This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa File: pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa (raw, json) Hash identifier: 25kq67NwiLZpvtq/lLKi0cW1juljgXPpgbg4/hkoeJk= Subject key identifier: A5:FE:59:7F:6B:E6:30:AC:2F:DD:5E:DB:C5:51:16:EF:69:80:E5:1A Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Certificate serial: 019B77C6EC5F739E515146DCF9B814DDE508 Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209036 IP address blocks: 91.243.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:5f:73:9e:51:51:46:dc:f9:b8:14:dd:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5fe597f6be630ac2fdd5edbc55116ef6980e51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:7f:07:c4:d8:63:b0:54:96:34:51:ce:7a: 49:61:6a:c1:9f:49:0c:b2:da:4f:3d:53:e0:39:56: 85:a1:56:4c:95:b5:56:06:9c:05:2a:c6:bf:a6:c8: e2:2a:68:89:8c:69:fa:96:2d:80:c7:91:d1:a3:11: ea:13:26:a9:32:3c:aa:c5:20:9c:c7:bb:f3:47:07: 56:a4:d4:07:fe:0e:3b:6c:4e:d6:1d:75:00:72:28: 89:a6:42:35:75:00:fa:f4:15:c7:fe:d7:7b:74:ce: 1c:85:0d:89:03:f0:4c:34:4c:a3:7d:b1:c5:f5:6e: a1:82:fa:a0:7f:9a:c6:6a:03:b7:e9:da:2e:85:c9: 2f:ef:ab:08:5d:9c:da:e4:d8:d0:94:48:76:8a:d6: 74:19:7e:14:7d:5f:ad:c9:b6:f3:c9:54:69:06:fe: 1d:52:34:85:a4:48:9f:91:10:0c:fd:5d:bf:56:43: ae:3a:96:7e:7b:f1:e6:85:fe:82:8d:6f:5d:41:01: 97:44:6d:f9:a6:40:91:d3:08:6a:0e:3e:7a:ae:14: a2:27:16:3d:18:15:37:bc:74:f2:65:5e:44:00:1e: 40:13:44:b0:5c:fa:8e:34:36:b8:ac:1b:91:96:44: b1:64:73:fa:ec:8d:5b:8f:f8:fb:97:51:14:0d:fc: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:59:7F:6B:E6:30:AC:2F:DD:5E:DB:C5:51:16:EF:69:80:E5:1A X509v3 Authority Key Identifier: keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.77.0/24 Signature Algorithm: sha256WithRSAEncryption 49:0d:17:9d:9e:b4:fe:0f:40:eb:07:5c:c9:3b:90:a9:ba:ab: 87:ca:c5:e1:d9:61:24:51:ea:f3:8c:bc:27:67:5b:04:fb:63: 75:a7:5d:09:65:33:c9:bd:46:85:a4:a5:9e:a3:3c:10:6c:7a: c3:38:f6:16:3a:4a:ef:95:30:b1:32:a7:33:61:fe:95:db:27: 98:c3:52:0d:60:1a:9d:b1:4b:37:89:a5:f2:34:30:19:50:95: e0:23:33:7e:58:6a:74:c3:9d:86:a9:51:73:cd:db:d9:80:dd: d0:df:e4:10:ff:57:b4:0e:c6:95:b1:f0:0f:14:cd:53:3b:c7: b7:fe:92:57:d9:e1:8e:fe:61:d5:b4:c6:bd:5c:df:1a:5e:55: 71:a3:4f:64:90:52:d8:b0:31:51:83:47:41:8c:6c:7e:38:68: 6c:4f:8b:dd:f7:29:b6:70:83:d6:a3:dd:7c:71:14:8a:68:29: c3:f8:09:c8:e1:8e:16:53:41:8b:35:e2:ee:68:3b:2b:8c:9a: d8:47:b4:e3:d9:ec:f2:bb:a2:ef:b7:08:72:b5:a1:98:9b:bf: 68:f1:e7:60:8b:e3:9f:fe:5c:93:9d:61:3f:0e:77:ed:5c:c6: c8:90:2f:43:98:99:90:01:00:88:43:63:47:61:90:7b:33:b2: e6:0f:ec:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuxfc55RUUbc+bgU3eUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2QxMzE4YzkxOWM2ZWYxNmQyNGNhNzg0NjJhMGI3ZGUx NGJhMDUwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZlNTk3ZjZiZTYzMGFjMmZkZDVlZGJjNTUxMTZlZjY5ODBlNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnt/B8TYY7BUljRRznpJYWrBn0kM stpPPVPgOVaFoVZMlbVWBpwFKsa/psjiKmiJjGn6li2Ax5HRoxHqEyapMjyqxSCc x7vzRwdWpNQH/g47bE7WHXUAciiJpkI1dQD69BXH/td7dM4chQ2JA/BMNEyjfbHF 9W6hgvqgf5rGagO36douhckv76sIXZza5NjQlEh2itZ0GX4UfV+tybbzyVRpBv4d UjSFpEifkRAM/V2/VkOuOpZ+e/Hmhf6CjW9dQQGXRG35pkCR0whqDj56rhSiJxY9 GBU3vHTyZV5EAB5AE0SwXPqONDa4rBuRlkSxZHP67I1bj/j7l1EUDfzoNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKX+WX9r5jCsL91e28VRFu9pgOUaMB8GA1UdIwQY MBaAFBfNExjJGcbvFtJMp4RioLfeFLoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2Mt OTM3NDJjNDhlMGZlLzEvcGY1WmYydm1NS3d2M1Y3YnhWRVc3Mm1BNVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2MtOTM3NDJjNDhlMGZl LzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/NNMA0G CSqGSIb3DQEBCwUAA4IBAQBJDRednrT+D0DrB1zJO5CpuquHysXh2WEkUerzjLwn Z1sE+2N1p10JZTPJvUaFpKWeozwQbHrDOPYWOkrvlTCxMqczYf6V2yeYw1INYBqd sUs3iaXyNDAZUJXgIzN+WGp0w52GqVFzzdvZgN3Q3+QQ/1e0DsaVsfAPFM1TO8e3 /pJX2eGO/mHVtMa9XN8aXlVxo09kkFLYsDFRg0dBjGx+OGhsT4vd9ym2cIPWo918 cRSKaCnD+AnI4Y4WU0GLNeLuaDsrjJrYR7Tj2ezyu6LvtwhytaGYm79o8edgi+Of /lyTnWE/DnftXMbIkC9DmJmQAQCIQ2NHYZB7M7LmD+yE -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:42 2026 by rpki-client