This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/PGb3WfmNkg-vd7_bMLWrMI64YOo.roa File: PGb3WfmNkg-vd7_bMLWrMI64YOo.roa (raw, json) Hash identifier: 2T8TrrpJ5qPs1XJ1BBW0PIQrNd+77h/Qy7gmuuyjpQc= Subject key identifier: 3C:66:F7:59:F9:8D:92:0F:AF:77:BF:DB:30:B5:AB:30:8E:B8:60:EA Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2BB9EAD63434769FD6F00BF6BF15 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/PGb3WfmNkg-vd7_bMLWrMI64YOo.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201671 IP address blocks: 5.104.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2b:b9:ea:d6:34:34:76:9f:d6:f0:0b:f6:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c66f759f98d920faf77bfdb30b5ab308eb860ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:b6:db:ca:91:99:8e:f9:f0:73:8b:95:20: ab:eb:63:ee:ca:fe:ac:89:78:d9:3c:83:43:fc:98: ae:41:90:82:65:46:6b:6e:c9:78:88:00:29:88:1f: 67:a6:4e:f6:ee:ae:a7:69:67:24:29:c9:80:12:f1: e8:d7:2c:32:ac:39:3e:a0:3d:82:19:be:c3:0e:e7: 07:b2:9b:f7:e3:ce:30:43:1e:33:6d:53:78:a5:7f: 74:8b:e4:2b:cc:17:4e:96:63:29:f0:1d:52:0c:36: 5d:57:c2:9e:08:18:14:0c:2a:ef:93:1a:7f:a3:e0: 92:bc:05:57:9d:72:51:06:c5:24:54:2d:0b:63:cc: 1b:ed:5d:41:e8:26:55:1e:46:bc:f4:20:5b:23:9e: 71:bd:dd:02:58:11:cc:44:78:fe:0d:c3:79:10:72: 29:38:ca:5f:bb:24:43:15:ca:25:db:5a:33:34:84: 97:f0:ed:56:93:47:9f:6d:4e:9e:d2:e0:a0:78:45: 92:c7:a1:a8:4d:76:ea:48:58:46:18:cc:ba:49:85: 86:35:38:34:d7:51:e1:c7:88:c7:02:c1:f7:51:50: 34:37:13:6e:49:2e:eb:c2:80:b6:a3:7e:b2:1e:7f: ed:6c:13:58:29:c5:bf:75:8b:4a:2d:9f:d1:f2:20: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:F7:59:F9:8D:92:0F:AF:77:BF:DB:30:B5:AB:30:8E:B8:60:EA X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/PGb3WfmNkg-vd7_bMLWrMI64YOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.75.0/24 Signature Algorithm: sha256WithRSAEncryption aa:62:c8:7b:de:68:61:ff:34:ec:1b:69:ea:dc:fe:f1:68:14: cb:af:3c:c6:cf:6c:ff:bf:f9:ad:11:2d:41:65:85:33:52:78: 5d:c5:90:85:2c:5b:56:c0:86:7a:88:ca:88:cd:9e:f8:19:e5: 0e:a2:aa:77:93:43:19:77:8f:0b:6c:8e:97:21:65:37:4f:0f: ae:ff:0f:a0:2b:1f:c2:a6:1d:0e:54:94:46:e0:8e:97:16:9b: 14:f7:e2:e4:91:95:73:b1:32:96:39:7a:b4:00:eb:f4:df:45: 1e:19:0b:69:2e:59:5d:1f:3d:92:55:fe:e7:38:67:ef:8a:c1: f9:73:35:cd:56:49:72:bb:c9:9c:e5:4f:84:ec:e2:ca:85:ef: e6:60:c1:58:2f:89:43:f8:8d:03:c8:bd:4f:5b:63:bf:3c:50: 7f:71:8b:0b:22:d8:11:19:62:61:cc:22:a8:bc:d8:25:04:6f: 93:16:af:28:6b:60:94:6c:f2:76:9e:fa:88:a3:8d:e2:50:b9: db:9d:42:35:20:b8:81:57:52:f4:0b:ee:84:e4:bf:75:55:9b: 71:9a:4c:8c:76:9b:4a:19:40:68:cb:7e:80:58:af:c8:8a:92: 46:44:b0:be:1b:37:a5:db:53:2e:7d:ed:3a:6c:cb:2b:a5:b2: da:ab:dd:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiu56tY0NHaf1vAL9r8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzY2Zjc1OWY5OGQ5MjBmYWY3N2JmZGIzMGI1YWIzMDhlYjg2MGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/u228qRmY758HOLlSCr62Puyv6s iXjZPIND/JiuQZCCZUZrbsl4iAApiB9npk727q6naWckKcmAEvHo1ywyrDk+oD2C Gb7DDucHspv3484wQx4zbVN4pX90i+QrzBdOlmMp8B1SDDZdV8KeCBgUDCrvkxp/ o+CSvAVXnXJRBsUkVC0LY8wb7V1B6CZVHka89CBbI55xvd0CWBHMRHj+DcN5EHIp OMpfuyRDFcol21ozNISX8O1Wk0efbU6e0uCgeEWSx6GoTXbqSFhGGMy6SYWGNTg0 11Hhx4jHAsH3UVA0NxNuSS7rwoC2o36yHn/tbBNYKcW/dYtKLZ/R8iCIHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxm91n5jZIPr3e/2zC1qzCOuGDqMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvUEdiM1dmbU5rZy12ZDdfYk1MV3JNSTY0WU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWhLMA0G CSqGSIb3DQEBCwUAA4IBAQCqYsh73mhh/zTsG2nq3P7xaBTLrzzGz2z/v/mtES1B ZYUzUnhdxZCFLFtWwIZ6iMqIzZ74GeUOoqp3k0MZd48LbI6XIWU3Tw+u/w+gKx/C ph0OVJRG4I6XFpsU9+LkkZVzsTKWOXq0AOv030UeGQtpLlldHz2SVf7nOGfvisH5 czXNVklyu8mc5U+E7OLKhe/mYMFYL4lD+I0DyL1PW2O/PFB/cYsLItgRGWJhzCKo vNglBG+TFq8oa2CUbPJ2nvqIo43iULnbnUI1ILiBV1L0C+6E5L91VZtxmkyMdptK GUBoy36AWK/IipJGRLC+Gzel21Mufe06bMsrpbLaq91k -----END CERTIFICATE-----Generated at Mon Jan 19 21:25:54 2026 by rpki-client