This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/piJbze-HuLRLvzhDimNlPs0s_4Y.roa File: piJbze-HuLRLvzhDimNlPs0s_4Y.roa (raw, json) Hash identifier: 4gxZhxpRdSb8RBPvvB3m5/Gymudlz0eodIb/E4SRmpA= Subject key identifier: A6:22:5B:CD:EF:87:B8:B4:4B:BF:38:43:8A:63:65:3E:CD:2C:FF:86 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130FF052075A6540B95E107E20C71E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/piJbze-HuLRLvzhDimNlPs0s_4Y.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215828 IP address blocks: 77.90.25.0/24 maxlen: 24 94.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0f:f0:52:07:5a:65:40:b9:5e:10:7e:20:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6225bcdef87b8b44bbf38438a63653ecd2cff86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:aa:b5:80:bd:cb:cc:8c:61:67:eb:88:3f: 09:c9:18:5c:2b:88:3c:b2:0e:6f:8a:7e:eb:9b:31: bb:69:55:01:32:37:f9:2e:8b:40:7a:fa:ed:24:cb: 07:54:c5:f7:82:59:1a:ed:2c:a9:95:1a:76:e9:12: be:59:79:c0:c8:75:c1:5c:92:bd:6b:2a:c8:bc:9a: cc:ac:cc:ca:05:6c:38:4f:f0:12:33:2f:67:d5:0c: d9:da:1b:c1:d9:4f:7f:14:ce:fd:d9:3b:92:f8:9d: 30:b5:47:ac:a9:c1:5c:41:e3:58:7c:56:e6:01:ae: fe:0f:8f:7d:e6:37:b8:07:1b:ca:aa:66:bd:c5:28: 5c:06:0a:f9:45:5d:ce:29:67:52:77:60:a7:39:52: 4a:64:97:51:b0:44:5f:ab:96:86:43:13:78:fc:a5: d7:41:c8:4b:0c:1e:c7:43:84:9f:09:0d:48:8d:47: 0e:42:b6:b9:76:93:15:04:da:7a:43:d6:f5:2b:95: a1:25:80:c6:49:53:d0:19:37:1f:b8:48:bd:aa:67: 8a:43:af:3d:49:99:62:dd:8a:81:e6:75:04:f4:23: 26:e2:2e:5d:a6:b5:e5:71:4f:15:42:3d:16:b0:72: c2:87:93:9c:5d:ce:73:d3:d9:06:f3:9d:59:2e:be: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:5B:CD:EF:87:B8:B4:4B:BF:38:43:8A:63:65:3E:CD:2C:FF:86 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/piJbze-HuLRLvzhDimNlPs0s_4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.25.0/24 94.249.138.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:b7:a3:4b:29:f9:62:bf:83:21:29:83:0d:4b:a2:fd:e7:2d: ec:cf:df:39:01:d3:1f:0d:57:6f:57:4b:06:c6:dd:16:35:0f: 39:6a:7c:f1:df:71:81:01:06:b1:37:e8:eb:d3:c6:b7:3d:ca: 1e:63:0c:31:fa:8e:c5:86:e4:e6:5b:f3:c6:01:75:1c:bf:db: 1c:a6:9d:73:b5:e6:70:fc:7f:44:e8:16:a9:29:20:5c:10:17: 07:f3:40:0f:a3:34:b4:e4:b1:28:b3:3b:05:cd:7b:a1:dd:47: e8:b3:08:4b:50:82:b5:b3:0a:6f:d2:f8:b5:76:f7:15:22:fe: 5d:f3:06:41:74:fd:72:0d:f6:f5:d5:68:8a:99:2a:2d:dc:dd: 1a:17:e6:e3:6d:f8:93:79:dc:64:cd:6f:1e:7d:c2:71:70:5f: ff:22:7c:cc:e0:28:aa:8a:21:da:95:62:2d:c4:0a:aa:db:44: 71:f4:3e:87:8e:85:06:9a:cc:99:55:74:c2:4e:8b:e7:bb:fd: b9:e6:79:75:9e:f6:a8:dd:47:fc:3e:95:88:10:72:a4:81:9c: 00:81:04:94:1b:40:bb:b8:11:8c:2b:aa:8f:b1:11:6c:87:16: 12:76:fa:c9:c6:90:31:55:b2:e6:9b:72:93:96:73:44:f0:6d: a8:80:f7:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ew/wUgdaZUC5XhB+IMceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjIyNWJjZGVmODdiOGI0NGJiZjM4NDM4YTYzNjUzZWNkMmNmZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWyqtYC9y8yMYWfriD8JyRhcK4g8 sg5vin7rmzG7aVUBMjf5LotAevrtJMsHVMX3glka7SyplRp26RK+WXnAyHXBXJK9 ayrIvJrMrMzKBWw4T/ASMy9n1QzZ2hvB2U9/FM792TuS+J0wtUesqcFcQeNYfFbm Aa7+D4995je4BxvKqma9xShcBgr5RV3OKWdSd2CnOVJKZJdRsERfq5aGQxN4/KXX QchLDB7HQ4SfCQ1IjUcOQra5dpMVBNp6Q9b1K5WhJYDGSVPQGTcfuEi9qmeKQ689 SZli3YqB5nUE9CMm4i5dprXlcU8VQj0WsHLCh5OcXc5z09kG851ZLr7ZDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKYiW83vh7i0S784Q4pjZT7NLP+GMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvcGlKYnplLUh1TFJMdnpoRGltTmxQczBzXzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoZAwQA XvmKMA0GCSqGSIb3DQEBCwUAA4IBAQBet6NLKfliv4MhKYMNS6L95y3sz985AdMf DVdvV0sGxt0WNQ85anzx33GBAQaxN+jr08a3PcoeYwwx+o7FhuTmW/PGAXUcv9sc pp1zteZw/H9E6BapKSBcEBcH80APozS05LEoszsFzXuh3UfoswhLUIK1swpv0vi1 dvcVIv5d8wZBdP1yDfb11WiKmSot3N0aF+bjbfiTedxkzW8efcJxcF//InzM4Ciq iiHalWItxAqq20Rx9D6HjoUGmsyZVXTCTovnu/255nl1nvao3Uf8PpWIEHKkgZwA gQSUG0C7uBGMK6qPsRFshxYSdvrJxpAxVbLmm3KTlnNE8G2ogPcR -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client