This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/PI2h_8VZGNJx8Yf-nTwtJwslLU4.roa
File: PI2h_8VZGNJx8Yf-nTwtJwslLU4.roa (raw, json)
Hash identifier: pWl9q3LMJbYugxqVcFdlIM1EvoEhJpz5iW8UZhjcg0c=
Subject key identifier: 3C:8D:A1:FF:C5:59:18:D2:71:F1:87:FE:9D:3C:2D:27:0B:25:2D:4E
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 019B797F379ABE8C82CA9379751468544DF2
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/PI2h_8VZGNJx8Yf-nTwtJwslLU4.roa
Signing time: Thu 01 Jan 2026 12:18:59 +0000
ROA not before: Thu 01 Jan 2026 12:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199274
IP address blocks: 176.103.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:37:9a:be:8c:82:ca:93:79:75:14:68:54:4d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jan 1 12:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8da1ffc55918d271f187fe9d3c2d270b252d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:58:41:49:6c:ea:20:06:8d:42:b5:b9:3b:
30:66:7e:ab:b1:f6:c7:d7:48:93:62:27:45:31:fb:
7c:7b:a3:33:08:22:10:f9:10:6b:72:4e:a4:19:bb:
25:9b:07:3f:fa:e8:3b:1d:d0:c9:f3:7c:5d:6c:e4:
e7:60:02:37:27:ca:40:af:aa:24:7d:41:31:b9:9d:
29:29:d9:b9:59:3f:bf:ff:fd:b8:36:cc:bd:50:56:
9f:f6:42:3e:79:52:2b:2c:4d:f3:a0:93:62:15:4c:
eb:32:06:0a:c4:6c:15:16:cc:d0:49:66:93:15:39:
69:7f:d7:20:32:92:8d:2f:5a:7a:e0:51:78:2e:d1:
98:d9:90:29:d7:fa:fc:66:2b:bf:25:c7:23:b9:6b:
c4:df:85:33:d8:ec:eb:61:2e:e5:6a:b3:fe:95:37:
1f:63:88:58:bb:da:f5:9f:83:83:3c:58:36:27:1d:
c2:a3:c9:3c:4e:c8:9f:e5:dc:57:19:14:56:da:e5:
c5:52:9b:46:ff:17:5a:b8:1e:0f:6e:2b:1d:56:e9:
85:a0:97:72:ff:8c:dd:f4:64:f9:52:3c:8f:f4:d1:
71:6b:dc:2a:c9:37:9d:76:d5:46:b9:51:96:7e:82:
40:2b:79:52:cf:1f:ad:e9:bd:e0:29:92:ac:44:27:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:A1:FF:C5:59:18:D2:71:F1:87:FE:9D:3C:2D:27:0B:25:2D:4E
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/PI2h_8VZGNJx8Yf-nTwtJwslLU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f4:a5:1c:0d:84:e1:31:9c:20:31:06:ce:f3:32:d5:52:54:
d7:e9:6a:5c:b6:bf:a1:27:3b:10:a0:4a:2a:53:31:e5:0c:71:
fc:4f:02:8f:46:ca:b1:25:bb:5b:77:2e:ef:1e:15:47:50:09:
d6:89:de:be:ab:ed:25:2c:ba:94:8d:bd:8e:58:15:45:57:85:
33:87:0a:97:4e:f2:00:31:d0:86:4b:3b:11:e9:a9:d4:25:62:
1a:ca:0c:c7:23:eb:4a:ee:ae:de:69:ac:f9:4a:99:7e:e8:f3:
29:f9:2b:df:d8:7d:90:f7:24:7e:ea:6e:ca:cf:b2:7d:3a:41:
9c:f8:55:f5:2d:36:46:b9:93:03:57:ad:53:79:36:8b:49:20:
ae:fa:32:f0:46:51:c5:f9:e9:32:0c:01:a3:5e:e2:75:68:01:
a2:1b:24:48:ac:64:28:55:4c:8f:01:7f:29:ed:1f:65:07:d4:
a2:5d:33:e6:f5:bb:29:d7:ec:e4:df:78:eb:68:ee:7d:e6:10:
34:61:2a:5f:f0:fc:fb:ad:17:99:d5:95:81:97:18:eb:2c:84:
54:57:75:40:83:e1:62:08:3f:fa:ac:91:76:ad:26:4a:a9:ed:
8d:a2:6d:d0:25:63:f1:a1:f1:fc:b4:c2:88:62:d0:8a:cc:54:
53:4b:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:14 2026 by rpki-client