This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PF5StOvcjBtJpPkWMQC42y_-7lw.roa File: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (raw, json) Hash identifier: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I= Subject key identifier: 3C:5E:52:B4:EB:DC:8C:1B:49:A4:F9:16:31:00:B8:DB:2F:FE:EE:5C Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019B7F13B96ED32D69DA4B644833DF03B757 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PF5StOvcjBtJpPkWMQC42y_-7lw.roa Signing time: Fri 02 Jan 2026 14:19:17 +0000 ROA not before: Fri 02 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48108 IP address blocks: 2a09:7c43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b9:6e:d3:2d:69:da:4b:64:48:33:df:03:b7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jan 2 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c5e52b4ebdc8c1b49a4f9163100b8db2ffeee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:a9:92:37:bb:72:e5:40:82:88:e6:b0:17: 3f:6a:93:5e:57:60:af:d4:01:90:ca:ba:94:eb:5a: 62:c7:99:59:d0:30:e0:f4:7b:6d:78:d5:41:ad:69: a4:3d:38:be:5c:b0:99:e1:fc:89:0f:07:2e:5e:64: 87:5e:d8:e6:d6:0d:b8:09:6c:8b:22:35:2c:dc:1e: 81:d2:82:69:04:7f:78:fe:6f:a5:37:17:a0:7c:5d: fc:b6:29:dc:5d:dc:ab:e2:ff:12:9f:d4:40:d9:98: 06:a1:e9:6b:e2:b3:60:72:e3:92:8a:30:7c:69:67: ac:79:08:21:71:c0:6b:90:6e:45:f1:dc:c9:e4:9e: 8e:64:8a:75:68:7b:21:cb:6d:b9:6f:e9:39:80:f0: fc:af:33:c0:6d:2c:0d:1d:e3:58:cf:bd:99:1c:aa: 2e:71:36:2d:aa:c8:e4:06:c7:c3:51:ed:49:aa:1d: 53:d9:23:e2:e9:9c:d2:7e:bd:38:c6:8a:0a:69:eb: f8:65:18:aa:e6:67:2c:1d:f2:71:ea:c7:57:53:4a: e3:a4:87:ac:e7:10:f6:9b:f8:42:2c:6f:62:b9:ab: 2a:fa:07:c5:02:e1:22:6a:86:f9:0e:19:99:33:24: d5:d3:35:1e:25:7b:40:fd:20:e8:e0:b4:34:96:59: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:52:B4:EB:DC:8C:1B:49:A4:F9:16:31:00:B8:DB:2F:FE:EE:5C X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/PF5StOvcjBtJpPkWMQC42y_-7lw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:7c43::/32 Signature Algorithm: sha256WithRSAEncryption 14:d3:d9:a9:fa:c6:ce:83:91:4d:7a:0a:6e:18:89:ca:78:5b: 11:3e:08:c4:af:26:bb:c5:15:ec:77:2c:84:17:1c:d9:72:86: 84:c9:a3:59:be:ba:e5:c4:8d:12:91:ae:31:d9:5e:bb:b6:d0: 0b:b0:51:e6:a3:44:29:65:1f:19:5f:c1:03:42:29:93:ce:b3: 16:6e:a9:30:0a:6e:08:aa:8e:f5:3b:60:a4:71:f2:d4:2b:7c: b2:1c:16:b3:a7:53:ba:48:e6:08:80:92:c9:e3:90:27:b3:e7: 88:67:1a:b7:4c:5f:23:3b:ef:bc:4a:f5:3d:79:82:de:9c:84: 56:b1:45:69:22:2c:66:ce:f8:c1:58:ce:80:bb:92:30:ae:b1: 5a:31:5e:fc:72:0b:af:8c:53:20:5c:0f:f6:8d:da:fa:0c:39: e3:31:82:7a:a4:44:ca:9f:58:2b:23:02:a1:f0:e6:e0:43:39: 7c:8b:db:8b:92:78:55:a7:69:ee:2e:10:76:a0:cd:7e:b1:7b: 8a:e6:59:95:8e:44:ed:5e:21:5e:74:5a:90:48:c5:66:cf:7e: 9b:85:60:e7:5a:6e:dd:ab:9b:d6:40:77:41:f2:e5:28:d7:41: 95:e5:4c:a2:29:1e:3f:27:7f:91:fc:22:3c:9c:d7:1e:62:40: 85:19:c3:6e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/E7lu0y1p2ktkSDPfA7dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwMTAyMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzVlNTJiNGViZGM4YzFiNDlhNGY5MTYzMTAwYjhkYjJmZmVlZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBapkje7cuVAgojmsBc/apNeV2Cv 1AGQyrqU61pix5lZ0DDg9HtteNVBrWmkPTi+XLCZ4fyJDwcuXmSHXtjm1g24CWyL IjUs3B6B0oJpBH94/m+lNxegfF38tincXdyr4v8Sn9RA2ZgGoelr4rNgcuOSijB8 aWeseQghccBrkG5F8dzJ5J6OZIp1aHshy225b+k5gPD8rzPAbSwNHeNYz72ZHKou cTYtqsjkBsfDUe1Jqh1T2SPi6ZzSfr04xooKaev4ZRiq5mcsHfJx6sdXU0rjpIes 5xD2m/hCLG9iuasq+gfFAuEiaob5DhmZMyTV0zUeJXtA/SDo4LQ0llmekwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDxeUrTr3IwbSaT5FjEAuNsv/u5cMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvUEY1U3RPdmNqQnRKcFBrV01RQzQyeV8tN2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgl8QzAN BgkqhkiG9w0BAQsFAAOCAQEAFNPZqfrGzoORTXoKbhiJynhbET4IxK8mu8UV7Hcs hBcc2XKGhMmjWb665cSNEpGuMdleu7bQC7BR5qNEKWUfGV/BA0Ipk86zFm6pMApu CKqO9TtgpHHy1Ct8shwWs6dTukjmCICSyeOQJ7PniGcat0xfIzvvvEr1PXmC3pyE VrFFaSIsZs74wVjOgLuSMK6xWjFe/HILr4xTIFwP9o3a+gw54zGCeqREyp9YKyMC ofDm4EM5fIvbi5J4Vadp7i4QdqDNfrF7iuZZlY5E7V4hXnRakEjFZs9+m4Vg51pu 3aub1kB3QfLlKNdBleVMoikePyd/kfwiPJzXHmJAhRnDbg== -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:57 2026 by rpki-client