This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/PiYMPWiZqPKiPSxxOffNzBJuyIA.roa File: PiYMPWiZqPKiPSxxOffNzBJuyIA.roa (raw, json) Hash identifier: iYM4COezS5hiEnoLC5DueAtMJwExPCIZLeAMdYmXws0= Subject key identifier: 3E:26:0C:3D:68:99:A8:F2:A2:3D:2C:71:39:F7:CD:CC:12:6E:C8:80 Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Certificate serial: 019B7910538CFC86F1098F5004E4D305F372 Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/PiYMPWiZqPKiPSxxOffNzBJuyIA.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 37.75.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:53:8c:fc:86:f1:09:8f:50:04:e4:d3:05:f3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e260c3d6899a8f2a23d2c7139f7cdcc126ec880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:4e:17:d5:93:ef:bc:29:2e:15:db:6b:56: 2f:31:58:ff:4c:e5:f8:52:51:52:5a:a0:c3:31:b2: ed:f2:e4:98:ca:01:72:78:c2:2e:3b:2f:f1:60:fc: fd:24:02:be:10:d2:08:a8:47:b1:b8:df:b8:3c:a8: ce:b7:c8:06:b2:bf:03:8f:3c:7b:c9:1f:df:09:b2: d0:39:9a:f9:a8:90:eb:d9:ac:ce:5e:09:3c:ee:d6: be:a1:c7:35:bc:e5:d3:9d:53:77:36:b1:57:6e:a1: 89:9f:81:ae:38:d8:3a:c0:f8:0e:27:8e:df:0e:6b: f2:2e:26:88:73:5f:21:ec:8d:5c:5c:ea:7d:b4:2c: 0e:cc:0c:f3:56:0f:46:ca:11:05:3a:a0:91:c8:d6: ec:f6:c9:be:77:5a:a2:be:a7:65:db:b8:c1:19:e5: 50:b0:b9:6d:48:7d:77:3c:c5:aa:c6:2e:7c:50:02: 7d:d4:38:0e:ad:90:01:cf:77:d1:ba:7f:3b:3d:1d: 21:2f:13:ff:26:09:d8:5e:c9:89:da:4c:bd:4d:c0: 26:fd:d3:d8:7a:19:72:00:1c:cb:5f:35:16:8b:a1: f2:01:ef:cf:dc:ca:52:22:23:4e:56:ad:ce:ba:58: d9:67:8d:12:2f:79:8e:97:9b:1c:81:57:89:fe:dd: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:26:0C:3D:68:99:A8:F2:A2:3D:2C:71:39:F7:CD:CC:12:6E:C8:80 X509v3 Authority Key Identifier: keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/PiYMPWiZqPKiPSxxOffNzBJuyIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.237.0/24 Signature Algorithm: sha256WithRSAEncryption 18:1b:2a:f3:6f:84:bc:f5:13:70:49:01:44:4e:a7:66:e4:da: 20:0c:aa:39:61:10:b5:52:3c:e0:a8:15:f6:c1:e6:d8:d3:2e: 61:5b:8e:94:6d:3b:e6:5c:f6:9f:13:37:5a:69:f3:83:4b:40: 44:9d:70:98:42:ed:3b:63:56:46:3a:4d:30:03:55:73:21:c8: b6:3e:85:ea:cc:23:83:30:c3:87:df:27:e8:14:09:73:47:96: 5b:35:ed:a3:f7:51:b6:ec:12:41:77:2a:c6:34:26:e7:4e:36: f6:74:c6:36:5f:43:20:0d:00:df:39:fa:63:12:2a:77:6f:1f: e7:d9:4f:25:b0:1c:ff:f3:4a:e1:82:06:91:d3:d9:1b:04:ac: 47:78:9f:df:4c:de:77:fd:ed:f7:1c:ef:f3:43:ba:cf:20:bf: 28:37:10:e2:46:84:1f:8e:2c:ef:d1:b3:48:aa:25:22:48:42: 36:eb:65:df:5d:0e:88:33:06:18:fc:7d:56:7b:ca:f3:6d:c7: 85:1b:23:41:5c:ba:26:e4:06:79:8f:01:de:10:0c:bf:48:f3: 49:d8:3d:a7:18:e8:e4:56:46:f6:3b:83:32:fd:90:13:01:df: c6:55:c2:c4:e3:44:06:28:dc:2c:ab:11:88:8f:23:a0:74:87: 01:87:08:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFOM/IbxCY9QBOTTBfNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj NjYwODkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTI2MGMzZDY4OTlhOGYyYTIzZDJjNzEzOWY3Y2RjYzEyNmVjODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxhOF9WT77wpLhXba1YvMVj/TOX4 UlFSWqDDMbLt8uSYygFyeMIuOy/xYPz9JAK+ENIIqEexuN+4PKjOt8gGsr8Djzx7 yR/fCbLQOZr5qJDr2azOXgk87ta+occ1vOXTnVN3NrFXbqGJn4GuONg6wPgOJ47f DmvyLiaIc18h7I1cXOp9tCwOzAzzVg9GyhEFOqCRyNbs9sm+d1qivqdl27jBGeVQ sLltSH13PMWqxi58UAJ91DgOrZABz3fRun87PR0hLxP/JgnYXsmJ2ky9TcAm/dPY ehlyABzLXzUWi6HyAe/P3MpSIiNOVq3OuljZZ40SL3mOl5scgVeJ/t0+BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4mDD1omajyoj0scTn3zcwSbsiAMB8GA1UdIwQY MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt NTRhMjVlMmNkYWE5LzEvUGlZTVBXaVpxUEtpUFN4eE9mZk56Qkp1eUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5 LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUvtMA0G CSqGSIb3DQEBCwUAA4IBAQAYGyrzb4S89RNwSQFETqdm5NogDKo5YRC1UjzgqBX2 webY0y5hW46UbTvmXPafEzdaafODS0BEnXCYQu07Y1ZGOk0wA1VzIci2PoXqzCOD MMOH3yfoFAlzR5ZbNe2j91G27BJBdyrGNCbnTjb2dMY2X0MgDQDfOfpjEip3bx/n 2U8lsBz/80rhggaR09kbBKxHeJ/fTN53/e33HO/zQ7rPIL8oNxDiRoQfjizv0bNI qiUiSEI262XfXQ6IMwYY/H1We8rzbceFGyNBXLom5AZ5jwHeEAy/SPNJ2D2nGOjk Vkb2O4My/ZATAd/GVcLE40QGKNwsqxGIjyOgdIcBhwi1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:25 2026 by rpki-client