This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa File: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (raw, json) Hash identifier: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8= Subject key identifier: A7:08:36:3D:CB:BB:C5:03:3E:36:BE:A6:CE:B2:01:80:4B:7F:5C:52 Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503 Certificate serial: 019B7F15299EC4230A1C92197742928A8BD6 Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202316 IP address blocks: 45.128.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:29:9e:c4:23:0a:1c:92:19:77:42:92:8a:8b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a708363dcbbbc5033e36bea6ceb201804b7f5c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:1c:de:36:d8:06:b2:ba:61:c2:96:8a:df: 41:59:de:0e:06:37:28:96:83:14:94:46:84:7f:ee: 2a:83:02:e6:e9:7a:41:e2:d6:7f:36:6e:e1:eb:ef: da:21:fa:98:04:dd:be:1f:cf:32:2a:05:65:43:54: 2c:2c:10:70:f0:69:91:e7:69:8e:3e:88:0b:58:f9: 49:ed:99:a8:86:2f:25:da:5e:a0:c2:36:ad:fd:c6: 4b:b0:73:61:72:8d:59:0d:9e:9c:1b:da:e9:ac:59: 99:aa:56:b9:e5:40:3a:68:25:6d:34:fa:03:af:32: ca:43:32:36:26:56:9b:7e:41:37:9f:aa:a7:d0:9f: 4c:07:ec:7b:0f:14:59:d6:f8:c4:ac:8f:40:98:29: 13:01:11:fd:f5:89:0d:12:2a:ff:36:84:0e:46:f4: 77:5c:d1:07:7c:b4:51:6e:68:6b:f4:14:80:e2:f2: 89:41:f4:8e:8c:af:c5:81:c6:5d:ad:0f:07:cc:47: e9:ce:5f:20:1e:4e:5f:5c:c8:65:88:c4:81:1b:06: a9:d1:d9:a7:53:3d:b5:ff:86:33:9b:86:eb:3a:bb: 8f:bd:fe:33:bb:c8:b5:7c:52:30:72:59:b8:10:97: 4c:52:24:96:8a:4b:74:4c:6b:0b:23:6a:de:57:d7: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:08:36:3D:CB:BB:C5:03:3E:36:BE:A6:CE:B2:01:80:4B:7F:5C:52 X509v3 Authority Key Identifier: keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.120.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:41:df:92:4d:51:4d:8d:0e:08:d3:a6:8c:b0:47:a4:55:af: f8:74:cf:02:0a:ca:a4:e7:d0:2b:dd:5b:63:ef:b0:e4:02:00: 5c:f9:e4:86:e2:12:89:dd:13:4b:74:89:87:e4:ed:e6:a5:72: 8b:eb:98:95:f0:13:66:74:72:8b:a1:1b:bc:5f:29:95:f7:3c: 37:51:d9:15:52:95:fa:c0:7b:a0:66:49:94:ab:2d:be:2c:81: bb:3d:75:54:2e:36:28:56:eb:88:36:7a:f5:5b:88:20:82:96: 6b:41:c7:04:43:ff:b3:2d:63:34:7a:ba:4c:49:3f:48:fe:60: f9:5f:57:ee:bf:e7:e9:e5:f8:c5:e3:a2:61:44:ef:a7:a6:89: 7b:ee:57:30:00:0f:fe:bc:05:3b:91:91:f8:8f:62:4c:52:50: c1:82:63:2e:bf:be:36:7b:7e:97:4f:25:52:7c:a0:e3:6f:66: 80:4a:ca:1b:35:1a:a8:f7:fa:0f:21:7c:ac:89:d4:71:1f:00: 82:68:c8:73:f9:ec:2c:bc:96:6f:bd:8c:f8:22:5c:35:3d:62: 91:6a:5c:3d:e4:35:3c:db:b5:8f:a7:47:f7:4b:03:00:7d:30: de:74:b1:60:16:9c:e3:7f:26:6b:15:f7:2c:c5:31:5d:e0:14: f4:a9:19:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSmexCMKHJIZd0KSiovWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx OTM1MDMwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA4MzYzZGNiYmJjNTAzM2UzNmJlYTZjZWIyMDE4MDRiN2Y1YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uYc3jbYBrK6YcKWit9BWd4OBjco loMUlEaEf+4qgwLm6XpB4tZ/Nm7h6+/aIfqYBN2+H88yKgVlQ1QsLBBw8GmR52mO PogLWPlJ7Zmohi8l2l6gwjat/cZLsHNhco1ZDZ6cG9rprFmZqla55UA6aCVtNPoD rzLKQzI2JlabfkE3n6qn0J9MB+x7DxRZ1vjErI9AmCkTARH99YkNEir/NoQORvR3 XNEHfLRRbmhr9BSA4vKJQfSOjK/FgcZdrQ8HzEfpzl8gHk5fXMhliMSBGwap0dmn Uz21/4Yzm4brOruPvf4zu8i1fFIwclm4EJdMUiSWikt0TGsLI2reV9fMdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcINj3Lu8UDPja+ps6yAYBLf1xSMB8GA1UdIwQY MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt YzM2ZDFjNDYwZTJmLzEvcHdnMlBjdTd4UU0tTnI2bXpySUJnRXRfWEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYB4MA0G CSqGSIb3DQEBCwUAA4IBAQBtQd+STVFNjQ4I06aMsEekVa/4dM8CCsqk59Ar3Vtj 77DkAgBc+eSG4hKJ3RNLdImH5O3mpXKL65iV8BNmdHKLoRu8XymV9zw3UdkVUpX6 wHugZkmUqy2+LIG7PXVULjYoVuuINnr1W4gggpZrQccEQ/+zLWM0erpMST9I/mD5 X1fuv+fp5fjF46JhRO+npol77lcwAA/+vAU7kZH4j2JMUlDBgmMuv742e36XTyVS fKDjb2aASsobNRqo9/oPIXysidRxHwCCaMhz+ewsvJZvvYz4Ilw1PWKRalw95DU8 27WPp0f3SwMAfTDedLFgFpzjfyZrFfcsxTFd4BT0qRl+ -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:28 2026 by rpki-client