This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/PFnY4kTboScF7x2R1W4dqWTPCxQ.roa File: PFnY4kTboScF7x2R1W4dqWTPCxQ.roa (raw, json) Hash identifier: XbKsqDkCVh90zaTGGDz8GhZpOlFD7W7OIgl1sSXpZIo= Subject key identifier: 3C:59:D8:E2:44:DB:A1:27:05:EF:1D:91:D5:6E:1D:A9:64:CF:0B:14 Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Certificate serial: 019B7A59B8777C0DBEB8339FA942B577EB89 Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/PFnY4kTboScF7x2R1W4dqWTPCxQ.roa Signing time: Thu 01 Jan 2026 16:17:38 +0000 ROA not before: Thu 01 Jan 2026 16:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41634 IP address blocks: 45.154.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:b8:77:7c:0d:be:b8:33:9f:a9:42:b5:77:eb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Validity Not Before: Jan 1 16:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c59d8e244dba12705ef1d91d56e1da964cf0b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:1d:4c:3f:d3:e4:b0:70:87:37:97:a8:e1: 6a:8d:d6:f2:d1:74:39:fd:0d:a5:dc:ef:f7:df:ab: 88:6d:11:39:e8:36:dc:83:94:4f:af:aa:ac:ca:30: 28:5f:6a:21:af:da:7e:22:56:44:59:37:e8:b3:6b: da:20:f6:e8:cb:1b:1b:64:72:90:19:fe:ff:2c:db: fb:a3:40:9d:2c:a0:77:7a:bd:0b:3f:2d:ce:8e:49: 65:44:7b:7b:fa:f8:61:7f:d2:7d:1f:b4:f5:79:ed: b9:6c:01:5c:11:3d:49:91:d8:84:39:d0:a2:fa:cc: 24:fb:72:83:46:07:2f:32:bc:2e:ab:f1:cf:05:37: 41:ae:b9:ea:4a:b8:a9:f1:70:79:6a:e3:1b:77:eb: 1c:4b:e1:2e:fb:64:ee:5f:bd:6b:0c:e6:37:46:c8: eb:9a:82:83:8f:59:96:51:88:38:93:de:e2:36:2c: e6:d7:c9:67:8f:26:c2:22:d3:ef:1a:d1:15:7f:89: 0f:d3:38:be:75:8f:b9:72:aa:90:ce:96:65:df:41: 42:46:46:36:c4:4e:48:a7:29:6d:26:67:71:80:5c: b6:56:82:6d:3a:01:bc:3a:d4:53:ef:c4:71:e0:b9: e9:37:d0:d0:b6:74:c0:0a:df:cd:72:68:41:e6:38: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:D8:E2:44:DB:A1:27:05:EF:1D:91:D5:6E:1D:A9:64:CF:0B:14 X509v3 Authority Key Identifier: keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/PFnY4kTboScF7x2R1W4dqWTPCxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.253.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:be:12:84:af:ab:e7:23:dd:41:15:94:90:f7:e9:9c:ac:e3: 10:b6:5d:47:a1:99:c9:5a:e9:cf:9e:c9:ce:75:3a:0c:d0:24: 7b:0b:c5:dd:c3:17:ff:1b:3e:9a:c4:10:06:90:45:af:52:e5: ef:fd:98:4d:6b:e7:4c:c9:26:cc:82:47:36:d0:ea:8b:ef:2a: 71:39:53:33:18:24:c2:ed:b1:cd:89:a9:3e:41:e2:47:a0:9a: 41:7e:22:6a:5d:0a:30:23:3b:28:ce:d8:f2:7f:1a:06:89:61: 68:af:7a:05:67:c3:73:f6:8c:84:93:37:89:f6:7d:7e:8b:ed: 4e:16:8c:64:77:f7:86:24:0c:db:82:b7:23:7b:bb:a5:c1:62: d3:da:7c:09:7b:09:85:9f:f2:ba:c8:49:b6:a9:2c:c4:d0:aa: 6b:c6:0b:89:66:89:84:97:9d:e2:3b:cb:dd:8a:9a:1c:9c:10: 76:43:60:86:ef:07:2a:fc:8f:df:45:4f:e3:83:ea:00:b5:2e: 49:d8:01:d4:51:82:ca:40:96:54:23:fd:c4:3f:e7:e5:d4:bc: 93:ff:bb:5d:60:9f:6c:e1:42:d7:e3:d8:a9:01:34:17:33:9d: 7a:dc:fe:68:06:75:b3:ae:87:02:b8:fd:ea:8c:c7:b8:d4:21: 6f:45:6d:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wbh3fA2+uDOfqUK1d+uJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3 ODhlZjUwHhcNMjYwMTAxMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzU5ZDhlMjQ0ZGJhMTI3MDVlZjFkOTFkNTZlMWRhOTY0Y2YwYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YQdTD/T5LBwhzeXqOFqjdby0XQ5 /Q2l3O/336uIbRE56Dbcg5RPr6qsyjAoX2ohr9p+IlZEWTfos2vaIPboyxsbZHKQ Gf7/LNv7o0CdLKB3er0LPy3OjkllRHt7+vhhf9J9H7T1ee25bAFcET1JkdiEOdCi +swk+3KDRgcvMrwuq/HPBTdBrrnqSrip8XB5auMbd+scS+Eu+2TuX71rDOY3Rsjr moKDj1mWUYg4k97iNizm18lnjybCItPvGtEVf4kP0zi+dY+5cqqQzpZl30FCRkY2 xE5IpyltJmdxgFy2VoJtOgG8OtRT78Rx4LnpN9DQtnTACt/NcmhB5jgDXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxZ2OJE26EnBe8dkdVuHalkzwsUMB8GA1UdIwQY MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt MjMwN2JiNTkyMjVmLzEvUEZuWTRrVGJvU2NGN3gyUjFXNGRxV1RQQ3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZr9MA0G CSqGSIb3DQEBCwUAA4IBAQBPvhKEr6vnI91BFZSQ9+mcrOMQtl1HoZnJWunPnsnO dToM0CR7C8Xdwxf/Gz6axBAGkEWvUuXv/ZhNa+dMySbMgkc20OqL7ypxOVMzGCTC 7bHNiak+QeJHoJpBfiJqXQowIzsoztjyfxoGiWFor3oFZ8Nz9oyEkzeJ9n1+i+1O Foxkd/eGJAzbgrcje7ulwWLT2nwJewmFn/K6yEm2qSzE0KprxguJZomEl53iO8vd ipocnBB2Q2CG7wcq/I/fRU/jg+oAtS5J2AHUUYLKQJZUI/3EP+fl1LyT/7tdYJ9s 4ULX49ipATQXM5163P5oBnWzrocCuP3qjMe41CFvRW3o -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:22 2026 by rpki-client