This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa File: PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa (raw, json) Hash identifier: ClKyMhw4ls8O+22d3zwyr4Of9HO2Cqaa8e0NaPqWqxo= Subject key identifier: 3C:64:DD:F8:0A:E9:ED:5C:F7:AD:24:AC:D2:5F:05:88:61:D2:CF:9F Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1 Certificate serial: 019B7758E1BBA1019D9C3F08202EC183712C Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209181 IP address blocks: 176.119.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:bb:a1:01:9d:9c:3f:08:20:2e:c1:83:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c64ddf80ae9ed5cf7ad24acd25f058861d2cf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:f6:64:c7:bb:b3:b5:1c:c0:29:5b:17:22: 3c:d9:93:11:64:90:20:9c:1e:99:a5:ac:ab:0c:83: a0:c8:69:76:3a:1c:84:88:68:28:e1:5b:97:49:16: 22:bd:3e:36:40:ee:6f:6e:85:73:82:72:dd:fd:39: 02:2e:9f:8d:b2:f7:74:d6:99:37:12:05:c4:0b:d0: ce:3f:e1:1e:9e:b6:19:f1:ce:0b:d9:67:e0:3c:70: c4:c9:d0:de:62:d3:ad:a2:97:ae:42:57:13:1d:b6: 07:d4:5d:81:aa:9b:b0:48:79:ce:15:cc:87:68:f8: c2:09:31:d3:d7:2a:a4:40:4b:50:d2:e6:d1:74:02: c2:ff:f1:e2:16:de:34:e8:d4:8e:37:b3:b1:ed:20: b0:87:7d:1a:08:80:0d:41:a1:a5:a4:3a:c7:9e:ca: 77:c8:e6:de:86:fd:30:32:64:ab:9a:56:10:ca:d2: 1c:22:42:b2:ef:01:d9:a1:cb:b2:7c:68:16:61:a6: 92:46:be:c5:29:eb:d7:d0:0a:48:c4:f6:bb:72:63: fd:5d:82:6b:4d:75:b0:79:72:cc:03:e8:83:ff:85: ea:54:51:9d:98:40:e4:ad:b2:0f:cc:7b:3f:74:ac: fe:fb:2a:4f:48:4b:a4:4b:5a:1c:43:d5:0b:ce:92: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:DD:F8:0A:E9:ED:5C:F7:AD:24:AC:D2:5F:05:88:61:D2:CF:9F X509v3 Authority Key Identifier: keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/PGTd-Arp7Vz3rSSs0l8FiGHSz58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.222.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:94:31:00:c6:2c:66:29:74:7d:a0:d5:db:e3:fb:09:c3:3e: 9d:42:bd:c1:29:c0:a3:2f:ca:cc:2a:86:61:5a:f2:06:ec:64: 65:54:c7:ae:1c:e3:09:93:8b:15:40:92:18:46:a8:11:05:c5: 91:01:16:89:68:db:9e:c7:1d:f7:f3:34:0e:3f:18:b5:ee:07: 61:e3:86:7f:00:71:4e:f0:af:6b:8c:96:64:14:67:f5:bd:b1: 7f:2b:40:8e:66:7f:95:b7:a2:b8:4b:49:83:de:24:10:ce:2a: 8a:5a:71:03:4b:ac:18:a4:1f:e0:2e:8d:75:f5:66:93:e2:4a: be:18:ac:6e:21:45:23:69:8b:df:a1:db:f7:f5:c8:ee:c5:b9: 2d:e2:3c:d5:6f:ab:2a:c4:fe:b1:7f:58:a9:7a:0f:82:69:1d: f4:df:5e:11:94:e5:2e:50:82:7c:25:f0:03:4a:f9:d1:d2:92: fc:56:f3:9a:c0:24:e3:31:4f:9a:bb:5f:a2:9e:e2:36:93:e9: c4:df:a8:4b:b7:ad:e1:33:8f:dc:de:6f:40:b7:91:f7:15:2f: 86:67:68:39:15:7c:30:3d:5b:49:df:44:3d:ec:56:4a:21:02: da:57:11:39:9d:49:f3:85:eb:4c:91:4d:fb:95:8e:6d:40:37: 1b:3d:73:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOG7oQGdnD8IIC7Bg3EsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNTZiNDIzODNhZDg2MmNlNmEzNzRhZDJjYTZkMzZjMjU0 ZGM3YjEwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzY0ZGRmODBhZTllZDVjZjdhZDI0YWNkMjVmMDU4ODYxZDJjZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBP2ZMe7s7UcwClbFyI82ZMRZJAg nB6ZpayrDIOgyGl2OhyEiGgo4VuXSRYivT42QO5vboVzgnLd/TkCLp+Nsvd01pk3 EgXEC9DOP+EenrYZ8c4L2WfgPHDEydDeYtOtopeuQlcTHbYH1F2BqpuwSHnOFcyH aPjCCTHT1yqkQEtQ0ubRdALC//HiFt406NSON7Ox7SCwh30aCIANQaGlpDrHnsp3 yObehv0wMmSrmlYQytIcIkKy7wHZocuyfGgWYaaSRr7FKevX0ApIxPa7cmP9XYJr TXWweXLMA+iD/4XqVFGdmEDkrbIPzHs/dKz++ypPSEukS1ocQ9ULzpIpEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxk3fgK6e1c960krNJfBYhh0s+fMB8GA1UdIwQY MBaAFKBWtCODrYYs5qN0rSym02wlTcexMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDct OWIzZGQ0MTdjMzA4LzEvUEdUZC1BcnA3VnozclNTczBsOEZpR0hTejU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zZThkY2MtYTc2NC00NGJlLWI1MDctOWIzZGQ0MTdjMzA4 LzEvb0ZhMEk0T3RoaXptbzNTdExLYlRiQ1ZOeDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfeMA0G CSqGSIb3DQEBCwUAA4IBAQCelDEAxixmKXR9oNXb4/sJwz6dQr3BKcCjL8rMKoZh WvIG7GRlVMeuHOMJk4sVQJIYRqgRBcWRARaJaNuexx338zQOPxi17gdh44Z/AHFO 8K9rjJZkFGf1vbF/K0COZn+Vt6K4S0mD3iQQziqKWnEDS6wYpB/gLo119WaT4kq+ GKxuIUUjaYvfodv39cjuxbkt4jzVb6sqxP6xf1ipeg+CaR30314RlOUuUIJ8JfAD SvnR0pL8VvOawCTjMU+au1+inuI2k+nE36hLt63hM4/c3m9At5H3FS+GZ2g5FXww PVtJ30Q97FZKIQLaVxE5nUnzhetMkU37lY5tQDcbPXPU -----END CERTIFICATE-----Generated at Fri Jan 16 01:25:41 2026 by rpki-client