This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa File: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (raw, json) Hash identifier: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE= Subject key identifier: A4:8C:EE:D1:43:E9:B0:FF:1C:94:FE:06:26:F3:10:E6:63:AC:81:D5 Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Certificate serial: 019B7C80B7BF1EAF65DBA7EC18248510F7CC Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.109.0/24 maxlen: 24 2001:7f8:c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b7:bf:1e:af:65:db:a7:ec:18:24:85:10:f7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a48ceed143e9b0ff1c94fe0626f310e663ac81d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:ea:fd:4f:05:f9:0a:ea:ad:06:ba:0b:d5: 08:98:7f:2f:3f:2e:72:e5:48:2a:8f:5c:50:0a:22: 65:45:1b:ca:4e:12:c7:b8:58:4a:60:7f:13:d0:cd: 2b:29:d8:f1:3d:cd:82:45:82:e0:c2:65:09:b0:7d: f4:52:62:03:43:8b:0f:7f:02:ef:68:f2:35:68:ba: a1:6a:d3:46:9a:ad:be:8a:2d:08:22:95:b9:6c:83: bb:49:46:82:d6:d3:58:de:71:88:c4:f3:fb:d9:f6: 26:03:97:03:59:7b:49:ca:b6:e6:bf:34:3a:bb:1f: bf:6c:47:fd:3a:58:05:73:4c:58:a8:a7:d0:6a:ce: b1:17:73:e9:90:4c:fd:2a:92:30:c3:0e:f5:a0:fc: 28:9a:c8:47:77:f3:06:dc:f1:f9:1f:d5:1d:ee:6b: c6:0d:22:68:8d:d9:9c:eb:41:87:a9:48:db:a6:2f: 61:9d:32:28:d5:7a:46:44:e5:b4:de:28:10:41:4a: 72:36:e1:2a:0d:44:54:23:b4:15:8f:67:56:72:01: f4:9c:b7:50:7f:73:ca:9c:a0:66:1a:23:63:0d:8b: ba:32:11:d8:52:20:92:e3:c8:d8:20:6c:2f:c9:7e: 27:a3:14:5e:ef:66:85:43:e5:20:f3:56:48:91:3d: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8C:EE:D1:43:E9:B0:FF:1C:94:FE:06:26:F3:10:E6:63:AC:81:D5 X509v3 Authority Key Identifier: keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.109.0/24 IPv6: 2001:7f8:c3::/48 Signature Algorithm: sha256WithRSAEncryption 14:bc:c1:f1:90:ee:ad:e7:65:24:64:a0:c3:0d:67:1c:a5:4c: b2:38:30:2d:bf:3b:ed:57:8c:f9:fb:fe:b4:e5:ed:87:0d:c3: 93:30:c2:76:d4:3b:91:a6:ef:a4:bc:20:82:ca:74:d7:30:41: 5d:c7:86:27:62:81:32:19:f3:47:6e:ea:21:0b:fd:db:77:02: e5:03:b5:ec:68:27:61:d5:ae:b5:66:96:27:22:df:28:35:8e: 14:e2:ca:44:21:35:f2:bd:ae:cf:ca:f5:49:3c:47:9c:e4:03: 50:54:f8:b3:b7:54:37:bf:be:45:06:ef:26:8b:a2:b1:69:b4: c4:f6:66:b8:b9:96:00:19:6b:dc:7e:ca:f5:5c:5b:5b:93:1a: 2d:67:11:31:5c:06:43:c4:d8:ee:6e:32:35:6d:20:06:f9:3f: 95:2c:0e:99:9d:e0:37:80:1a:96:ee:cb:ed:32:01:1f:a4:aa: 43:ba:e3:31:8a:c5:58:8a:e2:1b:d7:a1:57:56:24:11:3f:f7: f6:56:d7:e1:80:a7:d2:c9:97:83:7f:62:9b:2f:5c:1b:1a:35: bb:88:24:e4:11:5a:b7:be:d3:59:1a:9a:25:2d:64:a3:5b:d4: 0b:fb:2e:32:97:29:2d:11:7e:59:a8:25:60:fd:5e:84:84:ea: ce:0d:82:c8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gLe/Hq9l26fsGCSFEPfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4 YmI1ZWUwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDhjZWVkMTQzZTliMGZmMWM5NGZlMDYyNmYzMTBlNjYzYWM4MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd7q/U8F+QrqrQa6C9UImH8vPy5y 5Ugqj1xQCiJlRRvKThLHuFhKYH8T0M0rKdjxPc2CRYLgwmUJsH30UmIDQ4sPfwLv aPI1aLqhatNGmq2+ii0IIpW5bIO7SUaC1tNY3nGIxPP72fYmA5cDWXtJyrbmvzQ6 ux+/bEf9OlgFc0xYqKfQas6xF3PpkEz9KpIwww71oPwomshHd/MG3PH5H9Ud7mvG DSJojdmc60GHqUjbpi9hnTIo1XpGROW03igQQUpyNuEqDURUI7QVj2dWcgH0nLdQ f3PKnKBmGiNjDYu6MhHYUiCS48jYIGwvyX4noxRe72aFQ+Ug81ZIkT2kgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKSM7tFD6bD/HJT+BibzEOZjrIHVMB8GA1UdIwQY MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt NDUyZWMzYTk1ODhiLzEvcEl6dTBVUHBzUDhjbFA0R0p2TVE1bU9zZ2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQFtMA8E AgACMAkDBwAgAQf4AMMwDQYJKoZIhvcNAQELBQADggEBABS8wfGQ7q3nZSRkoMMN ZxylTLI4MC2/O+1XjPn7/rTl7YcNw5MwwnbUO5Gm76S8IILKdNcwQV3HhidigTIZ 80du6iEL/dt3AuUDtexoJ2HVrrVmlici3yg1jhTiykQhNfK9rs/K9Uk8R5zkA1BU +LO3VDe/vkUG7yaLorFptMT2Zri5lgAZa9x+yvVcW1uTGi1nETFcBkPE2O5uMjVt IAb5P5UsDpmd4DeAGpbuy+0yAR+kqkO64zGKxViK4hvXoVdWJBE/9/ZW1+GAp9LJ l4N/YpsvXBsaNbuIJOQRWre+01kamiUtZKNb1Av7LjKXKS0RflmoJWD9XoSE6s4N gsg= -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client