This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGra8LwVRiUBpolq4xJkAOKz9xI.roa File: pGra8LwVRiUBpolq4xJkAOKz9xI.roa (raw, json) Hash identifier: HSu+NbVk5dwYXwskqoXNG4WqOaQ2u+2dmrv6L1JyI3M= Subject key identifier: A4:6A:DA:F0:BC:15:46:25:01:A6:89:6A:E3:12:64:00:E2:B3:F7:12 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BEADFC333AEE1563B2A34CF086ABB98CC Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGra8LwVRiUBpolq4xJkAOKz9xI.roa Signing time: Fri 23 Jan 2026 12:41:31 +0000 ROA not before: Fri 23 Jan 2026 12:41:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31130 IP address blocks: 91.92.250.0/24 maxlen: 24 93.123.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:df:c3:33:ae:e1:56:3b:2a:34:cf:08:6a:bb:98:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 23 12:41:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46adaf0bc15462501a6896ae3126400e2b3f712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:88:70:21:b3:6b:9f:51:f6:d3:e3:ca:54: 32:0c:ed:de:ac:2f:c6:84:5d:22:52:32:b3:5a:12: 6d:09:6e:c4:7e:69:88:9f:ca:6d:66:de:69:98:f9: 6d:cf:f1:0e:f9:04:5c:7a:f3:ec:71:f4:3a:9b:25: 8c:d5:2f:39:a9:aa:ef:21:fa:54:ec:3c:8b:18:5a: fe:ec:4f:10:04:42:8e:05:20:8f:d8:9b:2d:71:10: 6d:ed:37:60:36:6f:86:a2:4b:a9:0f:0b:5a:f7:3b: f0:be:f1:7d:58:50:2f:dd:c0:24:73:51:1e:8b:02: 7d:23:c3:1d:73:36:10:0a:61:9e:40:dc:bd:3c:b5: 15:06:da:fa:c8:73:99:65:a9:76:d2:89:4c:ba:84: 28:2f:d2:08:5c:f4:1c:1d:a5:38:eb:9d:77:22:d2: 8f:ca:97:4f:e6:e1:bd:2c:ef:91:07:71:7e:5e:03: 7b:32:4e:97:c5:07:2e:05:2d:f0:b0:9b:ce:31:5b: 98:76:39:22:0a:16:b0:b7:32:09:80:3a:7d:26:b6: 4c:e1:1e:c6:b8:c3:5b:c8:a8:3e:4b:04:62:89:76: d8:2e:6f:00:63:db:ed:f6:51:b2:a3:69:36:f5:f2: 5a:ae:d3:09:a5:54:7d:21:15:c5:32:fc:03:52:34: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6A:DA:F0:BC:15:46:25:01:A6:89:6A:E3:12:64:00:E2:B3:F7:12 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGra8LwVRiUBpolq4xJkAOKz9xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.250.0/24 93.123.113.0/24 Signature Algorithm: sha256WithRSAEncryption ad:8f:11:0a:82:59:b9:31:8c:b3:91:14:99:c2:e1:d1:70:44: b1:da:96:98:f3:7e:4d:51:a2:1b:76:7b:af:f4:77:eb:8d:fc: 72:56:34:ee:cd:d0:5e:82:2a:14:2e:c3:3d:41:9a:64:c6:0a: b9:9c:f1:b1:02:38:08:c6:ad:c6:9e:e2:34:3a:b5:d1:8c:a9: fb:9f:4f:01:55:73:05:1c:bb:df:54:7a:5e:32:27:73:d9:4f: c2:3f:51:37:77:ef:cf:35:96:dd:58:44:8a:8f:8b:44:5e:9f: 94:38:04:ba:ae:5c:88:e6:67:d4:ba:70:fa:99:68:42:8d:f7: ed:ae:a6:8b:8c:ca:69:05:c8:d0:e1:96:d7:d1:1e:06:e0:c7: e9:a1:6a:cc:c5:eb:4d:1a:24:a1:c1:64:5c:cf:2e:47:8c:e9: 9e:c6:16:a1:af:20:ce:37:24:ef:1a:a3:bd:2f:e3:15:4e:0d: 8b:55:4e:7e:6d:d3:67:2b:6e:f1:eb:f1:83:e0:4f:ef:10:f3: c6:c1:69:0b:25:d6:15:42:60:3b:ce:d7:84:6a:d8:a0:ef:56: ec:45:fd:b4:2a:fe:0b:4a:85:c6:dd:aa:0f:ec:df:60:19:d0: 00:5d:3b:8c:d2:85:f1:c9:af:eb:19:8b:d2:3e:d4:d5:30:2f: 09:68:47:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvq38MzruFWOyo0zwhqu5jMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTIzMTI0MTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZhZGFmMGJjMTU0NjI1MDFhNjg5NmFlMzEyNjQwMGUyYjNmNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUaIcCGza59R9tPjylQyDO3erC/G hF0iUjKzWhJtCW7EfmmIn8ptZt5pmPltz/EO+QRcevPscfQ6myWM1S85qarvIfpU 7DyLGFr+7E8QBEKOBSCP2JstcRBt7TdgNm+GokupDwta9zvwvvF9WFAv3cAkc1Ee iwJ9I8MdczYQCmGeQNy9PLUVBtr6yHOZZal20olMuoQoL9IIXPQcHaU46513ItKP ypdP5uG9LO+RB3F+XgN7Mk6XxQcuBS3wsJvOMVuYdjkiChawtzIJgDp9JrZM4R7G uMNbyKg+SwRiiXbYLm8AY9vt9lGyo2k29fJartMJpVR9IRXFMvwDUjRSpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKRq2vC8FUYlAaaJauMSZADis/cSMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcEdyYThMd1ZSaVVCcG9scTR4SmtBT0t6OXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1z6AwQA XXtxMA0GCSqGSIb3DQEBCwUAA4IBAQCtjxEKglm5MYyzkRSZwuHRcESx2paY835N UaIbdnuv9HfrjfxyVjTuzdBegioULsM9QZpkxgq5nPGxAjgIxq3GnuI0OrXRjKn7 n08BVXMFHLvfVHpeMidz2U/CP1E3d+/PNZbdWESKj4tEXp+UOAS6rlyI5mfUunD6 mWhCjfftrqaLjMppBcjQ4ZbX0R4G4MfpoWrMxetNGiShwWRczy5HjOmexhahryDO NyTvGqO9L+MVTg2LVU5+bdNnK27x6/GD4E/vEPPGwWkLJdYVQmA7zteEatig71bs Rf20Kv4LSoXG3aoP7N9gGdAAXTuM0oXxya/rGYvSPtTVMC8JaEdS -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:19 2026 by rpki-client