This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/pEFtj6Nro20j5spflBdzEuX8rMA.roa File: pEFtj6Nro20j5spflBdzEuX8rMA.roa (raw, json) Hash identifier: MXSSlBPtlMFzBs9OUlqNPvPkqCnFxlhb4rh8/UD72i0= Subject key identifier: A4:41:6D:8F:A3:6B:A3:6D:23:E6:CA:5F:94:17:73:12:E5:FC:AC:C0 Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019B7F843A00CD274ABFBE6CBA9AC449FE8B Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/pEFtj6Nro20j5spflBdzEuX8rMA.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396362 IP address blocks: 92.243.84.0/24 maxlen: 24 176.223.109.0/24 maxlen: 24 2a0f:ea82::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3a:00:cd:27:4a:bf:be:6c:ba:9a:c4:49:fe:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4416d8fa36ba36d23e6ca5f94177312e5fcacc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:9c:00:6f:25:98:76:f9:59:c6:01:13:84: 93:93:9c:02:c5:51:eb:cd:a3:0a:e0:8d:0d:b3:6f: 29:b7:33:1a:fa:05:b1:5f:ca:f8:60:9f:13:27:96: 0c:ad:bf:81:2a:47:96:74:eb:72:d9:28:40:a9:41: 39:6d:78:17:fd:5f:9f:4f:11:0b:7f:c5:97:09:52: 12:36:14:7f:b4:4b:a0:7b:b4:51:dd:4d:69:8b:43: c4:04:77:1e:d6:07:c1:c5:4a:6f:0c:a3:e6:5b:63: f1:c9:1e:26:69:f0:ec:7c:e1:a9:ee:95:26:b5:79: 5c:d9:af:85:24:db:90:61:9b:6a:6e:c0:66:b7:e2: 5a:5a:55:35:98:62:25:09:e0:96:d5:21:4c:be:db: 31:1e:37:39:42:52:d8:de:a1:4b:34:ed:31:a7:d0: 32:68:98:7d:a6:a7:4a:d2:b4:1b:11:60:27:31:44: b3:49:14:b0:f6:cf:70:4b:5b:1c:44:a1:7b:29:e5: 1e:1d:95:68:6a:ab:d8:32:b1:d5:69:b2:94:03:14: bb:a4:21:60:93:03:b9:d5:9b:00:e6:9c:b2:2f:60: 33:85:48:2a:d4:0c:64:9c:79:21:3f:71:c4:9a:31: e7:41:31:86:b1:f6:f6:da:6d:d1:7a:4a:24:83:4b: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:6D:8F:A3:6B:A3:6D:23:E6:CA:5F:94:17:73:12:E5:FC:AC:C0 X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/pEFtj6Nro20j5spflBdzEuX8rMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.84.0/24 176.223.109.0/24 IPv6: 2a0f:ea82::/32 Signature Algorithm: sha256WithRSAEncryption 37:92:52:e5:b8:03:6d:7c:b7:f4:67:96:ef:82:44:b5:84:a9: 7c:c6:57:36:85:10:93:73:f4:73:e8:57:36:f5:2c:df:5d:95: df:2e:7c:ba:ed:43:74:53:60:4e:83:8b:3f:39:00:fb:e5:df: df:00:94:39:e9:9a:35:6b:4c:26:dd:34:e5:37:2a:8e:e9:df: 9e:97:2d:81:67:94:85:af:e7:c6:d3:52:89:c6:bb:ca:53:56: db:16:09:8a:90:29:be:7b:64:44:6f:2f:84:d5:73:6d:b5:7a: c1:54:65:a7:25:fd:4d:b2:e7:0b:19:1e:87:50:23:6f:0d:4f: 8e:98:8f:a9:89:8b:fb:ae:e9:75:25:cd:b1:4b:42:ca:7e:db: 7d:6e:7f:cb:a3:fa:cf:0d:76:49:5b:d1:9f:db:dc:65:c0:b8: 3e:6a:53:3a:d5:df:52:57:70:b3:90:eb:59:4c:91:90:49:fb: 10:dd:b2:09:3e:a9:e3:6c:a3:1a:70:32:c8:31:1f:0a:c7:a3: 28:62:ee:45:9d:86:e9:58:b3:11:99:15:9c:17:85:03:a5:91: 35:93:17:29:66:c9:f4:97:57:f1:e5:51:b1:70:8a:a6:9f:47: f1:e1:ce:f3:b6:31:a3:4e:16:b2:6a:cd:79:1f:0d:b3:58:aa: ed:c8:91:47 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hDoAzSdKv75suprESf6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQxNmQ4ZmEzNmJhMzZkMjNlNmNhNWY5NDE3NzMxMmU1ZmNhY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI6cAG8lmHb5WcYBE4STk5wCxVHr zaMK4I0Ns28ptzMa+gWxX8r4YJ8TJ5YMrb+BKkeWdOty2ShAqUE5bXgX/V+fTxEL f8WXCVISNhR/tEuge7RR3U1pi0PEBHce1gfBxUpvDKPmW2PxyR4mafDsfOGp7pUm tXlc2a+FJNuQYZtqbsBmt+JaWlU1mGIlCeCW1SFMvtsxHjc5QlLY3qFLNO0xp9Ay aJh9pqdK0rQbEWAnMUSzSRSw9s9wS1scRKF7KeUeHZVoaqvYMrHVabKUAxS7pCFg kwO51ZsA5pyyL2AzhUgq1AxknHkhP3HEmjHnQTGGsfb22m3Rekokg0t1oQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKRBbY+ja6NtI+bKX5QXcxLl/KzAMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvcEVGdGo2TnJvMjBqNXNwZmxCZHpFdVg4ck1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXPNUAwQA sN9tMA0EAgACMAcDBQAqD+qCMA0GCSqGSIb3DQEBCwUAA4IBAQA3klLluANtfLf0 Z5bvgkS1hKl8xlc2hRCTc/Rz6Fc29SzfXZXfLny67UN0U2BOg4s/OQD75d/fAJQ5 6Zo1a0wm3TTlNyqO6d+ely2BZ5SFr+fG01KJxrvKU1bbFgmKkCm+e2REby+E1XNt tXrBVGWnJf1NsucLGR6HUCNvDU+OmI+piYv7rul1Jc2xS0LKftt9bn/Lo/rPDXZJ W9Gf29xlwLg+alM61d9SV3CzkOtZTJGQSfsQ3bIJPqnjbKMacDLIMR8Kx6MoYu5F nYbpWLMRmRWcF4UDpZE1kxcpZsn0l1fx5VGxcIqmn0fx4c7ztjGjThayas15Hw2z WKrtyJFH -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:17 2026 by rpki-client