This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/piOSXAoAWf0BNCT9j7CG-aIDuCA.roa File: piOSXAoAWf0BNCT9j7CG-aIDuCA.roa (raw, json) Hash identifier: p97jrJ5AJJwf6iXV1AH5QGl3BdJYPxOKvvNVV7WeeC0= Subject key identifier: A6:23:92:5C:0A:00:59:FD:01:34:24:FD:8F:B0:86:F9:A2:03:B8:20 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A8586C53813B75570DBF1B25DF29 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/piOSXAoAWf0BNCT9j7CG-aIDuCA.roa Signing time: Thu 01 Jan 2026 22:19:07 +0000 ROA not before: Thu 01 Jan 2026 22:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214306 IP address blocks: 80.64.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a8:58:6c:53:81:3b:75:57:0d:bf:1b:25:df:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a623925c0a0059fd013424fd8fb086f9a203b820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:a1:7d:89:fe:ba:2e:b9:7c:cf:c4:9b:d8: a4:92:81:cf:8b:5a:bc:33:4f:8a:5f:da:9b:95:7c: 33:70:48:5c:57:f3:89:38:f5:fe:cd:48:7d:c8:8e: 4c:6a:fa:71:6b:d9:b0:68:53:de:1f:f5:45:6c:e6: 86:65:35:a2:76:b0:45:81:2f:49:fc:71:40:e8:35: 7c:fa:f7:ac:13:b1:ef:7a:72:06:14:f7:96:05:bf: fb:ff:f0:e4:33:6d:20:e2:3c:15:56:f6:9a:2e:46: 16:1c:67:d8:2c:75:b2:b2:64:63:c6:02:06:98:00: 30:8c:95:06:d1:cb:8a:2b:f6:95:1f:15:7f:60:e5: 0f:0a:6d:3d:43:7c:87:54:c6:06:56:37:06:a1:b3: 26:90:fd:48:f0:36:7e:8e:f0:8e:a9:e1:16:63:2f: 06:51:2f:a9:6d:a7:b8:17:d1:0d:d8:95:1b:44:e4: ae:e9:f8:c7:62:a9:30:bb:40:45:9c:7b:3a:6d:59: a6:fa:fe:e6:9f:b0:7a:18:a9:e1:62:5d:79:a9:ce: 05:20:f2:50:44:91:f4:c3:cf:4d:43:93:9f:15:1c: 59:f2:d5:4a:7a:63:0e:b8:0a:80:cc:90:14:2b:59: 21:73:5f:a4:30:e4:7e:f5:33:2f:a5:bd:13:74:e7: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:92:5C:0A:00:59:FD:01:34:24:FD:8F:B0:86:F9:A2:03:B8:20 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/piOSXAoAWf0BNCT9j7CG-aIDuCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.25.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:47:45:2a:88:4e:23:67:8c:1f:08:0b:9f:00:b5:a6:32:87: f2:5a:e4:33:45:9e:4d:62:f0:05:12:67:06:e9:87:d2:2d:51: bb:5e:3f:d6:56:12:bb:aa:f4:d9:66:0a:f8:7e:4e:03:94:34: b1:35:d6:2e:02:a2:f9:7e:ed:3f:83:71:41:8e:c9:c9:9f:05: e1:18:92:f8:3b:91:93:1f:e2:fb:c0:72:23:45:09:5e:7d:8f: fc:46:b3:e7:57:e7:d6:11:c9:2b:fc:d0:84:2a:1f:d2:bf:5b: 6f:3d:9e:63:cf:e7:11:e0:85:09:7b:50:97:5b:d7:76:bb:8d: 4c:3a:74:d4:b7:3c:5b:e5:be:79:22:dd:c2:75:d1:fa:5a:d4: fd:6e:e6:2a:f9:32:c8:80:d8:f5:c7:27:ef:08:5e:63:8e:00: 61:d3:b0:cb:c8:d3:dd:77:bf:e7:e2:42:7c:d5:3b:5a:fb:37: d2:f4:d5:ba:d3:f2:fa:5d:be:59:31:d6:98:53:41:0a:45:78: b8:8d:8e:79:9a:b2:84:81:60:10:c8:29:41:4c:64:fd:b8:70: 10:3f:bd:92:77:e4:dd:ba:7c:85:95:5b:91:af:b4:71:8a:a1: 7b:7c:1b:dc:c6:29:55:31:24:b1:f1:6b:80:91:4d:50:57:90: 22:17:f4:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pKhYbFOBO3VXDb8bJd8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjIzOTI1YzBhMDA1OWZkMDEzNDI0ZmQ4ZmIwODZmOWEyMDNiODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqyhfYn+ui65fM/Em9ikkoHPi1q8 M0+KX9qblXwzcEhcV/OJOPX+zUh9yI5Mavpxa9mwaFPeH/VFbOaGZTWidrBFgS9J /HFA6DV8+vesE7HvenIGFPeWBb/7//DkM20g4jwVVvaaLkYWHGfYLHWysmRjxgIG mAAwjJUG0cuKK/aVHxV/YOUPCm09Q3yHVMYGVjcGobMmkP1I8DZ+jvCOqeEWYy8G US+pbae4F9EN2JUbROSu6fjHYqkwu0BFnHs6bVmm+v7mn7B6GKnhYl15qc4FIPJQ RJH0w89NQ5OfFRxZ8tVKemMOuAqAzJAUK1khc1+kMOR+9TMvpb0TdOdhgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYjklwKAFn9ATQk/Y+whvmiA7ggMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvcGlPU1hBb0FXZjBCTkNUOWo3Q0ctYUlEdUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEAZMA0G CSqGSIb3DQEBCwUAA4IBAQCKR0UqiE4jZ4wfCAufALWmMofyWuQzRZ5NYvAFEmcG 6YfSLVG7Xj/WVhK7qvTZZgr4fk4DlDSxNdYuAqL5fu0/g3FBjsnJnwXhGJL4O5GT H+L7wHIjRQlefY/8RrPnV+fWEckr/NCEKh/Sv1tvPZ5jz+cR4IUJe1CXW9d2u41M OnTUtzxb5b55It3CddH6WtT9buYq+TLIgNj1xyfvCF5jjgBh07DLyNPdd7/n4kJ8 1Tta+zfS9NW60/L6Xb5ZMdaYU0EKRXi4jY55mrKEgWAQyClBTGT9uHAQP72Sd+Td unyFlVuRr7RxiqF7fBvcxilVMSSx8WuAkU1QV5AiF/Su -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:54 2026 by rpki-client