This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa File: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (raw, json) Hash identifier: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA= Subject key identifier: 3E:02:0F:63:0C:AF:2E:51:6B:94:32:F5:39:C3:75:28:77:EA:FE:79 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFEC27FFF9A5FE01B6787874F26F8 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49666 IP address blocks: 176.65.243.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:c2:7f:ff:9a:5f:e0:1b:67:87:87:4f:26:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e020f630caf2e516b9432f539c3752877eafe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:95:fb:65:f3:06:d8:cc:a1:3b:e5:91:6a: 49:e2:fa:b4:5c:6a:ec:11:b4:5e:10:57:88:53:df: 66:3d:3e:d7:f5:af:b4:48:ce:d6:6f:80:a0:7c:b5: ff:c5:5c:0d:e2:a7:bf:f9:71:87:c4:1b:1d:9b:dd: 41:b4:5f:35:34:85:48:2d:7a:d3:1b:9b:80:9e:78: 2a:bd:07:34:06:82:6b:1c:04:86:ef:41:e2:3a:26: 0a:a8:88:b8:f8:88:1a:40:b5:0e:30:17:79:b2:6b: 7e:96:90:23:cd:18:de:22:f2:44:7e:51:fb:7d:0d: cc:cd:7e:5b:ae:72:9c:1f:de:d1:62:05:71:0a:4f: 3f:ec:70:6f:d1:a7:72:52:e9:c1:1a:4e:3b:04:51: 9d:8b:a9:34:60:f9:5f:3e:e4:11:aa:91:c3:96:62: 12:77:7b:cf:69:47:34:61:eb:3e:65:c6:31:ce:44: 03:06:31:b7:ac:f4:e4:2e:b0:aa:90:a3:e3:ef:c3: 35:ab:e2:0f:c3:13:ef:6b:15:f6:0d:d0:39:49:12: fc:9f:3e:d1:24:e4:29:e6:f7:42:45:e1:61:c5:d7: 84:79:ca:ab:4d:38:9a:40:9a:e1:bd:8b:07:6a:ca: 67:4f:a2:c1:b5:c8:69:57:25:b6:ee:72:16:96:af: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:0F:63:0C:AF:2E:51:6B:94:32:F5:39:C3:75:28:77:EA:FE:79 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.243.0/24 Signature Algorithm: sha256WithRSAEncryption da:62:fe:5f:1b:88:a4:70:55:7a:75:67:ec:05:88:53:ff:a3: 29:0d:22:fc:c2:47:b3:16:1d:a2:f9:71:03:fd:64:6d:b2:23: c3:6c:2a:6f:77:3e:59:00:15:e6:33:d3:7b:64:52:87:d5:6e: 63:cc:d8:25:bb:08:32:b9:ed:a1:50:80:be:bc:44:44:7e:23: 70:78:86:01:b0:b3:b3:1f:0b:74:1b:19:db:4f:18:da:37:53: ed:c0:df:be:4d:67:04:d8:60:5a:2a:63:07:ab:45:90:06:48: f6:d7:f7:80:f8:19:08:41:26:06:80:0a:6c:ee:fd:9b:dd:78: 4c:94:1f:87:b6:4a:38:ff:f0:cd:76:51:e4:07:a7:b4:4b:bb: ce:83:7e:0b:2d:22:df:84:bc:67:91:e3:a7:6a:ac:61:01:96: 08:a9:74:5c:7b:33:cb:8b:57:ab:22:01:a3:9a:ee:e0:f6:38: e3:50:c2:9e:7a:1d:03:59:90:29:ab:ce:63:7e:56:b0:81:97: 20:67:87:2e:5d:b0:ca:2f:ff:dd:ed:a8:35:95:d1:cf:c9:96: 0c:07:85:bc:76:50:cc:88:5b:97:f1:7d:c3:fc:ba:0a:04:6e: 06:dd:64:35:be:50:69:95:e3:44:2b:3c:27:50:1a:22:81:11: a0:e4:37:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP7Cf/+aX+AbZ4eHTyb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTAyMGY2MzBjYWYyZTUxNmI5NDMyZjUzOWMzNzUyODc3ZWFmZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyaV+2XzBtjMoTvlkWpJ4vq0XGrs EbReEFeIU99mPT7X9a+0SM7Wb4CgfLX/xVwN4qe/+XGHxBsdm91BtF81NIVILXrT G5uAnngqvQc0BoJrHASG70HiOiYKqIi4+IgaQLUOMBd5smt+lpAjzRjeIvJEflH7 fQ3MzX5brnKcH97RYgVxCk8/7HBv0adyUunBGk47BFGdi6k0YPlfPuQRqpHDlmIS d3vPaUc0Yes+ZcYxzkQDBjG3rPTkLrCqkKPj78M1q+IPwxPvaxX2DdA5SRL8nz7R JOQp5vdCReFhxdeEecqrTTiaQJrhvYsHaspnT6LBtchpVyW27nIWlq94hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4CD2MMry5Ra5Qy9TnDdSh36v55MB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvUGdJUFl3eXZMbEZybERMMU9jTjFLSGZxX25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEHzMA0G CSqGSIb3DQEBCwUAA4IBAQDaYv5fG4ikcFV6dWfsBYhT/6MpDSL8wkezFh2i+XED /WRtsiPDbCpvdz5ZABXmM9N7ZFKH1W5jzNgluwgyue2hUIC+vEREfiNweIYBsLOz Hwt0GxnbTxjaN1PtwN++TWcE2GBaKmMHq0WQBkj21/eA+BkIQSYGgAps7v2b3XhM lB+Htko4//DNdlHkB6e0S7vOg34LLSLfhLxnkeOnaqxhAZYIqXRcezPLi1erIgGj mu7g9jjjUMKeeh0DWZApq85jflawgZcgZ4cuXbDKL//d7ag1ldHPyZYMB4W8dlDM iFuX8X3D/LoKBG4G3WQ1vlBpleNEKzwnUBoigRGg5De1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:00 2026 by rpki-client