This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/PbVXfQ5rfq2QGlRT7ustY9GJalA.roa File: PbVXfQ5rfq2QGlRT7ustY9GJalA.roa (raw, json) Hash identifier: 4ylBUTwX4OuSjSYpDk8XgQA77uXsCX+X47fLt/q6PPQ= Subject key identifier: 3D:B5:57:7D:0E:6B:7E:AD:90:1A:54:53:EE:EB:2D:63:D1:89:6A:50 Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535 Certificate serial: 019B7AC7D8915D1E02100FA2C7AA0E648D24 Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/PbVXfQ5rfq2QGlRT7ustY9GJalA.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 193.138.31.0/24 maxlen: 32 2001:7f8:56::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d8:91:5d:1e:02:10:0f:a2:c7:aa:0e:64:8d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535 Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3db5577d0e6b7ead901a5453eeeb2d63d1896a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:6b:18:20:fc:5a:fc:ea:c7:3d:39:3d:95: 0e:40:17:af:35:ce:cf:71:f1:77:74:57:f8:43:a2: 3e:da:17:0a:34:e1:7b:a8:3e:7f:42:f7:f4:95:98: a5:a2:d8:bd:47:f0:16:4b:48:d8:15:b4:91:04:db: e7:91:85:19:4c:6e:f0:9d:c4:ef:5f:0c:f9:b4:3b: ff:b1:2a:0a:98:ab:42:e4:04:cc:f8:24:8b:0f:a8: d3:69:e8:ee:37:b5:14:fa:a4:ee:ba:82:94:96:33: 52:1b:d5:60:4c:3e:30:20:fc:9f:3b:7a:54:58:0d: e1:e7:29:bf:56:74:54:38:29:ee:45:b0:0d:df:5e: f4:04:68:31:59:33:30:e1:c0:71:c6:ef:28:a3:f6: 1e:e5:4d:90:7f:70:5c:aa:d7:3f:88:3d:cb:1b:25: 3f:89:29:1d:ef:3f:6d:90:d8:b3:e7:28:29:db:e3: 6d:95:c9:a4:f0:ac:ec:e4:f7:54:70:06:91:05:63: 85:61:18:be:8c:61:92:37:7e:af:f3:07:d7:a0:fd: 6d:30:99:f6:c8:49:a9:0e:c9:e3:08:1e:b4:fd:06: 3a:23:8f:9b:f3:9b:5f:88:a7:76:31:9e:01:4c:bf: 2b:24:f6:0b:6b:02:6b:aa:9c:3c:16:c3:f1:83:ec: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B5:57:7D:0E:6B:7E:AD:90:1A:54:53:EE:EB:2D:63:D1:89:6A:50 X509v3 Authority Key Identifier: keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/PbVXfQ5rfq2QGlRT7ustY9GJalA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.31.0/24 IPv6: 2001:7f8:56::/48 Signature Algorithm: sha256WithRSAEncryption d0:a1:28:fa:fb:bc:dc:b2:47:fe:22:4c:4b:e8:1d:ab:f2:0b: b9:08:b2:1a:87:86:cc:f3:a1:0c:0c:a0:d7:61:d0:cd:a0:80: 20:c5:05:08:64:04:ef:0f:58:ce:9e:ca:f6:26:c7:2b:5c:78: 8b:82:d7:59:4e:34:cd:df:27:b9:6f:f1:fe:dd:f0:17:7b:ed: 15:69:88:73:f5:a0:31:18:78:d3:c8:d5:e0:6d:4b:f5:01:1e: 70:f8:42:50:10:85:ac:59:b8:c2:75:95:db:71:0c:fe:02:1c: 7e:ae:26:6c:c6:ff:b7:74:35:ed:87:42:7f:ff:f9:b0:02:9c: e9:5d:1f:1c:2c:61:ab:a4:4b:2f:b7:9d:20:77:97:40:f4:f5: e7:b1:5c:80:13:d8:75:49:c8:a2:f4:10:2a:6d:fb:2e:fa:cb: 1b:99:ce:83:f7:0d:2d:e9:f0:68:d3:69:ce:16:9e:1a:b7:63: 0f:be:da:f5:94:e4:35:bf:44:a8:44:f7:73:37:38:27:d7:d8: ed:6a:22:8b:47:08:b2:08:f5:eb:2c:38:8f:5d:68:be:a8:b5: 50:03:85:3e:c9:d9:42:03:91:1b:e6:42:27:b3:df:65:54:f9: 84:42:14:33:b4:6e:f2:30:58:54:8d:42:9e:6b:37:f0:88:10: ba:bf:da:bd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x9iRXR4CEA+ix6oOZI0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz NTc1MzUwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGI1NTc3ZDBlNmI3ZWFkOTAxYTU0NTNlZWViMmQ2M2QxODk2YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok1rGCD8Wvzqxz05PZUOQBevNc7P cfF3dFf4Q6I+2hcKNOF7qD5/Qvf0lZiloti9R/AWS0jYFbSRBNvnkYUZTG7wncTv Xwz5tDv/sSoKmKtC5ATM+CSLD6jTaejuN7UU+qTuuoKUljNSG9VgTD4wIPyfO3pU WA3h5ym/VnRUOCnuRbAN3170BGgxWTMw4cBxxu8oo/Ye5U2Qf3Bcqtc/iD3LGyU/ iSkd7z9tkNiz5ygp2+Ntlcmk8Kzs5PdUcAaRBWOFYRi+jGGSN36v8wfXoP1tMJn2 yEmpDsnjCB60/QY6I4+b85tfiKd2MZ4BTL8rJPYLawJrqpw8FsPxg+wXgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD21V30Oa36tkBpUU+7rLWPRiWpQMB8GA1UdIwQY MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt YjcyMzE5NDFmYzNhLzEvUGJWWGZRNXJmcTJRR2xSVDd1c3RZOUdKYWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwYofMA8E AgACMAkDBwAgAQf4AFYwDQYJKoZIhvcNAQELBQADggEBANChKPr7vNyyR/4iTEvo HavyC7kIshqHhszzoQwMoNdh0M2ggCDFBQhkBO8PWM6eyvYmxytceIuC11lONM3f J7lv8f7d8Bd77RVpiHP1oDEYeNPI1eBtS/UBHnD4QlAQhaxZuMJ1ldtxDP4CHH6u JmzG/7d0Ne2HQn//+bACnOldHxwsYaukSy+3nSB3l0D09eexXIAT2HVJyKL0ECpt +y76yxuZzoP3DS3p8GjTac4Wnhq3Yw++2vWU5DW/RKhE93M3OCfX2O1qIotHCLII 9essOI9daL6otVADhT7J2UIDkRvmQiez32VU+YRCFDO0bvIwWFSNQp5rN/CIELq/ 2r0= -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:58 2026 by rpki-client