This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/G_PF0dcvSh0twz3bDtykxA8n4vU.roa File: G_PF0dcvSh0twz3bDtykxA8n4vU.roa (raw, json) Hash identifier: BuA1eaUoYFwCSmkQRdg21HY9Ijqx+wmJ9LSjgaoMGKo= Subject key identifier: 1B:F3:C5:D1:D7:2F:4A:1D:2D:C3:3D:DB:0E:DC:A4:C4:0F:27:E2:F5 Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0 Certificate serial: 019B7758DCB5B283013800D1EA8762D4764C Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/G_PF0dcvSh0twz3bDtykxA8n4vU.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199753 IP address blocks: 91.223.151.0/24 maxlen: 24 185.89.56.0/22 maxlen: 22 194.117.254.0/23 maxlen: 23 2a05:d580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dc:b5:b2:83:01:38:00:d1:ea:87:62:d4:76:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bf3c5d1d72f4a1d2dc33ddb0edca4c40f27e2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:bc:8c:a3:59:2f:db:93:45:0f:82:91:1c: 75:c0:10:50:d5:1e:d9:34:b0:cb:35:7a:7f:c2:b3: c1:ad:f1:10:4a:6f:cf:2d:fc:34:49:26:16:98:35: 32:b9:15:b5:dc:e9:52:64:a3:65:38:d1:6e:ca:14: 52:1d:d5:f7:3b:6e:b9:07:32:16:13:8e:26:c9:d2: 8e:bd:34:2c:f2:80:9c:1e:38:56:27:ae:ee:c6:80: 64:2f:04:cc:7a:fb:05:f1:ba:cd:47:67:26:03:e2: 20:e8:b5:ca:81:b1:64:d2:c1:2f:41:e2:60:be:a0: 36:ae:27:97:19:11:c6:61:3f:b3:a8:1b:02:31:68: 70:78:af:5c:53:b7:8c:9f:f1:ef:f5:ee:52:98:dc: 39:86:3d:9f:c0:9a:da:42:56:bc:a8:ea:6d:7f:de: 90:81:14:39:22:04:2c:71:5c:3c:96:ab:9a:10:fa: c8:21:db:37:53:07:e9:bb:4d:c1:74:91:09:cd:8c: 6b:ca:46:5b:d0:03:9b:94:13:3e:4e:9e:02:8d:29: 1a:23:69:98:cc:f3:80:9a:a1:2c:0f:28:0e:69:b7: 38:89:bb:4d:2c:37:9c:c9:b9:00:fd:7a:a4:a3:b8: 4d:7e:1a:70:2f:64:71:7f:f4:e1:63:43:d0:30:4e: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F3:C5:D1:D7:2F:4A:1D:2D:C3:3D:DB:0E:DC:A4:C4:0F:27:E2:F5 X509v3 Authority Key Identifier: keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/G_PF0dcvSh0twz3bDtykxA8n4vU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.151.0/24 185.89.56.0/22 194.117.254.0/23 IPv6: 2a05:d580::/32 Signature Algorithm: sha256WithRSAEncryption 0e:e6:62:e9:90:2c:46:47:7a:bb:b9:02:21:86:22:88:bb:5b: 22:c1:90:fa:63:c9:37:9f:72:ea:01:96:6a:7c:b7:50:71:62: ee:bd:fe:4e:30:9a:79:aa:c0:0d:82:af:8c:04:84:8a:a0:eb: b0:94:68:d9:41:9b:0e:24:23:1c:77:92:c7:a0:cd:49:5e:85: df:d5:e8:d5:df:6d:08:d6:d8:aa:8a:45:a9:be:74:30:4f:aa: 75:0b:0d:59:20:13:5a:88:db:37:00:88:fd:e0:3a:57:56:61: 3f:c2:42:41:ed:39:0d:24:af:bd:e1:23:e9:b8:ec:7c:21:23: 64:2c:f0:a5:60:d0:bb:1e:f5:1f:e4:e3:ac:88:ba:12:b5:9a: 71:7d:06:47:84:be:d5:bf:fc:6e:59:96:12:38:b7:01:28:c6: 9b:5d:5c:f2:7b:a0:90:26:f9:cb:34:27:30:23:94:ff:42:c9: 7f:eb:42:b8:22:04:15:71:2e:a6:06:99:db:d1:8b:59:99:66: 48:80:2d:a7:45:31:6c:fe:3f:ed:61:8a:be:6b:a3:dc:5b:ce: af:e1:11:28:4a:c4:05:a6:24:d2:3c:63:d2:ed:78:3c:75:87: 01:d7:b1:76:19:80:2b:f7:79:d0:96:ef:3b:90:44:5d:40:58: 2e:33:c1:2d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3WNy1soMBOADR6odi1HZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDMzOGI3ZGI1NDQwMDI5NDEwMzk3NTE1YzkzMGViNDUy ZDc1YjAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmYzYzVkMWQ3MmY0YTFkMmRjMzNkZGIwZWRjYTRjNDBmMjdlMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurq8jKNZL9uTRQ+CkRx1wBBQ1R7Z NLDLNXp/wrPBrfEQSm/PLfw0SSYWmDUyuRW13OlSZKNlONFuyhRSHdX3O265BzIW E44mydKOvTQs8oCcHjhWJ67uxoBkLwTMevsF8brNR2cmA+Ig6LXKgbFk0sEvQeJg vqA2rieXGRHGYT+zqBsCMWhweK9cU7eMn/Hv9e5SmNw5hj2fwJraQla8qOptf96Q gRQ5IgQscVw8lquaEPrIIds3Uwfpu03BdJEJzYxrykZb0AOblBM+Tp4CjSkaI2mY zPOAmqEsDygOabc4ibtNLDecybkA/Xqko7hNfhpwL2Rxf/ThY0PQME66QQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBvzxdHXL0odLcM92w7cpMQPJ+L1MB8GA1UdIwQY MBaAFJ8DOLfbVEAClBA5dRXJMOtFLXWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQt MTRlZTMyZmM1ZDA2LzEvR19QRjBkY3ZTaDB0d3ozYkR0eWt4QThuNHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xNjY2MWMtZTc3Yi00MWMzLTgwZTQtMTRlZTMyZmM1ZDA2 LzEvbndNNHQ5dFVRQUtVRURsMUZja3c2MFV0ZGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9+XAwQC uVk4AwQBwnX+MA0EAgACMAcDBQAqBdWAMA0GCSqGSIb3DQEBCwUAA4IBAQAO5mLp kCxGR3q7uQIhhiKIu1siwZD6Y8k3n3LqAZZqfLdQcWLuvf5OMJp5qsANgq+MBISK oOuwlGjZQZsOJCMcd5LHoM1JXoXf1ejV320I1tiqikWpvnQwT6p1Cw1ZIBNaiNs3 AIj94DpXVmE/wkJB7TkNJK+94SPpuOx8ISNkLPClYNC7HvUf5OOsiLoStZpxfQZH hL7Vv/xuWZYSOLcBKMabXVzye6CQJvnLNCcwI5T/Qsl/60K4IgQVcS6mBpnb0YtZ mWZIgC2nRTFs/j/tYYq+a6PcW86v4REoSsQFpiTSPGPS7Xg8dYcB17F2GYAr93nQ lu87kERdQFguM8Et -----END CERTIFICATE-----Generated at Thu Jan 1 09:11:17 2026 by rpki-client