This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/P5-15JDw8xLG_40G2t8TRvlafyA.roa File: P5-15JDw8xLG_40G2t8TRvlafyA.roa (raw, json) Hash identifier: m6Fnx5kkV9hpQ/N7H6E45VpfcqBeek/I8nPsVH143p0= Subject key identifier: 3F:9F:B5:E4:90:F0:F3:12:C6:FF:8D:06:DA:DF:13:46:F9:5A:7F:20 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F9DD03376BCA38A97974C550B935 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/P5-15JDw8xLG_40G2t8TRvlafyA.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215163 IP address blocks: 94.247.43.0/24 maxlen: 24 2a00:f826:8::/48 maxlen: 48 2a09:e1c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f9:dd:03:37:6b:ca:38:a9:79:74:c5:50:b9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9fb5e490f0f312c6ff8d06dadf1346f95a7f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:3f:99:62:6d:24:c1:ba:88:9e:33:04:df: 96:5b:4a:5a:a1:a7:fa:b6:96:13:9c:a0:47:22:d3: a7:72:fd:0f:ad:9e:18:1d:b0:6a:a4:42:6c:6e:0e: e6:15:38:09:3b:4f:e8:18:e3:58:16:ed:40:75:f4: 6b:d0:e3:14:06:72:e2:01:a5:bf:08:b0:30:35:23: 4f:ab:a6:1b:b9:bd:81:57:d2:80:bc:a2:ed:a6:25: 02:85:7b:02:2c:96:31:39:cb:48:23:06:78:95:0c: 9c:cf:5b:40:c1:75:61:03:14:0a:4c:ed:33:cb:3b: 46:89:52:61:66:ca:63:1d:7a:6f:de:bc:33:21:86: 17:95:9b:12:54:7c:53:c7:82:bd:46:ca:64:5c:15: 51:cf:68:83:4f:bd:53:ee:70:62:be:30:1c:04:5a: 5c:4b:58:d3:70:79:29:72:99:3e:cf:50:0b:c7:ee: 20:6c:26:2e:db:83:71:8f:ce:fb:2f:a5:0a:10:51: de:65:62:a9:43:4b:5f:b2:2d:75:7d:d9:3a:a5:b6: 90:1f:e5:ce:0d:1d:8c:70:2c:d2:3c:2a:10:88:d5: ed:17:30:6f:76:ea:01:fb:65:fd:fb:88:18:dd:67: 15:a5:9f:a2:73:ae:1d:75:c8:9e:24:1a:e5:d4:5d: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9F:B5:E4:90:F0:F3:12:C6:FF:8D:06:DA:DF:13:46:F9:5A:7F:20 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/P5-15JDw8xLG_40G2t8TRvlafyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.43.0/24 IPv6: 2a00:f826:8::/48 2a09:e1c2::/32 Signature Algorithm: sha256WithRSAEncryption 94:7f:79:42:0b:d5:0d:2b:a6:45:16:ab:ba:75:16:d8:25:17: 11:e1:50:b9:9a:e6:89:8a:48:25:1c:24:70:99:93:b3:e3:1d: a2:46:5c:7d:e0:fc:51:52:62:08:66:3a:da:71:92:ec:2f:02: e3:07:7b:69:e7:af:80:a8:eb:61:fb:f3:1c:ef:0a:e1:3d:c0: f3:4b:63:b0:c6:75:cd:a4:4c:dc:f9:3b:0c:0a:2d:b7:84:0a: 74:aa:c7:ab:a9:e6:8f:20:03:98:d0:09:bc:1c:8e:99:9c:da: 5c:1e:da:de:26:ad:ba:66:a1:5f:03:55:e4:e5:1a:d0:80:59: 32:e8:63:c6:80:cb:a9:a2:4f:a8:17:cd:45:5c:e7:4f:69:1f: c0:e6:93:51:46:ec:36:ab:cf:13:e8:4d:74:a3:e3:88:21:d6: 8f:90:fd:cd:92:bb:f9:c9:bf:8f:8b:2b:45:36:be:b6:39:20: 5c:9e:34:64:34:84:2d:f6:b4:c1:ee:cd:02:ed:80:bb:18:9a: a3:fa:c0:ca:b7:a5:b2:ac:16:8f:f2:7c:da:93:a9:d2:91:16: eb:26:3f:c1:35:57:c5:2c:c4:49:fa:21:42:35:6c:7f:cf:2c: 65:d9:6e:40:93:a3:c6:18:79:90:61:c3:a6:21:10:2a:3d:26: 70:81:ba:99 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WPndAzdryjipeXTFULk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjlmYjVlNDkwZjBmMzEyYzZmZjhkMDZkYWRmMTM0NmY5NWE3ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14k/mWJtJMG6iJ4zBN+WW0paoaf6 tpYTnKBHItOncv0PrZ4YHbBqpEJsbg7mFTgJO0/oGONYFu1AdfRr0OMUBnLiAaW/ CLAwNSNPq6Ybub2BV9KAvKLtpiUChXsCLJYxOctIIwZ4lQycz1tAwXVhAxQKTO0z yztGiVJhZspjHXpv3rwzIYYXlZsSVHxTx4K9RspkXBVRz2iDT71T7nBivjAcBFpc S1jTcHkpcpk+z1ALx+4gbCYu24Nxj877L6UKEFHeZWKpQ0tfsi11fdk6pbaQH+XO DR2McCzSPCoQiNXtFzBvduoB+2X9+4gY3WcVpZ+ic64ddcieJBrl1F1iAwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFD+fteSQ8PMSxv+NBtrfE0b5Wn8gMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvUDUtMTVKRHc4eExHXzQwRzJ0OFRSdmxhZnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAXvcrMBYE AgACMBADBwAqAPgmAAgDBQAqCeHCMA0GCSqGSIb3DQEBCwUAA4IBAQCUf3lCC9UN K6ZFFqu6dRbYJRcR4VC5muaJikglHCRwmZOz4x2iRlx94PxRUmIIZjracZLsLwLj B3tp56+AqOth+/Mc7wrhPcDzS2OwxnXNpEzc+TsMCi23hAp0qserqeaPIAOY0Am8 HI6ZnNpcHtreJq26ZqFfA1Xk5RrQgFky6GPGgMupok+oF81FXOdPaR/A5pNRRuw2 q88T6E10o+OIIdaPkP3Nkrv5yb+PiytFNr62OSBcnjRkNIQt9rTB7s0C7YC7GJqj +sDKt6WyrBaP8nzak6nSkRbrJj/BNVfFLMRJ+iFCNWx/zyxl2W5Ak6PGGHmQYcOm IRAqPSZwgbqZ -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:46 2026 by rpki-client