This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/PINsz1ecwdVhJzpxv6fsByeh4kA.roa File: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (raw, json) Hash identifier: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s= Subject key identifier: 3C:83:6C:CF:57:9C:C1:D5:61:27:3A:71:BF:A7:EC:07:27:A1:E2:40 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B7D5CFB8C41A0011B08ED4D7199CA23C5 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/PINsz1ecwdVhJzpxv6fsByeh4kA.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215064 IP address blocks: 193.28.68.0/24 maxlen: 24 2a12:6900:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fb:8c:41:a0:01:1b:08:ed:4d:71:99:ca:23:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c836ccf579cc1d561273a71bfa7ec0727a1e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:54:c7:c9:9e:49:4f:31:62:24:7d:57:58: 8b:6d:13:50:ac:1e:da:02:24:21:d9:2f:18:64:a2: 7c:a0:45:99:09:54:41:6e:f0:cc:1d:59:38:7f:b0: 02:04:e4:d4:eb:a0:e6:1e:80:e9:df:46:09:c2:6f: 1f:c4:11:17:0d:4b:8f:77:46:6e:12:45:d5:01:83: e9:e8:e1:74:7c:88:31:e0:ff:7f:d2:31:dd:88:1e: ea:cf:4e:d9:15:43:94:89:a9:da:f2:01:2b:72:90: 1b:59:5e:ba:37:77:86:bf:86:33:6a:18:12:17:49: de:12:2b:99:eb:99:78:f5:eb:c6:12:e2:a8:26:f2: 00:a6:e8:32:40:f6:77:87:fb:59:7f:21:86:dc:7f: 2c:9e:67:44:aa:3c:4f:82:ae:b8:de:f2:4a:7b:49: b2:e4:a7:26:39:54:d8:90:3b:b8:ff:29:41:0d:d0: a2:fc:c2:99:7d:d8:06:dd:11:5a:6e:f4:09:de:5e: 3d:93:40:8c:d7:f1:65:e8:41:95:34:ab:e0:8a:bf: 43:4f:ff:50:f8:da:16:de:99:36:d6:77:6e:f3:40: f1:f9:26:4b:f2:cb:d3:5a:5a:dc:11:9a:b0:b9:b9: 8b:9c:68:49:46:ae:c0:6e:90:58:4f:79:5b:f3:96: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:83:6C:CF:57:9C:C1:D5:61:27:3A:71:BF:A7:EC:07:27:A1:E2:40 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/PINsz1ecwdVhJzpxv6fsByeh4kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.68.0/24 IPv6: 2a12:6900:2000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:89:c2:c4:35:5d:60:30:42:77:68:f6:3a:be:a8:09:dc:f7: d7:b6:55:0b:ff:15:8d:b6:cc:e6:2d:76:7f:32:a7:ec:c7:cc: 3e:80:97:56:70:8e:63:be:3b:0f:b4:3d:ea:ab:a2:21:9c:eb: b6:0d:28:85:02:32:ba:ce:b9:f7:3f:58:4f:bf:f5:50:93:c9: 92:2e:55:81:3f:fb:42:3d:25:a3:be:a5:9f:2e:11:50:05:69: 5f:a4:a9:fe:97:00:bf:5c:fe:13:da:f9:c2:cb:91:ee:8c:4b: 7d:8f:c2:29:ef:b2:61:40:40:d7:4d:bc:ec:e5:93:fd:f8:9a: 33:fa:aa:56:10:dd:8a:8d:5b:cb:27:85:48:61:d3:f7:30:04: 7d:c7:50:c7:c9:70:95:b4:6d:75:e2:74:3e:0d:d1:8f:3b:6d: 36:0d:67:60:a1:9d:92:06:24:aa:fa:ed:45:65:e0:27:32:77: e5:dc:2a:9f:60:d8:34:4d:d5:64:69:db:cb:cb:de:89:17:74: ea:dd:2c:80:de:b6:11:36:14:d2:5a:8e:93:47:d5:64:39:a2: 59:c8:b4:69:c0:10:b0:fc:b1:7e:26:6a:89:a5:c3:49:32:dd: bf:2d:ca:b4:22:ae:b7:46:95:0e:4c:3f:29:a1:3d:e4:49:a4: b3:49:21:67 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9XPuMQaABGwjtTXGZyiPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzgzNmNjZjU3OWNjMWQ1NjEyNzNhNzFiZmE3ZWMwNzI3YTFlMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdhUx8meSU8xYiR9V1iLbRNQrB7a AiQh2S8YZKJ8oEWZCVRBbvDMHVk4f7ACBOTU66DmHoDp30YJwm8fxBEXDUuPd0Zu EkXVAYPp6OF0fIgx4P9/0jHdiB7qz07ZFUOUiana8gErcpAbWV66N3eGv4YzahgS F0neEiuZ65l49evGEuKoJvIApugyQPZ3h/tZfyGG3H8snmdEqjxPgq643vJKe0my 5KcmOVTYkDu4/ylBDdCi/MKZfdgG3RFabvQJ3l49k0CM1/Fl6EGVNKvgir9DT/9Q +NoW3pk21ndu80Dx+SZL8svTWlrcEZqwubmLnGhJRq7AbpBYT3lb85b32wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFDyDbM9XnMHVYSc6cb+n7AcnoeJAMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvUElOc3oxZWN3ZFZoSnpweHY2ZnNCeWVoNGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwRxEMA4E AgACMAgDBgAqEmkAIDANBgkqhkiG9w0BAQsFAAOCAQEAjonCxDVdYDBCd2j2Or6o Cdz317ZVC/8VjbbM5i12fzKn7MfMPoCXVnCOY747D7Q96quiIZzrtg0ohQIyus65 9z9YT7/1UJPJki5VgT/7Qj0lo76lny4RUAVpX6Sp/pcAv1z+E9r5wsuR7oxLfY/C Ke+yYUBA10287OWT/fiaM/qqVhDdio1byyeFSGHT9zAEfcdQx8lwlbRtdeJ0Pg3R jzttNg1nYKGdkgYkqvrtRWXgJzJ35dwqn2DYNE3VZGnby8veiRd06t0sgN62ETYU 0lqOk0fVZDmiWci0acAQsPyxfiZqiaXDSTLdvy3KtCKut0aVDkw/KaE95Emks0kh Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:19 2026 by rpki-client