This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/PI8Cnztdcg0Orhj3hNj0SOev2FA.roa File: PI8Cnztdcg0Orhj3hNj0SOev2FA.roa (raw, json) Hash identifier: F0vD9Ue05tdjzmjFbmnRff+jKy6sKGlrmWL0EX8ad5o= Subject key identifier: 3C:8F:02:9F:3B:5D:72:0D:0E:AE:18:F7:84:D8:F4:48:E7:AF:D8:50 Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc Certificate serial: 019B7F14CB2E6B6332F2B98861C6D642BC40 Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/PI8Cnztdcg0Orhj3hNj0SOev2FA.roa Signing time: Fri 02 Jan 2026 14:20:27 +0000 ROA not before: Fri 02 Jan 2026 14:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35407 IP address blocks: 193.138.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:cb:2e:6b:63:32:f2:b9:88:61:c6:d6:42:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc Validity Not Before: Jan 2 14:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c8f029f3b5d720d0eae18f784d8f448e7afd850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:8d:eb:ed:ca:05:e3:5d:8f:67:9d:58:cd: 1b:53:fe:cc:d5:36:37:65:47:64:85:8b:25:bd:83: 2c:62:ff:ff:ec:6a:b6:79:21:c6:b8:31:e9:c8:a1: 6f:16:a5:fa:27:39:81:83:96:ab:49:6b:1e:42:b4: c6:a8:af:b4:20:e7:e9:dc:4b:75:3b:16:35:7c:82: 21:a8:be:5f:7a:9a:67:84:44:e0:3b:45:2c:6e:01: a0:96:ef:a4:83:32:75:5a:f7:dd:5b:09:ad:79:36: 5c:cc:6e:a7:63:a7:31:f7:4b:96:a1:50:d8:f9:82: 08:db:37:e4:69:92:70:3c:ee:38:96:53:2a:39:e3: c8:65:5a:63:b5:84:04:5b:5a:a9:7c:28:1e:58:66: 3a:ec:17:b8:ef:fa:52:91:98:61:16:61:cd:9f:96: 8f:48:23:00:cd:da:1d:b5:08:77:b5:a3:a8:29:96: 28:a3:54:5c:2d:2b:ea:76:8b:12:88:5e:f8:13:ac: 0a:8d:7b:b4:9c:2a:23:28:f2:2b:b2:e0:8d:0b:d2: 91:d5:e9:a6:0e:7f:cc:3b:c3:32:fe:b3:77:07:fc: bb:9f:8d:a6:d9:cc:cc:02:ba:c0:7f:26:9f:04:3c: 8a:a8:23:1c:32:0b:68:36:da:78:dd:94:85:a4:9a: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:02:9F:3B:5D:72:0D:0E:AE:18:F7:84:D8:F4:48:E7:AF:D8:50 X509v3 Authority Key Identifier: keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/PI8Cnztdcg0Orhj3hNj0SOev2FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.30.0/24 Signature Algorithm: sha256WithRSAEncryption 51:d0:f2:72:0e:e5:fb:a2:a7:2e:b1:f0:e3:5b:ae:57:4c:ed: aa:c8:be:b7:00:c2:f7:69:af:a3:e3:35:8d:71:7d:7f:65:ec: 53:38:6b:ae:8c:87:55:b0:14:8f:46:0d:62:9c:d4:03:e1:0a: e6:b4:cc:b6:c0:94:64:0f:a1:09:1d:15:a5:f7:ce:2a:f9:c1: 4b:26:ba:2d:b5:f5:22:83:1b:c2:d5:0e:8c:3a:9e:65:fb:3f: 32:d2:88:52:33:87:58:c7:a7:4a:20:61:6e:8a:6f:39:f6:a2: 78:e0:28:3d:de:e9:61:18:c5:36:36:39:ee:7e:3c:1c:42:1f: 95:bd:c0:8c:e9:6b:42:1f:0d:97:b1:2d:68:6d:72:03:9c:14: fa:7b:86:df:0c:dd:64:0d:03:39:73:cf:05:83:b6:f1:e6:27: 68:2e:cd:5a:32:fa:27:06:26:5f:7a:45:e8:46:91:f6:eb:4a: 32:7e:70:62:b7:73:e9:1c:06:cb:61:b5:42:31:03:21:af:f7: 35:b2:a4:9b:95:c9:e5:0b:8d:9a:f7:af:4a:d6:fa:50:e5:24: 2a:64:da:51:a3:89:ba:f8:5b:68:b9:37:e3:5a:ea:f9:ec:7b: f6:e1:97:ee:30:42:a2:e2:3e:31:2c:80:cb:05:e8:35:6b:90: c1:e6:5e:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMsua2My8rmIYcbWQrxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDU3MDg1NGZlODg2Yjk0YWU2MjUzNjNjNjI1ZGRhNjBi YjNlZmMwHhcNMjYwMTAyMTQyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzhmMDI5ZjNiNWQ3MjBkMGVhZTE4Zjc4NGQ4ZjQ0OGU3YWZkODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIqN6+3KBeNdj2edWM0bU/7M1TY3 ZUdkhYslvYMsYv//7Gq2eSHGuDHpyKFvFqX6JzmBg5arSWseQrTGqK+0IOfp3Et1 OxY1fIIhqL5feppnhETgO0UsbgGglu+kgzJ1WvfdWwmteTZczG6nY6cx90uWoVDY +YII2zfkaZJwPO44llMqOePIZVpjtYQEW1qpfCgeWGY67Be47/pSkZhhFmHNn5aP SCMAzdodtQh3taOoKZYoo1RcLSvqdosSiF74E6wKjXu0nCojKPIrsuCNC9KR1emm Dn/MO8My/rN3B/y7n42m2czMArrAfyafBDyKqCMcMgtoNtp43ZSFpJq4HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyPAp87XXINDq4Y94TY9Ejnr9hQMB8GA1UdIwQY MBaAFKhFcIVP6Ia5SuYlNjxiXdpguz78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUt NWJjODc5NWMyY2JhLzEvUEk4Q256dGRjZzBPcmhqM2hOajBTT2V2MkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUtNWJjODc5NWMyY2Jh LzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYoeMA0G CSqGSIb3DQEBCwUAA4IBAQBR0PJyDuX7oqcusfDjW65XTO2qyL63AML3aa+j4zWN cX1/ZexTOGuujIdVsBSPRg1inNQD4QrmtMy2wJRkD6EJHRWl984q+cFLJrottfUi gxvC1Q6MOp5l+z8y0ohSM4dYx6dKIGFuim859qJ44Cg93ulhGMU2NjnufjwcQh+V vcCM6WtCHw2XsS1obXIDnBT6e4bfDN1kDQM5c88Fg7bx5idoLs1aMvonBiZfekXo RpH260oyfnBit3PpHAbLYbVCMQMhr/c1sqSblcnlC42a969K1vpQ5SQqZNpRo4m6 +FtouTfjWur57Hv24ZfuMEKi4j4xLIDLBeg1a5DB5l6C -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client