This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa File: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (raw, json) Hash identifier: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs= Subject key identifier: A6:09:3A:9E:C2:37:70:AE:01:33:20:2A:E3:2A:37:42:46:CB:E2:95 Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Certificate serial: 019B7BA53397A9B72C604E0AE90794097709 Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42568 IP address blocks: 194.0.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:33:97:a9:b7:2c:60:4e:0a:e9:07:94:09:77:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6093a9ec23770ae0133202ae32a374246cbe295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1f:93:09:1d:89:95:c6:ca:61:12:b2:7c:45: 2d:c4:9d:5c:9f:35:1e:dd:5e:3d:19:50:9e:7e:6c: 31:0c:32:6a:f6:d2:8d:33:4a:04:7e:5a:08:68:1e: b2:8b:b2:e2:fc:42:31:4e:f4:09:ba:3e:e8:26:ea: 74:df:63:3b:b0:a7:ef:ab:72:35:4a:52:85:9f:23: 7b:15:3c:61:c1:26:07:d3:a1:55:f7:c1:ba:04:cc: fe:01:01:45:24:e2:fc:9c:b0:df:f1:c0:19:16:e1: 98:55:d2:f9:81:d6:48:a6:cb:f4:19:fd:86:b1:b5: 0c:3b:60:1e:a8:16:a8:f1:22:df:3a:fd:91:33:24: 17:a7:27:68:2c:38:9f:2e:c6:bf:71:f1:8a:e2:d6: d9:1b:84:28:57:c3:46:3a:e3:6b:32:c7:8d:8b:3c: 4c:b5:dc:b6:80:03:72:54:72:54:e5:17:1a:9a:e8: 7a:29:44:e2:09:e7:a6:e1:81:0c:28:5b:74:41:8c: c3:02:a1:71:70:38:d1:f2:be:b0:b3:78:6b:10:1e: e8:8e:a0:ff:25:8a:6b:d8:a3:64:19:d4:c9:7f:e3: 47:80:37:40:c0:6e:f2:66:45:67:b7:5c:44:d4:e6: 35:e8:4f:53:1e:20:0b:24:29:4f:ce:e3:1e:67:f4: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:09:3A:9E:C2:37:70:AE:01:33:20:2A:E3:2A:37:42:46:CB:E2:95 X509v3 Authority Key Identifier: keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.253.0/24 Signature Algorithm: sha256WithRSAEncryption 30:78:60:49:96:5a:de:d1:b4:d3:c4:cd:1f:7d:43:40:99:73: 3a:48:c6:2c:06:b4:1c:44:fb:10:92:6c:64:e3:b8:ae:35:e5: 78:1b:b2:5a:7f:20:b3:0c:43:3b:c2:80:84:e0:31:d4:e0:a9: 26:58:a1:e9:09:9d:23:3c:6e:59:17:6e:6b:84:93:d5:76:10: 98:cb:1e:b2:c6:61:87:d5:59:f6:6c:5c:70:4b:f8:61:5b:20: d6:af:c3:16:63:b0:4b:22:06:b2:11:53:6b:e1:0a:ce:b1:14: a1:e5:40:7d:d6:72:e0:d1:90:1d:aa:32:37:b8:a8:94:ff:66: 90:a2:48:ad:9a:6b:e6:94:24:b2:f9:d6:c7:ed:0f:22:84:4a: 25:3d:a5:00:b5:e1:4c:15:0c:77:a0:55:9a:8a:61:ec:2e:e5: e4:56:e3:d6:09:1f:67:b8:e6:55:d9:c5:0b:8f:51:87:56:fe: 0a:28:1f:90:6f:a9:50:13:ab:38:31:ec:8d:cf:a5:fc:d8:e1: 39:08:41:c9:87:72:b6:f5:60:44:38:29:49:64:d5:a3:df:ac: d6:94:80:64:00:55:4e:ce:a1:c8:2e:64:84:ae:e6:00:18:3b: 95:de:70:d3:0a:71:92:5d:93:28:9a:54:28:48:5c:9a:10:96: a0:b3:c7:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTOXqbcsYE4K6QeUCXcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy ZDA3MzYwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjA5M2E5ZWMyMzc3MGFlMDEzMzIwMmFlMzJhMzc0MjQ2Y2JlMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B+TCR2JlcbKYRKyfEUtxJ1cnzUe 3V49GVCefmwxDDJq9tKNM0oEfloIaB6yi7Li/EIxTvQJuj7oJup032M7sKfvq3I1 SlKFnyN7FTxhwSYH06FV98G6BMz+AQFFJOL8nLDf8cAZFuGYVdL5gdZIpsv0Gf2G sbUMO2AeqBao8SLfOv2RMyQXpydoLDifLsa/cfGK4tbZG4QoV8NGOuNrMseNizxM tdy2gANyVHJU5Rcamuh6KUTiCeem4YEMKFt0QYzDAqFxcDjR8r6ws3hrEB7ojqD/ JYpr2KNkGdTJf+NHgDdAwG7yZkVnt1xE1OY16E9THiALJClPzuMeZ/QVdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYJOp7CN3CuATMgKuMqN0JGy+KVMB8GA1UdIwQY MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt MGQ0NTQyOTIwYmNiLzEvcGdrNm5zSTNjSzRCTXlBcTR5bzNRa2JMNHBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgD9MA0G CSqGSIb3DQEBCwUAA4IBAQAweGBJllre0bTTxM0ffUNAmXM6SMYsBrQcRPsQkmxk 47iuNeV4G7JafyCzDEM7woCE4DHU4KkmWKHpCZ0jPG5ZF25rhJPVdhCYyx6yxmGH 1Vn2bFxwS/hhWyDWr8MWY7BLIgayEVNr4QrOsRSh5UB91nLg0ZAdqjI3uKiU/2aQ okitmmvmlCSy+dbH7Q8ihEolPaUAteFMFQx3oFWaimHsLuXkVuPWCR9nuOZV2cUL j1GHVv4KKB+Qb6lQE6s4MeyNz6X82OE5CEHJh3K29WBEOClJZNWj36zWlIBkAFVO zqHILmSEruYAGDuV3nDTCnGSXZMomlQoSFyaEJags8ct -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:08 2026 by rpki-client