This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/PgdFhXr4B5CibOVMVSzG8VZJbJI.roa File: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (raw, json) Hash identifier: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g= Subject key identifier: 3E:07:45:85:7A:F8:07:90:A2:6C:E5:4C:55:2C:C6:F1:56:49:6C:92 Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B7C7FB4F35D174665B839B4D34828A76C Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/PgdFhXr4B5CibOVMVSzG8VZJbJI.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61101 IP address blocks: 185.41.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b4:f3:5d:17:46:65:b8:39:b4:d3:48:28:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e0745857af80790a26ce54c552cc6f156496c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:e2:6a:9a:35:9a:c8:ae:39:74:e8:9d:ff: 4e:ba:cc:52:51:c2:14:eb:e7:63:0d:76:e2:91:fe: 79:d2:c6:34:27:7d:d5:8b:78:43:5b:b1:7c:4c:5e: 0a:5d:4c:a8:6f:23:f4:d1:ce:9f:a4:5c:df:fe:96: 7c:d5:99:14:42:be:03:13:75:bd:fa:72:16:de:d5: a7:8e:f6:ee:3c:4d:59:4b:57:18:d8:2d:65:22:3f: a4:27:49:59:26:42:2c:f6:09:d0:ae:ff:0c:2c:7b: f2:10:f4:50:12:9b:c2:4d:0a:3d:4d:c1:1a:2b:85: c0:cc:5e:7e:e5:ed:84:e1:d1:65:e0:43:81:7f:f1: e1:8b:9c:6d:6f:ec:a7:30:9b:8d:e5:31:80:72:91: 04:a1:52:a5:3f:e2:fa:f1:52:73:b8:cf:b9:cd:7e: 57:1a:8b:fc:29:88:b3:bf:dd:50:5a:e9:9a:a3:f6: 02:ed:11:68:88:5d:c6:7a:e4:8f:dd:59:35:5f:77: 85:03:f8:ef:d5:1b:23:17:84:1b:a1:61:6b:da:f8: b6:78:aa:cb:91:53:6f:00:33:55:14:0c:95:95:2d: 5f:90:9c:0e:72:2c:b9:4e:98:ff:10:77:8e:9e:3b: 9f:11:e5:99:65:5c:42:c2:6f:77:b8:cd:a2:ff:78: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:45:85:7A:F8:07:90:A2:6C:E5:4C:55:2C:C6:F1:56:49:6C:92 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/PgdFhXr4B5CibOVMVSzG8VZJbJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.20.0/24 Signature Algorithm: sha256WithRSAEncryption cc:7f:39:35:af:4f:30:eb:27:0d:95:e2:58:34:3b:e8:ff:14: 92:5c:0b:f1:31:da:f9:24:dd:14:94:f9:25:ea:9e:f4:44:ef: 5d:1a:ec:be:36:6a:9c:48:c4:96:5f:53:be:90:28:c8:53:53: 86:b0:9c:89:04:84:a1:78:6a:c0:d2:5f:ce:58:bd:9f:02:a3: 3a:8f:2f:ed:f2:f6:82:52:25:fd:5a:b3:d0:75:bd:71:fa:de: 25:3e:27:44:f9:31:29:00:35:22:2d:af:c6:a9:7f:56:80:69: 62:9a:53:08:ea:0c:26:90:9d:02:d9:32:42:56:c9:5f:e2:da: 80:6c:93:f6:2f:3e:7c:d9:fa:a1:e7:0e:c9:ba:a3:24:f3:28: ed:be:29:e1:49:cf:75:ed:95:37:09:81:47:e4:c4:d8:97:4d: ca:ee:98:91:7b:b6:ec:72:73:79:65:b3:9c:06:62:f7:09:eb: 82:6a:ae:8a:14:25:d4:11:c9:a8:2d:18:dc:64:df:5a:70:49: 14:e9:80:35:7b:0d:4f:ef:15:46:7c:5a:bf:45:62:b0:39:70: 2e:16:c6:9d:a1:65:b8:e0:b5:a4:5d:aa:b4:40:eb:21:ca:fc: cd:75:3e:22:d2:1c:96:24:39:84:7b:a4:ab:9c:8b:77:3a:ec: c4:9b:c7:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7TzXRdGZbg5tNNIKKdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTA3NDU4NTdhZjgwNzkwYTI2Y2U1NGM1NTJjYzZmMTU2NDk2YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv/iapo1msiuOXTonf9OusxSUcIU 6+djDXbikf550sY0J33Vi3hDW7F8TF4KXUyobyP00c6fpFzf/pZ81ZkUQr4DE3W9 +nIW3tWnjvbuPE1ZS1cY2C1lIj+kJ0lZJkIs9gnQrv8MLHvyEPRQEpvCTQo9TcEa K4XAzF5+5e2E4dFl4EOBf/Hhi5xtb+ynMJuN5TGAcpEEoVKlP+L68VJzuM+5zX5X Gov8KYizv91QWumao/YC7RFoiF3GeuSP3Vk1X3eFA/jv1RsjF4QboWFr2vi2eKrL kVNvADNVFAyVlS1fkJwOciy5Tpj/EHeOnjufEeWZZVxCwm93uM2i/3id1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4HRYV6+AeQomzlTFUsxvFWSWySMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvUGdkRmhYcjRCNUNpYk9WTVZTekc4VlpKYkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSkUMA0G CSqGSIb3DQEBCwUAA4IBAQDMfzk1r08w6ycNleJYNDvo/xSSXAvxMdr5JN0UlPkl 6p70RO9dGuy+NmqcSMSWX1O+kCjIU1OGsJyJBISheGrA0l/OWL2fAqM6jy/t8vaC UiX9WrPQdb1x+t4lPidE+TEpADUiLa/GqX9WgGlimlMI6gwmkJ0C2TJCVslf4tqA bJP2Lz582fqh5w7JuqMk8yjtvinhSc917ZU3CYFH5MTYl03K7piRe7bscnN5ZbOc BmL3CeuCaq6KFCXUEcmoLRjcZN9acEkU6YA1ew1P7xVGfFq/RWKwOXAuFsadoWW4 4LWkXaq0QOshyvzNdT4i0hyWJDmEe6SrnIt3OuzEm8d+ -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:31 2026 by rpki-client