This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/piiqlTI956md5esUYEMv2zHnNtM.roa
File: piiqlTI956md5esUYEMv2zHnNtM.roa (raw, json)
Hash identifier: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=
Subject key identifier: A6:28:AA:95:32:3D:E7:A9:9D:E5:EB:14:60:43:2F:DB:31:E7:36:D3
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019B7D5BEA69532EFCEF0C45E5F7B99A1B3A
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/piiqlTI956md5esUYEMv2zHnNtM.roa
Signing time: Fri 02 Jan 2026 06:18:54 +0000
ROA not before: Fri 02 Jan 2026 06:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14576
IP address blocks: 95.181.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:ea:69:53:2e:fc:ef:0c:45:e5:f7:b9:9a:1b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 2 06:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a628aa95323de7a99de5eb1460432fdb31e736d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:c7:ba:05:7e:b3:a9:82:b0:3d:e1:89:14:
cf:fd:79:53:fb:7f:f9:51:fd:56:c3:a0:8b:ff:2b:
1c:e8:df:bb:4c:67:5e:b8:98:9c:c3:fa:3c:68:7b:
ef:84:64:a1:cb:8b:2f:01:b4:27:cc:23:66:71:4f:
e4:9b:d9:18:5b:40:83:43:e1:df:0b:7d:28:03:e6:
54:28:c3:ad:8b:b1:59:99:03:06:56:56:39:7f:7a:
69:2a:30:be:29:16:c1:29:91:fa:89:f5:84:fa:9b:
b1:6a:97:b3:6f:15:82:79:57:23:03:fc:74:4c:53:
f2:61:d8:dd:56:02:62:0c:10:e5:2d:7d:6e:ce:66:
da:21:53:68:57:f7:f7:4c:e2:3f:1d:5f:25:7c:1d:
2f:fb:c1:b3:d3:81:e0:97:8d:fd:7b:01:57:14:b2:
f1:58:22:dd:2b:d1:0e:97:07:bb:c8:b5:11:b9:8a:
96:7e:65:ab:2c:16:92:74:9d:24:a2:c4:41:fb:ff:
51:3b:a4:fc:3c:31:f1:5a:90:ae:67:e2:cd:38:b4:
82:e8:92:50:4b:ef:5e:02:d8:7c:a1:ac:1c:a8:d1:
96:9c:f1:de:0c:a8:f0:28:ee:fd:e2:92:91:ed:bc:
af:ac:5e:7b:af:8b:90:7b:99:a5:f9:9f:54:95:57:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:28:AA:95:32:3D:E7:A9:9D:E5:EB:14:60:43:2F:DB:31:E7:36:D3
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/piiqlTI956md5esUYEMv2zHnNtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
36:24:86:8e:0f:67:94:bf:a7:a8:da:9e:25:73:7d:54:05:64:
19:e5:6f:76:74:22:b4:3a:84:10:6e:1c:11:dd:e5:c5:7c:4c:
51:30:7c:8b:36:5c:6b:ad:bb:46:2f:87:7e:1b:59:9c:6d:12:
bf:9b:c7:69:dd:13:8f:ed:06:39:3e:14:13:c6:ee:68:43:13:
45:72:d3:c7:0d:8d:3c:85:28:00:0e:b9:4f:b3:50:cd:a1:4c:
be:77:4a:dd:a4:ff:52:51:dc:ee:27:fa:6c:55:eb:c2:52:a5:
9a:19:6e:65:e8:cc:6f:86:b7:63:de:92:8b:49:dc:b8:fd:7c:
fd:91:48:4c:6a:e5:20:53:ce:cf:56:51:48:4a:0d:3a:d1:3e:
6a:37:a6:42:b1:a1:d4:7e:d6:02:05:01:66:dc:10:3f:84:87:
4a:6e:07:eb:39:ac:2d:97:b7:b1:1a:be:e2:1b:e5:51:ed:88:
ab:07:10:33:b7:7d:47:30:3e:76:e7:28:2a:98:31:0b:8b:00:
06:98:07:23:e4:87:44:03:f0:c9:4c:5d:36:77:6b:78:f5:5f:
d0:c1:07:cb:fe:64:96:cb:1f:6f:ff:fc:fa:a0:f0:15:a4:57:
af:a8:1a:b8:20:aa:25:2e:a9:6f:60:f0:e3:15:e0:f9:91:7a:
c9:b1:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:09:22 2026 by rpki-client