This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa File: PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa (raw, json) Hash identifier: TMsqfJL/2//7NtMJYDBGQdLpDpaQu8Y3xvAd+fP2XDM= Subject key identifier: 3C:8F:D8:7F:6A:4E:67:F0:DD:F1:9C:85:3B:36:9B:7B:34:6D:06:74 Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Certificate serial: 019B78A2A4414FE6158C138709C8BE12AF7E Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49699 IP address blocks: 193.68.112.0/24 maxlen: 24 193.68.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a4:41:4f:e6:15:8c:13:87:09:c8:be:12:af:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c8fd87f6a4e67f0ddf19c853b369b7b346d0674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:83:d8:b6:93:aa:fa:a3:35:4a:92:63:21: c6:aa:07:fe:e0:5c:72:d2:59:90:34:29:4e:8a:82: f5:ee:13:bb:7b:e7:a4:c9:4f:89:3f:84:a6:1b:a9: b1:f3:8e:66:83:a5:de:a7:f6:aa:ed:41:55:07:80: 61:99:d6:25:66:95:5b:16:1e:20:87:7e:9d:16:80: 02:40:e6:46:de:06:88:fb:42:80:88:06:34:1a:b7: 88:7b:ec:f3:81:8c:51:b4:b6:07:dd:08:7a:bc:72: 01:1e:88:4e:f6:9a:e7:7d:14:a5:ee:e9:3a:65:7e: af:08:61:2d:9a:14:25:81:ec:99:93:6d:c7:16:a7: 1d:fe:46:96:53:17:8c:9a:7c:c1:e1:8b:16:3c:a5: 81:16:35:62:dd:fe:61:df:a3:97:eb:a9:8a:d1:ee: ee:68:81:31:3f:6c:72:65:f7:33:d1:68:42:c2:b5: 35:f1:1c:ae:a2:9a:0c:1f:9f:e7:9c:58:49:da:28: df:93:44:44:a7:80:cb:55:37:47:ae:07:e5:a5:96: c4:5d:2b:90:2c:fc:39:70:77:d6:84:63:d6:1d:e5: 5b:fa:87:23:72:e6:d5:dc:92:f6:ae:5c:8d:54:38: 58:ce:f0:48:25:a0:b3:bf:ac:70:53:65:1f:ae:2e: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:D8:7F:6A:4E:67:F0:DD:F1:9C:85:3B:36:9B:7B:34:6D:06:74 X509v3 Authority Key Identifier: keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/PI_Yf2pOZ_Dd8ZyFOzabezRtBnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.112.0/23 Signature Algorithm: sha256WithRSAEncryption b4:64:20:0b:af:8b:f4:7b:4c:d6:43:a3:76:d9:34:84:8e:39: a1:b5:27:20:dd:77:73:a0:5f:6a:40:3c:42:ed:41:46:7c:23: 55:23:b3:bd:ad:cf:f0:25:91:77:80:24:40:20:aa:73:47:4a: d4:a0:16:50:58:35:d9:f3:66:22:f0:10:35:5a:e2:e1:c1:1f: 72:68:76:81:cf:b9:5e:4b:fb:ae:01:94:bd:90:f7:ec:6c:4a: 76:5a:1e:be:83:5e:23:e3:39:b2:dc:81:4e:c5:7a:8f:28:08: 6c:74:eb:63:13:e4:4a:15:97:12:51:05:c8:6e:24:7e:69:bd: e9:db:13:81:34:2e:6a:dc:ea:0b:2f:99:b6:a1:3a:78:38:34: 0e:a4:05:e2:22:24:38:54:56:45:08:50:df:bd:a4:c2:be:c3: fb:b9:02:07:fd:62:9a:55:1f:d1:74:02:95:6d:a7:ba:c2:bd: 0e:89:8c:88:4c:01:ef:aa:69:e1:8d:88:08:f8:78:db:eb:b0: d3:97:6c:44:13:b0:56:b4:ae:e5:b7:10:99:62:ba:2f:8d:82: ed:8a:17:d0:50:38:22:b2:60:54:9b:0d:a0:d2:ba:c6:8d:58: 3a:55:fc:37:d1:d7:8f:05:b1:4f:0d:9c:1c:91:4c:51:37:92: 80:0b:d5:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqRBT+YVjBOHCci+Eq9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi MjBmNTcwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzhmZDg3ZjZhNGU2N2YwZGRmMTljODUzYjM2OWI3YjM0NmQwNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJeD2LaTqvqjNUqSYyHGqgf+4Fxy 0lmQNClOioL17hO7e+ekyU+JP4SmG6mx845mg6Xep/aq7UFVB4BhmdYlZpVbFh4g h36dFoACQOZG3gaI+0KAiAY0GreIe+zzgYxRtLYH3Qh6vHIBHohO9prnfRSl7uk6 ZX6vCGEtmhQlgeyZk23HFqcd/kaWUxeMmnzB4YsWPKWBFjVi3f5h36OX66mK0e7u aIExP2xyZfcz0WhCwrU18RyuopoMH5/nnFhJ2ijfk0REp4DLVTdHrgflpZbEXSuQ LPw5cHfWhGPWHeVb+ocjcubV3JL2rlyNVDhYzvBIJaCzv6xwU2Ufri46SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyP2H9qTmfw3fGchTs2m3s0bQZ0MB8GA1UdIwQY MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt NDlkNDBhMTNjYmMyLzEvUElfWWYycE9aX0RkOFp5Rk96YWJlelJ0Qm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwURwMA0G CSqGSIb3DQEBCwUAA4IBAQC0ZCALr4v0e0zWQ6N22TSEjjmhtScg3XdzoF9qQDxC 7UFGfCNVI7O9rc/wJZF3gCRAIKpzR0rUoBZQWDXZ82Yi8BA1WuLhwR9yaHaBz7le S/uuAZS9kPfsbEp2Wh6+g14j4zmy3IFOxXqPKAhsdOtjE+RKFZcSUQXIbiR+ab3p 2xOBNC5q3OoLL5m2oTp4ODQOpAXiIiQ4VFZFCFDfvaTCvsP7uQIH/WKaVR/RdAKV bae6wr0OiYyITAHvqmnhjYgI+Hjb67DTl2xEE7BWtK7ltxCZYrovjYLtihfQUDgi smBUmw2g0rrGjVg6Vfw30dePBbFPDZwckUxRN5KAC9Xg -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:55 2026 by rpki-client