This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa
File: PIySCIZkIgJ1WyTySPY0iQT26tY.roa (raw, json)
Hash identifier: MH9EbGnDDtkXwzoNaIYUyEkSyUYBKVr7Lhn/gzUTxyU=
Subject key identifier: 3C:8C:92:08:86:64:22:02:75:5B:24:F2:48:F6:34:89:04:F6:EA:D6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C77B776F55811AF7D2C32173F2DE39
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa
Signing time: Thu 01 Jan 2026 04:18:40 +0000
ROA not before: Thu 01 Jan 2026 04:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57101
IP address blocks: 195.136.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:7b:77:6f:55:81:1a:f7:d2:c3:21:73:f2:de:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8c920886642202755b24f248f6348904f6ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:ce:4a:dd:41:59:a3:4d:b1:31:c3:f0:5e:
0e:08:86:82:82:20:54:6f:aa:d8:76:cd:0c:36:65:
49:0b:0b:c9:1a:b5:29:70:9d:55:fd:d0:70:c8:0e:
35:fa:1b:86:1c:f3:f7:40:da:ac:54:97:88:2b:b3:
31:f1:98:fb:d9:01:18:f0:51:35:48:24:39:9c:83:
86:22:a9:f9:fa:ef:18:75:62:82:82:3f:bd:23:b9:
09:2b:03:04:c6:bb:0c:83:06:eb:47:9c:42:05:80:
0a:b7:83:97:df:59:53:c2:28:4e:24:03:4e:a0:23:
13:73:c6:b5:35:19:c8:71:4b:3f:8f:4a:84:1e:92:
0d:c1:40:e6:02:87:93:95:6e:03:fa:15:a8:49:dc:
58:e4:36:30:70:fc:60:f6:8f:e1:68:e9:47:4b:c5:
d3:be:7a:0e:b5:8d:36:bc:3e:6a:14:e0:8a:bf:f4:
fc:7a:5e:6d:cb:d7:47:ed:2e:4f:ec:da:54:76:12:
41:78:7c:29:61:88:05:e6:a1:3d:78:cd:76:97:a4:
93:d6:cc:4f:0e:d8:fd:00:85:10:10:99:46:dd:39:
a1:06:0d:b6:5c:89:a1:10:1d:06:8a:01:1d:60:68:
e9:28:20:67:55:bb:42:69:fd:19:75:96:35:f4:04:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:92:08:86:64:22:02:75:5B:24:F2:48:F6:34:89:04:F6:EA:D6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.136.0/22
Signature Algorithm: sha256WithRSAEncryption
02:84:a6:82:ea:18:56:39:76:08:8c:e8:ff:34:12:91:c2:32:
df:26:e8:e5:ca:a0:3f:d2:c2:2e:7b:33:26:bc:96:2b:a8:74:
7f:8a:fc:4e:ce:3e:12:86:c7:26:be:b3:25:cc:d0:3a:13:31:
16:df:9f:6d:8d:3a:12:dd:91:a9:8a:63:2c:b3:53:7b:9d:d5:
91:4c:86:e0:1a:c2:ae:fc:7f:3c:db:b3:4f:64:4d:a3:4f:34:
f0:94:ef:26:39:49:78:cd:c5:cd:6b:81:1e:0c:8e:a8:86:92:
5e:7c:bd:32:a8:0c:6a:ff:3e:99:3c:07:44:fd:2c:e8:1c:ec:
60:ab:6e:14:9a:b6:a8:25:83:5b:82:ec:f5:cc:d1:03:2d:a9:
39:ec:2a:66:38:be:99:bb:79:ff:97:f6:47:47:c8:37:ba:57:
a7:f5:38:c3:ee:27:08:16:3e:2b:fc:2b:20:e6:25:0f:d0:e0:
13:a4:1d:79:ff:b1:0d:c9:af:b9:6d:fa:00:78:8c:db:b6:d7:
4d:43:62:d5:9d:f6:0f:70:f9:f0:3f:cd:1a:5c:6f:a8:8c:56:
99:9b:57:62:9e:05:0b:44:da:64:e1:6d:8a:59:b8:6d:07:2b:
08:3a:4b:f6:83:67:b1:f8:2a:19:b1:9d:53:24:a5:03:0d:69:
a5:3d:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:47 2026 by rpki-client