This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa File: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (raw, json) Hash identifier: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js= Subject key identifier: A5:ED:32:E8:3F:58:17:07:54:A0:E7:43:D3:2A:17:E2:4F:28:ED:18 Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1 Certificate serial: 019B7C807C0B15FB0A2646DFBE874935B921 Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 147.215.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7c:0b:15:fb:0a:26:46:df:be:87:49:35:b9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5ed32e83f58170754a0e743d32a17e24f28ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:b1:5d:b9:2f:8a:df:ce:d4:ae:8a:3c:b2: 68:e1:0e:0c:ee:51:97:fd:8c:44:64:83:2f:32:a3: 42:81:81:b9:a6:48:d6:60:97:12:b4:7b:8e:99:fe: 5a:12:68:72:30:bd:05:a7:9d:0b:14:99:a0:97:97: bf:ae:7c:be:95:87:fd:1b:a1:08:a6:59:5c:56:73: 72:51:f5:ea:96:22:a2:ea:aa:a3:af:40:01:09:0e: ef:e2:27:21:c6:0d:cc:2c:60:33:3d:82:90:e5:d7: 31:d9:a1:4e:66:e3:ea:fa:9d:ef:df:03:65:93:19: eb:7c:1a:f0:7f:44:4e:a9:06:98:73:95:f1:bf:cb: 73:ad:69:44:a1:c7:96:5b:bb:ad:d2:e7:aa:c1:53: f2:91:9b:b3:2d:0f:fb:3a:06:c6:b0:f1:3b:68:4f: 74:a0:39:74:2b:af:bc:52:46:09:3e:93:2d:a5:1f: 1d:3a:02:c5:17:1c:7b:54:92:49:72:ef:4f:a7:f1: 2b:02:23:91:f3:1e:51:eb:78:73:74:cc:94:eb:af: 64:6f:e5:bf:ee:2f:8f:46:9f:77:a9:a3:ea:fb:f7: 65:ae:e1:c8:9e:84:5e:eb:16:f7:94:0c:d3:e1:cb: f9:3e:67:45:88:46:c8:7d:41:af:44:ec:44:93:6a: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:ED:32:E8:3F:58:17:07:54:A0:E7:43:D3:2A:17:E2:4F:28:ED:18 X509v3 Authority Key Identifier: keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:30:f7:81:73:9a:0d:ad:73:ad:a0:de:23:89:5d:76:84:d9: 0f:30:bf:55:7e:07:a5:9c:31:09:d3:07:ae:16:4b:17:19:2f: 7b:ad:82:d2:4f:a4:cf:00:c0:c1:17:dd:1e:15:1b:35:4a:87: cb:03:18:72:b5:03:24:37:73:b2:28:36:57:1b:e2:2f:d1:c4: d6:d1:6e:c9:4c:83:f7:e5:a5:0d:06:4f:60:c0:30:77:01:00: 31:57:21:93:90:f5:11:bd:62:b0:24:9e:74:86:4a:84:9c:4b: de:06:3e:3a:8e:dc:f7:87:51:36:dd:32:80:f2:7c:e3:83:96: 67:00:92:9d:ce:cd:9e:9c:d8:5b:f3:11:ba:21:24:e2:73:cf: 03:be:3c:58:77:e4:6b:0a:07:43:cd:3f:5a:64:53:d3:85:5d: 22:f1:21:a4:88:a7:4f:3d:85:30:57:a6:a4:c0:00:be:bd:72: 05:13:42:ea:a2:18:35:61:fb:28:a7:cf:b6:cf:32:52:f6:71: 73:6e:fa:4a:3a:37:8e:a8:08:c5:21:28:9a:3e:2b:27:e7:e8: c9:aa:51:13:bd:cb:ed:ff:b1:b7:6a:2e:38:34:19:1a:ed:09: 26:f5:ec:6c:14:35:5c:92:86:81:36:a0:ab:c3:39:d4:73:d9: 2b:66:dc:d3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8gHwLFfsKJkbfvodJNbkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2 NWYwZDEwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWVkMzJlODNmNTgxNzA3NTRhMGU3NDNkMzJhMTdlMjRmMjhlZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4axXbkvit/O1K6KPLJo4Q4M7lGX /YxEZIMvMqNCgYG5pkjWYJcStHuOmf5aEmhyML0Fp50LFJmgl5e/rny+lYf9G6EI pllcVnNyUfXqliKi6qqjr0ABCQ7v4ichxg3MLGAzPYKQ5dcx2aFOZuPq+p3v3wNl kxnrfBrwf0ROqQaYc5Xxv8tzrWlEoceWW7ut0ueqwVPykZuzLQ/7OgbGsPE7aE90 oDl0K6+8UkYJPpMtpR8dOgLFFxx7VJJJcu9Pp/ErAiOR8x5R63hzdMyU669kb+W/ 7i+PRp93qaPq+/dlruHInoRe6xb3lAzT4cv5PmdFiEbIfUGvROxEk2rG9QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKXtMug/WBcHVKDnQ9MqF+JPKO0YMB8GA1UdIwQY MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct ODkwNTIyYzYxMDViLzEvcGUweTZEOVlGd2RVb09kRDB5b1g0azhvN1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk9cwDQYJ KoZIhvcNAQELBQADggEBAJQw94Fzmg2tc62g3iOJXXaE2Q8wv1V+B6WcMQnTB64W SxcZL3utgtJPpM8AwMEX3R4VGzVKh8sDGHK1AyQ3c7IoNlcb4i/RxNbRbslMg/fl pQ0GT2DAMHcBADFXIZOQ9RG9YrAknnSGSoScS94GPjqO3PeHUTbdMoDyfOODlmcA kp3OzZ6c2FvzEbohJOJzzwO+PFh35GsKB0PNP1pkU9OFXSLxIaSIp089hTBXpqTA AL69cgUTQuqiGDVh+yinz7bPMlL2cXNu+ko6N46oCMUhKJo+Kyfn6MmqURO9y+3/ sbdqLjg0GRrtCSb17GwUNVyShoE2oKvDOdRz2Stm3NM= -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:13 2026 by rpki-client