This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/pIgvzLjixs4_sf2VopagAU-SJ2k.roa File: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (raw, json) Hash identifier: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs= Subject key identifier: A4:88:2F:CC:B8:E2:C6:CE:3F:B1:FD:95:A2:96:A0:01:4F:92:27:69 Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Certificate serial: 019B7E38E73D4C2F33308363374E763EB29E Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/pIgvzLjixs4_sf2VopagAU-SJ2k.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203536 IP address blocks: 185.63.8.0/22 maxlen: 22 188.116.42.0/23 maxlen: 23 2a03:920::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e7:3d:4c:2f:33:30:83:63:37:4e:76:3e:b2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4882fccb8e2c6ce3fb1fd95a296a0014f922769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:38:4d:31:ae:fd:d2:3f:68:02:d4:0b:12: a7:52:7d:4e:58:6e:87:2c:17:f9:38:36:ba:70:b7: 9b:ac:d4:a4:af:71:8f:31:83:05:4c:29:bd:bc:6b: 25:52:6c:88:53:4c:7f:fd:04:1c:54:48:08:91:51: de:c3:52:64:e6:04:6b:2a:31:86:72:f9:a1:95:ae: f7:77:07:1b:c4:02:57:82:af:a8:de:b9:68:8d:ed: 9e:5d:fd:97:9d:11:8e:4c:9a:7e:74:9c:a4:d7:fe: ad:e4:32:6e:8f:96:fe:57:1c:27:4c:39:b0:5c:7e: b8:6e:5d:8b:77:bf:10:48:20:4a:c5:1b:2a:6b:88: 87:7c:a3:7d:0c:7c:33:83:6c:a2:c8:6d:e2:ca:ce: 93:9b:24:9b:96:48:24:c4:e5:91:19:c5:47:1e:5e: 5b:65:9a:43:f4:44:10:f4:a5:4c:27:0c:c6:69:9f: c7:6b:6c:52:34:01:71:6d:4d:be:ed:fd:fd:bb:8f: a2:19:5d:c2:43:f4:e0:a2:7a:e8:cd:f3:56:02:b7: 0f:bb:9b:88:42:55:c8:61:8e:af:1c:45:1b:a8:aa: f5:5f:3a:71:a1:ae:7b:e7:52:01:39:52:f5:3e:78: 3a:3d:fa:18:1c:47:85:68:0c:9e:91:e8:5f:05:57: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:88:2F:CC:B8:E2:C6:CE:3F:B1:FD:95:A2:96:A0:01:4F:92:27:69 X509v3 Authority Key Identifier: keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/pIgvzLjixs4_sf2VopagAU-SJ2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.8.0/22 188.116.42.0/23 IPv6: 2a03:920::/32 Signature Algorithm: sha256WithRSAEncryption 6b:30:36:8c:f5:1a:93:32:78:45:07:ed:47:99:fa:6b:05:09: d2:71:c1:f0:ba:7b:69:b4:e8:46:24:48:5e:02:43:9d:18:96: 9a:de:0a:d6:62:57:ee:e2:05:93:59:50:5b:de:b9:58:1e:e2: 51:d8:ba:d7:ac:7e:1e:0b:55:fc:1e:c1:45:26:c0:f1:3a:be: 29:ff:e0:12:45:d4:42:7f:4d:4e:39:5a:2e:b3:ee:63:2a:e9: 23:e2:7c:a7:d1:37:c6:1d:ef:4a:52:36:76:d7:a2:45:9c:f2: e3:75:20:3a:49:dd:66:b8:5c:93:db:03:30:62:0d:f8:7d:cc: 04:b1:f5:f5:5e:8c:13:35:19:a9:00:dd:f8:cc:f9:22:52:36: fc:b9:06:7e:3f:07:3a:e1:86:8b:3b:56:c0:56:19:af:f9:17: e8:20:c8:65:a7:be:10:0e:4a:67:80:85:2a:f4:67:81:82:07: 7a:30:e4:22:cd:95:ed:2e:cb:e3:aa:f2:8d:1e:40:ad:1e:40: 6e:c5:1d:8c:d9:f8:29:d4:fd:89:6c:da:39:7f:46:cd:5f:3f: 76:6d:de:f1:7f:14:ae:8b:cf:9f:61:53:66:ea:a0:24:da:9b: ba:82:1c:e7:60:5d:49:84:29:c1:d7:ca:9e:8d:b9:7b:a6:0e: e0:83:41:45 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OOc9TC8zMINjN052PrKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5 NmYxOTcwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDg4MmZjY2I4ZTJjNmNlM2ZiMWZkOTVhMjk2YTAwMTRmOTIyNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7o4TTGu/dI/aALUCxKnUn1OWG6H LBf5ODa6cLebrNSkr3GPMYMFTCm9vGslUmyIU0x//QQcVEgIkVHew1Jk5gRrKjGG cvmhla73dwcbxAJXgq+o3rloje2eXf2XnRGOTJp+dJyk1/6t5DJuj5b+VxwnTDmw XH64bl2Ld78QSCBKxRsqa4iHfKN9DHwzg2yiyG3iys6TmySblkgkxOWRGcVHHl5b ZZpD9EQQ9KVMJwzGaZ/Ha2xSNAFxbU2+7f39u4+iGV3CQ/TgonrozfNWArcPu5uI QlXIYY6vHEUbqKr1Xzpxoa5751IBOVL1Png6PfoYHEeFaAyekehfBVefewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKSIL8y44sbOP7H9laKWoAFPkidpMB8GA1UdIwQY MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt N2MyODFkMDdlMTU1LzEvcElndnpMaml4czRfc2YyVm9wYWdBVS1TSjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1 LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuT8IAwQB vHQqMA0EAgACMAcDBQAqAwkgMA0GCSqGSIb3DQEBCwUAA4IBAQBrMDaM9RqTMnhF B+1HmfprBQnSccHwuntptOhGJEheAkOdGJaa3grWYlfu4gWTWVBb3rlYHuJR2LrX rH4eC1X8HsFFJsDxOr4p/+ASRdRCf01OOVous+5jKukj4nyn0TfGHe9KUjZ216JF nPLjdSA6Sd1muFyT2wMwYg34fcwEsfX1XowTNRmpAN34zPkiUjb8uQZ+Pwc64YaL O1bAVhmv+RfoIMhlp74QDkpngIUq9GeBggd6MOQizZXtLsvjqvKNHkCtHkBuxR2M 2fgp1P2JbNo5f0bNXz92bd7xfxSui8+fYVNm6qAk2pu6ghznYF1JhCnB18qejbl7 pg7gg0FF -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:25 2026 by rpki-client