This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PcIBI5dafACqFlXWOqsdKwIvi2s.roa File: PcIBI5dafACqFlXWOqsdKwIvi2s.roa (raw, json) Hash identifier: Zm7xfHeKvDBG7fQQnnEw4s+kJIdfCCi6pcssT8hJZs8= Subject key identifier: 3D:C2:01:23:97:5A:7C:00:AA:16:55:D6:3A:AB:1D:2B:02:2F:8B:6B Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79415D20D29A0FCAAFD4A13451697 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PcIBI5dafACqFlXWOqsdKwIvi2s.roa Signing time: Thu 01 Jan 2026 04:18:46 +0000 ROA not before: Thu 01 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209200 IP address blocks: 81.15.203.0/24 maxlen: 24 81.15.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:94:15:d2:0d:29:a0:fc:aa:fd:4a:13:45:16:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dc20123975a7c00aa1655d63aab1d2b022f8b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:42:03:26:f5:dc:e8:0f:e8:d7:b7:22:d9: 29:63:28:4e:a7:a0:0c:98:4b:5a:95:e0:52:e8:cb: 7a:97:f5:89:3e:2b:8f:8c:13:bd:5b:0b:41:87:97: 71:18:df:be:e4:62:2b:b9:9f:5e:da:44:de:34:31: 8b:3e:02:68:31:3c:3a:b5:fc:d7:68:57:b8:d4:66: 82:72:08:e4:77:4d:c3:2d:b8:6e:5f:de:a0:7a:f4: 0e:a3:02:d2:36:03:b6:0c:83:8a:d6:4b:2f:31:1c: c5:e5:34:c9:98:06:af:f7:0f:ac:e0:1c:7a:14:09: 12:93:79:51:bd:e8:36:2c:72:4a:d7:1e:bc:8f:c6: 8d:7f:51:1d:c3:18:d9:03:6d:f7:f3:ac:9c:44:5c: 51:6f:c3:ef:7a:07:6b:36:4e:6f:9d:eb:e0:7f:74: 2a:cd:27:f0:fb:ac:1f:37:4a:59:91:d9:b4:aa:46: d2:c8:66:b6:02:73:f5:2d:7c:86:89:b9:38:7c:c2: f0:14:5b:ed:e5:99:3f:21:19:c3:52:a8:48:03:0a: 09:9d:ea:08:4b:60:89:94:ad:fe:a1:4b:45:ca:08: fa:1f:40:99:21:37:1d:d6:39:12:1d:fa:5b:d6:fe: 2d:3e:f2:42:de:b7:3e:e6:d7:2d:09:52:1a:62:38: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:01:23:97:5A:7C:00:AA:16:55:D6:3A:AB:1D:2B:02:2F:8B:6B X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PcIBI5dafACqFlXWOqsdKwIvi2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.15.203.0/24 81.15.237.0/24 Signature Algorithm: sha256WithRSAEncryption 00:6b:e4:4c:51:4d:a9:56:23:0a:89:bc:66:1c:35:0c:ae:78: 02:ef:24:29:30:ea:83:9e:d0:ba:3c:bb:ed:9d:90:7f:b8:aa: 26:40:99:c6:80:ad:6c:d5:9b:7e:b0:af:3a:47:54:c2:c9:d0: 5f:0f:4f:66:6f:25:66:ae:cd:33:86:83:0b:0d:08:d2:ca:56: 2e:06:99:25:95:93:1f:b0:a0:4c:fa:c7:77:89:0a:1a:fa:62: f2:92:6c:dd:07:7d:eb:d5:46:5a:46:5d:65:3f:52:af:88:3a: 70:b0:ff:ff:3d:fb:ef:f7:0f:bf:64:38:e1:5b:93:71:b9:6e: 45:ae:36:ad:2c:da:f1:dc:81:5f:23:cb:ce:55:16:ea:70:06: a5:3b:bb:c1:fd:3e:8b:9c:be:e4:aa:77:3f:2f:73:14:18:95: 1a:22:81:57:1e:27:63:a8:e8:f3:a2:7e:45:20:a1:2a:43:b6: 28:66:31:23:72:17:2c:04:c2:14:ee:56:f3:9d:90:b5:a1:39: 5c:e8:5a:35:2f:0f:c5:dd:ca:b2:62:43:e0:1f:4e:89:85:15: 8a:22:a1:90:2f:f0:6a:40:fb:b7:6f:32:30:09:9b:18:9b:05: 97:56:bc:e2:91:94:3b:3e:44:48:07:aa:d1:94:25:36:a4:9f: aa:2e:3f:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x5QV0g0poPyq/UoTRRaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGMyMDEyMzk3NWE3YzAwYWExNjU1ZDYzYWFiMWQyYjAyMmY4YjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfxCAyb13OgP6Ne3ItkpYyhOp6AM mEtaleBS6Mt6l/WJPiuPjBO9WwtBh5dxGN++5GIruZ9e2kTeNDGLPgJoMTw6tfzX aFe41GaCcgjkd03DLbhuX96gevQOowLSNgO2DIOK1ksvMRzF5TTJmAav9w+s4Bx6 FAkSk3lRveg2LHJK1x68j8aNf1EdwxjZA23386ycRFxRb8PvegdrNk5vnevgf3Qq zSfw+6wfN0pZkdm0qkbSyGa2AnP1LXyGibk4fMLwFFvt5Zk/IRnDUqhIAwoJneoI S2CJlK3+oUtFygj6H0CZITcd1jkSHfpb1v4tPvJC3rc+5tctCVIaYjj4awIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD3CASOXWnwAqhZV1jqrHSsCL4trMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvUGNJQkk1ZGFmQUNxRmxYV09xc2RLd0l2aTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQ/LAwQA UQ/tMA0GCSqGSIb3DQEBCwUAA4IBAQAAa+RMUU2pViMKibxmHDUMrngC7yQpMOqD ntC6PLvtnZB/uKomQJnGgK1s1Zt+sK86R1TCydBfD09mbyVmrs0zhoMLDQjSylYu BpkllZMfsKBM+sd3iQoa+mLykmzdB33r1UZaRl1lP1KviDpwsP//Pfvv9w+/ZDjh W5NxuW5FrjatLNrx3IFfI8vOVRbqcAalO7vB/T6LnL7kqnc/L3MUGJUaIoFXHidj qOjzon5FIKEqQ7YoZjEjchcsBMIU7lbznZC1oTlc6Fo1Lw/F3cqyYkPgH06JhRWK IqGQL/BqQPu3bzIwCZsYmwWXVrzikZQ7PkRIB6rRlCU2pJ+qLj9p -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:13 2026 by rpki-client