This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PIU7Zxr6WOBUfjTOxP66dy63XjE.roa File: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (raw, json) Hash identifier: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk= Subject key identifier: 3C:85:3B:67:1A:FA:58:E0:54:7E:34:CE:C4:FE:BA:77:2E:B7:5E:31 Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019B7C122D268EC5FBA599FF6BCE15DE666B Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PIU7Zxr6WOBUfjTOxP66dy63XjE.roa Signing time: Fri 02 Jan 2026 00:18:44 +0000 ROA not before: Fri 02 Jan 2026 00:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203394 IP address blocks: 185.126.255.0/24 maxlen: 24 194.4.71.0/24 maxlen: 24 212.79.125.0/24 maxlen: 24 212.87.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2d:26:8e:c5:fb:a5:99:ff:6b:ce:15:de:66:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c853b671afa58e0547e34cec4feba772eb75e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:2f:88:ed:2c:55:3f:30:64:3e:34:88:c3: 38:3f:06:d8:9c:d3:52:76:a4:b9:82:9f:7c:6a:ec: 00:1e:50:88:00:e6:73:4f:d3:84:74:4e:cc:09:8b: b0:5d:aa:13:8b:07:16:55:ec:8c:22:dc:87:66:55: 55:92:96:ac:a5:13:c3:ff:fb:ee:24:e9:ae:a3:dc: 8a:62:ed:c7:93:f2:01:21:f5:b5:79:19:dd:d8:e2: ed:0a:e0:58:8d:a7:d2:fc:21:1e:9c:43:95:cc:fe: 91:28:d0:cb:aa:1a:18:4a:41:0d:09:5f:01:07:78: c9:7d:50:e5:fc:04:9b:e6:93:bc:66:d1:62:56:5d: 11:98:e9:3a:94:a0:db:6f:b4:85:58:7c:23:73:b2: 44:63:60:06:f9:08:72:db:d3:59:5b:f3:b6:88:8a: 8b:b4:47:19:a9:02:f4:b2:9e:d6:64:aa:4b:09:e2: c0:bd:8c:57:65:d6:97:6b:50:fb:25:d9:ff:23:78: 9c:59:2f:9b:40:35:ef:55:a6:a5:5d:8e:77:ba:a7: fe:33:db:37:c7:42:fa:4b:2d:bb:45:a2:75:b4:2c: a8:65:45:8c:10:1a:a1:85:40:82:de:07:7a:78:4f: 3a:e9:8a:89:4e:21:ec:bd:8f:2e:21:12:24:c6:40: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:85:3B:67:1A:FA:58:E0:54:7E:34:CE:C4:FE:BA:77:2E:B7:5E:31 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/PIU7Zxr6WOBUfjTOxP66dy63XjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.255.0/24 194.4.71.0/24 212.79.125.0/24 212.87.168.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:1b:1f:ff:9a:b0:1f:bb:38:1e:68:3e:49:79:af:e3:07:a1: 56:e9:d4:b4:8d:6b:af:cd:55:c9:fe:0f:f1:15:4d:1d:d8:15: af:6f:35:99:a2:f7:8d:0a:42:62:57:70:b7:b2:f5:ef:3d:98: f4:49:c1:59:4c:9f:26:2b:33:d1:d7:36:58:76:8f:25:01:0d: d0:28:8b:d5:26:1a:d0:23:cc:8b:d5:48:aa:95:8f:f4:58:6d: 24:e8:29:34:f9:78:73:d5:74:9c:40:f2:92:31:50:7d:cd:5e: 87:7b:b2:55:9d:c9:bb:6f:10:7e:1e:24:b4:9a:3e:01:0e:0d: 79:49:10:fa:09:de:cb:d5:7b:e7:fa:c6:8d:8e:af:cb:d9:50: 8d:76:be:7e:37:8d:ac:b9:5f:e6:f0:7a:92:c5:45:7f:0e:fa: 56:f5:6c:ef:48:88:10:c8:21:54:5f:84:39:19:ca:8e:e1:bd: f5:e4:a3:66:94:e8:1b:c9:48:99:cb:6b:2d:47:ac:e9:5a:99: 6e:30:68:10:76:a5:cb:fb:b4:30:5f:5d:3c:ea:72:0b:4a:b6: 0b:64:71:f3:e5:62:98:ea:78:b7:57:99:d9:e9:17:10:41:b5: e6:47:ce:7b:58:12:c7:09:6e:30:7c:b5:96:90:0e:44:a0:0f: 77:d1:29:25 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Ei0mjsX7pZn/a84V3mZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzg1M2I2NzFhZmE1OGUwNTQ3ZTM0Y2VjNGZlYmE3NzJlYjc1ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAoviO0sVT8wZD40iMM4PwbYnNNS dqS5gp98auwAHlCIAOZzT9OEdE7MCYuwXaoTiwcWVeyMItyHZlVVkpaspRPD//vu JOmuo9yKYu3Hk/IBIfW1eRnd2OLtCuBYjafS/CEenEOVzP6RKNDLqhoYSkENCV8B B3jJfVDl/ASb5pO8ZtFiVl0RmOk6lKDbb7SFWHwjc7JEY2AG+Qhy29NZW/O2iIqL tEcZqQL0sp7WZKpLCeLAvYxXZdaXa1D7Jdn/I3icWS+bQDXvVaalXY53uqf+M9s3 x0L6Sy27RaJ1tCyoZUWMEBqhhUCC3gd6eE866YqJTiHsvY8uIRIkxkBFXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDyFO2ca+ljgVH40zsT+uncut14xMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvUElVN1p4cjZXT0JVZmpUT3hQNjZkeTYzWGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuX7/AwQA wgRHAwQA1E99AwQA1FeoMA0GCSqGSIb3DQEBCwUAA4IBAQAeGx//mrAfuzgeaD5J ea/jB6FW6dS0jWuvzVXJ/g/xFU0d2BWvbzWZoveNCkJiV3C3svXvPZj0ScFZTJ8m KzPR1zZYdo8lAQ3QKIvVJhrQI8yL1UiqlY/0WG0k6Ck0+Xhz1XScQPKSMVB9zV6H e7JVncm7bxB+HiS0mj4BDg15SRD6Cd7L1Xvn+saNjq/L2VCNdr5+N42suV/m8HqS xUV/DvpW9WzvSIgQyCFUX4Q5GcqO4b315KNmlOgbyUiZy2stR6zpWpluMGgQdqXL +7QwX1086nILSrYLZHHz5WKY6ni3V5nZ6RcQQbXmR857WBLHCW4wfLWWkA5EoA93 0Skl -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:39 2026 by rpki-client