This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa File: PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa (raw, json) Hash identifier: tdD/J8H0M27lW/hpYh2V2pKuEbxFXSmLFYYHtZ17IpE= Subject key identifier: 3C:6C:43:8D:D9:8F:4C:4D:00:0E:5A:E6:2B:61:E9:B8:3F:CA:F0:C0 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019AE4EF72A553B4C2FA032761C41095ABD1 Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa Signing time: Wed 03 Dec 2025 15:58:08 +0000 ROA not before: Wed 03 Dec 2025 15:58:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50098 IP address blocks: 91.192.80.0/24 maxlen: 24 195.211.220.0/24 maxlen: 24 195.211.221.0/24 maxlen: 24 195.211.222.0/24 maxlen: 24 195.211.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:ef:72:a5:53:b4:c2:fa:03:27:61:c4:10:95:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Dec 3 15:58:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c6c438dd98f4c4d000e5ae62b61e9b83fcaf0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:e2:6b:60:29:2e:55:29:1c:bf:be:e7:a8: 30:99:72:3e:9c:b6:83:2b:65:02:86:9f:3c:9e:d1: 77:6f:1a:a5:5f:ad:72:f5:af:2e:f5:0e:f7:a9:12: 2a:c5:ec:8a:0c:34:a9:1b:fb:d6:fe:b8:49:da:a6: 8e:fe:82:a2:24:f0:f2:b2:c2:10:4e:8d:21:e9:c9: 2f:12:9f:58:bb:b3:07:72:17:89:e2:f8:f9:3a:53: ba:4f:0a:15:a4:6f:c0:b0:76:0a:58:a9:7c:98:47: d6:4f:3e:cc:8a:05:c5:84:aa:ad:53:02:bf:cb:8f: 58:a4:28:38:2c:b4:66:84:9f:79:b8:6a:f3:64:29: e9:8e:ae:ad:9a:4f:44:bb:2c:4a:49:86:45:79:29: 1b:28:fb:ca:28:c9:65:bf:ea:01:ad:55:3b:b4:ac: 7e:6e:66:5f:6b:87:98:5a:ea:ed:cf:5e:ec:e0:a4: 3e:dd:18:16:d7:6a:d7:f1:62:d8:15:b4:a1:fe:bf: 41:88:f6:6a:8f:2f:7c:8d:40:46:d7:ed:88:a3:5a: 84:10:53:24:bc:9e:ca:f4:d6:d0:34:eb:9d:ec:c5: 86:05:71:0a:af:8f:5e:88:7f:22:76:9a:7d:13:47: a3:a2:8c:11:35:d3:f7:1a:9f:2e:20:ad:27:ed:2d: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6C:43:8D:D9:8F:4C:4D:00:0E:5A:E6:2B:61:E9:B8:3F:CA:F0:C0 X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/PGxDjdmPTE0ADlrmK2HpuD_K8MA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.80.0/24 195.211.220.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:0d:bf:e0:ba:08:80:f3:ac:d0:e1:d6:f6:c5:96:25:4e:45: fe:f4:6a:15:69:16:26:63:40:5a:7a:c4:3c:77:8c:41:df:b9: 20:64:bc:93:9b:0d:b2:72:ad:60:a1:28:44:5a:2c:9d:a8:cd: 0a:ea:73:3c:fc:8d:74:dd:21:e4:53:9c:aa:1a:54:eb:70:74: 9d:55:d1:d6:67:07:01:36:e8:b6:01:30:d1:98:57:cd:fd:c0: ca:93:af:2a:f1:bf:d9:4b:a9:7e:a1:72:e7:52:0e:71:ca:53: a0:ef:70:0a:27:40:6d:7f:01:c5:ba:c6:05:9f:d8:c0:43:32: 3b:56:c2:17:d4:25:95:e4:1f:98:84:d2:50:b0:a1:24:a7:9e: a0:9a:3e:81:21:5c:a8:f8:aa:7c:c7:94:04:ec:e3:f3:75:fb: 71:65:bc:26:e7:11:26:19:c8:09:fa:cf:c6:bc:9e:6b:74:d9: 69:35:ca:57:48:7f:0e:68:df:32:2b:66:cb:e5:45:5d:d6:67: f1:d2:2f:f0:ab:a2:5b:dd:bb:b4:62:9a:9d:fc:6d:46:db:d4: 0a:08:86:50:f2:55:7a:6e:84:6f:8b:64:ec:c3:1b:3e:77:21: ac:d3:bf:79:32:6b:1e:42:37:30:63:79:73:0d:04:58:f2:8e: 2e:0b:41:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrk73KlU7TC+gMnYcQQlavRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjUxMjAzMTU1ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzZjNDM4ZGQ5OGY0YzRkMDAwZTVhZTYyYjYxZTliODNmY2FmMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVLia2ApLlUpHL++56gwmXI+nLaD K2UChp88ntF3bxqlX61y9a8u9Q73qRIqxeyKDDSpG/vW/rhJ2qaO/oKiJPDyssIQ To0h6ckvEp9Yu7MHcheJ4vj5OlO6TwoVpG/AsHYKWKl8mEfWTz7MigXFhKqtUwK/ y49YpCg4LLRmhJ95uGrzZCnpjq6tmk9EuyxKSYZFeSkbKPvKKMllv+oBrVU7tKx+ bmZfa4eYWurtz17s4KQ+3RgW12rX8WLYFbSh/r9BiPZqjy98jUBG1+2Io1qEEFMk vJ7K9NbQNOud7MWGBXEKr49eiH8idpp9E0ejoowRNdP3Gp8uIK0n7S2rowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDxsQ43Zj0xNAA5a5ith6bg/yvDAMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvUEd4RGpkbVBURTBBRGxybUsySHB1RF9LOE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8BQAwQC w9PcMA0GCSqGSIb3DQEBCwUAA4IBAQCaDb/gugiA86zQ4db2xZYlTkX+9GoVaRYm Y0BaesQ8d4xB37kgZLyTmw2ycq1goShEWiydqM0K6nM8/I103SHkU5yqGlTrcHSd VdHWZwcBNui2ATDRmFfN/cDKk68q8b/ZS6l+oXLnUg5xylOg73AKJ0BtfwHFusYF n9jAQzI7VsIX1CWV5B+YhNJQsKEkp56gmj6BIVyo+Kp8x5QE7OPzdftxZbwm5xEm GcgJ+s/GvJ5rdNlpNcpXSH8OaN8yK2bL5UVd1mfx0i/wq6Jb3bu0Ypqd/G1G29QK CIZQ8lV6boRvi2Tswxs+dyGs0795MmseQjcwY3lzDQRY8o4uC0H1 -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:46 2025 by rpki-client