This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa File: PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa (raw, json) Hash identifier: cpBd4dfM6upcsIz22a2feCu0xP3o+cF4Qb/mGhUm2S0= Subject key identifier: 3E:24:60:25:D3:F9:30:25:AE:53:58:CD:29:92:F0:0D:5B:D7:7F:10 Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Certificate serial: 019B7FF23536929E7737E4A0AE11A9251E16 Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa Signing time: Fri 02 Jan 2026 18:22:18 +0000 ROA not before: Fri 02 Jan 2026 18:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198283 IP address blocks: 194.8.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:35:36:92:9e:77:37:e4:a0:ae:11:a9:25:1e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792 Validity Not Before: Jan 2 18:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e246025d3f93025ae5358cd2992f00d5bd77f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:53:82:3b:c4:00:a8:0c:1e:0d:9b:da:38: a7:1a:8b:8d:22:52:dd:81:51:89:9e:1a:71:52:64: e7:60:76:65:61:db:5c:be:b9:73:f8:28:dc:ee:8a: 55:a9:92:ba:bf:7b:10:2d:3c:4b:96:ac:c3:9c:9b: b4:0d:7e:88:6f:7f:50:4c:c2:e7:44:4f:33:76:a3: db:17:52:37:9a:e7:62:8e:45:f4:3e:0f:e2:41:27: 20:99:6c:78:8a:18:e6:fd:dc:11:ab:90:0a:3f:13: ea:ec:3e:52:bc:10:5a:98:ff:7a:f5:bc:8d:37:ee: f1:35:ea:bd:c3:f2:1a:84:92:e0:4e:da:05:f8:39: f8:3a:5e:70:56:b1:97:f4:0b:05:0e:e4:7a:56:bb: 95:5b:43:64:bb:58:12:ec:6a:73:22:e3:3f:9b:ef: 76:33:a7:47:48:9c:5b:7c:67:ee:ec:78:d7:2d:08: 17:b3:f8:92:8b:52:d2:a9:28:e2:72:5c:dd:aa:c9: dc:82:75:61:b1:17:82:b0:93:e6:2f:05:a0:91:3c: 84:7d:a6:dc:99:aa:8a:71:d7:2b:e1:29:18:74:06: 36:9e:c8:f3:86:13:d3:19:e0:39:2c:a7:28:d7:c1: 6f:f2:c6:be:cc:16:a2:7a:4f:b0:09:f8:c9:69:be: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:24:60:25:D3:F9:30:25:AE:53:58:CD:29:92:F0:0D:5B:D7:7F:10 X509v3 Authority Key Identifier: keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/PiRgJdP5MCWuU1jNKZLwDVvXfxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.4.0/24 Signature Algorithm: sha256WithRSAEncryption c9:a3:0a:5e:f6:c8:34:a5:94:fe:74:da:58:3f:a5:d7:23:33: 5d:88:b0:4c:85:28:81:22:50:28:4e:0e:85:b3:fb:68:25:73: 98:23:a8:9e:ab:3d:c4:a4:6f:cd:9f:d4:ee:48:5a:00:95:11: 65:3e:4f:c1:7d:fe:95:58:a2:33:85:f6:0d:8f:71:f7:7c:b5: c7:03:06:4d:ae:4b:a5:d0:bd:49:60:48:41:cb:2d:ac:9c:7c: 60:e0:7b:a6:09:74:14:1c:13:df:69:51:82:ba:e6:6e:22:7a: d4:b5:53:c7:0c:a9:25:d6:71:50:79:b6:8e:58:08:9d:33:70: ed:72:1a:13:9d:3b:92:08:ee:a2:db:09:cc:c1:b8:41:49:b2: e6:b2:0c:11:81:ba:de:18:0a:e0:8a:20:ca:d8:7e:06:35:f9: 8b:0e:b4:c8:1f:3c:c8:20:9d:bf:3c:e8:cb:61:cb:58:0b:ac: 3f:26:3b:25:6e:44:93:d7:38:47:49:25:a0:fe:96:0d:f9:38: b1:5f:ea:9b:c9:3b:5a:da:d9:14:12:36:6d:4f:fd:c7:1a:97: 37:a4:bf:96:8f:03:b8:21:36:3b:bd:7a:15:ed:d3:eb:da:7b: 03:6e:b2:78:1f:b7:fc:72:e2:a1:41:c4:7b:f6:39:fb:64:22: b8:e5:98:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8jU2kp53N+SgrhGpJR4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjdmMzBhMGQ5MGQyZDE3Mjk5MmU5YWVhNmY3MzlkMDFi Mjg3OTIwHhcNMjYwMTAyMTgyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTI0NjAyNWQzZjkzMDI1YWU1MzU4Y2QyOTkyZjAwZDViZDc3ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GJTgjvEAKgMHg2b2jinGouNIlLd gVGJnhpxUmTnYHZlYdtcvrlz+Cjc7opVqZK6v3sQLTxLlqzDnJu0DX6Ib39QTMLn RE8zdqPbF1I3mudijkX0Pg/iQScgmWx4ihjm/dwRq5AKPxPq7D5SvBBamP969byN N+7xNeq9w/IahJLgTtoF+Dn4Ol5wVrGX9AsFDuR6VruVW0Nku1gS7GpzIuM/m+92 M6dHSJxbfGfu7HjXLQgXs/iSi1LSqSjiclzdqsncgnVhsReCsJPmLwWgkTyEfabc maqKcdcr4SkYdAY2nsjzhhPTGeA5LKco18Fv8sa+zBaiek+wCfjJab7cnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4kYCXT+TAlrlNYzSmS8A1b138QMB8GA1UdIwQY MBaAFCBn8woNkNLRcpkumupvc50BsoeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMt YmE0OTI2ZTk2NWU4LzEvUGlSZ0pkUDVNQ1d1VTFqTktaTHdEVnZYZnhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mNDViZGEtNzg2ZS00MWU5LTgzMjMtYmE0OTI2ZTk2NWU4 LzEvSUdmekNnMlEwdEZ5bVM2YTZtOXpuUUd5aDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwggEMA0G CSqGSIb3DQEBCwUAA4IBAQDJowpe9sg0pZT+dNpYP6XXIzNdiLBMhSiBIlAoTg6F s/toJXOYI6ieqz3EpG/Nn9TuSFoAlRFlPk/Bff6VWKIzhfYNj3H3fLXHAwZNrkul 0L1JYEhByy2snHxg4HumCXQUHBPfaVGCuuZuInrUtVPHDKkl1nFQebaOWAidM3Dt choTnTuSCO6i2wnMwbhBSbLmsgwRgbreGArgiiDK2H4GNfmLDrTIHzzIIJ2/POjL YctYC6w/JjslbkST1zhHSSWg/pYN+TixX+qbyTta2tkUEjZtT/3HGpc3pL+WjwO4 ITY7vXoV7dPr2nsDbrJ4H7f8cuKhQcR79jn7ZCK45Zg9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:24 2026 by rpki-client