This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/pgygUFC-nE2hiQAoXj0uq76XfkU.roa File: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (raw, json) Hash identifier: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8= Subject key identifier: A6:0C:A0:50:50:BE:9C:4D:A1:89:00:28:5E:3D:2E:AB:BE:97:7E:45 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F2988A227025AAC13722D2FE6265 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/pgygUFC-nE2hiQAoXj0uq76XfkU.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63956 IP address blocks: 45.137.244.0/24 maxlen: 24 45.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:98:8a:22:70:25:aa:c1:37:22:d2:fe:62:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60ca05050be9c4da18900285e3d2eabbe977e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:16:23:64:c0:df:3b:7d:62:4b:df:f1:cb: 05:6b:6f:a9:01:9c:85:40:c8:5d:81:6c:11:50:c0: 25:7a:be:ca:3c:94:54:a7:14:9f:c5:c2:ac:2d:36: 0b:c6:3c:17:71:fd:56:32:f8:42:65:91:70:ee:00: b2:09:e6:39:ca:8d:18:63:1a:0e:3c:b5:3d:99:1d: 48:9d:9a:81:41:ab:0f:a6:bb:08:e3:23:19:74:21: 85:75:e6:c3:f6:56:6e:0a:d5:42:e6:d5:51:bc:cd: 0d:fb:51:01:b6:5d:c7:de:f3:f0:1d:87:39:0f:8f: 5a:32:ce:b5:df:69:7d:7e:ac:a2:c1:ea:94:ca:b5: f4:4f:79:7e:72:d9:d6:69:ac:c4:0d:7e:d8:3f:82: 55:e7:9e:3b:32:69:85:df:bd:dd:37:3b:1c:56:d4: 7c:68:d1:96:a2:e5:ea:6f:60:5a:88:58:68:e6:24: 77:f4:c4:1f:2b:ff:7e:b4:10:b2:c8:e4:2a:f5:50: 48:99:08:55:c6:da:08:12:6b:37:b7:87:11:b1:75: 71:ef:39:ff:a7:6e:87:ef:3c:e5:d2:e7:c6:cf:7e: 73:8f:e5:c4:8a:d5:3c:22:6e:93:70:61:70:b7:67: b2:95:5e:9d:a8:d3:7e:a2:04:1b:6f:21:a0:e7:38: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:A0:50:50:BE:9C:4D:A1:89:00:28:5E:3D:2E:AB:BE:97:7E:45 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/pgygUFC-nE2hiQAoXj0uq76XfkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.244.0/23 Signature Algorithm: sha256WithRSAEncryption a5:bf:f9:a2:0e:8d:28:6e:18:61:62:ff:15:69:9c:30:6f:64: d8:40:3e:36:ea:20:42:a0:00:b8:e0:fe:0a:ee:66:53:9d:9c: 79:68:88:db:55:1e:86:70:e2:3a:a2:50:4b:54:03:05:5a:00: 04:28:bb:f1:94:af:07:d5:76:17:9d:02:e0:33:bd:2b:ec:8f: 03:fa:b7:c0:de:5b:81:54:86:da:d1:ff:e7:a4:23:94:53:33: 47:bf:5d:90:d7:f5:c7:b3:4b:b6:a5:5b:0a:cd:07:af:44:1b: 88:d2:27:08:0f:a7:6e:e7:7b:d7:52:7e:30:d9:cd:da:16:36: ee:84:f2:eb:67:43:98:e0:9b:81:e4:65:68:06:f5:41:36:39: 8f:51:dc:7f:b4:2f:16:33:aa:38:87:0f:4f:b6:98:9d:b4:cb: 26:4a:b5:89:b2:15:86:83:8f:d6:f7:e9:b2:c2:10:72:a1:56: 68:99:68:5e:fa:20:6c:b3:1b:86:58:13:ff:23:63:65:e6:0b: e5:37:41:6c:ce:dc:fb:c4:0b:a2:51:4b:80:82:3f:43:19:fd: e4:04:9e:e8:7a:da:45:10:b3:e5:4e:34:c2:8e:2c:85:2a:5c: e9:d4:27:0c:3a:f8:8a:70:53:55:1b:7c:3e:0a:47:68:6f:ac: c3:77:0c:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPKYiiJwJarBNyLS/mJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBjYTA1MDUwYmU5YzRkYTE4OTAwMjg1ZTNkMmVhYmJlOTc3ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PgWI2TA3zt9Ykvf8csFa2+pAZyF QMhdgWwRUMAler7KPJRUpxSfxcKsLTYLxjwXcf1WMvhCZZFw7gCyCeY5yo0YYxoO PLU9mR1InZqBQasPprsI4yMZdCGFdebD9lZuCtVC5tVRvM0N+1EBtl3H3vPwHYc5 D49aMs6132l9fqyiweqUyrX0T3l+ctnWaazEDX7YP4JV5547MmmF373dNzscVtR8 aNGWouXqb2BaiFho5iR39MQfK/9+tBCyyOQq9VBImQhVxtoIEms3t4cRsXVx7zn/ p26H7zzl0ufGz35zj+XEitU8Im6TcGFwt2eylV6dqNN+ogQbbyGg5ziSSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYMoFBQvpxNoYkAKF49Lqu+l35FMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvcGd5Z1VGQy1uRTJoaVFBb1hqMHVxNzZYZmtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYn0MA0G CSqGSIb3DQEBCwUAA4IBAQClv/miDo0obhhhYv8VaZwwb2TYQD426iBCoAC44P4K 7mZTnZx5aIjbVR6GcOI6olBLVAMFWgAEKLvxlK8H1XYXnQLgM70r7I8D+rfA3luB VIba0f/npCOUUzNHv12Q1/XHs0u2pVsKzQevRBuI0icID6du53vXUn4w2c3aFjbu hPLrZ0OY4JuB5GVoBvVBNjmPUdx/tC8WM6o4hw9PtpidtMsmSrWJshWGg4/W9+my whByoVZomWhe+iBssxuGWBP/I2Nl5gvlN0Fsztz7xAuiUUuAgj9DGf3kBJ7oetpF ELPlTjTCjiyFKlzp1CcMOviKcFNVG3w+Ckdob6zDdwwS -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:20 2026 by rpki-client