This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa File: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (raw, json) Hash identifier: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU= Subject key identifier: 3E:2C:21:E8:67:6A:EC:6C:9D:0F:8A:EE:76:97:64:FC:7D:7E:88:9F Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B978A426389A7E014AD837FA039A749A9 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa Signing time: Wed 07 Jan 2026 08:19:39 +0000 ROA not before: Wed 07 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35170 IP address blocks: 153.97.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:8a:42:63:89:a7:e0:14:ad:83:7f:a0:39:a7:49:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 7 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e2c21e8676aec6c9d0f8aee769764fc7d7e889f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:ed:6a:34:cf:57:4b:04:7b:0b:da:08:58: 96:02:7b:2a:b9:0f:39:82:d7:0b:fe:5a:e0:1a:43: eb:1f:78:58:9f:a9:5c:78:c3:2a:75:7d:58:da:35: d9:27:85:56:1f:7e:24:cc:46:4d:4c:78:05:18:4c: 46:ae:27:65:d7:41:1e:46:77:7a:e2:bf:a5:87:4e: f0:58:44:ed:1d:ba:9e:a9:70:11:40:78:4c:25:ca: a4:2e:4d:ee:a6:42:a2:7f:15:4c:81:8b:fb:5f:b1: 0a:df:b9:87:01:5e:63:42:24:a4:5c:b2:fc:f4:45: 42:f4:a5:8c:5e:ce:c6:9f:4f:bd:6b:dc:30:0e:06: a5:ac:d2:d9:1f:b8:ac:79:13:1a:2f:80:dc:56:c7: 44:bf:19:e3:e1:d6:45:59:dd:1c:e9:c2:7c:56:75: 5f:1a:ac:b2:66:c3:ea:be:30:3b:2d:ec:70:da:bf: 0c:6b:93:b0:ca:23:6c:fa:fd:d7:72:16:47:56:72: 3a:63:57:29:dc:73:ad:6e:b6:41:c9:e2:49:40:31: dd:1b:20:6d:f4:6f:d6:15:40:9a:13:76:0d:93:e9: 5a:bc:42:2a:7d:7b:92:9b:d8:3d:1d:5d:e1:e1:85: 22:46:49:70:59:82:d8:54:d3:56:9e:f2:e6:6a:ac: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:21:E8:67:6A:EC:6C:9D:0F:8A:EE:76:97:64:FC:7D:7E:88:9F X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.97.148.0/24 Signature Algorithm: sha256WithRSAEncryption b0:94:a0:ad:a2:b9:31:66:9b:4d:fa:0a:3e:a2:9d:16:46:c2: 43:6c:6c:4b:95:74:b5:6a:81:06:61:62:70:89:27:fd:5f:9d: 95:fb:bd:72:8e:d5:d7:c0:e9:89:c3:9d:40:b9:07:7b:5e:3a: 5a:bc:37:35:3f:3b:aa:ff:d2:c2:99:48:0a:dd:d0:80:1e:64: 5d:f1:4a:37:7a:db:9b:6c:c7:d4:82:11:73:8d:78:da:ae:3a: 46:6f:4c:15:3b:26:83:f8:da:22:53:17:db:67:77:f3:f8:45: 38:df:09:2d:71:38:63:4f:4c:60:ae:e2:19:4e:9b:b7:5e:17: bc:30:7d:2b:6c:83:08:09:ce:59:be:8f:ff:8f:42:d7:16:ef: ff:6c:98:87:a7:b6:6a:79:2b:23:ae:ea:5e:12:42:26:9b:e5: e7:6e:b9:8b:3d:b1:2f:66:de:6e:8e:9e:9a:70:5b:f1:3f:b8: 83:6f:98:03:a9:d6:df:48:ab:23:e3:a9:5a:f6:46:be:f7:1a: 83:8e:4d:d3:6d:6a:85:e0:99:5a:eb:95:0e:f0:4b:00:ef:19: 8d:d5:d7:a0:29:9b:26:10:77:05:32:13:bb:2f:e3:34:ec:d9: 2a:20:a9:93:55:9c:69:af:20:b3:8a:8c:ba:b1:e3:d6:27:9f: eb:24:95:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXikJjiafgFK2Df6A5p0mpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTA3MDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTJjMjFlODY3NmFlYzZjOWQwZjhhZWU3Njk3NjRmYzdkN2U4ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2avtajTPV0sEewvaCFiWAnsquQ85 gtcL/lrgGkPrH3hYn6lceMMqdX1Y2jXZJ4VWH34kzEZNTHgFGExGridl10EeRnd6 4r+lh07wWETtHbqeqXARQHhMJcqkLk3upkKifxVMgYv7X7EK37mHAV5jQiSkXLL8 9EVC9KWMXs7Gn0+9a9wwDgalrNLZH7iseRMaL4DcVsdEvxnj4dZFWd0c6cJ8VnVf GqyyZsPqvjA7Lexw2r8Ma5OwyiNs+v3XchZHVnI6Y1cp3HOtbrZByeJJQDHdGyBt 9G/WFUCaE3YNk+lavEIqfXuSm9g9HV3h4YUiRklwWYLYVNNWnvLmaqzYuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4sIehnauxsnQ+K7naXZPx9foifMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvUGl3aDZHZHE3R3lkRDRydWRwZGtfSDEtaUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmWGUMA0G CSqGSIb3DQEBCwUAA4IBAQCwlKCtorkxZptN+go+op0WRsJDbGxLlXS1aoEGYWJw iSf9X52V+71yjtXXwOmJw51AuQd7XjpavDc1Pzuq/9LCmUgK3dCAHmRd8Uo3etub bMfUghFzjXjarjpGb0wVOyaD+NoiUxfbZ3fz+EU43wktcThjT0xgruIZTpu3Xhe8 MH0rbIMICc5Zvo//j0LXFu//bJiHp7ZqeSsjrupeEkImm+XnbrmLPbEvZt5ujp6a cFvxP7iDb5gDqdbfSKsj46la9ka+9xqDjk3TbWqF4Jla65UO8EsA7xmN1degKZsm EHcFMhO7L+M07NkqIKmTVZxpryCzioy6sePWJ5/rJJUL -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:54 2026 by rpki-client