This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa File: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (raw, json) Hash identifier: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s= Subject key identifier: 3D:F9:F8:AD:C4:5B:28:32:6E:55:29:2B:72:06:1B:F5:CB:BB:F0:0E Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A347E535143004294C7135F58D65BE Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 94.241.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:47:e5:35:14:30:04:29:4c:71:35:f5:8d:65:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df9f8adc45b28326e55292b72061bf5cbbbf00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:f4:cd:0f:ae:78:48:94:c3:48:fa:51:c9: 2d:f7:43:9e:16:19:59:18:5d:89:52:99:70:e6:27: 5f:21:3e:d2:5a:2f:53:6b:29:ef:25:3c:c8:31:81: 27:19:3b:db:13:d3:01:06:63:ad:b8:52:7d:f8:3e: 39:c2:76:e8:ab:79:32:d3:31:6d:20:00:4b:73:a3: f7:f6:8d:02:a3:cd:3d:f7:92:28:fb:8c:ff:98:8d: eb:b1:16:16:66:f0:ec:60:75:8d:34:e2:ca:5e:59: 52:9e:3a:d0:57:a2:87:3a:62:e2:d5:fb:61:63:0d: 2f:18:c1:b8:4b:a0:2a:fb:f0:e0:74:58:23:d2:e7: 1b:81:05:18:ee:9c:83:2c:02:6e:63:fc:fa:90:90: 92:a1:86:94:b3:ca:10:35:aa:b0:be:d0:99:a5:37: b5:0d:58:d1:39:0a:cc:e0:70:9f:5d:31:e9:d5:6a: fd:44:af:32:7d:09:ef:57:fe:eb:88:da:85:1c:2e: 43:e2:80:5b:34:48:30:b8:79:4b:31:4c:ce:32:5d: f0:d1:9f:73:a1:6e:3c:10:10:21:5f:32:b5:7a:bc: f3:ae:42:2b:dd:a2:18:1d:9d:d2:bb:30:e0:ae:83: 13:d7:75:4e:97:36:0d:ba:95:61:33:37:99:33:c4: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:F8:AD:C4:5B:28:32:6E:55:29:2B:72:06:1B:F5:CB:BB:F0:0E X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.164.0/23 Signature Algorithm: sha256WithRSAEncryption a6:de:76:d1:e2:e4:53:35:13:2f:d8:e0:a4:76:93:f4:fe:2f: f6:f8:96:36:43:29:37:22:3c:be:ad:6a:39:7c:d1:12:a5:18: f7:22:85:a0:42:f1:c9:44:0d:d7:ce:22:bf:67:86:87:f5:7e: a1:dc:4a:70:c3:b1:d4:46:fc:47:a5:92:c3:17:59:fe:48:09: 41:c2:cb:66:d7:4c:73:56:b9:95:23:45:7f:14:1c:ff:6e:31: 8c:42:54:4f:7f:82:f1:0a:77:f1:55:2f:ca:7d:0e:d1:c9:21: aa:8e:42:41:23:ad:d0:9e:0b:da:27:2c:e2:79:63:d1:55:15: 8d:24:1e:42:42:68:64:dd:d0:e2:79:0a:94:ac:bd:29:5e:59: 9c:2a:f7:58:c1:14:84:ba:d0:63:54:34:9f:4c:1b:2e:35:e4: ab:6b:6e:81:fc:02:c3:5b:fe:ce:87:66:fd:ae:3e:fc:de:b2: 32:06:2e:97:32:12:25:47:1a:33:a1:73:e0:dd:b4:44:be:90: f7:55:3c:bf:fb:11:51:33:9f:f0:b3:b9:ae:71:4e:f7:c5:c0: 2a:33:a3:3c:c8:cd:0b:f1:3b:7a:17:ac:2f:ae:8f:22:48:72: af:bb:a4:af:f7:78:35:54:3b:97:df:94:4e:a9:65:1f:9b:51: 78:9b:85:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0flNRQwBClMcTX1jWW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGY5ZjhhZGM0NWIyODMyNmU1NTI5MmI3MjA2MWJmNWNiYmJmMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tj0zQ+ueEiUw0j6Uckt90OeFhlZ GF2JUplw5idfIT7SWi9TaynvJTzIMYEnGTvbE9MBBmOtuFJ9+D45wnboq3ky0zFt IABLc6P39o0Co80995Io+4z/mI3rsRYWZvDsYHWNNOLKXllSnjrQV6KHOmLi1fth Yw0vGMG4S6Aq+/DgdFgj0ucbgQUY7pyDLAJuY/z6kJCSoYaUs8oQNaqwvtCZpTe1 DVjROQrM4HCfXTHp1Wr9RK8yfQnvV/7riNqFHC5D4oBbNEgwuHlLMUzOMl3w0Z9z oW48EBAhXzK1erzzrkIr3aIYHZ3SuzDgroMT13VOlzYNupVhMzeZM8Q7DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD35+K3EWygyblUpK3IGG/XLu/AOMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvUGZuNHJjUmJLREp1VlNrcmNnWWI5Y3U3OEE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvGkMA0G CSqGSIb3DQEBCwUAA4IBAQCm3nbR4uRTNRMv2OCkdpP0/i/2+JY2Qyk3Ijy+rWo5 fNESpRj3IoWgQvHJRA3XziK/Z4aH9X6h3Epww7HURvxHpZLDF1n+SAlBwstm10xz VrmVI0V/FBz/bjGMQlRPf4LxCnfxVS/KfQ7RySGqjkJBI63QngvaJyzieWPRVRWN JB5CQmhk3dDieQqUrL0pXlmcKvdYwRSEutBjVDSfTBsuNeSra26B/ALDW/7Oh2b9 rj783rIyBi6XMhIlRxozoXPg3bREvpD3VTy/+xFRM5/ws7mucU73xcAqM6M8yM0L 8Tt6F6wvro8iSHKvu6Sv93g1VDuX35ROqWUfm1F4m4Vf -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:18 2026 by rpki-client