This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/PGCypFT7PpbRYHnbnL53seEehQY.roa File: PGCypFT7PpbRYHnbnL53seEehQY.roa (raw, json) Hash identifier: uikj8M8pga201KYBaCnBW484YRpO24WaVAwTT3xgXLA= Subject key identifier: 3C:60:B2:A4:54:FB:3E:96:D1:60:79:DB:9C:BE:77:B1:E1:1E:85:06 Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Certificate serial: 019B7AC912A7FE5AEF2F89AA8DE058F4B832 Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/PGCypFT7PpbRYHnbnL53seEehQY.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 80.89.0.0/24 maxlen: 24 80.89.1.0/24 maxlen: 24 80.89.2.0/24 maxlen: 24 80.89.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:12:a7:fe:5a:ef:2f:89:aa:8d:e0:58:f4:b8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c60b2a454fb3e96d16079db9cbe77b1e11e8506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:08:e7:85:53:20:6d:9e:7b:87:fb:f6:78: 48:d0:3f:85:7d:98:6f:66:bf:ff:ca:d8:79:66:92: 21:7c:4f:aa:03:e8:c0:ed:39:44:aa:67:43:62:56: 5b:57:59:47:3e:e5:cf:1f:cc:2c:88:3f:c2:62:09: 21:c0:04:eb:57:90:2f:5f:f6:43:d2:95:f8:69:6d: f4:e2:f2:8c:90:0f:91:56:77:55:92:c9:4c:85:44: 2b:81:3a:d6:c1:dd:f7:83:f8:c5:64:01:89:d3:85: 6a:b7:aa:68:3c:26:c7:95:a7:60:d3:4d:72:b1:76: aa:b2:3b:be:06:fc:18:f7:f4:b1:c7:0e:48:66:66: 40:04:3d:97:4b:8c:6b:49:e5:c0:62:d8:6e:88:59: 19:66:41:31:3a:8a:b0:19:d0:9e:79:80:05:7f:04: 55:11:5b:58:71:03:97:45:98:e0:80:70:a2:88:bf: ce:57:7e:0a:e9:4b:3d:a3:14:69:3f:af:60:8f:6e: c3:d6:d3:1a:c4:14:41:46:d5:6a:82:61:d3:5e:c8: e5:94:44:af:49:f2:58:2f:6b:df:cd:9b:88:e0:01: ad:4b:17:f3:c8:b0:c9:89:39:fe:e7:78:1c:5e:78: bd:c6:29:3a:29:a0:d3:6e:bd:91:bb:58:15:fd:57: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:B2:A4:54:FB:3E:96:D1:60:79:DB:9C:BE:77:B1:E1:1E:85:06 X509v3 Authority Key Identifier: keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/PGCypFT7PpbRYHnbnL53seEehQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.0.0/22 Signature Algorithm: sha256WithRSAEncryption 47:e6:d5:9d:fe:b7:58:e3:da:5f:d1:08:3f:87:66:23:e2:7e: 37:67:e2:8f:74:50:2a:fe:2f:ea:0a:4b:78:d6:e6:b7:72:b8: f0:53:fd:7a:6a:7d:18:db:4c:b1:33:2e:3d:6c:7b:81:9c:3f: 38:32:9a:fd:cf:40:6d:08:fe:c7:89:82:9b:b8:05:07:07:34: d2:79:20:ef:4b:ff:50:2a:f8:ab:11:a4:3c:80:b4:3f:1e:07: 8a:1c:ce:ad:70:31:03:32:3e:1d:0b:58:e0:c3:f4:c9:48:9b: c5:04:b7:20:82:c2:96:d3:1f:9d:33:29:d6:26:e0:1d:f8:56: b2:70:bb:07:c7:80:39:6c:10:95:99:12:22:8f:23:08:52:07: 27:eb:2d:c9:69:e4:b1:6c:0b:18:15:b9:b3:9f:4a:af:14:21: f1:3d:84:80:e9:fa:51:4a:b8:3f:a5:b7:94:ad:7d:36:46:d7: ad:b0:0c:05:c4:ff:19:32:c7:25:96:f3:45:aa:1f:95:da:b6: a5:34:5b:9b:5b:50:c2:ed:08:b7:9f:73:91:52:b3:22:4e:e8: 87:0a:6e:d9:12:2e:18:ce:d7:ae:50:9e:b9:2a:04:56:ef:52: d2:4b:36:30:3c:7f:07:f2:b1:36:e5:e4:d1:b1:6b:8d:a9:38: 6f:f1:13:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRKn/lrvL4mqjeBY9LgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYTM3ZGE5NzBjNDY2NDU3NTgzYmJlMDJiMmEwZTcyZmJk YzYzMjgwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzYwYjJhNDU0ZmIzZTk2ZDE2MDc5ZGI5Y2JlNzdiMWUxMWU4NTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3wI54VTIG2ee4f79nhI0D+FfZhv Zr//yth5ZpIhfE+qA+jA7TlEqmdDYlZbV1lHPuXPH8wsiD/CYgkhwATrV5AvX/ZD 0pX4aW304vKMkA+RVndVkslMhUQrgTrWwd33g/jFZAGJ04Vqt6poPCbHladg001y sXaqsju+BvwY9/Sxxw5IZmZABD2XS4xrSeXAYthuiFkZZkExOoqwGdCeeYAFfwRV EVtYcQOXRZjggHCiiL/OV34K6Us9oxRpP69gj27D1tMaxBRBRtVqgmHTXsjllESv SfJYL2vfzZuI4AGtSxfzyLDJiTn+53gcXni9xik6KaDTbr2Ru1gV/VdbywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxgsqRU+z6W0WB525y+d7HhHoUGMB8GA1UdIwQY MBaAFCyjfalwxGZFdYO74CsqDnL73GMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgt OGNhMjVmNDg4ZWJmLzEvUEdDeXBGVDdQcGJSWUhuYm5MNTNzZUVlaFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNDkyZmQtNmUzNy00NTgyLTg0ZTgtOGNhMjVmNDg4ZWJm LzEvTEtOOXFYREVaa1YxZzd2Z0t5b09jdnZjWXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFkAMA0G CSqGSIb3DQEBCwUAA4IBAQBH5tWd/rdY49pf0Qg/h2Yj4n43Z+KPdFAq/i/qCkt4 1ua3crjwU/16an0Y20yxMy49bHuBnD84Mpr9z0BtCP7HiYKbuAUHBzTSeSDvS/9Q KvirEaQ8gLQ/HgeKHM6tcDEDMj4dC1jgw/TJSJvFBLcggsKW0x+dMynWJuAd+Fay cLsHx4A5bBCVmRIijyMIUgcn6y3JaeSxbAsYFbmzn0qvFCHxPYSA6fpRSrg/pbeU rX02RtetsAwFxP8ZMscllvNFqh+V2ralNFubW1DC7Qi3n3ORUrMiTuiHCm7ZEi4Y zteuUJ65KgRW71LSSzYwPH8H8rE25eTRsWuNqThv8RNK -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:55 2026 by rpki-client