This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/pgw_vXBhOHyYYmolPmheFOInOlo.roa File: pgw_vXBhOHyYYmolPmheFOInOlo.roa (raw, json) Hash identifier: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4= Subject key identifier: A6:0C:3F:BD:70:61:38:7C:98:62:6A:25:3E:68:5E:14:E2:27:3A:5A Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Certificate serial: 019B7BA4DEA8A08AC340BCA02D2BBEB86D95 Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/pgw_vXBhOHyYYmolPmheFOInOlo.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8315 IP address blocks: 91.230.170.0/23 maxlen: 24 91.230.176.0/22 maxlen: 24 91.230.178.0/24 maxlen: 24 185.194.84.0/23 maxlen: 24 194.213.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:de:a8:a0:8a:c3:40:bc:a0:2d:2b:be:b8:6d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60c3fbd7061387c98626a253e685e14e2273a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:61:8f:f1:cb:33:13:26:e4:a9:a9:3d:3f: 01:7f:57:9f:89:46:7b:9d:61:c9:35:16:79:fc:b2: 93:86:d5:2c:e4:42:03:3c:7c:7a:d8:27:31:91:e9: c8:d0:85:57:d4:36:73:3c:db:cd:53:71:17:18:7d: 7d:8c:dc:e7:49:27:33:78:90:e6:7f:40:f5:a1:42: 67:a9:72:a5:e6:d1:50:fd:35:44:6e:8b:f0:91:1d: da:0c:18:d3:a9:55:b3:8a:1d:26:c2:43:f0:ca:18: 86:f2:1e:58:4c:2d:7a:f7:8b:d5:fc:c6:17:5b:67: 9d:5f:73:95:5f:0b:b6:0b:67:c2:76:b8:79:8e:9e: 57:72:60:78:0d:62:04:ad:db:c1:31:8a:38:c8:0c: 7a:a0:c5:c3:bf:15:6d:12:36:80:ff:b8:9b:64:fb: 2e:ba:88:ba:9d:c8:33:7d:26:9f:bc:9a:70:c5:a5: fb:a4:de:e7:63:83:ba:26:0b:2f:16:eb:d1:62:f9: cf:4f:3f:71:80:51:94:68:1f:33:2e:7f:1f:04:ad: bb:ec:64:b3:36:93:34:ca:af:d7:2e:fb:5b:29:9f: 4e:df:d0:67:14:c7:0f:69:88:7f:de:5b:f8:94:b5: f6:f9:02:73:e9:34:2a:31:44:19:b4:b2:ea:61:1d: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:3F:BD:70:61:38:7C:98:62:6A:25:3E:68:5E:14:E2:27:3A:5A X509v3 Authority Key Identifier: keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/pgw_vXBhOHyYYmolPmheFOInOlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.170.0/23 91.230.176.0/22 185.194.84.0/23 194.213.114.0/23 Signature Algorithm: sha256WithRSAEncryption 56:a9:b6:05:d2:78:f7:83:ac:ce:d1:8d:7c:96:9e:ff:12:14: 12:26:28:05:91:84:8b:1f:b1:a7:84:db:63:f8:b1:46:cf:c7: c7:8c:7f:de:9a:21:b1:a9:37:42:da:6f:02:7c:8c:57:56:ab: 8a:9d:18:32:a2:61:3d:bc:31:55:5b:48:5c:ac:27:8b:6d:59: ad:25:02:f6:03:34:09:6f:05:2a:4f:f1:32:82:b9:3f:b0:75: f2:93:d6:c0:7b:28:de:97:2b:fe:c2:f2:d5:d3:a7:9c:97:96: 9d:63:fc:7e:51:8e:7a:73:66:77:f3:1d:77:76:1d:5a:55:0c: e6:8c:6b:70:99:a9:a6:a0:f9:9b:f5:4a:d2:90:ef:cc:04:8a: 10:98:18:5b:2b:b5:f7:c1:fe:61:3a:0c:26:7b:23:1f:aa:3e: 63:ae:13:30:e3:c1:db:01:38:cb:a4:fa:41:4e:25:10:67:80: 6c:52:c4:91:d6:7d:ef:f7:19:5a:ac:56:81:99:64:3b:e3:fb: 90:66:00:58:00:81:89:76:72:b3:2b:42:ae:79:c1:00:f7:65: ff:7c:80:bb:30:0c:9e:b3:2d:d5:4b:4a:ee:db:c4:a2:04:c3: 60:81:0c:c3:be:a7:44:b4:ff:b1:af:ba:99:00:d9:6d:51:02: 06:15:52:06 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pN6ooIrDQLygLSu+uG2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw YjY4NmEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjBjM2ZiZDcwNjEzODdjOTg2MjZhMjUzZTY4NWUxNGUyMjczYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS9hj/HLMxMm5KmpPT8Bf1efiUZ7 nWHJNRZ5/LKThtUs5EIDPHx62CcxkenI0IVX1DZzPNvNU3EXGH19jNznSSczeJDm f0D1oUJnqXKl5tFQ/TVEbovwkR3aDBjTqVWzih0mwkPwyhiG8h5YTC1694vV/MYX W2edX3OVXwu2C2fCdrh5jp5XcmB4DWIErdvBMYo4yAx6oMXDvxVtEjaA/7ibZPsu uoi6ncgzfSafvJpwxaX7pN7nY4O6JgsvFuvRYvnPTz9xgFGUaB8zLn8fBK277GSz NpM0yq/XLvtbKZ9O39BnFMcPaYh/3lv4lLX2+QJz6TQqMUQZtLLqYR29fwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKYMP71wYTh8mGJqJT5oXhTiJzpaMB8GA1UdIwQY MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt ZTVkNTA3YTgyNmJmLzEvcGd3X3ZYQmhPSHlZWW1vbFBtaGVGT0luT2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW+aqAwQC W+awAwQBucJUAwQBwtVyMA0GCSqGSIb3DQEBCwUAA4IBAQBWqbYF0nj3g6zO0Y18 lp7/EhQSJigFkYSLH7GnhNtj+LFGz8fHjH/emiGxqTdC2m8CfIxXVquKnRgyomE9 vDFVW0hcrCeLbVmtJQL2AzQJbwUqT/Eygrk/sHXyk9bAeyjelyv+wvLV06ecl5ad Y/x+UY56c2Z38x13dh1aVQzmjGtwmammoPmb9UrSkO/MBIoQmBhbK7X3wf5hOgwm eyMfqj5jrhMw48HbATjLpPpBTiUQZ4BsUsSR1n3v9xlarFaBmWQ74/uQZgBYAIGJ dnKzK0KuecEA92X/fIC7MAyesy3VS0ru28SiBMNggQzDvqdEtP+xr7qZANltUQIG FVIG -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:46 2026 by rpki-client