This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pf1pBUnzxjHov513TFJHTqE4Iy0.roa File: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (raw, json) Hash identifier: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY= Subject key identifier: A5:FD:69:05:49:F3:C6:31:E8:BF:9D:77:4C:52:47:4E:A1:38:23:2D Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b Certificate serial: 019B7A5B03526C41CD32F0731B0046F85FF9 Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pf1pBUnzxjHov513TFJHTqE4Iy0.roa Signing time: Thu 01 Jan 2026 16:19:03 +0000 ROA not before: Thu 01 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 81.31.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:03:52:6c:41:cd:32:f0:73:1b:00:46:f8:5f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fd690549f3c631e8bf9d774c52474ea138232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:e9:1b:fa:39:d4:e2:83:f1:65:d0:46:b3: af:7d:cf:15:c7:72:3f:c2:d9:34:04:9b:92:33:22: e5:b4:73:08:f5:34:20:d1:c9:57:47:ba:28:47:b1: a1:12:45:e4:82:68:14:3e:db:f3:75:0f:c1:b6:30: ba:02:c8:5b:cb:36:3c:6a:d1:74:07:be:dc:38:37: e1:08:d0:b5:a7:de:6a:d6:7a:38:ff:97:0a:1e:ae: 6f:3c:bc:c6:34:96:8c:19:7c:c7:fe:3e:cf:9c:44: bf:7e:73:a3:2d:8c:e7:d6:11:09:d3:2e:a6:91:c1: 9c:8e:20:44:76:e3:32:66:ef:1e:47:20:7c:14:96: 9e:ec:eb:98:72:2f:1c:84:f1:42:08:3f:e6:05:be: 1f:3e:a2:de:74:d2:b5:eb:3f:cb:0a:65:76:f2:56: 0d:7a:11:28:15:03:33:f6:4a:40:12:d8:a3:7d:2c: 87:68:2a:1a:74:d5:d4:61:e8:7a:e6:e2:6e:61:e9: a5:61:85:40:02:cb:c7:3f:1c:59:47:eb:25:79:88: 09:9b:58:df:a3:e2:7d:e0:62:cb:63:7c:07:11:f2: 8e:ff:28:cd:1a:fa:7f:b1:0d:ad:bf:ec:5c:a0:82: b8:16:93:92:f4:0c:0a:f3:5d:b2:48:e7:e4:6b:00: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:69:05:49:F3:C6:31:E8:BF:9D:77:4C:52:47:4E:A1:38:23:2D X509v3 Authority Key Identifier: keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pf1pBUnzxjHov513TFJHTqE4Iy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.235.0/24 Signature Algorithm: sha256WithRSAEncryption 17:21:37:b3:3d:4b:df:b1:b1:60:40:81:4b:4a:b6:64:77:eb: bf:b5:a8:d3:9a:8a:e2:02:3f:a4:21:20:1b:58:05:83:1a:5a: 28:14:fe:b4:a8:8a:5a:5a:b1:d6:cf:95:78:b3:e5:c7:83:76: 42:be:a2:ba:d6:0c:65:18:88:c5:53:f2:aa:72:dd:66:6e:99: 6a:77:cf:1b:e2:33:b3:d7:a6:c1:e4:f7:7d:de:7f:13:31:21: 5b:42:c1:c3:24:cd:15:1d:9b:ba:14:12:87:e4:c7:51:d0:e1: be:5f:1b:01:9c:3d:0b:d1:10:6c:52:89:d9:cf:ea:f6:f6:cd: fa:f1:42:5c:21:85:82:b6:87:34:aa:1b:d2:fa:90:d2:86:68: fe:de:13:28:ba:38:5e:71:a0:93:05:e3:b7:74:49:94:59:7a: 12:69:5f:bf:c8:ba:05:f5:db:d3:7a:b6:82:0f:1d:64:95:d6: f7:c2:de:1e:7b:99:d0:33:41:1e:b1:11:7e:f5:f1:5d:dd:59: 39:be:98:76:67:11:da:83:26:b3:c0:97:dd:ee:d3:0a:4b:a6: 0b:89:84:4f:3f:a0:09:7d:bd:ee:fc:7b:f4:1d:bd:1b:f7:38: 8f:10:52:db:31:0f:24:0f:8d:5c:5e:0f:47:1b:c3:18:24:3a: 42:c6:71:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwNSbEHNMvBzGwBG+F/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy YjE4MWIwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZkNjkwNTQ5ZjNjNjMxZThiZjlkNzc0YzUyNDc0ZWExMzgyMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYPpG/o51OKD8WXQRrOvfc8Vx3I/ wtk0BJuSMyLltHMI9TQg0clXR7ooR7GhEkXkgmgUPtvzdQ/BtjC6AshbyzY8atF0 B77cODfhCNC1p95q1no4/5cKHq5vPLzGNJaMGXzH/j7PnES/fnOjLYzn1hEJ0y6m kcGcjiBEduMyZu8eRyB8FJae7OuYci8chPFCCD/mBb4fPqLedNK16z/LCmV28lYN ehEoFQMz9kpAEtijfSyHaCoadNXUYeh65uJuYemlYYVAAsvHPxxZR+sleYgJm1jf o+J94GLLY3wHEfKO/yjNGvp/sQ2tv+xcoIK4FpOS9AwK812ySOfkawCmbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKX9aQVJ88Yx6L+dd0xSR06hOCMtMB8GA1UdIwQY MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct YWE4NTllMTkyYjE2LzEvcGYxcEJVbnp4akhvdjUxM1RGSkhUcUU0SXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2 LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/rMA0G CSqGSIb3DQEBCwUAA4IBAQAXITezPUvfsbFgQIFLSrZkd+u/tajTmoriAj+kISAb WAWDGlooFP60qIpaWrHWz5V4s+XHg3ZCvqK61gxlGIjFU/Kqct1mbplqd88b4jOz 16bB5Pd93n8TMSFbQsHDJM0VHZu6FBKH5MdR0OG+XxsBnD0L0RBsUonZz+r29s36 8UJcIYWCtoc0qhvS+pDShmj+3hMoujhecaCTBeO3dEmUWXoSaV+/yLoF9dvTeraC Dx1kldb3wt4ee5nQM0EesRF+9fFd3Vk5vph2ZxHagyazwJfd7tMKS6YLiYRPP6AJ fb3u/Hv0Hb0b9ziPEFLbMQ8kD41cXg9HG8MYJDpCxnFQ -----END CERTIFICATE-----Generated at Thu Jan 8 16:21:00 2026 by rpki-client