This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Pgo33BD8jGVxYgy5H6AMmCdzcAY.roa File: Pgo33BD8jGVxYgy5H6AMmCdzcAY.roa (raw, json) Hash identifier: q7YHcdCh9F7coMkqBLs/n4ogOysBTN1Tb4sKyyXw0Uw= Subject key identifier: 3E:0A:37:DC:10:FC:8C:65:71:62:0C:B9:1F:A0:0C:98:27:73:70:06 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019BEF2222F18F76C8989D7AA15661F8DE4A Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Pgo33BD8jGVxYgy5H6AMmCdzcAY.roa Signing time: Sat 24 Jan 2026 08:32:30 +0000 ROA not before: Sat 24 Jan 2026 08:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 95.170.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:22:22:f1:8f:76:c8:98:9d:7a:a1:56:61:f8:de:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 24 08:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e0a37dc10fc8c6571620cb91fa00c9827737006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:83:23:5a:2b:ad:5f:17:a2:27:bb:25:b0:a7: 61:37:87:53:2c:e6:69:50:d6:d8:c3:a4:0b:94:ca: 75:49:6a:13:32:0e:49:d6:cd:db:31:ee:28:ca:ab: 44:c2:78:51:93:2a:d9:b0:aa:b6:01:8c:93:ec:1c: d4:a4:71:56:1d:27:3a:2f:94:d2:e4:97:eb:01:a3: 70:28:c9:db:31:db:83:2a:1a:d5:50:e9:94:34:26: 4c:35:26:26:3d:d5:8a:1f:0f:00:99:1f:46:51:82: 04:71:19:6f:1b:e9:5e:9b:c4:0b:7e:7d:71:33:66: 43:f5:5a:57:ee:a7:8f:5d:57:fa:7b:4c:b5:fb:dc: c7:07:5d:d6:eb:db:31:60:54:6b:10:e2:aa:cf:dc: 31:f6:36:84:1b:a8:8b:f8:88:7a:09:8d:ef:fa:c8: c9:53:65:b0:9a:a4:9d:e6:7c:d3:ff:1d:92:cb:3b: 32:36:de:d1:f1:f5:f8:00:0a:77:bf:ae:f3:08:b0: 10:06:c6:23:6a:7c:05:cd:3f:5c:b3:b6:e0:72:63: ee:aa:5e:66:bc:49:61:7a:8b:79:7b:75:a0:f1:6e: 42:cd:b3:b0:ef:ab:40:c0:e3:89:a9:7a:b8:ad:0d: c9:09:a7:b3:0e:30:c3:7c:04:6b:d8:02:d1:19:60: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:37:DC:10:FC:8C:65:71:62:0C:B9:1F:A0:0C:98:27:73:70:06 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Pgo33BD8jGVxYgy5H6AMmCdzcAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.12.0/24 Signature Algorithm: sha256WithRSAEncryption 13:1e:9f:9e:a4:96:9d:a8:9d:40:e7:81:cd:66:fd:83:c2:f7: 11:ee:ef:12:d3:19:6f:4c:08:1c:43:97:45:fb:3a:79:1d:95: a5:c9:b4:86:16:5a:1e:43:ab:58:94:66:7d:74:7a:c7:c4:a9: 19:4b:79:9e:39:19:2e:2f:bd:c5:fe:f8:51:db:04:7b:c9:dc: 1a:19:2a:58:3c:cc:17:0e:db:fe:58:0f:af:01:9a:3a:2a:b0: 3b:a7:63:d2:d9:ad:40:42:05:bd:81:58:b7:6e:e7:00:0a:95: 58:49:fb:30:77:cb:e3:0b:42:f5:4c:9d:40:fa:ba:8b:8d:e9: 58:06:02:01:a9:dd:9c:a0:97:5d:f7:00:4c:c9:93:86:da:0c: 2e:e8:57:45:29:dd:6a:e6:1f:be:88:6a:9a:76:e2:ea:c2:bc: 25:e2:b4:ab:f3:c0:4b:59:29:1a:8c:4f:68:29:1a:67:86:15: c6:ab:fa:2a:14:d7:fe:55:aa:c2:3b:50:20:e6:6b:a9:69:9b: a2:e8:3e:97:b0:10:74:f5:e0:4a:4a:5c:59:c8:10:30:97:83: f0:d9:4a:c2:60:82:bc:20:b4:dc:d3:67:2e:d6:0f:47:43:1b: fb:69:f4:eb:e3:a7:3b:20:96:d7:95:3f:ec:cc:fa:0e:d8:b7: c8:58:43:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvvIiLxj3bImJ16oVZh+N5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTI0MDgzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTBhMzdkYzEwZmM4YzY1NzE2MjBjYjkxZmEwMGM5ODI3NzM3MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oMjWiutXxeiJ7slsKdhN4dTLOZp UNbYw6QLlMp1SWoTMg5J1s3bMe4oyqtEwnhRkyrZsKq2AYyT7BzUpHFWHSc6L5TS 5JfrAaNwKMnbMduDKhrVUOmUNCZMNSYmPdWKHw8AmR9GUYIEcRlvG+lem8QLfn1x M2ZD9VpX7qePXVf6e0y1+9zHB13W69sxYFRrEOKqz9wx9jaEG6iL+Ih6CY3v+sjJ U2WwmqSd5nzT/x2SyzsyNt7R8fX4AAp3v67zCLAQBsYjanwFzT9cs7bgcmPuql5m vElheot5e3Wg8W5CzbOw76tAwOOJqXq4rQ3JCaezDjDDfARr2ALRGWCTHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4KN9wQ/IxlcWIMuR+gDJgnc3AGMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvUGdvMzNCRDhqR1Z4WWd5NUg2QU1tQ2R6Y0FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oMMA0G CSqGSIb3DQEBCwUAA4IBAQATHp+epJadqJ1A54HNZv2DwvcR7u8S0xlvTAgcQ5dF +zp5HZWlybSGFloeQ6tYlGZ9dHrHxKkZS3meORkuL73F/vhR2wR7ydwaGSpYPMwX Dtv+WA+vAZo6KrA7p2PS2a1AQgW9gVi3bucACpVYSfswd8vjC0L1TJ1A+rqLjelY BgIBqd2coJdd9wBMyZOG2gwu6FdFKd1q5h++iGqaduLqwrwl4rSr88BLWSkajE9o KRpnhhXGq/oqFNf+VarCO1Ag5mupaZui6D6XsBB09eBKSlxZyBAwl4Pw2UrCYIK8 ILTc02cu1g9HQxv7afTr46c7IJbXlT/szPoO2LfIWEPr -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:52 2026 by rpki-client