This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/pgBIs-3GoZthMmbw9U-r3itRgXQ.roa File: pgBIs-3GoZthMmbw9U-r3itRgXQ.roa (raw, json) Hash identifier: +p2wOZUmpgnrYwvX+umOGcelDbIr/AvBcaa1sjakkaA= Subject key identifier: A6:00:48:B3:ED:C6:A1:9B:61:32:66:F0:F5:4F:AB:DE:2B:51:81:74 Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0 Certificate serial: 019B7EA688B546497517D25E0628E4184922 Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/pgBIs-3GoZthMmbw9U-r3itRgXQ.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47203 IP address blocks: 185.94.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:88:b5:46:49:75:17:d2:5e:06:28:e4:18:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60048b3edc6a19b613266f0f54fabde2b518174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:10:ae:c5:6d:f2:a4:97:ed:03:36:03:f1:4f: 0b:49:ee:fc:31:56:91:3a:92:22:51:3c:31:e0:19: 03:b2:15:60:0e:1e:75:8b:ac:a7:2e:c1:5d:1c:73: 5b:ce:40:a1:74:3b:a2:37:a2:cd:c3:ca:bc:bf:ff: 55:67:a0:83:1a:83:48:04:88:01:02:03:86:c0:c4: ea:14:75:ad:ee:74:13:d4:4f:f7:bf:a1:1d:69:f4: cc:c9:f9:52:ad:ae:58:b1:ad:7c:66:66:d4:97:a3: bf:7e:f1:60:d6:5a:27:15:d0:7e:99:c3:57:e2:2a: 6b:07:38:c6:af:49:f7:5b:06:1c:f2:df:8f:a8:8f: 75:44:0c:a1:d9:87:c5:aa:33:e6:46:41:67:18:38: 6c:f9:8c:e8:db:d8:56:49:9d:91:5a:a4:7c:e2:41: e3:8f:0d:40:ed:ed:f3:f6:a1:8c:0d:34:4b:ba:71: d7:79:b3:4e:46:09:58:47:ca:8a:3d:b4:d8:0d:6b: 75:39:2b:61:2b:50:46:76:f2:e8:a8:0f:01:f9:98: 92:4a:0e:06:d8:50:0e:2b:b8:93:6a:17:44:d3:2e: 1c:ac:ae:2f:7b:12:31:e0:0c:f6:9f:6f:66:ca:02: b4:13:c5:a9:e3:1d:d7:2a:25:4d:d5:67:78:ce:12: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:00:48:B3:ED:C6:A1:9B:61:32:66:F0:F5:4F:AB:DE:2B:51:81:74 X509v3 Authority Key Identifier: keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/pgBIs-3GoZthMmbw9U-r3itRgXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:b0:15:0a:2e:07:a6:92:f2:74:20:15:79:49:f7:7a:e6:6e: 89:c1:a8:e6:2d:69:6d:55:61:8b:48:1b:04:06:84:a9:99:f9: 0a:16:d1:9e:bc:52:87:f0:d0:e7:7a:34:79:3b:ec:f0:4b:27: 0d:f1:ae:f4:d5:57:e6:2b:45:f3:3c:b4:48:13:95:25:69:fb: b0:0a:07:f6:23:89:2c:f4:61:08:33:fe:81:8c:6e:8a:04:ce: ea:b5:3d:81:de:06:20:6d:ca:12:9c:b5:14:e3:e6:d5:b8:fe: 85:5e:8b:f4:ed:d6:bb:f7:83:c4:84:fe:ed:60:49:44:d6:f9: 3c:5d:39:52:46:6b:dc:12:23:12:51:ec:34:35:c3:5e:43:12: f9:76:6c:df:89:c0:45:89:ea:36:72:a3:db:96:77:2a:c4:41: 06:9b:8b:e3:fe:59:d9:3e:28:a5:01:df:c7:91:a0:c9:7e:ba: 77:2e:84:38:5e:3a:70:ad:37:9a:63:61:ad:65:76:73:2e:ba: af:86:30:fc:cc:79:bb:bf:ac:3a:aa:f5:22:62:ef:6b:0e:8d: 4c:b2:1d:d4:3b:08:7d:c8:d6:26:b3:3c:f5:1a:dc:05:c6:cc: a8:17:7f:59:6b:1f:d2:c5:37:fe:b0:26:a5:1c:5a:c9:c1:d5: 73:83:a3:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+poi1Rkl1F9JeBijkGEkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2 ODk2ZjAwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjAwNDhiM2VkYzZhMTliNjEzMjY2ZjBmNTRmYWJkZTJiNTE4MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xCuxW3ypJftAzYD8U8LSe78MVaR OpIiUTwx4BkDshVgDh51i6ynLsFdHHNbzkChdDuiN6LNw8q8v/9VZ6CDGoNIBIgB AgOGwMTqFHWt7nQT1E/3v6EdafTMyflSra5Ysa18ZmbUl6O/fvFg1lonFdB+mcNX 4iprBzjGr0n3WwYc8t+PqI91RAyh2YfFqjPmRkFnGDhs+Yzo29hWSZ2RWqR84kHj jw1A7e3z9qGMDTRLunHXebNORglYR8qKPbTYDWt1OSthK1BGdvLoqA8B+ZiSSg4G 2FAOK7iTahdE0y4crK4vexIx4Az2n29mygK0E8Wp4x3XKiVN1Wd4zhK2EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYASLPtxqGbYTJm8PVPq94rUYF0MB8GA1UdIwQY MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt OGEwZDBiZjBiNTc3LzEvcGdCSXMtM0dvWnRoTW1idzlVLXIzaXRSZ1hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3 LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV7UMA0G CSqGSIb3DQEBCwUAA4IBAQB7sBUKLgemkvJ0IBV5Sfd65m6JwajmLWltVWGLSBsE BoSpmfkKFtGevFKH8NDnejR5O+zwSycN8a701VfmK0XzPLRIE5UlafuwCgf2I4ks 9GEIM/6BjG6KBM7qtT2B3gYgbcoSnLUU4+bVuP6FXov07da794PEhP7tYElE1vk8 XTlSRmvcEiMSUew0NcNeQxL5dmzficBFieo2cqPblncqxEEGm4vj/lnZPiilAd/H kaDJfrp3LoQ4XjpwrTeaY2GtZXZzLrqvhjD8zHm7v6w6qvUiYu9rDo1Msh3UOwh9 yNYmszz1GtwFxsyoF39Zax/SxTf+sCalHFrJwdVzg6O/ -----END CERTIFICATE-----Generated at Mon Jan 26 12:10:19 2026 by rpki-client