This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/PgfmtPXTSgfZhFJbB7_wAbrtcSs.roa File: PgfmtPXTSgfZhFJbB7_wAbrtcSs.roa (raw, json) Hash identifier: cpyHXoa7xREt8htdy2fF0B5bH2SMWlGGxcYf5izPbaE= Subject key identifier: 3E:07:E6:B4:F5:D3:4A:07:D9:84:52:5B:07:BF:F0:01:BA:ED:71:2B Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834A42CD2FE07AF5C2C5F033003D8FC Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/PgfmtPXTSgfZhFJbB7_wAbrtcSs.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216383 IP address blocks: 93.127.180.0/24 maxlen: 24 93.127.181.0/24 maxlen: 24 93.127.182.0/24 maxlen: 24 93.127.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a4:2c:d2:fe:07:af:5c:2c:5f:03:30:03:d8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e07e6b4f5d34a07d984525b07bff001baed712b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:c6:0a:c7:d7:dd:f8:9a:d4:40:ec:d6:eb: f7:b5:0a:d1:fb:01:ab:96:c5:3e:da:80:c8:78:6b: 87:94:e5:43:f8:78:79:ba:77:f8:b0:05:4a:b8:86: ca:9a:ad:1e:ef:7c:9b:28:20:b2:c3:49:6a:b6:6f: 17:fd:98:31:6d:8c:0c:a6:ef:df:45:75:29:e8:2f: be:3c:04:8f:af:f9:5c:d6:bf:a3:f3:85:79:e4:bb: fe:83:0c:21:8c:df:d8:c1:7f:85:b5:8c:ae:5b:90: 9d:fb:68:12:b7:a5:49:e6:dc:56:73:fe:58:6c:9a: 0f:a7:f6:59:95:4e:d2:0c:bc:99:c0:77:e6:8a:ff: 34:04:dd:6e:28:01:91:0e:47:0b:27:1f:8e:86:3e: 55:64:d4:42:40:e1:c2:06:98:9e:46:38:98:71:1f: 21:d4:1b:dc:fc:62:8d:90:06:e6:8f:27:cb:d9:f6: 66:90:27:06:ec:cd:c3:2e:a5:f0:6d:9f:f2:45:ea: a8:dd:59:28:72:91:56:ab:7a:20:9d:b9:3c:90:eb: e2:46:3e:9e:b9:45:e9:15:dc:a7:8c:f3:96:2c:91: bb:31:94:bc:ef:48:cc:03:fe:2a:ec:ff:f1:67:85: 2c:43:2a:04:0a:4e:38:88:17:2f:c4:24:0e:e7:92: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:E6:B4:F5:D3:4A:07:D9:84:52:5B:07:BF:F0:01:BA:ED:71:2B X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/PgfmtPXTSgfZhFJbB7_wAbrtcSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.180.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:c1:79:a3:4a:a6:8e:b9:86:ff:cf:b5:a3:ee:3f:ff:88:06: 16:95:18:e0:5a:1a:c2:4e:c5:9d:16:b6:fb:16:0f:a4:39:ff: 76:1e:cb:06:98:da:f4:ee:45:97:05:26:bc:90:fc:f4:ae:b9: 49:19:c3:4c:d5:8e:89:0f:70:39:79:2d:19:d1:54:97:8d:72: 4c:f0:6d:22:61:16:64:b6:78:00:d5:2e:b3:6b:29:da:f9:33: b0:05:50:19:88:a1:c0:c2:aa:0d:21:a0:96:df:09:4f:19:a7: fb:d0:b3:b7:fe:63:d5:e1:b1:35:4e:13:0c:38:91:e8:8f:b1: 4e:09:3d:c1:eb:30:d9:db:a5:72:d5:80:a6:49:fb:dd:3b:f6: b8:3c:9e:a3:07:04:25:e0:5d:66:f3:03:36:14:12:0a:1e:54: 40:cc:6c:97:2a:ab:cd:5c:fa:ed:56:6b:83:c9:cc:4b:b3:3c: 58:fe:7f:da:c7:47:74:d1:71:25:38:f3:16:88:9f:04:83:dd: c2:c0:81:ba:e2:c1:73:8f:38:10:16:3b:a5:10:5a:49:9c:6b: 08:88:03:7f:17:cc:85:4b:d8:12:56:0c:01:e1:08:d9:6d:9a: a1:60:92:09:8b:df:d5:82:37:a3:43:96:55:6d:8c:f0:e2:55: 7b:8b:3a:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKQs0v4Hr1wsXwMwA9j8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTA3ZTZiNGY1ZDM0YTA3ZDk4NDUyNWIwN2JmZjAwMWJhZWQ3MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/bGCsfX3fia1EDs1uv3tQrR+wGr lsU+2oDIeGuHlOVD+Hh5unf4sAVKuIbKmq0e73ybKCCyw0lqtm8X/ZgxbYwMpu/f RXUp6C++PASPr/lc1r+j84V55Lv+gwwhjN/YwX+FtYyuW5Cd+2gSt6VJ5txWc/5Y bJoPp/ZZlU7SDLyZwHfmiv80BN1uKAGRDkcLJx+Ohj5VZNRCQOHCBpieRjiYcR8h 1Bvc/GKNkAbmjyfL2fZmkCcG7M3DLqXwbZ/yReqo3VkocpFWq3ognbk8kOviRj6e uUXpFdynjPOWLJG7MZS870jMA/4q7P/xZ4UsQyoECk44iBcvxCQO55IImQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4H5rT100oH2YRSWwe/8AG67XErMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvUGdmbXRQWFRTZ2ZaaEZKYkI3X3dBYnJ0Y1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXX+0MA0G CSqGSIb3DQEBCwUAA4IBAQAcwXmjSqaOuYb/z7Wj7j//iAYWlRjgWhrCTsWdFrb7 Fg+kOf92HssGmNr07kWXBSa8kPz0rrlJGcNM1Y6JD3A5eS0Z0VSXjXJM8G0iYRZk tngA1S6zayna+TOwBVAZiKHAwqoNIaCW3wlPGaf70LO3/mPV4bE1ThMMOJHoj7FO CT3B6zDZ26Vy1YCmSfvdO/a4PJ6jBwQl4F1m8wM2FBIKHlRAzGyXKqvNXPrtVmuD ycxLszxY/n/ax0d00XElOPMWiJ8Eg93CwIG64sFzjzgQFjulEFpJnGsIiAN/F8yF S9gSVgwB4QjZbZqhYJIJi9/VgjejQ5ZVbYzw4lV7izrC -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:53 2026 by rpki-client