This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pfHQoQuY3aQ1KMskVy6elrET6o0.roa File: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (raw, json) Hash identifier: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks= Subject key identifier: A5:F1:D0:A1:0B:98:DD:A4:35:28:CB:24:57:2E:9E:96:B1:13:EA:8D Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC403105BA809A7143A782510B9EAB Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pfHQoQuY3aQ1KMskVy6elrET6o0.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28761 IP address blocks: 91.224.30.0/23 maxlen: 23 91.232.116.0/24 maxlen: 24 91.232.118.0/23 maxlen: 23 185.76.80.0/24 maxlen: 24 188.191.16.0/22 maxlen: 22 188.191.16.0/24 maxlen: 24 188.191.17.0/24 maxlen: 24 188.191.18.0/24 maxlen: 24 188.191.19.0/24 maxlen: 24 188.191.24.0/24 maxlen: 24 188.191.25.0/24 maxlen: 24 188.191.26.0/24 maxlen: 24 188.191.27.0/24 maxlen: 24 193.188.254.0/24 maxlen: 24 194.140.228.0/24 maxlen: 24 195.26.80.0/24 maxlen: 24 195.26.81.0/24 maxlen: 24 195.26.82.0/23 maxlen: 23 195.49.204.0/23 maxlen: 23 2a05:5840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:40:31:05:ba:80:9a:71:43:a7:82:51:0b:9e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5f1d0a10b98dda43528cb24572e9e96b113ea8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:fa:9d:bb:fe:7d:c6:a8:40:3a:7f:14:41: 9a:b9:a5:0f:aa:09:54:c6:16:9e:71:ad:31:39:e8: 66:6d:16:e0:72:27:6a:b7:ed:c3:f2:34:15:70:5d: ca:4b:49:46:b8:c1:f0:77:02:09:ac:e1:37:da:7d: d2:76:d9:3e:d1:3d:85:96:9f:be:82:a4:1a:6e:35: 3a:ef:cb:ae:00:0d:76:4b:f8:6f:58:2a:d4:1f:7f: cb:11:b4:c5:97:89:da:7b:7f:21:94:a6:c5:b6:c3: ec:11:ab:1b:cd:37:78:d7:17:a7:93:b9:90:5a:dd: b4:aa:c7:66:37:90:77:c1:59:aa:46:12:16:ef:65: bc:d5:8f:d8:bc:83:ab:67:4a:af:8b:c8:e0:98:6b: 7f:42:5b:85:bc:5c:58:12:bf:3c:6c:75:86:cf:f2: 4a:99:a8:23:6f:14:79:a1:bd:c7:03:c7:c1:f3:6e: bf:eb:18:24:2f:ab:e9:af:95:89:ab:89:cb:78:fd: 89:d8:5a:bc:fb:31:70:e1:b8:13:63:fc:57:0c:4f: f8:84:8c:09:1e:ae:6a:d7:72:d7:f3:a6:4c:ea:bb: 25:da:20:20:b8:20:a4:e9:9f:1a:e3:8b:4b:c9:6b: 9d:b2:f1:26:74:4e:14:12:76:c0:c9:c0:8b:bc:55: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:D0:A1:0B:98:DD:A4:35:28:CB:24:57:2E:9E:96:B1:13:EA:8D X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pfHQoQuY3aQ1KMskVy6elrET6o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.30.0/23 91.232.116.0/24 91.232.118.0/23 185.76.80.0/24 188.191.16.0/22 188.191.24.0/22 193.188.254.0/24 194.140.228.0/24 195.26.80.0/22 195.49.204.0/23 IPv6: 2a05:5840::/32 Signature Algorithm: sha256WithRSAEncryption 12:b0:03:b9:c1:b8:b8:af:a2:08:db:5d:a1:5b:26:24:65:ec: 64:91:98:a6:00:60:15:b8:2a:18:2a:6c:0e:85:a1:be:41:c0: 0b:12:65:9e:c9:04:42:6e:e9:bf:4e:66:20:6e:39:4c:b8:b1: ba:3c:43:21:a8:ab:4c:21:4d:cb:75:37:8c:93:35:17:f7:19: 29:77:53:e9:23:b9:41:e1:05:50:c9:f3:5b:1f:93:6f:fd:7a: 5e:30:7b:1b:17:9c:03:54:7c:e6:43:c7:76:1d:86:34:73:23: 83:8a:8f:e8:2c:e9:a2:90:06:63:d0:09:7b:1e:54:81:0f:df: 72:f6:9c:c1:a9:48:c1:b7:51:d0:17:28:75:15:03:25:06:df: bb:25:44:00:64:bf:6d:1e:61:a0:78:da:ed:d6:43:67:63:b8: 90:40:2f:53:83:54:d4:27:54:c5:69:21:1a:4c:a8:ef:a0:7e: 7c:e8:eb:94:96:dc:ff:8e:2e:d4:2d:db:ec:35:7f:1e:5f:00: ea:3e:0a:40:60:7b:d2:fa:1f:8d:27:9e:da:16:88:d6:aa:b1: df:00:a9:a0:ff:36:91:39:d7:06:b1:01:b3:b6:24:c5:4b:1e: 9c:ac:a6:e1:28:89:e7:41:63:15:51:28:e7:b4:bf:38:6c:24: 6b:f4:22:18 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt57EAxBbqAmnFDp4JRC56rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWYxZDBhMTBiOThkZGE0MzUyOGNiMjQ1NzJlOWU5NmIxMTNlYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC76nbv+fcaoQDp/FEGauaUPqglU xhaeca0xOehmbRbgcidqt+3D8jQVcF3KS0lGuMHwdwIJrOE32n3Sdtk+0T2Flp++ gqQabjU678uuAA12S/hvWCrUH3/LEbTFl4nae38hlKbFtsPsEasbzTd41xenk7mQ Wt20qsdmN5B3wVmqRhIW72W81Y/YvIOrZ0qvi8jgmGt/QluFvFxYEr88bHWGz/JK magjbxR5ob3HA8fB826/6xgkL6vpr5WJq4nLeP2J2Fq8+zFw4bgTY/xXDE/4hIwJ Hq5q13LX86ZM6rsl2iAguCCk6Z8a44tLyWudsvEmdE4UEnbAycCLvFUDdQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFKXx0KELmN2kNSjLJFcunpaxE+qNMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvcGZIUW9RdVkzYVExS01za1Z5NmVsckVUNm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQBW+AeAwQA W+h0AwQBW+h2AwQAuUxQAwQCvL8QAwQCvL8YAwQAwbz+AwQAwozkAwQCwxpQAwQB wzHMMA0EAgACMAcDBQAqBVhAMA0GCSqGSIb3DQEBCwUAA4IBAQASsAO5wbi4r6II 212hWyYkZexkkZimAGAVuCoYKmwOhaG+QcALEmWeyQRCbum/TmYgbjlMuLG6PEMh qKtMIU3LdTeMkzUX9xkpd1PpI7lB4QVQyfNbH5Nv/XpeMHsbF5wDVHzmQ8d2HYY0 cyODio/oLOmikAZj0Al7HlSBD99y9pzBqUjBt1HQFyh1FQMlBt+7JUQAZL9tHmGg eNrt1kNnY7iQQC9Tg1TUJ1TFaSEaTKjvoH586OuUltz/ji7ULdvsNX8eXwDqPgpA YHvS+h+NJ57aFojWqrHfAKmg/zaROdcGsQGztiTFSx6crKbhKInnQWMVUSjntL84 bCRr9CIY -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:04 2026 by rpki-client