This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/PIxJAOWfVeBmU76JbXSAooErb1U.roa File: PIxJAOWfVeBmU76JbXSAooErb1U.roa (raw, json) Hash identifier: T08H7sWyCft7hkyKVMhTHqrQKcUGSoqeo9MGAcS4sOs= Subject key identifier: 3C:8C:49:00:E5:9F:55:E0:66:53:BE:89:6D:74:80:A2:81:2B:6F:55 Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e Certificate serial: 019B797F21BBBD892E327F3B246499C1249D Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/PIxJAOWfVeBmU76JbXSAooErb1U.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208576 IP address blocks: 45.86.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:21:bb:bd:89:2e:32:7f:3b:24:64:99:c1:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c8c4900e59f55e06653be896d7480a2812b6f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:16:eb:7f:79:86:f8:97:a9:f4:22:62:7b: 02:86:c2:03:ed:e7:b6:da:9e:bc:5d:b6:78:e7:95: 05:7c:0b:6f:ed:e4:b5:ba:32:ac:1f:86:c9:d5:6a: d3:ef:6b:f7:2b:7b:9d:e1:17:53:d6:44:6f:01:46: ba:9c:e5:cc:da:45:0b:18:da:b8:f4:26:d3:4a:04: 63:06:9f:cc:31:e8:b6:40:b4:0c:61:ad:3c:21:8c: 7b:41:e8:1a:21:3d:b8:7d:1c:ee:a9:0b:3e:c8:d2: aa:4c:5a:d5:7d:d9:a3:83:05:ac:2c:cd:b6:fc:a4: ce:4a:54:2c:77:ee:99:34:ee:45:e8:81:14:c1:04: 0b:c7:d6:2f:cb:07:65:51:36:7c:72:55:c8:26:c2: 62:58:2e:76:b4:44:72:9e:2c:de:f2:01:57:54:76: d7:d5:bd:3d:d7:bf:dd:2e:ab:ad:0c:f6:40:cd:60: 8e:d9:e0:0c:4d:f0:c8:84:0f:bc:c6:48:65:74:cc: c0:1b:7a:10:e0:3b:d6:12:70:7b:e0:60:58:4e:19: 1b:40:82:81:c6:99:f9:bf:4c:7f:99:cc:b4:79:d1: fa:63:c7:28:15:54:b5:69:17:e7:ed:22:80:a3:b0: 08:28:55:0d:e2:dd:7a:9d:a7:85:33:8b:f4:b7:a1: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8C:49:00:E5:9F:55:E0:66:53:BE:89:6D:74:80:A2:81:2B:6F:55 X509v3 Authority Key Identifier: keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/PIxJAOWfVeBmU76JbXSAooErb1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.120.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e5:a7:29:97:c4:44:e4:35:d4:4f:c0:3f:c6:46:e0:7a:b0: 1c:4f:5c:79:02:c9:b3:56:0e:2d:42:33:e8:fd:9e:5a:dc:f1: ab:ba:98:c1:08:75:89:40:61:cf:4b:d3:6c:44:fb:27:71:9c: 60:14:82:cc:b9:8c:0b:93:02:99:d3:d8:39:2c:94:f1:41:bf: f3:c9:73:42:61:1b:8f:51:b2:e0:df:28:cc:5d:ec:b5:f0:f2: 7a:87:db:5e:cd:3b:a5:47:d5:39:d9:14:29:1a:87:31:f8:f5: 62:f5:7f:f9:96:b6:b9:09:18:4f:3b:a5:c5:ec:10:32:ce:eb: 93:cb:2f:75:c6:c9:f4:03:94:98:9f:69:96:32:c6:00:fb:bc: 3d:9b:7f:3e:f1:9b:13:f1:2e:3c:92:ad:33:fa:75:f0:25:58: e9:27:51:79:89:45:6e:e4:f3:9e:ac:2f:b9:14:54:4d:bd:6b: d8:f4:50:e0:46:81:45:bb:a6:5b:33:81:38:0d:3f:86:c8:a6: 6b:e8:99:cc:27:ab:ad:53:84:a6:4c:c3:fc:7c:b8:c5:13:43: 4c:3c:95:9e:8e:dc:9c:69:bc:aa:93:f6:d2:a4:b3:dc:8b:0a: ba:af:f0:9f:4d:e8:7f:e3:57:6a:20:ff:48:51:ef:2c:6c:3d: 4e:a3:4d:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyG7vYkuMn87JGSZwSSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTNkMjY1MzUxYjY1ZjIzOWYyOTk3ZGUxZThhODA2Nzc5 MzNhNWUwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzhjNDkwMGU1OWY1NWUwNjY1M2JlODk2ZDc0ODBhMjgxMmI2ZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVkW6395hviXqfQiYnsChsID7ee2 2p68XbZ455UFfAtv7eS1ujKsH4bJ1WrT72v3K3ud4RdT1kRvAUa6nOXM2kULGNq4 9CbTSgRjBp/MMei2QLQMYa08IYx7QegaIT24fRzuqQs+yNKqTFrVfdmjgwWsLM22 /KTOSlQsd+6ZNO5F6IEUwQQLx9YvywdlUTZ8clXIJsJiWC52tERynize8gFXVHbX 1b0917/dLqutDPZAzWCO2eAMTfDIhA+8xkhldMzAG3oQ4DvWEnB74GBYThkbQIKB xpn5v0x/mcy0edH6Y8coFVS1aRfn7SKAo7AIKFUN4t16naeFM4v0t6HLOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDyMSQDln1XgZlO+iW10gKKBK29VMB8GA1UdIwQY MBaAFL6j0mU1G2XyOfKZfeHoqAZ3kzpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMt ZjUzYzVjMTc1NmQ3LzEvUEl4SkFPV2ZWZUJtVTc2SmJYU0Fvb0VyYjFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jMDg3OGQtYWZjNi00ZTcwLTkwZDMtZjUzYzVjMTc1NmQ3 LzEvdnFQU1pUVWJaZkk1OHBsOTRlaW9CbmVUT2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVZ4MA0G CSqGSIb3DQEBCwUAA4IBAQCO5acpl8RE5DXUT8A/xkbgerAcT1x5AsmzVg4tQjPo /Z5a3PGrupjBCHWJQGHPS9NsRPsncZxgFILMuYwLkwKZ09g5LJTxQb/zyXNCYRuP UbLg3yjMXey18PJ6h9tezTulR9U52RQpGocx+PVi9X/5lra5CRhPO6XF7BAyzuuT yy91xsn0A5SYn2mWMsYA+7w9m38+8ZsT8S48kq0z+nXwJVjpJ1F5iUVu5POerC+5 FFRNvWvY9FDgRoFFu6ZbM4E4DT+GyKZr6JnMJ6utU4SmTMP8fLjFE0NMPJWejtyc abyqk/bSpLPciwq6r/CfTeh/41dqIP9IUe8sbD1Oo036 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:17 2026 by rpki-client