This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa File: pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa (raw, json) Hash identifier: nmGG8AuPdljBBkNiuco4BAfX85eXAF9UrVPHWokUo4s= Subject key identifier: A4:17:E7:45:A6:B8:B9:3D:9F:27:52:74:17:C7:AF:C2:D5:82:BC:2B Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7 Certificate serial: 019B77C6D375478B36D1D48132DBEEECA10B Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44574 IP address blocks: 193.9.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d3:75:47:8b:36:d1:d4:81:32:db:ee:ec:a1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a417e745a6b8b93d9f27527417c7afc2d582bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:fb:f4:2e:8d:9a:25:8d:c2:2f:fc:db:28: 65:c1:ba:77:df:5c:ca:b6:2e:5d:6e:b4:56:b1:92: de:00:fd:7f:90:25:ee:e5:2d:0d:be:38:74:c1:a0: 43:4b:42:53:30:46:f0:24:96:e5:ba:9a:96:31:64: 11:dc:05:91:13:bb:87:2a:a4:b2:8d:df:0e:b1:c6: 6d:7e:3e:fb:c7:1a:dd:8c:3b:6c:a4:1f:b3:7e:9c: a4:76:80:c4:82:5d:c3:5e:8f:05:e3:ee:4e:a0:2d: 4d:37:5f:fe:7d:dc:3d:11:0a:ac:54:90:f6:96:e6: 2b:98:24:84:ae:eb:20:56:13:9c:2b:b2:50:21:c3: 1e:fc:30:c9:3a:7e:bf:b8:ac:ea:10:4a:60:73:4e: 39:11:03:f1:04:56:04:56:c4:90:ca:6d:28:a8:a5: d7:9e:95:76:71:ac:17:36:43:81:9d:c8:46:f2:3b: ea:fd:0c:3e:82:9c:85:03:d5:60:3b:19:99:a6:7b: c0:7f:02:11:d2:61:f8:f9:16:9f:17:23:2f:18:8c: a1:8f:1e:12:51:bd:0c:44:4d:9c:9d:b7:d6:e4:b8: 17:3c:75:95:4a:67:b1:69:83:6f:65:86:d6:82:9f: 49:5c:80:41:7a:63:63:f6:a4:d4:91:d8:ec:a2:2a: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:17:E7:45:A6:B8:B9:3D:9F:27:52:74:17:C7:AF:C2:D5:82:BC:2B X509v3 Authority Key Identifier: keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.248.0/24 Signature Algorithm: sha256WithRSAEncryption 39:69:2c:af:df:97:1f:b6:ee:14:f8:01:ee:17:a7:7c:8f:5d: 17:48:b1:aa:95:79:c5:31:c5:9a:32:44:a4:ae:fa:c7:6b:2d: 30:62:c6:a1:dc:47:4f:11:35:49:40:ab:6b:01:fc:95:da:fa: cb:d1:ff:89:2e:cb:08:f0:53:38:3e:bc:41:92:1a:f6:83:26: 9e:46:63:4c:d7:7d:00:62:6e:3d:97:3c:0d:4b:04:a4:28:3c: 6a:ff:68:9c:25:a7:45:45:91:ee:ff:b3:0d:25:c9:c4:fd:21: 97:81:03:f1:7b:b5:a3:63:c4:23:cd:f0:28:4c:bd:e7:c1:03: 52:b2:d4:8b:eb:d5:2e:56:6d:21:61:1f:92:fd:6e:48:79:c7: 4b:13:32:77:55:4c:07:4e:1b:59:30:84:a1:54:9f:9e:79:f5: 62:55:d0:be:b6:09:f9:13:91:5c:b4:75:df:db:37:9a:58:20: f2:01:1f:76:b6:51:02:b9:eb:eb:8d:a9:b0:93:58:ac:a1:18: 5e:0c:a2:b3:36:2b:40:90:f7:7a:92:62:5d:e3:85:5d:b6:c7: 10:60:45:53:ab:95:f8:7e:39:60:f2:6c:8b:cd:ec:79:a8:02: cd:b6:9b:43:2b:79:0c:0b:e0:d1:28:7e:53:71:6c:20:c5:17: a1:c3:f7:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtN1R4s20dSBMtvu7KELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZjgwNzY2MGJmMmNkOTJhZWUzOTE0NDJhNTM0M2FmNzE4 YzE4YzcwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDE3ZTc0NWE2YjhiOTNkOWYyNzUyNzQxN2M3YWZjMmQ1ODJiYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3L79C6NmiWNwi/82yhlwbp331zK ti5dbrRWsZLeAP1/kCXu5S0Nvjh0waBDS0JTMEbwJJblupqWMWQR3AWRE7uHKqSy jd8OscZtfj77xxrdjDtspB+zfpykdoDEgl3DXo8F4+5OoC1NN1/+fdw9EQqsVJD2 luYrmCSErusgVhOcK7JQIcMe/DDJOn6/uKzqEEpgc045EQPxBFYEVsSQym0oqKXX npV2cawXNkOBnchG8jvq/Qw+gpyFA9VgOxmZpnvAfwIR0mH4+RafFyMvGIyhjx4S Ub0MRE2cnbfW5LgXPHWVSmexaYNvZYbWgp9JXIBBemNj9qTUkdjsoipQ4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQX50WmuLk9nydSdBfHr8LVgrwrMB8GA1UdIwQY MBaAFNb4B2YL8s2SruORRCpTQ69xjBjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgt M2ZlMTc0ODFmNjA4LzEvcEJmblJhYTR1VDJmSjFKMEY4ZXZ3dFdDdkNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzVkNjQtOWE1NS00OTBjLThjNTgtM2ZlMTc0ODFmNjA4 LzEvMXZnSFpndnl6Wkt1NDVGRUtsTkRyM0dNR01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQn4MA0G CSqGSIb3DQEBCwUAA4IBAQA5aSyv35cftu4U+AHuF6d8j10XSLGqlXnFMcWaMkSk rvrHay0wYsah3EdPETVJQKtrAfyV2vrL0f+JLssI8FM4PrxBkhr2gyaeRmNM130A Ym49lzwNSwSkKDxq/2icJadFRZHu/7MNJcnE/SGXgQPxe7WjY8QjzfAoTL3nwQNS stSL69UuVm0hYR+S/W5IecdLEzJ3VUwHThtZMIShVJ+eefViVdC+tgn5E5FctHXf 2zeaWCDyAR92tlECuevrjamwk1isoRheDKKzNitAkPd6kmJd44VdtscQYEVTq5X4 fjlg8myLzex5qALNtptDK3kMC+DRKH5TcWwgxRehw/dA -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:19 2026 by rpki-client