2a:ad:ce:18:9f:65: 01:f8:74:f3:b3:17:71:3d:d5:08:59:20:05:05:aa: 08:d2:e6:4b:99:fa:58:2b:28:95:ed:04:c1:70:29: dc:bf:53:f5:4f:ef:b4:c9:62:2f:5d:ab:81:4e:7f: f7:08:2e:0d:0f:11:3d:be:25:0e:30:2a:cd:30:d1: 19:4e:e4:7f:a4:10:bd:b7:b6:7c:3d:6c:0a:7f:2d: 48:ab:f7:b5:ab:c7:3e:39:92:63:f6:f8:f1:eb:7d: e7:6a:82:02:27:66:85:4b:00:46:3e:a0:31:cf:d9: 55:8a:9e:91:98:60:34:8a:94:26:63:ea:b6:71:7e: e4:57:f8:ed:a5:75:81:ee:ca:ec:e6:3f:a4:50:5a: 70:ea:36:a9:5d:c8:15:9e:b8:e6:dc:01:7b:77:b4: 86:83:54:7f:8e:01:5e:82:f2:1a:4c:55:31:6a:d4: 33:e7:bf:55:de:d0:d3:c7:22:ef:c7:f7:a5:33:e7: 9a:e3:f6:5c:c8:cb:9f:76:2b:b1:b8:c3:3a:08:25: ac:10:0f:e5:cc:5b:40:9c:3e:02:cf:7b:4f:b5:0d: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:71:4C:F6:B5:7B:5B:4B:5A:92:79:28:76:89:CF:63:90:C6:64:7B X509v3 Authority Key Identifier: keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/P3FM9rV7W0taknkodonPY5DGZHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.254.28.0/24 5.254.49.0/24 Signature Algorithm: sha256WithRSAEncryption 16:27:98:c4:4f:e3:2c:fc:50:32:ca:0b:0c:df:50:e0:db:2a: 6d:c2:84:ed:28:6f:15:a4:6d:6c:b7:15:13:cb:29:22:73:8f: 9c:c8:63:2c:95:d5:41:84:71:88:cc:da:f0:a3:3b:1d:9b:5d: 59:98:d6:f2:f6:3e:3c:da:7e:36:67:cf:3e:9f:7d:ed:f8:7f: 8a:d6:89:37:5f:01:57:3f:e8:19:62:e1:1a:5c:c7:76:17:aa: 1d:87:bb:da:fa:62:14:c7:5d:81:48:b4:d9:1c:24:15:db:4e: bf:b1:a6:30:99:92:39:2d:e0:0f:d7:da:c5:e8:d2:ae:5e:2a: fb:70:7f:27:00:1b:cf:8e:10:96:ff:64:a4:1d:9c:e3:eb:5f: 99:20:5c:95:b8:e2:ca:6e:04:c6:fa:36:3c:d4:a2:7d:1d:ed: 67:54:74:94:28:54:12:e2:6e:d0:85:92:6a:d1:d2:42:da:7d: 7d:11:87:7f:7f:84:67:95:9a:a8:4a:dc:da:b7:e0:8b:e6:08: 9f:19:f8:ea:5b:82:80:4e:6a:02:c7:84:64:5b:0f:1c:b6:24: c1:4d:e1:31:d8:ec:9e:58:ea:a4:2f:e3:47:23:6e:70:b0:c6: 5e:af:0f:b8:33:b5:49:6c:d6:6f:52:52:99:f0:5d:c8:63:6a: 4b:4b:26:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NdfzmecC34K7mpwDBYXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2I0NGM0YTc5MzFjNjZhNmZmOWU5MmRiYjMyY2E3MjNk NGNjZjcwHhcNMjYwMTAxMjAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjcxNGNmNmI1N2I1YjRiNWE5Mjc5Mjg3Njg5Y2Y2MzkwYzY2NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eIQ8asYHdyUFbAmXD/y+MJ8gltg G7KlWOj5aix5PznlRUWLUV0qrc4Yn2UB+HTzsxdxPdUIWSAFBaoI0uZLmfpYKyiV 7QTBcCncv1P1T++0yWIvXauBTn/3CC4NDxE9viUOMCrNMNEZTuR/pBC9t7Z8PWwK fy1Iq/e1q8c+OZJj9vjx633naoICJ2aFSwBGPqAxz9lVip6RmGA0ipQmY+q2cX7k V/jtpXWB7srs5j+kUFpw6japXcgVnrjm3AF7d7SGg1R/jgFegvIaTFUxatQz579V 3tDTxyLvx/elM+ea4/ZcyMufdiuxuMM6CCWsEA/lzFtAnD4Cz3tPtQ0Z2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9xTPa1e1tLWpJ5KHaJz2OQxmR7MB8GA1UdIwQY MBaAFFl7RMSnkxxmpv+ektuzLKcj1Mz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAt MGFiMjFiMmYyNzU0LzEvUDNGTTlyVjdXMHRha25rb2RvblBZNURHWkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85NWZmOGYtNjZiYy00YjExLTk4ZjAtMGFiMjFiMmYyNzU0 LzEvV1h0RXhLZVRIR2FtXzU2UzI3TXNweVBVelBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABf4cAwQA Bf4xMA0GCSqGSIb3DQEBCwUAA4IBAQAWJ5jET+Ms/FAyygsM31Dg2yptwoTtKG8V pG1stxUTyykic4+cyGMsldVBhHGIzNrwozsdm11ZmNby9j482n42Z88+n33t+H+K 1ok3XwFXP+gZYuEaXMd2F6odh7va+mIUx12BSLTZHCQV206/saYwmZI5LeAP19rF 6NKuXir7cH8nABvPjhCW/2SkHZzj61+ZIFyVuOLKbgTG+jY81KJ9He1nVHSUKFQS 4m7QhZJq0dJC2n19EYd/f4RnlZqoStzat+CL5gifGfjqW4KATmoCx4RkWw8ctiTB TeEx2OyeWOqkL+NHI25wsMZerw+4M7VJbNZvUlKZ8F3IY2pLSyaJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:42 2026 by rpki-client