This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pf-PQD_j1KO5DA2Ywe3kwSdrVGk.roa File: pf-PQD_j1KO5DA2Ywe3kwSdrVGk.roa (raw, json) Hash identifier: s+hZUR3INsIKNQcX4Gthz3IJL1K0kZDubRZKiOcv+zM= Subject key identifier: A5:FF:8F:40:3F:E3:D4:A3:B9:0C:0D:98:C1:ED:E4:C1:27:6B:54:69 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFA7E017DE98A6CA3DA3B71C23B22 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pf-PQD_j1KO5DA2Ywe3kwSdrVGk.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33911 IP address blocks: 77.81.181.0/24 maxlen: 24 89.34.24.0/23 maxlen: 23 89.35.158.0/24 maxlen: 24 89.41.176.0/23 maxlen: 23 89.41.182.0/24 maxlen: 24 89.41.183.0/24 maxlen: 24 188.214.88.0/24 maxlen: 24 2001:4d18:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:7e:01:7d:e9:8a:6c:a3:da:3b:71:c2:3b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5ff8f403fe3d4a3b90c0d98c1ede4c1276b5469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:e8:c6:ad:bc:df:e1:84:1d:c5:b4:0f:7d: fe:13:3c:7a:ea:de:74:df:5f:7e:e2:b2:c1:0a:1f: 12:0a:73:3c:f9:44:dc:c9:11:85:dc:c8:0f:88:cf: 83:01:16:cf:30:16:42:02:63:ad:73:19:77:6c:03: a5:03:c2:76:df:f6:13:2d:85:c6:58:76:51:d5:17: db:49:b6:08:71:c3:a1:87:10:c4:a7:e4:09:38:f7: 8a:f2:f5:42:0a:24:93:79:21:62:a8:9b:91:63:d1: bc:a6:3b:39:93:9e:86:8d:13:2c:c8:b6:ad:1d:b6: 67:f4:13:cf:f8:66:fa:32:e6:2a:b2:ae:e0:72:05: d7:35:4c:f1:e2:93:be:a7:19:5f:6b:63:c9:b3:af: d1:40:e5:14:22:1b:55:80:fa:9f:62:f2:12:3d:03: 35:ad:95:9c:d0:c0:d6:9e:79:b9:b2:82:f3:d4:23: af:5b:a3:44:83:5f:fa:3e:58:ba:af:76:92:57:39: bb:12:93:fa:93:97:89:fb:56:5d:b7:d1:bf:30:d4: c1:31:f5:98:1d:3d:6a:34:25:05:ab:6c:8c:da:7c: 74:8b:f5:0b:b8:35:a9:a4:7e:c7:28:fb:b9:73:bf: 38:c2:4b:07:94:af:9f:fe:70:29:68:34:f1:a8:35: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:8F:40:3F:E3:D4:A3:B9:0C:0D:98:C1:ED:E4:C1:27:6B:54:69 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pf-PQD_j1KO5DA2Ywe3kwSdrVGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.181.0/24 89.34.24.0/23 89.35.158.0/24 89.41.176.0/23 89.41.182.0/23 188.214.88.0/24 IPv6: 2001:4d18:2::/48 Signature Algorithm: sha256WithRSAEncryption 49:50:3a:91:8f:02:75:9f:9c:8a:7b:c3:ff:b0:d7:9d:e5:22: 55:f6:12:52:55:82:72:4e:8d:cd:44:e6:03:56:da:7d:45:4a: 84:1d:d1:2e:71:c1:bf:ec:ff:d8:1a:4f:bb:28:eb:d6:46:24: e7:85:45:ff:7e:cd:fb:5d:80:72:5a:cc:d6:c6:ea:1c:59:d7: 6d:cb:f3:fe:7b:c4:61:2d:cb:05:bd:94:91:42:fe:f8:0b:5b: c8:49:ae:b1:36:d7:cc:9b:d1:7e:9b:57:14:38:cc:6d:8f:59: 09:cc:c4:41:e0:7e:c7:70:33:d2:2b:8d:8c:48:b3:cf:33:bf: 62:8f:bf:0f:e9:2c:44:5a:28:12:de:17:38:06:16:dd:86:cd: b4:22:cf:5f:62:b0:93:9a:37:d2:21:93:76:8f:7c:e7:b6:21: fc:f1:9e:5e:90:99:e7:bc:ea:85:31:80:51:c2:3e:d3:98:07: 5a:80:eb:a8:d8:32:2f:13:a2:85:b1:fd:f5:36:74:45:a7:2f: 6b:7b:77:88:3c:59:67:64:26:74:24:28:c1:ea:08:e7:7d:33: 4b:92:75:bb:a6:58:76:bc:94:88:5d:e6:b8:a1:67:f9:20:57: 68:ed:af:0e:cf:47:cd:41:2f:98:fc:14:e1:11:7d:2f:5e:fd: 8b:08:67:23 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9Wvp+AX3pimyj2jtxwjsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWZmOGY0MDNmZTNkNGEzYjkwYzBkOThjMWVkZTRjMTI3NmI1NDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIfoxq283+GEHcW0D33+Ezx66t50 319+4rLBCh8SCnM8+UTcyRGF3MgPiM+DARbPMBZCAmOtcxl3bAOlA8J23/YTLYXG WHZR1RfbSbYIccOhhxDEp+QJOPeK8vVCCiSTeSFiqJuRY9G8pjs5k56GjRMsyLat HbZn9BPP+Gb6MuYqsq7gcgXXNUzx4pO+pxlfa2PJs6/RQOUUIhtVgPqfYvISPQM1 rZWc0MDWnnm5soLz1COvW6NEg1/6Pli6r3aSVzm7EpP6k5eJ+1Zdt9G/MNTBMfWY HT1qNCUFq2yM2nx0i/ULuDWppH7HKPu5c784wksHlK+f/nApaDTxqDWENwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFKX/j0A/49SjuQwNmMHt5MEna1RpMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvcGYtUFFEX2oxS081REEyWXdlM2t3U2RyVkdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQATVG1AwQB WSIYAwQAWSOeAwQBWSmwAwQBWSm2AwQAvNZYMA8EAgACMAkDBwAgAU0YAAIwDQYJ KoZIhvcNAQELBQADggEBAElQOpGPAnWfnIp7w/+w153lIlX2ElJVgnJOjc1E5gNW 2n1FSoQd0S5xwb/s/9gaT7so69ZGJOeFRf9+zftdgHJazNbG6hxZ123L8/57xGEt ywW9lJFC/vgLW8hJrrE218yb0X6bVxQ4zG2PWQnMxEHgfsdwM9IrjYxIs88zv2KP vw/pLERaKBLeFzgGFt2GzbQiz19isJOaN9Ihk3aPfOe2Ifzxnl6Qmee86oUxgFHC PtOYB1qA66jYMi8TooWx/fU2dEWnL2t7d4g8WWdkJnQkKMHqCOd9M0uSdbumWHa8 lIhd5rihZ/kgV2jtrw7PR81BL5j8FOERfS9e/YsIZyM= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client