This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pi7kZj62lEKQh_zo9tc6tjUOHfU.roa File: Pi7kZj62lEKQh_zo9tc6tjUOHfU.roa (raw, json) Hash identifier: i5UkxpQHUj9Q9SNRihDZKGENUMpDgxHTJFYXrB9M0DU= Subject key identifier: 3E:2E:E4:66:3E:B6:94:42:90:87:FC:E8:F6:D7:3A:B6:35:0E:1D:F5 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3593C6149A2F86C9C6DA204E876E89 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pi7kZj62lEKQh_zo9tc6tjUOHfU.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210822 IP address blocks: 193.230.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:93:c6:14:9a:2f:86:c9:c6:da:20:4e:87:6e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e2ee4663eb694429087fce8f6d73ab6350e1df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:29:b1:9d:c5:9e:d1:41:52:56:d0:ab:60: 64:2e:67:d5:ab:9c:81:ee:02:6d:35:0d:b8:17:1a: a6:21:f0:44:32:64:ef:43:0f:e2:f5:f2:35:22:41: 94:2b:0c:fe:2b:56:5c:4d:57:9c:31:e9:73:3a:71: 38:2c:cb:da:f9:c1:d5:2f:fa:43:7e:7a:84:18:99: 24:93:53:e4:a2:1c:eb:1a:02:b5:47:22:60:63:5a: 3d:15:6c:07:c4:a2:61:d0:2d:b4:18:cd:eb:77:3f: f7:27:0e:01:07:6a:c4:4d:49:da:e6:18:15:9d:77: 82:38:43:51:d2:94:57:db:4b:ee:9d:69:12:9a:4e: 35:86:36:17:20:7b:d0:d0:cf:31:00:e8:f4:d5:45: 22:c3:4f:7d:32:c2:5b:ae:e3:96:5c:c7:7e:a0:d5: 31:5f:da:08:51:fe:31:2e:ce:36:a9:0a:2b:71:6e: d5:bb:6f:85:16:06:47:8a:34:f0:a7:cb:69:3b:c5: 0c:93:a2:96:bc:13:17:de:6f:df:52:55:8e:f0:0a: 47:53:b3:20:9a:c1:ae:4a:d1:ed:c0:d7:c6:28:12: c4:47:50:88:71:8d:7e:1a:fc:bc:14:52:b3:66:67: a2:1c:89:bb:ab:eb:fa:e9:49:eb:b7:0e:46:5c:21: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2E:E4:66:3E:B6:94:42:90:87:FC:E8:F6:D7:3A:B6:35:0E:1D:F5 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Pi7kZj62lEKQh_zo9tc6tjUOHfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.230.133.0/24 Signature Algorithm: sha256WithRSAEncryption 28:ca:7e:12:45:b3:38:ea:d9:b6:c3:b1:00:d6:2e:00:92:e5: c7:75:56:45:3a:87:b1:e6:17:2a:70:84:4c:b2:40:d6:c2:3a: a5:c4:fb:11:98:8c:0a:63:43:7a:31:2c:81:3e:2c:a3:0d:9d: de:dd:cf:5d:98:9f:9c:ba:6c:ea:97:48:ed:71:34:c1:99:62: 64:55:e1:fa:4d:60:bc:ac:d4:4e:81:d0:5a:ba:f3:2a:27:db: 6c:e3:b6:b4:4c:03:21:1a:c3:9d:88:59:7b:a3:c0:4b:d0:c5: a9:2c:7c:81:4d:f1:bc:2d:75:be:e3:42:26:9c:fd:70:6e:df: 27:55:0b:dd:f2:88:c2:a9:4a:a0:fe:3d:2f:df:d5:22:59:68: dd:d3:3d:5d:b7:f1:f1:13:ec:7f:38:c5:c5:2d:42:35:f6:7a: fb:1d:53:8e:46:0d:11:52:e3:0c:11:32:0c:a5:33:a9:cb:03: 84:02:84:94:37:de:70:dc:00:75:f4:91:40:b7:f2:b1:a1:4e: 65:78:53:6a:e0:25:ae:61:c6:93:ad:05:1b:05:f3:15:34:20: 14:c0:f2:04:58:90:73:a3:ab:4f:32:4a:db:83:41:97:9b:42: 11:9e:5c:a3:61:f7:86:86:5c:83:21:42:f2:eb:d5:b0:fb:48: 50:90:bb:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZPGFJovhsnG2iBOh26JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTJlZTQ2NjNlYjY5NDQyOTA4N2ZjZThmNmQ3M2FiNjM1MGUxZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wpsZ3FntFBUlbQq2BkLmfVq5yB 7gJtNQ24FxqmIfBEMmTvQw/i9fI1IkGUKwz+K1ZcTVecMelzOnE4LMva+cHVL/pD fnqEGJkkk1PkohzrGgK1RyJgY1o9FWwHxKJh0C20GM3rdz/3Jw4BB2rETUna5hgV nXeCOENR0pRX20vunWkSmk41hjYXIHvQ0M8xAOj01UUiw099MsJbruOWXMd+oNUx X9oIUf4xLs42qQorcW7Vu2+FFgZHijTwp8tpO8UMk6KWvBMX3m/fUlWO8ApHU7Mg msGuStHtwNfGKBLER1CIcY1+Gvy8FFKzZmeiHIm7q+v66Unrtw5GXCFU4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4u5GY+tpRCkIf86PbXOrY1Dh31MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvUGk3a1pqNjJsRUtRaF96bzl0YzZ0alVPSGZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweaFMA0G CSqGSIb3DQEBCwUAA4IBAQAoyn4SRbM46tm2w7EA1i4AkuXHdVZFOoex5hcqcIRM skDWwjqlxPsRmIwKY0N6MSyBPiyjDZ3e3c9dmJ+cumzql0jtcTTBmWJkVeH6TWC8 rNROgdBauvMqJ9ts47a0TAMhGsOdiFl7o8BL0MWpLHyBTfG8LXW+40ImnP1wbt8n VQvd8ojCqUqg/j0v39UiWWjd0z1dt/HxE+x/OMXFLUI19nr7HVOORg0RUuMMETIM pTOpywOEAoSUN95w3AB19JFAt/KxoU5leFNq4CWuYcaTrQUbBfMVNCAUwPIEWJBz o6tPMkrbg0GXm0IRnlyjYfeGhlyDIULy69Ww+0hQkLtd -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:14 2026 by rpki-client