This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pGwzBE72U7ZaQpBddHVVuvsK2r4.roa File: pGwzBE72U7ZaQpBddHVVuvsK2r4.roa (raw, json) Hash identifier: VROwuuTk3jx0YhyrhQspIFme0rK+U/0dHjhh9VXb7k4= Subject key identifier: A4:6C:33:04:4E:F6:53:B6:5A:42:90:5D:74:75:55:BA:FB:0A:DA:BE Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019BDB9261B937276BDDA507A669517132EC Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pGwzBE72U7ZaQpBddHVVuvsK2r4.roa Signing time: Tue 20 Jan 2026 13:22:42 +0000 ROA not before: Tue 20 Jan 2026 13:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 147.45.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:92:61:b9:37:27:6b:dd:a5:07:a6:69:51:71:32:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 20 13:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46c33044ef653b65a42905d747555bafb0adabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:b7:01:22:2b:fe:aa:25:81:30:02:1d:07: 75:67:7a:c2:2c:dc:65:63:03:42:b5:5f:1d:03:41: 55:4d:d8:0c:ac:ab:ca:43:d1:d5:54:23:39:5d:be: 3d:f1:dc:e1:38:60:36:2e:ba:d3:7e:a1:a3:ea:d7: 2d:4a:0d:47:dd:56:24:0e:88:f9:e7:25:1d:f9:98: 9b:2c:82:7e:6b:3f:18:9b:f9:18:4c:f9:f4:6d:fc: 89:56:b6:34:28:ad:ad:32:c1:ab:3c:49:55:02:c4: 97:d8:e2:87:b7:11:cf:30:03:82:34:04:d4:a6:0f: b1:87:78:7d:c4:7d:77:0c:9f:89:12:0c:ef:3b:f8: 44:5c:43:2e:33:bb:9d:be:bc:1c:98:01:39:f9:67: ff:73:f7:8e:0e:f8:ca:7e:df:a0:45:d6:28:6a:36: 94:51:6d:7a:75:54:0b:24:aa:48:d7:5b:c0:df:b5: aa:7a:01:3c:a7:8f:c0:e9:ea:4c:30:4d:ce:f1:18: 8b:98:a0:f0:d9:44:cd:a0:c9:40:2d:af:e6:1e:1f: 12:9c:2d:e5:de:9c:9f:53:77:eb:c8:f8:ef:dd:a2: db:06:cf:0c:e2:9b:17:6d:2e:0e:66:38:ae:8a:36: 26:8b:7c:a0:b3:b8:78:a0:01:92:52:f4:15:ef:52: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6C:33:04:4E:F6:53:B6:5A:42:90:5D:74:75:55:BA:FB:0A:DA:BE X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pGwzBE72U7ZaQpBddHVVuvsK2r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.210.0/24 Signature Algorithm: sha256WithRSAEncryption 01:fe:47:b6:39:6a:f3:f7:89:cd:1e:3c:8b:4c:8b:1a:a4:60: ea:55:56:b4:56:4b:cf:8e:97:f1:86:70:94:70:73:d3:1b:4b: 5c:d6:f6:6d:09:c2:88:19:d3:63:7b:f8:18:7d:ee:71:8b:6a: 3c:17:57:b4:17:13:69:dc:dc:82:f4:e7:c4:bb:24:9c:e8:57: bc:b3:c4:8c:75:96:d2:21:e6:ce:c3:77:b0:05:5b:7c:d9:67: db:87:c0:44:a4:a1:17:9d:39:6e:00:c7:26:26:d1:65:10:4f: 8e:28:f7:f4:47:50:88:0a:b1:48:ec:70:c8:d2:1a:e5:5f:5e: e3:3a:f5:08:ec:cd:c7:50:36:b3:a8:68:73:ba:b9:6e:f7:15: 79:a2:b7:21:25:c0:ba:70:41:8e:29:7a:fa:b9:d2:ed:75:0b: cf:c5:83:63:78:12:49:f2:61:36:e6:27:b8:bd:a6:de:4b:8c: 0a:5a:98:3f:b5:17:77:76:92:23:c4:48:0f:ee:e6:f9:4f:0a: e7:de:90:7c:66:c5:be:22:6c:7a:ea:81:92:28:de:5f:f2:d3: 88:71:b0:a0:82:df:ac:f9:2e:37:c4:28:a6:01:aa:ab:30:f2: e6:13:cc:85:25:ed:aa:69:4f:f9:e8:94:ef:6e:e4:42:56:18: 9a:dc:ff:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbkmG5Nydr3aUHpmlRcTLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTIwMTMyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZjMzMwNDRlZjY1M2I2NWE0MjkwNWQ3NDc1NTViYWZiMGFkYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlua3ASIr/qolgTACHQd1Z3rCLNxl YwNCtV8dA0FVTdgMrKvKQ9HVVCM5Xb498dzhOGA2LrrTfqGj6tctSg1H3VYkDoj5 5yUd+ZibLIJ+az8Ym/kYTPn0bfyJVrY0KK2tMsGrPElVAsSX2OKHtxHPMAOCNATU pg+xh3h9xH13DJ+JEgzvO/hEXEMuM7udvrwcmAE5+Wf/c/eODvjKft+gRdYoajaU UW16dVQLJKpI11vA37WqegE8p4/A6epMME3O8RiLmKDw2UTNoMlALa/mHh8SnC3l 3pyfU3fryPjv3aLbBs8M4psXbS4OZjiuijYmi3ygs7h4oAGSUvQV71LviQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRsMwRO9lO2WkKQXXR1Vbr7Ctq+MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvcEd3ekJFNzJVN1phUXBCZGRIVlZ1dnNLMnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky3SMA0G CSqGSIb3DQEBCwUAA4IBAQAB/ke2OWrz94nNHjyLTIsapGDqVVa0VkvPjpfxhnCU cHPTG0tc1vZtCcKIGdNje/gYfe5xi2o8F1e0FxNp3NyC9OfEuySc6Fe8s8SMdZbS IebOw3ewBVt82Wfbh8BEpKEXnTluAMcmJtFlEE+OKPf0R1CICrFI7HDI0hrlX17j OvUI7M3HUDazqGhzurlu9xV5orchJcC6cEGOKXr6udLtdQvPxYNjeBJJ8mE25ie4 vabeS4wKWpg/tRd3dpIjxEgP7ub5Twrn3pB8ZsW+Imx66oGSKN5f8tOIcbCggt+s +S43xCimAaqrMPLmE8yFJe2qaU/56JTvbuRCVhia3P+k -----END CERTIFICATE-----Generated at Wed Jan 21 19:41:31 2026 by rpki-client